last executing test programs:

14m12.378516611s ago: executing program 32 (id=826):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

14m1.665320931s ago: executing program 33 (id=885):
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
syz_init_net_socket$bt_cmtp(0x1f, 0x3, 0x5)

7m45.746303493s ago: executing program 34 (id=3473):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@any, 0xffffffff}, 0x1, 0x0, 0x10})

5m32.03551756s ago: executing program 35 (id=4207):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}})

4m37.262837862s ago: executing program 8 (id=4545):
syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x28002)
r0 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6277, 0x8, 0xffffffff, 0x400000}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0})
io_uring_enter(r0, 0x21, 0x21, 0x1, 0x0, 0x0)

4m36.7362766s ago: executing program 8 (id=4549):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001100)={0x34, &(0x7f0000000740)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fcntl$setstatus(r1, 0x4, 0x42400)

4m35.39442758s ago: executing program 7 (id=4561):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xa, 0x2, 0x4, @generic=0x85, 0xa0, 0xb9, 0x2})

4m34.970699972s ago: executing program 7 (id=4562):
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0})

4m34.580483382s ago: executing program 8 (id=4564):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001140)={'team_slave_0\x00', @remote})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000001140)={'team_slave_0\x00', @broadcast})

4m34.496970207s ago: executing program 7 (id=4566):
r0 = syz_io_uring_setup(0xf00, &(0x7f00000001c0)={0x0, 0x4fbe, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000080)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003840)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000003880)=ANY=[@ANYBLOB="20000000000000000b010000000040"], 0x1b0}, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x1, 0x135a, 0x0, 0x0, 0x0)

4m34.120329826s ago: executing program 7 (id=4570):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@fat=@showexec}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20)

4m34.05617605s ago: executing program 8 (id=4573):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000002c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@background_gc_off}, {@noflush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x5510, &(0x7f00000020c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DKJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmuvUDhKaN3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/Nl5Xy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetcZ7sAw9ru9m40dzKYrufZrF1mNd1cJj/33bYH+R5GkW+D7P0MRiMYz7fPGjm+9l5lMV6b1DM53nTRvNgFIdFLC4X9bTTyOrYOs43/f/2Vru3d5AMm7v9dtpL1irVFyvVO+XqbtpoDpqr5Vq3cWc1WWh1RsvKg2atu95K01anWamn3cVkoVWvl6vVZOFuc6td6yXVamWlslReWyzObiev3X836TSShVF8pd3bG7Q7/WQ73U3yTywmy5WVlxaTW9Xk7Y3NZPPBvXsbm++8f/e9+y9vvPFqsehvZb0Qy0vLy+XqUnm5uniO9v9xUXSyMLH9w7GUpl0AwNmj/wem4eT6/90HESff/4f+fyLOVP87LmuC/e953z8ci/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+n7ui9ezk/l8fK2Yf6qYeqYYlyJiJiJ++wezcfFIztkiz9y/rJ/7Sw3flCLLMLrGpeK4GhHrxfHr0yf9LQAAAMCT68uPbn6ad+v5y/y0C+I05TdtZq5/MKF8pYiYm/9hQtlmRi/PTihZ9u/7QhxMKFt2A+vyhJLlt9wuTCrbfzJ7JFx+LJTyMHOq5QAAAKfiaCdwul0IAAAAp+mTaRfAdJRi/Chz/Cw4+8v7Px8IXjkyAgAAAM6g0rQLAAAAAE5c1v/7/T8AAAB4suW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3cqA1EcQB+NjiQfwqKck8ruUEZKSHHHCMKSBMUkANpIQ1QA7ltCStY4RlYWKG9eIy1q++TzDCW+fGM8GFmpAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA+/W/Wi7+/vv7umrPbd1PmbgAAAIBrts160b6Zpf77fP5jPvU596uIqCPi2th9FG8uMkc5p3m8/s/59c2TGv5FtAmH75jk411EfMvH/ae+fwUAAAB4vTbL1TyN1tPLbOiCuKU0aVN/+F4or4qIZnZXKK0+5H0pFNb+v8fxs1BaO4E1LRSWptzGuVMs9Vnt436atZueNVVq6qsfOxZ5oyoBAICyRhfNeNBaAAAA6NOPoQtgGFUclzJPS4GT1OTlvbcXPQAAAOAFqoYuAAAAAOhdO/6/0f5/e/v/AQAAwDDS/n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0adusF5vlat41Z7fvpszdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX/S7X/5PTI0zydxpY+l4JFm7amxdNfYeNI4ejLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fv20YVBwD8nc/n0ALCBOQhCIHEAAt13dLSDTGAIgb+BESUuiXU5UebgVYVIgsbytwFwYgQEihs/R86J1KWsGXwECTmoDvf2ZcfUsyvO5N8PtK79/XpdO/7nqUo33uXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBh+PYkjtNDexQ38nObew+W037rUJ96tL69kLY0jqpM+v/hxfKHqDMO9+pIBgAAgLMhLur7EMJOsrGY9o12Vv8nxTVpzf/d06O4qOcP1/1FX9T+afv1l93nxwO1R+OkN72xMuhfPJpK87+b5Wx75sQrmtnKZ89e4uwLaby39twwydYz+ubx43daWThXRbYAwN9xoejzoPh9KO17dSYGwJnRLBXeRf0ft+vNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAKw7XwZBFHIYSF5iRObe09WD6uf7S+vVC0qw8froevJvdMb5GEEG6sDPoXK53NbLt77/6tpcGgf6f64KUQQl2jv5VP/9YHU1wcQi3rI/h3gv25/MuekXxmIPgwOnk1avyhBADAqZTkLa3rd5KNxfRcNB/C/vcH6/9XS3GYsv7f/ejqZnmscv3fq2yGs6+7evuz7t17919fub10s3+z/8kbl3pv9i5fu3LlWjd7VtL1xAQAAIB/ppW3cv3fmD+6/3++FIcp6//Pv+19WR4rVv8fa7LpV3cmAAAAZ9uzL//xe3TM+ajVCl8sra7e6Y2O48+XRscaUv3L5vJWrv/j+bqzAgAAAKowXIsO7P9fL8Vhyv3/p3544afyPeMQwrl8///C8qeD69VNZ6ZV8SfHdc8RAACAep3LW3n/P8ne/2+MX3lohBBee2UU5/8GcKr6P3736x/LY5Xf/79c3RRnUqMzWo+s74TQ7NSdEQAAAKfZE3lLi/3fko3Fj38+/37L+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVfszAAD//z3MPqM=")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

4m33.628477472s ago: executing program 7 (id=4576):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/stat\x00')
fchdir(r0)
exit(0xffff)
mount$tmpfs(0x0, &(0x7f0000000f00)='.\x00', &(0x7f0000000f40), 0x89, 0x0)

4m31.196028419s ago: executing program 8 (id=4585):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)
ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523)

4m30.847460007s ago: executing program 7 (id=4587):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

4m30.127866655s ago: executing program 36 (id=4587):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

4m27.74723135s ago: executing program 8 (id=4596):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r1, &(0x7f0000001300)='7', 0x1)
syz_usb_control_io$printer(r0, 0x0, 0x0)

4m27.192550009s ago: executing program 37 (id=4596):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r1, &(0x7f0000001300)='7', 0x1)
syz_usb_control_io$printer(r0, 0x0, 0x0)

3m19.489680686s ago: executing program 4 (id=4990):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x3004d91, &(0x7f0000000080)={[{@noinit_itable}]}, 0x1, 0x530, &(0x7f0000000fc0)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

3m18.500247398s ago: executing program 4 (id=4998):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x9, @private2, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)='g', 0x1}], 0x1}}], 0x2, 0x20000800)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000180)=0x8)

3m17.973091186s ago: executing program 4 (id=5004):
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000695ffc))
syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902610002010484080000000001020d000005240600010524020006000606241a798b8b6d2401040109058103000258057f0904010000020d00000904010102020d00000905820238007f011709050302ff030f0380"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109020102010205240401050c2402"], 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0)

3m15.940010741s ago: executing program 4 (id=5018):
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0)

3m15.631873778s ago: executing program 4 (id=5020):
r0 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x77359400}}, 0x0)

3m15.129536534s ago: executing program 4 (id=5026):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x1, &(0x7f0000000640)=[{0x6, 0x3, 0x2, 0xfffffffe}]}, 0x10)
close(r0)

3m14.535028435s ago: executing program 38 (id=5026):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x1, &(0x7f0000000640)=[{0x6, 0x3, 0x2, 0xfffffffe}]}, 0x10)
close(r0)

2m47.885460078s ago: executing program 5 (id=5161):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f00000ab000/0x2000)=nil, 0x2000, 0x2, 0x13, r0, 0x80927000)
mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r0, 0xffffe000)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x80, 0x0, 0x1, 0x101, 0x0})

2m47.539641196s ago: executing program 5 (id=5162):
capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340))
setrlimit(0x40000000000008, &(0x7f0000000000))
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(0x0, 0xb)

2m47.370125374s ago: executing program 5 (id=5163):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0})
ioctl(r0, 0x8b1a, &(0x7f0000000040))

2m47.052640301s ago: executing program 5 (id=5165):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1)

2m46.506117789s ago: executing program 5 (id=5169):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc, 0x1010}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

2m45.396226218s ago: executing program 5 (id=5176):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)

2m44.798738629s ago: executing program 39 (id=5176):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)

1m59.911182235s ago: executing program 9 (id=5417):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@host, 0x2}, {@my=0x0, 0x7fffff}, 0x400, "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"}, 0x418})

1m59.61229241s ago: executing program 9 (id=5420):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCXONC(r0, 0x540a, 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="c4", 0x1}], 0x1)

1m59.063821859s ago: executing program 9 (id=5425):
r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0xffffffff, 0x78d402)
syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2)

1m58.388111414s ago: executing program 9 (id=5430):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

1m58.036163062s ago: executing program 9 (id=5433):
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x183)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xfffffff7)

1m57.784488446s ago: executing program 9 (id=5436):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x64, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r1, 0x51b0b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

1m42.57827567s ago: executing program 40 (id=5436):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x64, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r1, 0x51b0b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)

10.154455979s ago: executing program 3 (id=6202):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.979758675s ago: executing program 1 (id=6218):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f00000002c0)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@shortname_win95}, {@shortname_winnt}, {@shortname_mixed}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@shortname_mixed}, {@rodir}, {@utf8no}]}, 0x1, 0x29b, &(0x7f0000000580)="$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")
landlock_create_ruleset(&(0x7f0000000040)={0xf0ffc94e915cdaa7, 0x0, 0x2}, 0x18, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

6.625178704s ago: executing program 1 (id=6221):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_AIE_ON(r0, 0x7001)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000001c0)={0x1, 0x1, {0x1c, 0x3b, 0x1, 0x8, 0x1, 0x87, 0x6, 0x84, 0xffffffffffffffff}})

6.475894571s ago: executing program 3 (id=6223):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)

6.323789999s ago: executing program 6 (id=6224):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

6.147425839s ago: executing program 1 (id=6228):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000200)='./bus\x00', 0x4000, &(0x7f0000000240)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=cp862,file_umask=0000000041,iocharset=iso8859-5,\x00'], 0x2, 0x362, &(0x7f00000002c0)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

5.984630657s ago: executing program 6 (id=6229):
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904080001020d0000052406000105240000000d241f0100000000030000000006241c"], 0x0)

5.670841964s ago: executing program 1 (id=6232):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000080)=ANY=[], 0x1, 0x629f, &(0x7f0000004a00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

4.383470091s ago: executing program 1 (id=6239):
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x2df}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}})
io_uring_enter(r0, 0x742f, 0x77ae, 0x1, 0x0, 0x0)

2.951391326s ago: executing program 0 (id=6246):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000)

2.887848729s ago: executing program 1 (id=6247):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)="4cc792df4026fe6eb181b231867b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x4d)

2.240226413s ago: executing program 41 (id=6247):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0xe, 0x0, &(0x7f0000000840)="4cc792df4026fe6eb181b231867b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x4d)

2.227931423s ago: executing program 0 (id=6249):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.196337245s ago: executing program 2 (id=6250):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nobarrier}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
lseek(r0, 0x1, 0x1)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2.196077185s ago: executing program 3 (id=6251):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x0, 0x2})
fcntl$lock(r0, 0x26, &(0x7f00000031c0))
fcntl$lock(r0, 0x26, &(0x7f0000000080))

2.131011179s ago: executing program 6 (id=6252):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bridge\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

1.955585128s ago: executing program 3 (id=6253):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

1.929653639s ago: executing program 6 (id=6254):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, &(0x7f0000000000)=0x4b)

1.867991382s ago: executing program 0 (id=6255):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000000101010100000000000000000a000004300002802c00018004000300ff0100000000000000000000000000011400040000000000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x2000011}, 0x0)
r0 = add_key$user(&(0x7f0000000280), &(0x7f0000000500)={'syz', 0x3}, &(0x7f00000000c0)="b8", 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}})

1.639304764s ago: executing program 2 (id=6256):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xc0002011})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6011})

1.52434413s ago: executing program 0 (id=6257):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@newtaction={0x1ec, 0x30, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{0x100, 0x1, [@m_csum={0xfc, 0x1b, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x25, 0x5, 0xffffffffffffffff, 0xfffffffc, 0x6}, 0x200}}]}, {0xb1, 0x6, "7fab7c6b81a99e57a66fb4dddd9cbdfe770dc484398ee6559960048de7e2475aad2f604393ef91d87ef0bbbc23a269f7bf9161e69f6b563d78ef4216041309a6f30d9cac9056f5010bca9439e871422968a26ee09c3301410a2a7fb8808ad030e5bf71760c64cfaf282ce9a5f38aa2d3f6bea4c584fd38e69f6967ce920e636658cd83a5e11104956220d5eae74fdfeddf79a76fcedf60242df506d22c6cdbf91b90483cc5220d8fe618e60a6f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0xd8, 0x1, [@m_skbmod={0xd4, 0x1f, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x20000000, 0xd04, 0x8}, 0x7}}]}, {0x55, 0x6, "f81782037c8e1f7fce7d04f75d2d01876efef68b43bf9d7429e02add52bbc63558b0e66dedf8acc979dd8b9447688285bceab64aea3c8eb6e322349d54cf03a098a41d902f8a3750d12c17b057bb5e5cc9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x24008804, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.287913402s ago: executing program 2 (id=6258):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r1, 0x1}, 0x20)

1.126369941s ago: executing program 0 (id=6259):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x80000001, @local, 0x7}, 0x1c)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)

1.021676006s ago: executing program 2 (id=6260):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 75', @ANYRESHEX], 0x10)

771.81077ms ago: executing program 6 (id=6261):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.sectors\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)

690.047944ms ago: executing program 3 (id=6262):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0xfe}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)

663.606695ms ago: executing program 2 (id=6263):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x281}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0)

495.687464ms ago: executing program 6 (id=6264):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x544, 0x39, 0x0, 0x70bd2b, 0xfffffffc, {0x9}, [@generic="5c4f8c4c65a0068025236291dca6c1719ef6443dad14ce9f76c9f1266adf8584baf58367a76ecf79a6e5d71c06c54ee2b26841f25262bcfc572c485a5c7e9f54a912191df3afa7eab4ee087a28d000d6a8f5620880420cfcb467", @nested={0xe5, 0x13e, 0x0, 0x1, [@nested={0x78, 0xb9, 0x0, 0x1, [@typed={0x4, 0xff}, @typed={0x61, 0x4c, 0x0, 0x0, @binary="28309b884332e2e3205a740f7ae7a25ff55614d41fe8435f0e83450ee36787b12181ad8fb15eabbdc230809cd7a489e39bc2f14f4ea553155e7fb6bdcf6ff5e6c45c0ade5ec103923510528f380e16a1c22b45f1dcd452cb86cd9ca9cb"}, @typed={0xc, 0x90, 0x0, 0x0, @u64=0xfffffffffffffff5}]}, @typed={0x8, 0xc0, 0x0, 0x0, @uid}, @nested={0x29, 0x6b, 0x0, 0x1, [@nested={0x4, 0x68}, @nested={0x4, 0x80}, @generic="1fb3d829fe91b751038a72451c7f5611e9", @nested={0x4, 0x73}, @typed={0x8, 0x1b, 0x0, 0x0, @pid}]}, @generic="41707a8ae0fcab09b6cbc43f261417087248303050de94f5121fba08ad3d99ee09cae821c3a4f627f91177090b42a081a5a3a1bbfe"]}, @nested={0xc, 0xde, 0x0, 0x1, [@typed={0x8, 0x74, 0x0, 0x0, @u32=0x4}]}, @nested={0x3de, 0x55, 0x0, 0x1, [@generic="07c691c54a614d87fcf471e7b919389cd523cd3ec07cbe991142ae6b9441f8fb09615365e2108d4d786fcf5c5d95ead9699ef695ea73aa3fa19e99b56f72b019ded9a2f41a284b00cd67cff7b61ad71700b0e616d750f73c", @generic="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"]}]}, 0x544}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff85, &(0x7f00000000c0)=ANY=[])

352.094661ms ago: executing program 2 (id=6265):
ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0xf010000, 0x0, "bf5dff0f251ed700f605000000525a2572ce1ced6ec8d05da0e7bb29dc1433ae", 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff})
r0 = syz_usb_connect$hid(0x0, 0x96, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffa, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x2, 0x9, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00116d"], 0x0, 0x0, 0x0, 0x0}, 0x0)

246.496207ms ago: executing program 3 (id=6266):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x23, 0x5, 0x0)
listen(r0, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=6267):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0)

kernel console output (not intermixed with test programs):

NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  872.094791][T19355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  872.126635][T19355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.164905][T19355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  872.214618][T19355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.256942][T19355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  872.305778][T19355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.378100][T19355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[  872.423076][T19355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.457968][T19355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  872.516071][T19355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  872.576765][T19355] batman_adv: batadv0: Interface activated: batadv_slave_1
[  872.596191][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  872.629630][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  872.674251][T19355] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  872.700159][T19355] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  872.752865][T19355] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  872.800800][T19355] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  872.829009][T17900] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  873.309383][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  873.329972][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  873.392535][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  873.632718][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  873.644537][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  873.678384][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  874.581613][T19793] loop5: detected capacity change from 0 to 128
[  874.637484][T19793] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  875.049256][T19806] Bluetooth: hci4: Frame reassembly failed (-84)
[  875.153484][   T75] Bluetooth: hci4: Frame reassembly failed (-84)
[  875.199239][ T6551] UDF-fs: error (device loop5): udf_read_inode: (ino 114) failed !bh
[  875.258221][ T6551] UDF-fs: error (device loop5): udf_read_inode: (ino 114) failed !bh
[  875.944443][T18001] device syz_tun left promiscuous mode
[  875.954556][T19808] loop1: detected capacity change from 0 to 32768
[  875.982563][T18001] bridge0: port 4(syz_tun) entered disabled state
[  876.015557][T19820] netem: incorrect gi model size
[  876.025813][T19820] netem: change failed
[  876.085773][T19808] XFS (loop1): Mounting V5 Filesystem
[  876.188548][ T6003] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  876.320189][T19808] XFS (loop1): Ending clean mount
[  876.348678][T19808] XFS (loop1): Quotacheck needed: Please wait.
[  876.388060][ T6003] usb 10-1: Using ep0 maxpacket: 8
[  876.417077][ T6003] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  876.439893][ T6003] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  876.476281][ T6003] pvrusb2: Hardware description: Terratec Grabster AV400
[  876.525553][ T6003] pvrusb2: **********
[  876.546449][ T6003] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  876.580566][ T6003] pvrusb2: Important functionality might not be entirely working.
[  876.592099][ T6003] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  876.614393][ T6003] pvrusb2: **********
[  876.708254][ T2310] pvrusb2: Invalid write control endpoint
[  876.787743][   T52] block nbd0: Possible stuck request ffff888024e78000: control (read@0,4096B). Runtime 420 seconds
[  876.800955][T19808] XFS (loop1): Quotacheck: Done.
[  876.884487][ T2310] pvrusb2: Invalid write control endpoint
[  876.895254][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  876.930770][   T75] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.945629][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  876.975123][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  877.013737][ T2310] pvrusb2: Device being rendered inoperable
[  877.033830][T19355] XFS (loop1): Unmounting Filesystem
[  877.071322][T19824] pvrusb2: Attempted to execute control transfer when device not ok
[  877.088408][ T4272] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  877.098428][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  877.116245][ T4629] usb 10-1: USB disconnect, device number 6
[  877.173253][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  877.211735][ T2310] pvrusb2: Attached sub-driver cx25840
[  877.218817][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  877.236215][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  877.635606][   T75] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.886700][T19857] loop3: detected capacity change from 0 to 128
[  877.964645][T19859] loop9: detected capacity change from 0 to 512
[  878.018580][T19857] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  878.031088][T19859] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  878.045400][T19857] ext4 filesystem being mounted at /296/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  878.104831][T19859] UDF-fs: error (device loop9): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  878.234847][   T75] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  878.403560][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  878.420958][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  878.438885][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  878.463157][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  878.482592][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  878.490350][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  878.556951][T15077] EXT4-fs (loop3): unmounting filesystem.
[  878.939456][   T75] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  880.026288][T19873] loop9: detected capacity change from 0 to 32768
[  880.591284][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5196'.
[  880.608713][ T4288] Bluetooth: hci3: command 0x0409 tx timeout
[  881.001609][T19864] chnl_net:caif_netlink_parms(): no params data found
[  881.379683][T19926] loop3: detected capacity change from 0 to 4096
[  881.550524][T19926] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  881.599961][T19937] loop1: detected capacity change from 0 to 64
[  881.743839][T19926] overlayfs: upper fs does not support tmpfile.
[  881.784338][T19937] BFS-fs: bfs_readdir(): Bad f_pos=00000002 for loop1:00000002
[  881.800431][T19926] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  881.837485][T19926] overlayfs: failed to resolve './cgroup': -2
[  882.256204][T19864] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.298038][T19864] bridge0: port 1(bridge_slave_0) entered disabled state
[  882.335179][T19864] device bridge_slave_0 entered promiscuous mode
[  882.391776][T19947] loop1: detected capacity change from 0 to 4096
[  882.541324][T19947] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  882.616079][T19947] ntfs3: loop1: Failed to load $Extend.
[  882.668931][T19864] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.676381][T19864] bridge0: port 2(bridge_slave_1) entered disabled state
[  882.684951][ T4288] Bluetooth: hci3: command 0x041b tx timeout
[  882.766709][T19864] device bridge_slave_1 entered promiscuous mode
[  882.770428][   T26] audit: type=1800 audit(1776704879.860:342): pid=19956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5207" name="file1" dev="loop1" ino=30 res=0 errno=0
[  883.447320][T19864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  883.513704][T19864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  883.982894][T19864] team0: Port device team_slave_0 added
[  884.537024][T19987] option changes via remount are deprecated (pid=19985 comm=syz.1.5222)
[  884.758383][ T4288] Bluetooth: hci3: command 0x040f tx timeout
[  884.913948][T19864] team0: Port device team_slave_1 added
[  884.986676][T19998] loop9: detected capacity change from 0 to 2048
[  885.048100][T19864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  885.055606][T19864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  885.145914][T19998] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  885.204543][T19864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  885.490033][ T4341] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  885.557475][ T4341] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  885.704831][ T4341] EXT4-fs (loop9): This should not happen!! Data will be lost
[  885.704831][ T4341] 
[  885.776145][ T4341] EXT4-fs (loop9): Total free blocks count 0
[  885.808812][ T4341] EXT4-fs (loop9): Free/Dirty block details
[  885.815168][ T4341] EXT4-fs (loop9): free_blocks=4096
[  885.928318][ T4341] EXT4-fs (loop9): dirty_blocks=656
[  885.944109][ T4341] EXT4-fs (loop9): Block reservation details
[  885.964541][ T4341] EXT4-fs (loop9): i_reserved_data_blocks=41
[  886.001644][ T4329] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 624 with error 28
[  886.325471][T19864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  886.353132][T19864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  886.416534][T20022] loop9: detected capacity change from 0 to 256
[  886.425352][T19864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  886.466157][T20022] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  886.553661][T20022] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  886.623908][T20022] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  886.744052][   T26] audit: type=1800 audit(1776704883.840:343): pid=20022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5232" name="file1" dev="loop9" ino=1048821 res=0 errno=0
[  886.838098][ T4288] Bluetooth: hci3: command 0x0419 tx timeout
[  886.992658][T19864] device hsr_slave_0 entered promiscuous mode
[  887.097737][T19864] device hsr_slave_1 entered promiscuous mode
[  887.164561][T19864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  887.190150][T19864] Cannot create hsr debugfs directory
[  887.265601][   T75] device hsr_slave_0 left promiscuous mode
[  887.321038][   T75] device hsr_slave_1 left promiscuous mode
[  887.378520][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  887.400053][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  887.449275][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  887.481573][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  887.536943][   T75] batman_adv: batadv0: Interface deactivated: ipvlan2
[  887.564051][   T75] batman_adv: batadv0: Removing interface: ipvlan2
[  887.603003][   T75] bridge0: port 3(bond1) entered disabled state
[  887.674923][   T75] device bridge_slave_1 left promiscuous mode
[  887.691217][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.743622][   T75] device bridge_slave_0 left promiscuous mode
[  887.801686][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[  887.898515][   T75] device veth1_macvtap left promiscuous mode
[  887.915624][   T75] device veth0_macvtap left promiscuous mode
[  887.924950][   T75] device veth1_vlan left promiscuous mode
[  887.936083][   T75] device veth0_vlan left promiscuous mode
[  888.177631][   T75] infiniband syz0: set down
[  889.212614][   T75] bond1 (unregistering): Released all slaves
[  891.221362][   T75] team0 (unregistering): Port device team_slave_1 removed
[  891.398737][   T75] team0 (unregistering): Port device team_slave_0 removed
[  891.556290][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  891.716036][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  891.894177][ T4325] smc: removing ib device syz0
[  892.295872][ T3638] udevd[3638]: worker [8239] /devices/virtual/block/nbd0 timeout; kill it
[  892.341607][ T3638] udevd[3638]: seq 18168 '/devices/virtual/block/nbd0' killed
[  892.825274][   T75] bond0 (unregistering): Released all slaves
[  893.036639][ T6001] infiniband syz0: ib_query_port failed (-19)
[  893.460540][T20104] IPVS: sh: FWM 4 0x00000004 - no destination available
[  893.498959][T20098] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5250'.
[  893.555059][T20102] netlink: 'syz.1.5251': attribute type 10 has an invalid length.
[  893.746172][T20102] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  893.777297][T20099] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5250'.
[  893.815306][T20100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  894.393975][T20117] loop9: detected capacity change from 0 to 1931
[  894.463812][T20117] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  894.527540][T20117] NILFS (loop9): total number of segment blocks 1008 exceeds device size (965 blocks)
[  896.138965][T20134] device batadv0 entered promiscuous mode
[  896.157269][T20134] device bond0 entered promiscuous mode
[  896.242528][T20134] device bond_slave_0 entered promiscuous mode
[  896.247235][T20151] loop1: detected capacity change from 0 to 512
[  896.263279][T20134] device bond_slave_1 entered promiscuous mode
[  896.303920][T20134] 8021q: adding VLAN 0 to HW filter on device hsr1
[  896.338448][T20151] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  896.379983][T20134] device batadv0 left promiscuous mode
[  896.394993][T20151] EXT4-fs (loop1): 1 truncate cleaned up
[  896.407043][T20151] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  896.416986][T20134] device bond0 left promiscuous mode
[  896.428220][T20134] device bond_slave_0 left promiscuous mode
[  896.434576][T20134] device bond_slave_1 left promiscuous mode
[  897.088676][T19355] EXT4-fs (loop1): unmounting filesystem.
[  898.038007][ T4288] Bluetooth: hci0: command 0x0406 tx timeout
[  898.241656][    C1] vkms_vblank_simulate: vblank timer overrun
[  898.843874][T20190] loop9: detected capacity change from 0 to 128
[  898.924232][T19864] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  898.981035][T20190] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  899.016306][T19864] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  899.021612][T20190] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  899.111923][T19864] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  899.149935][T20194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5275'.
[  899.194320][T20194] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  899.208905][T20199] loop3: detected capacity change from 0 to 256
[  899.260097][T20199] exfat: Deprecated parameter 'utf8'
[  899.274843][T20199] exfat: Deprecated parameter 'namecase'
[  899.337771][T20199] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  899.519819][T17900] EXT4-fs (loop9): unmounting filesystem.
[  899.582594][    C1] vkms_vblank_simulate: vblank timer overrun
[  899.740984][T20194] batman_adv: batadv0: Removing interface: batadv_slave_1
[  899.947919][ T4629] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  899.956784][T19864] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  900.152512][ T4629] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  900.188109][ T4629] usb 4-1: config 0 interface 0 has no altsetting 0
[  900.199904][ T4629] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  900.248579][ T4629] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  900.256941][ T4629] usb 4-1: Product: syz
[  900.285493][ T4629] usb 4-1: Manufacturer: syz
[  900.295231][ T4629] usb 4-1: SerialNumber: syz
[  900.345064][ T4629] usb 4-1: config 0 descriptor??
[  900.387187][ T4629] usb 4-1: selecting invalid altsetting 0
[  900.645659][ T6003] usb 4-1: USB disconnect, device number 37
[  900.715643][T20209] loop9: detected capacity change from 0 to 32768
[  900.745168][T19864] 8021q: adding VLAN 0 to HW filter on device bond0
[  900.794658][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  900.813551][T20209] XFS (loop9): Mounting V5 Filesystem
[  900.820514][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  900.861162][T20209] XFS (loop9): Ending clean mount
[  900.876214][T19864] 8021q: adding VLAN 0 to HW filter on device team0
[  900.924210][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  900.939467][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  900.968395][ T4326] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  900.987208][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.994504][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  901.042991][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  901.063641][T17900] XFS (loop9): Unmounting Filesystem
[  901.093441][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  901.197260][ T4326] usb 2-1: Using ep0 maxpacket: 8
[  901.210406][ T4326] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  901.227274][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  901.252551][ T4326] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  901.268724][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  901.276033][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  901.288254][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  901.296553][ T4326] usb 2-1: Product: syz
[  901.333787][    C1] vkms_vblank_simulate: vblank timer overrun
[  901.346567][ T4326] usb 2-1: Manufacturer: syz
[  901.356327][ T4326] usb 2-1: SerialNumber: syz
[  901.387756][ T4326] usb 2-1: config 0 descriptor??
[  901.397459][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  901.415286][ T4326] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  901.458177][ T4326] usb 2-1: setting power ON
[  901.462809][ T4326] dvb-usb: bulk message failed: -22 (2/0)
[  901.475638][T20238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5285'.
[  901.502537][T20238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5285'.
[  901.515482][ T4326] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  901.542533][ T4326] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  901.546116][T20238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5285'.
[  901.578744][ T4326] usb 2-1: media controller created
[  901.611942][    C1] vkms_vblank_simulate: vblank timer overrun
[  901.649627][    C1] vkms_vblank_simulate: vblank timer overrun
[  901.663523][T20222] dvb-usb: bulk message failed: -22 (3/0)
[  901.677075][T20238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5285'.
[  901.696851][T20238] netlink: 'syz.2.5285': attribute type 6 has an invalid length.
[  901.697424][T20222] dvb-usb: bulk message failed: -22 (4/0)
[  901.713202][ T4326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  901.764141][    C1] vkms_vblank_simulate: vblank timer overrun
[  901.817151][T20222] cxusb: i2c read failed
[  901.823992][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  901.838116][T20244] cxusb: i2c rd: len=147 is too big!
[  901.838116][T20244] 
[  901.858748][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  901.946119][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  901.973956][ T4326] usb 2-1: selecting invalid altsetting 6
[  901.986459][ T4326] usb 2-1: digital interface selection failed (-22)
[  902.005202][    C1] vkms_vblank_simulate: vblank timer overrun
[  902.033619][ T4326] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  902.047279][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  902.072981][ T4326] usb 2-1: setting power OFF
[  902.093368][ T4326] dvb-usb: bulk message failed: -22 (2/0)
[  902.110183][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  902.144536][ T4326] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  902.175206][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  902.193796][ T4326] (NULL device *): no alternate interface
[  902.253633][    C1] vkms_vblank_simulate: vblank timer overrun
[  902.288123][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  902.310298][ T4326] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  902.329049][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  902.352087][T19864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  902.418243][ T4326] usb 2-1: USB disconnect, device number 6
[  902.455309][T19864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  902.511854][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  902.533905][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  903.211750][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5292'.
[  903.278144][ T6003] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  903.317344][T20272] loop1: detected capacity change from 0 to 64
[  903.480413][ T6003] usb 10-1: unable to get BOS descriptor or descriptor too short
[  903.511312][ T6003] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  903.566433][ T6003] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  903.606549][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  903.616490][T20277] use of bytesused == 0 is deprecated and will be removed in the future,
[  903.625541][ T6003] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.636035][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  903.666636][T20277] use the actual size instead.
[  903.682620][ T6003] usb 10-1: Product: syz
[  903.687540][T19864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  903.707443][ T6003] usb 10-1: Manufacturer: syz
[  903.725604][ T6003] usb 10-1: SerialNumber: syz
[  903.962875][ T4623] kernel write not supported for file [eventfd] (pid: 4623 comm: kworker/0:10)
[  903.979521][ T6003] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  904.188082][ T6003] usb 10-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  904.228166][ T6003] usb 10-1: found format II with max.bitrate = 4, frame size=7372
[  904.327390][T20292] loop1: detected capacity change from 0 to 4096
[  904.356041][T20292] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  904.590636][ T6003] usb 10-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  904.738127][ T6003] usb 10-1: USB disconnect, device number 7
[  905.029972][ T4355] udevd[4355]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  905.376527][T20314] loop1: detected capacity change from 0 to 128
[  905.409712][T20314] EXT4-fs: inline encryption not supported
[  905.436106][T20314] EXT4-fs (loop1): Test dummy encryption mode enabled
[  905.458864][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  905.487227][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  905.568982][T20314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  905.609510][T19864] device veth0_vlan entered promiscuous mode
[  905.665741][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  905.680649][T20314] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  905.698999][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  905.742066][T19864] device veth1_vlan entered promiscuous mode
[  905.802503][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  905.816169][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  905.855665][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  906.004831][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  906.032865][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  906.084745][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  906.112208][T19864] device veth0_macvtap entered promiscuous mode
[  906.141734][T19864] device veth1_macvtap entered promiscuous mode
[  906.168183][ T4629] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  906.230517][T20337] netlink: 'syz.3.5310': attribute type 10 has an invalid length.
[  906.249437][T20314] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4
[  906.296364][T20337] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  906.361061][T20336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  906.378119][ T4629] usb 10-1: Using ep0 maxpacket: 16
[  906.389900][ T4629] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  906.402543][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  906.417006][ T4629] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.439535][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  906.455487][ T4629] usb 10-1: Product: syz
[  906.462537][ T4629] usb 10-1: Manufacturer: syz
[  906.467739][ T4629] usb 10-1: SerialNumber: syz
[  906.473666][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  906.502664][ T4629] usb 10-1: config 0 descriptor??
[  906.517058][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  906.545017][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  906.576868][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  906.611010][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  906.638135][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  906.661933][T19355] EXT4-fs (loop1): unmounting filesystem.
[  906.673055][T19864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  906.746062][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  906.760030][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  906.789289][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  906.807151][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  906.856997][   T52] block nbd0: Possible stuck request ffff888024e78000: control (read@0,4096B). Runtime 450 seconds
[  906.884945][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  906.974546][ T4629] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  906.991605][ T4629] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  907.005106][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  907.056012][ T4629] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  907.065032][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  907.086715][ T4629] usb 10-1: media controller created
[  907.102569][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  907.148630][T19864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  907.170270][ T4629] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  907.183297][T19864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  907.214280][T20355] loop3: detected capacity change from 0 to 256
[  907.223019][T19864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  907.263331][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  907.303791][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  907.321538][ T4629] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  907.335567][T20353] syzkaller1: tun_chr_ioctl cmd 1074025677
[  907.339225][ T4629] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  907.388184][T20353] syzkaller1: linktype set to 768
[  907.399694][T19864] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  907.418166][T19864] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  907.449656][T19864] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  907.469546][T19864] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  907.535096][  T952] usb 10-1: USB disconnect, device number 8
[  907.647219][  T952] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  907.698217][ T4629] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  907.814234][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  907.832865][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  907.844660][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  907.907961][ T4629] usb 4-1: Using ep0 maxpacket: 32
[  907.916848][ T4629] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  907.944502][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  907.960804][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  907.982569][ T4629] usb 4-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  908.006149][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  908.044724][ T4629] usb 4-1: config 0 interface 0 has no altsetting 0
[  908.069142][ T4629] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[  908.102235][ T4629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.159258][ T4629] usb 4-1: config 0 descriptor??
[  908.389248][T20374] loop9: detected capacity change from 0 to 512
[  908.433064][T20374] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  908.569311][T20374] EXT4-fs (loop9): 1 truncate cleaned up
[  908.580966][ T4629] wacom 0003:056A:00C6.002C: unknown main item tag 0x0
[  908.588102][ T4629] wacom 0003:056A:00C6.002C: unknown main item tag 0x0
[  908.595136][ T4629] wacom 0003:056A:00C6.002C: unknown main item tag 0x0
[  908.599494][T20374] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  908.603540][ T4629] wacom 0003:056A:00C6.002C: unknown main item tag 0x0
[  908.621067][ T4629] wacom 0003:056A:00C6.002C: unknown main item tag 0x0
[  908.650627][ T4629] wacom 0003:056A:00C6.002C: unknown main item tag 0x0
[  908.668235][ T4629] wacom 0003:056A:00C6.002C: unknown main item tag 0x6
[  908.675329][ T4629] wacom 0003:056A:00C6.002C: unknown main item tag 0x3
[  908.728206][ T4629] wacom 0003:056A:00C6.002C: unknown main item tag 0x7
[  908.740809][T20380] netlink: 1748 bytes leftover after parsing attributes in process `syz.1.5321'.
[  908.789831][ T4629] wacom 0003:056A:00C6.002C: hidraw0: USB HID v0.81 Device [HID 056a:00c6] on usb-dummy_hcd.3-1/input0
[  908.840556][ T4629] usb 4-1: USB disconnect, device number 38
[  909.063864][T17900] EXT4-fs (loop9): unmounting filesystem.
[  909.270970][T20385] fido_id[20385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  910.140965][T20411] loop3: detected capacity change from 0 to 8192
[  910.194709][T20411] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  910.218290][T20411] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  910.245288][T20411] REISERFS (device loop3): using ordered data mode
[  910.265140][T20411] reiserfs: using flush barriers
[  910.272176][T20411] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  910.289740][T20411] REISERFS (device loop3): checking transaction log (loop3)
[  910.388013][ T4629] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  910.434256][T20411] REISERFS (device loop3): Using r5 hash to sort names
[  910.449041][T20411] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  910.577934][ T4629] usb 2-1: Using ep0 maxpacket: 32
[  910.592474][ T4629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  910.678106][ T4629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  910.708220][ T4629] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  910.717647][ T4629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.816136][ T4629] usb 2-1: config 0 descriptor??
[  910.855521][ T4629] hub 2-1:0.0: USB hub found
[  911.055691][ T4629] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  911.449365][T20438] device veth1_to_team entered promiscuous mode
[  911.485945][ T4629] hid-generic 0003:046D:C31C.002D: item fetching failed at offset 0/1
[  911.496552][T20438] device veth1_to_team left promiscuous mode
[  911.508953][ T4629] hid-generic: probe of 0003:046D:C31C.002D failed with error -22
[  911.858275][ T6003] usb 2-1: USB disconnect, device number 7
[  911.903615][T20431] loop6: detected capacity change from 0 to 32768
[  911.955035][T20431] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.5337 (20431)
[  912.033928][T20431] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  912.109859][T20451] input: syz0 as /devices/virtual/input/input44
[  912.124454][T20431] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  912.154974][T20431] BTRFS info (device loop6): enabling auto defrag
[  912.210187][T20431] BTRFS info (device loop6): use no compression
[  912.267610][T20431] BTRFS info (device loop6): max_inline at 4096
[  912.307981][T20431] BTRFS info (device loop6): using free space tree
[  912.592384][T20431] BTRFS info (device loop6): enabling ssd optimizations
[  912.637594][T20482] loop1: detected capacity change from 0 to 1024
[  912.739078][T20482] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  913.318450][T19864] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  915.387930][T20540] input: syz0 as /devices/virtual/input/input45
[  916.303532][T20566] loop3: detected capacity change from 0 to 1024
[  916.368131][T20566] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  916.536351][T20566] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  917.054319][T15077] EXT4-fs (loop3): unmounting filesystem.
[  917.344376][T20552] loop9: detected capacity change from 0 to 32768
[  917.530548][T20590] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5383'.
[  917.572454][T20552] jfs_rename did not expect dtDelete to return rc = -2
[  917.614844][T20592] loop1: detected capacity change from 0 to 512
[  917.648376][T20552] ERROR: (device loop9): jfs_rename: 
[  917.648376][T20552] 
[  917.866955][T20552] ERROR: (device loop9): remounting filesystem as read-only
[  918.016594][T20599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5386'.
[  918.522211][T20616] loop1: detected capacity change from 0 to 64
[  918.748065][ T6003] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  918.968828][ T6003] usb 10-1: too many configurations: 9, using maximum allowed: 8
[  918.979996][ T6003] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  919.027888][ T6003] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  919.078033][ T6003] usb 10-1: config 64 interface 0 has no altsetting 0
[  919.089503][ T6003] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  919.127272][ T6003] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  919.208905][ T6003] usb 10-1: config 64 interface 0 has no altsetting 0
[  919.238919][ T6003] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  919.288229][ T6003] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  919.313362][T20633] netlink: 'syz.1.5398': attribute type 3 has an invalid length.
[  919.337882][ T6003] usb 10-1: config 64 interface 0 has no altsetting 0
[  919.350416][ T6003] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  919.398394][ T6003] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  919.436237][ T6003] usb 10-1: config 64 interface 0 has no altsetting 0
[  919.473052][ T6003] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  919.507973][ T6003] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  919.547965][ T6003] usb 10-1: config 64 interface 0 has no altsetting 0
[  919.562949][ T6003] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  919.586354][ T6003] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  919.628055][ T6003] usb 10-1: config 64 interface 0 has no altsetting 0
[  919.644459][ T6003] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  919.654584][ T6003] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  919.674087][ T4367] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  919.691996][ T6003] usb 10-1: config 64 interface 0 has no altsetting 0
[  919.701197][ T6003] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  919.712646][ T6003] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  919.732109][ T6003] usb 10-1: config 64 interface 0 has no altsetting 0
[  919.745191][ T6003] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  919.755425][ T6003] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  919.764586][ T6003] usb 10-1: Product: syz
[  919.769395][ T6003] usb 10-1: Manufacturer: syz
[  919.776215][ T6003] usb 10-1: SerialNumber: syz
[  919.846674][ T6003] yurex 10-1:64.0: USB YUREX device now attached to Yurex #0
[  919.889765][ T4367] usb 4-1: config index 0 descriptor too short (expected 65170, got 92)
[  919.920608][ T4367] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  919.968344][ T4367] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  920.003923][ T4367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.024053][ T4367] usb 4-1: Product: syz
[  920.029538][ T4367] usb 4-1: Manufacturer: syz
[  920.074765][ T4367] usb 4-1: SerialNumber: syz
[  920.499306][    C1] usb 10-1: yurex_control_callback - control failed: -2
[  920.517614][ T4315] usb 10-1: USB disconnect, device number 9
[  920.526536][ T4315] yurex 10-1:64.0: USB YUREX #0 now disconnected
[  920.711561][T20660] loop6: detected capacity change from 0 to 512
[  920.875276][T20660] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  920.938266][T20660] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  920.966382][ T4367] cdc_ncm 4-1:1.0: SET_CRC_MODE failed
[  921.014729][ T4367] cdc_ncm 4-1:1.0: bind() failure
[  921.078603][ T4367] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  921.106090][ T4367] cdc_ncm 4-1:1.1: bind() failure
[  921.162789][ T4367] usb 4-1: USB disconnect, device number 39
[  921.682928][T19864] EXT4-fs (loop6): unmounting filesystem.
[  922.807914][ T4633] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  922.998456][ T4633] usb 4-1: Using ep0 maxpacket: 32
[  923.006015][ T4633] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  923.041174][ T4633] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  923.081729][ T4633] usb 4-1: config 0 interface 0 has no altsetting 0
[  923.136074][ T4633] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  923.186453][ T4633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  923.216964][ T4633] usb 4-1: Product: syz
[  923.221615][ T4633] usb 4-1: Manufacturer: syz
[  923.226277][ T4633] usb 4-1: SerialNumber: syz
[  923.232587][T20694] loop6: detected capacity change from 0 to 32768
[  923.251305][ T4633] usb 4-1: config 0 descriptor??
[  923.717389][T20738] loop1: detected capacity change from 0 to 1024
[  923.726086][ T4633] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  924.015486][T20740] loop6: detected capacity change from 0 to 4096
[  924.116954][T20743] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  924.134251][ T4633] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  924.210967][ T4633] usb 4-1: USB disconnect, device number 40
[  925.501913][T20769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5447'.
[  925.918181][ T4315] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  926.108057][ T4315] usb 2-1: Using ep0 maxpacket: 16
[  926.117461][ T4315] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  926.162292][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.182551][ T4315] usb 2-1: Product: syz
[  926.186819][ T4315] usb 2-1: Manufacturer: syz
[  926.208288][ T4315] usb 2-1: SerialNumber: syz
[  926.429095][T20764] loop6: detected capacity change from 0 to 32768
[  926.496342][ T4315] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  926.552577][ T4315] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  926.563756][ T4315] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  926.572949][ T4315] usb 2-1: media controller created
[  926.599845][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  926.696672][ T4315] zl10353_read_register: readreg error (reg=127, ret==-71)
[  926.752603][T20797] loop3: detected capacity change from 0 to 4096
[  926.780890][ T4315] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5
[  926.839177][ T4315] usb 2-1: USB disconnect, device number 8
[  926.911426][T20797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  926.944226][T20764] XFS (loop6): Mounting V5 Filesystem
[  927.092104][T20764] XFS (loop6): Ending clean mount
[  927.148671][   T26] audit: type=1800 audit(1776704924.250:344): pid=20797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5453" name="bus" dev="loop3" ino=18 res=0 errno=0
[  927.173551][T20764] XFS (loop6): Quotacheck needed: Please wait.
[  927.326072][T15077] EXT4-fs (loop3): unmounting filesystem.
[  927.511639][T20764] XFS (loop6): Quotacheck: Done.
[  927.636463][T20810] loop3: detected capacity change from 0 to 256
[  927.760799][T20810] exfat: Deprecated parameter 'namecase'
[  927.807067][T19864] XFS (loop6): Unmounting Filesystem
[  927.845376][T20810] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  928.469563][T20821] input: syz1 as /devices/virtual/input/input46
[  929.288701][T20841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5464'.
[  929.379004][T20843] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5465'.
[  929.709818][T20853] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  929.719212][T20853] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  929.728756][T20853] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  929.737557][T20853] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  930.875294][T20885] loop6: detected capacity change from 0 to 1024
[  930.887908][ T4315] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  930.946048][T20885] hfsplus: bad catalog entry type
[  931.132592][ T4315] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 14129, setting to 64
[  931.153295][ T4315] usb 4-1: config 0 interface 0 has no altsetting 0
[  931.161553][ T4329] hfsplus: b-tree write err: -5, ino 25
[  931.167372][ T4329] hfsplus: b-tree write err: -5, ino 4
[  931.189143][ T4329] hfsplus: b-tree write err: -5, ino 2
[  931.194932][ T4329] hfsplus: b-tree write err: -5, ino 26
[  931.208983][ T4315] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  931.235019][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  931.277942][ T4315] usb 4-1: Product: syz
[  931.282271][ T4315] usb 4-1: Manufacturer: syz
[  931.286948][ T4315] usb 4-1: SerialNumber: syz
[  931.348612][ T4315] usb 4-1: config 0 descriptor??
[  931.390032][ T4315] usb 4-1: selecting invalid altsetting 0
[  931.604154][T20902] loop1: detected capacity change from 0 to 256
[  931.674072][ T4315] usb 4-1: USB disconnect, device number 41
[  931.755474][T20902] FAT-fs (loop1): unable to read block(103987194760) for building NFS inode
[  931.776243][T20904] loop6: detected capacity change from 0 to 256
[  931.804481][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  931.811116][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  931.855780][T20904] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  931.900378][   T26] audit: type=1800 audit(1776704929.000:345): pid=20904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5487" name="file1" dev="loop6" ino=1048829 res=0 errno=0
[  931.993241][ T4325] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008)
[  932.013408][   T26] audit: type=1800 audit(1776704929.030:346): pid=20904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5487" name="file1" dev="loop6" ino=1048829 res=0 errno=0
[  932.027167][ T4325] FAT-fs (loop6): Filesystem has been set read-only
[  932.099044][ T4325] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779008)
[  932.158013][T20907] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  932.345780][T20909] loop1: detected capacity change from 0 to 4096
[  932.446060][T20912] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  933.071239][T20921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5492'.
[  933.585887][T20932] loop6: detected capacity change from 0 to 1024
[  933.759487][ T4316] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  933.788781][T20932] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  933.952889][T20944] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5496: bg 0: block 313: padding at end of block bitmap is not set
[  934.021209][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  934.039964][ T4316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16648, setting to 1024
[  934.077996][T20944] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  934.088049][ T4316] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  934.098974][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.133299][ T4316] usb 3-1: config 0 descriptor??
[  934.277441][T19864] EXT4-fs (loop6): unmounting filesystem.
[  934.569341][ T4316] keytouch 0003:0926:3333.002E: fixing up Keytouch IEC report descriptor
[  934.591510][ T4316] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002E/input/input47
[  934.612333][T20958] loop1: detected capacity change from 0 to 2048
[  934.644908][T20958] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  934.728174][T20965] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  934.768544][    C1] usb 3-1: input irq status -75 received
[  934.867622][ T4316] keytouch 0003:0926:3333.002E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  935.025144][ T4316] usb 3-1: USB disconnect, device number 31
[  935.388923][T20967] fido_id[20967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  936.018116][ T4316] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  936.207897][ T4316] usb 4-1: Using ep0 maxpacket: 8
[  936.215001][ T4316] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  936.244109][ T4316] usb 4-1: config 179 has no interface number 0
[  936.272315][ T4316] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  936.325600][ T4316] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  936.385547][ T4316] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  936.427890][ T4316] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  936.508944][ T4316] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  936.587920][ T4316] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  936.597170][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.623850][T20981] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  936.983077][   T52] block nbd0: Possible stuck request ffff888024e78000: control (read@0,4096B). Runtime 480 seconds
[  937.002703][ T4315] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input48
[  937.280970][ T4316] usb 4-1: USB disconnect, device number 42
[  937.288923][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  937.297494][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  937.315122][ T4316] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  937.740154][T21017] loop1: detected capacity change from 0 to 2048
[  937.820642][T21017] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  937.869785][T21017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  938.507116][T21038] loop3: detected capacity change from 0 to 64
[  938.616274][T21038] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  939.004812][T21048] loop1: detected capacity change from 0 to 128
[  939.108954][T21048] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  939.118614][T21048] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  939.208249][T21054] tipc: Started in network mode
[  939.267902][T21054] tipc: Node identity , cluster identity 4711
[  939.274202][T21054] tipc: Failed to set node id, please configure manually
[  939.365980][T19355] EXT4-fs (loop1): unmounting filesystem.
[  939.404758][T21054] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  939.692687][T21063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5537'.
[  940.091297][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  940.122821][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  940.144046][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  940.155682][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  940.171058][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  940.179444][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  940.577502][T21085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5544'.
[  941.230969][T21072] chnl_net:caif_netlink_parms(): no params data found
[  941.272944][T21106] loop3: detected capacity change from 0 to 2048
[  941.411145][T21106] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  941.646918][T21072] bridge0: port 1(bridge_slave_0) entered blocking state
[  941.706194][T21072] bridge0: port 1(bridge_slave_0) entered disabled state
[  941.734860][T21119] loop1: detected capacity change from 0 to 2048
[  941.741825][T21072] device bridge_slave_0 entered promiscuous mode
[  941.766089][T21072] bridge0: port 2(bridge_slave_1) entered blocking state
[  941.785221][T21119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  941.827993][T21072] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.869691][T21072] device bridge_slave_1 entered promiscuous mode
[  942.023949][T21072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  942.102383][T21072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  942.281901][ T4281] Bluetooth: hci0: command 0x0409 tx timeout
[  942.359192][T21072] team0: Port device team_slave_0 added
[  942.425715][T21072] team0: Port device team_slave_1 added
[  942.589565][T21072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  942.596801][T21072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  942.797907][T21072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  942.888947][T21072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  942.901639][T21072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  942.955753][T21072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  943.136718][T21072] device hsr_slave_0 entered promiscuous mode
[  943.185335][T21072] device hsr_slave_1 entered promiscuous mode
[  944.120945][T21177] loop3: detected capacity change from 0 to 4096
[  944.368266][ T4281] Bluetooth: hci0: command 0x041b tx timeout
[  944.727311][T21170] loop1: detected capacity change from 0 to 40427
[  944.808165][T21170] F2FS-fs (loop1): invalid crc value
[  944.872208][T21170] F2FS-fs (loop1): Found nat_bits in checkpoint
[  945.099039][T21170] F2FS-fs (loop1): Start checkpoint disabled!
[  945.128059][T21170] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  945.318136][ T4633] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  945.518334][ T4633] usb 4-1: Using ep0 maxpacket: 8
[  945.531344][ T4633] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  945.576339][ T4633] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  945.607289][ T4633] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  945.645818][ T4633] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  945.666440][ T4633] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  945.689452][ T4633] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  945.710970][ T4633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.886955][ T4341] kworker/u4:7: attempt to access beyond end of device
[  945.886955][ T4341] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  945.961050][ T4633] usb 4-1: GET_CAPABILITIES returned 0
[  945.966761][ T4633] usbtmc 4-1:16.0: can't read capabilities
[  946.197413][ T4633] usb 4-1: USB disconnect, device number 43
[  946.462832][ T4281] Bluetooth: hci0: command 0x040f tx timeout
[  946.927987][ T6007] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  947.151914][ T6007] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  947.202281][T21072] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  947.209289][ T6007] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  947.233290][ T6007] usb 2-1: config 1 has no interface number 0
[  947.244960][ T6007] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  947.278049][ T6007] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  947.317897][ T6007] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  947.332780][T21072] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  947.360510][ T6007] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  947.381631][T21072] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  947.399268][ T6007] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.407607][ T6007] usb 2-1: Product: syz
[  947.419653][ T4367] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  947.436836][ T6007] usb 2-1: Manufacturer: syz
[  947.456304][ T6007] usb 2-1: SerialNumber: syz
[  947.465903][T21205] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  947.512768][T21072] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  947.630812][ T4367] usb 4-1: config 0 has no interfaces?
[  947.647929][ T4367] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  947.657169][ T4367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.707341][ T4367] usb 4-1: config 0 descriptor??
[  947.842733][T21218] loop6: detected capacity change from 0 to 4096
[  947.910650][T21218] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  947.928541][T21205] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  947.944376][T21213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  947.973362][T21218] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  947.993037][T21072] 8021q: adding VLAN 0 to HW filter on device bond0
[  948.008442][T21213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  948.027529][ T4315] usb 4-1: USB disconnect, device number 44
[  948.094253][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  948.111177][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  948.131470][T21218] ntfs: volume version 3.1.
[  948.154973][T21072] 8021q: adding VLAN 0 to HW filter on device team0
[  948.306010][T17882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  948.326107][T17882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  948.364481][ T6007] cdc_ncm 2-1:1.1: bind() failure
[  948.389401][T17882] bridge0: port 1(bridge_slave_0) entered blocking state
[  948.397071][T17882] bridge0: port 1(bridge_slave_0) entered forwarding state
[  948.415288][ T6007] usb 2-1: USB disconnect, device number 9
[  948.482850][T17882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  948.501293][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  948.515574][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  948.528252][ T4281] Bluetooth: hci0: command 0x0419 tx timeout
[  948.557326][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state
[  948.564658][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  948.608080][ T4315] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  948.702213][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  948.719088][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  948.776201][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  948.816955][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  948.841022][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  948.849072][ T4315] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40
[  948.849123][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.895998][ T4315] usb 4-1: config 0 descriptor??
[  948.979428][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  949.018933][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  949.050004][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  949.071494][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  949.112252][ T4281] Bluetooth: hci4: urb ffff8880573c3100 submission failed (2)
[  949.137549][ T4315] usb 4-1: USB disconnect, device number 45
[  949.144251][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  949.211570][T21072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  949.234931][T21231] loop6: detected capacity change from 0 to 1024
[  949.285163][T21072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  949.315099][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  949.330202][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  950.013509][T21246] loop3: detected capacity change from 0 to 256
[  950.100859][T21246] exfat: Deprecated parameter 'utf8'
[  950.234219][T21246] exfat: Deprecated parameter 'namecase'
[  950.343444][T21246] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d)
[  950.506493][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  950.519972][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  950.599310][T21072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  950.717507][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  950.735576][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  950.846073][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  950.929660][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  950.977321][T21072] device veth0_vlan entered promiscuous mode
[  950.987426][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  951.017527][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  951.058481][T21072] device veth1_vlan entered promiscuous mode
[  951.182824][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  951.215326][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  951.258491][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  951.290975][T21276] loop1: detected capacity change from 0 to 256
[  951.305423][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  951.344864][T21276] exfat: Deprecated parameter 'namecase'
[  951.363244][T21072] device veth0_macvtap entered promiscuous mode
[  951.379299][T21276] exfat: Deprecated parameter 'namecase'
[  951.441845][T21276] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  951.472986][T21072] device veth1_macvtap entered promiscuous mode
[  951.518874][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  951.570838][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  951.625710][T21072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  951.672418][T21072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  951.715626][T21072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  951.750210][T21072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  951.783015][T21072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  951.828592][T21072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  951.864090][T21072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  951.907558][T21072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  951.943388][T21072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  952.022120][T21072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  952.044645][T21072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  952.138427][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  952.185704][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  952.228323][T21072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  952.260601][T21072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  952.303314][T21072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  952.337403][T21072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  952.423263][T21072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  952.478112][T21072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  952.518104][T21072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  952.559717][T21072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  952.609788][T21072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  952.631954][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  952.655799][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  952.693759][T21072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  952.729523][T21298] loop1: detected capacity change from 0 to 256
[  952.737109][T21298] exfat: Deprecated parameter 'utf8'
[  952.743248][T21072] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  952.783868][T21072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  952.847868][T21072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  952.858170][T21298] exfat: Deprecated parameter 'namecase'
[  952.891279][T21298] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d)
[  953.208089][ T6003] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  953.277245][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  953.318424][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  953.357233][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  953.438066][ T6003] usb 3-1: Using ep0 maxpacket: 8
[  953.449034][ T6003] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  953.470677][   T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  953.482809][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5620'.
[  953.499521][   T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  953.520456][ T6003] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  953.539277][ T6646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  953.558501][ T6003] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  953.600119][ T6003] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  953.644398][ T6003] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  953.666534][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.960296][ T6003] usb 3-1: GET_CAPABILITIES returned 0
[  953.965978][ T6003] usbtmc 3-1:16.0: can't read capabilities
[  954.159903][T21328] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5625'.
[  954.231276][T21301] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32
[  954.292255][  T952] usb 3-1: USB disconnect, device number 32
[  954.425455][T21337] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5628'.
[  954.545320][T21344] raw_sendmsg: syz.3.5631 forgot to set AF_INET. Fix it!
[  955.210953][T21353] loop1: detected capacity change from 0 to 8192
[  955.291773][T21353] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  955.379059][T21347] loop6: detected capacity change from 0 to 32768
[  955.417931][T21353] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  955.471191][T21353] REISERFS (device loop1): using ordered data mode
[  955.538226][T21347] JBD2: Ignoring recovery information on journal
[  955.560989][T21353] reiserfs: using flush barriers
[  955.628002][T21353] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  955.715062][T21353] REISERFS (device loop1): checking transaction log (loop1)
[  955.758940][T21347] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  956.042751][T19864] ocfs2: Unmounting device (7,6) on (node local)
[  956.142613][T21374] Bluetooth: MGMT ver 1.22
[  956.184130][T21376] program syz.0.5640 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  956.248390][T21353] REISERFS (device loop1): Using r5 hash to sort names
[  956.268358][T21353] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  958.478265][ T4316] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  958.679264][ T4316] usb 2-1: Using ep0 maxpacket: 8
[  958.687151][ T4316] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  958.716329][ T4316] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  958.753795][ T4316] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  958.803235][ T4316] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  958.824406][ T4316] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  958.876937][ T4316] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  958.901828][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  958.928569][T21408] loop6: detected capacity change from 0 to 32768
[  959.013567][T21408] JBD2: Ignoring recovery information on journal
[  959.179781][ T4316] usb 2-1: GET_CAPABILITIES returned 0
[  959.186304][ T4316] usbtmc 2-1:16.0: can't read capabilities
[  959.203952][T21408] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  959.406199][ T4316] usb 2-1: USB disconnect, device number 10
[  959.544625][T19864] ocfs2: Unmounting device (7,6) on (node local)
[  960.805900][T21477] loop6: detected capacity change from 0 to 256
[  960.882295][T21477] exfat: Deprecated parameter 'utf8'
[  960.927987][T21477] exfat: Deprecated parameter 'namecase'
[  960.933868][T21477] exfat: Deprecated parameter 'namecase'
[  960.973406][T21477] exfat: Deprecated parameter 'utf8'
[  961.015132][T21477] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  961.644908][T21495] loop0: detected capacity change from 0 to 16
[  961.664153][T21480] loop1: detected capacity change from 0 to 8192
[  961.733093][T21495] erofs: (device loop0): mounted with root inode @ nid 36.
[  962.030492][T21479] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5675'.
[  962.151654][T21505] loop6: detected capacity change from 0 to 256
[  962.224499][T21505] exfat: Deprecated parameter 'utf8'
[  962.297595][T21505] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  962.332244][T21509] loop3: detected capacity change from 0 to 512
[  962.454668][T21509] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.5686: inode has both inline data and extents flags
[  962.549233][T21509] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.5686: couldn't read orphan inode 15 (err -117)
[  962.572552][T21509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  962.833672][T21521] loop6: detected capacity change from 0 to 64
[  963.312826][T15077] EXT4-fs (loop3): unmounting filesystem.
[  963.987048][T21551] loop3: detected capacity change from 0 to 512
[  964.085002][T21551] EXT4-fs: Ignoring removed nobh option
[  964.126752][T21547] loop1: detected capacity change from 0 to 32768
[  964.142751][T21547] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.5699 (21547)
[  964.168582][T21547] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  964.179120][T21547] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  964.189376][T21547] BTRFS info (device loop1): force zlib compression, level 3
[  964.197402][T21547] BTRFS info (device loop1): force clearing of disk cache
[  964.205462][T21547] BTRFS info (device loop1): setting nodatasum
[  964.212586][T21547] BTRFS info (device loop1): allowing degraded mounts
[  964.220679][T21547] BTRFS info (device loop1): enabling disk space caching
[  964.228538][T21547] BTRFS info (device loop1): disk space caching is enabled
[  964.260900][T21551] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  964.379842][T21551] EXT4-fs (loop3): 1 truncate cleaned up
[  964.417858][T21551] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  964.559487][   T26] audit: type=1800 audit(1776705217.660:347): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5700" name="file1" dev="loop3" ino=15 res=0 errno=0
[  964.655789][T21547] BTRFS info (device loop1): rebuilding free space tree
[  964.669798][T21547] BTRFS info (device loop1): disabling free space tree
[  964.676968][T21547] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  964.687400][T21547] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  964.888854][T15077] EXT4-fs (loop3): unmounting filesystem.
[  964.906425][T21547] BTRFS info (device loop1): balance: start -susage=1,usage=1..0,drange=6..6,vrange=8..15,limit=2,stripes=7..3
[  964.922071][T21547] BTRFS info (device loop1): balance: ended with status: 0
[  965.099918][T21592] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5710'.
[  965.152849][T19355] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  965.294878][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5709'.
[  967.015377][   T52] block nbd0: Possible stuck request ffff888024e78000: control (read@0,4096B). Runtime 510 seconds
[  967.257958][ T4316] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  967.468578][ T4316] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  967.476768][ T4316] usb 4-1: config 0 has no interface number 0
[  967.514123][ T4316] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  967.581974][ T4316] usb 4-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  967.622121][ T4316] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  967.687030][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  967.728753][ T4316] usb 4-1: config 0 descriptor??
[  968.148898][ T4316] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x2
[  968.157336][ T4316] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x0
[  968.187402][T21629] loop1: detected capacity change from 0 to 32768
[  968.191600][ T4316] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x0
[  968.244804][ T4316] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x0
[  968.285489][ T4316] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x0
[  968.316420][ T4316] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x0
[  968.360253][ T4316] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0xd
[  968.386560][ T4316] steelseries_srws1 0003:1038:1410.002F: unknown global tag 0xc
[  968.405439][ T4316] steelseries_srws1 0003:1038:1410.002F: item 0 1 1 12 parsing failed
[  968.443915][T21681] loop0: detected capacity change from 0 to 256
[  968.454006][ T4316] steelseries_srws1 0003:1038:1410.002F: parse failed
[  968.476071][ T4316] steelseries_srws1: probe of 0003:1038:1410.002F failed with error -22
[  968.536799][ T4316] usb 4-1: USB disconnect, device number 46
[  968.601697][T21629] XFS (loop1): Mounting V5 Filesystem
[  968.759804][T21629] XFS (loop1): Ending clean mount
[  968.765370][T21688] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5736'.
[  968.945633][   T26] audit: type=1804 audit(1776705222.040:348): pid=21629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5711" name="/newroot/134/file1/file1" dev="loop1" ino=4422 res=1 errno=0
[  969.086523][T21692] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5737'.
[  969.259552][T19355] XFS (loop1): Unmounting Filesystem
[  969.692071][T21708] tap0: tun_chr_ioctl cmd 1074025677
[  969.701422][T21708] tap0: linktype set to 1
[  969.708169][T21711] program syz.0.5747 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  970.042341][T21722] loop6: detected capacity change from 0 to 512
[  970.073117][T21722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  970.110405][T21722] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  970.178038][T21722] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  970.216005][T21722] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  970.333171][T21722] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  970.389189][T21722] EXT4-fs (loop6): orphan cleanup on readonly fs
[  970.458888][T21722] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5751: bg 0: block 34: padding at end of block bitmap is not set
[  970.494941][T21722] Quota error (device loop6): write_blk: dquota write failed
[  970.503121][T21722] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  970.533553][T21722] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.5751: Failed to acquire dquot type 1
[  970.584924][T21722] EXT4-fs (loop6): 1 truncate cleaned up
[  970.592411][T21722] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  970.650640][T21722] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.5751: deleted inode referenced: 12
[  970.817029][T21739] loop0: detected capacity change from 0 to 512
[  970.840315][T21739] EXT4-fs: Ignoring removed nobh option
[  970.853871][T21739] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  970.911864][T21739] EXT4-fs (loop0): 1 truncate cleaned up
[  970.947861][T21739] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  970.988536][T19864] EXT4-fs (loop6): unmounting filesystem.
[  971.006835][   T26] audit: type=1800 audit(1776705224.100:349): pid=21739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5754" name="file1" dev="loop0" ino=15 res=0 errno=0
[  971.194957][T21072] EXT4-fs (loop0): unmounting filesystem.
[  971.910786][T21737] loop3: detected capacity change from 0 to 32768
[  972.713217][ T4315] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  972.900269][ T4315] usb 3-1: unable to get BOS descriptor or descriptor too short
[  972.918664][ T4315] usb 3-1: not running at top speed; connect to a high speed hub
[  972.948776][ T4315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  972.994737][ T4315] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  973.043374][ T4315] usb 3-1: string descriptor 0 read error: -22
[  973.059812][ T4315] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  973.101632][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  973.141477][ T4315] usb 3-1: 0:2 : does not exist
[  973.205897][T21786] loop1: detected capacity change from 0 to 2048
[  973.293273][T21786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  973.358182][T21786] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  973.458428][T21797] loop3: detected capacity change from 0 to 512
[  973.527918][T19355] EXT4-fs (loop1): unmounting filesystem.
[  973.536130][T21797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  973.551486][T21801] loop0: detected capacity change from 0 to 2048
[  973.610112][T21801] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  973.668191][T21797] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  973.723797][T21801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  973.829529][T15077] EXT4-fs (loop3): unmounting filesystem.
[  973.943021][   T26] audit: type=1326 audit(1776705227.010:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21803 comm="syz.1.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1fd9c819 code=0x7ffc0000
[  973.969988][   T26] audit: type=1326 audit(1776705227.040:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21803 comm="syz.1.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1fd9c819 code=0x7ffc0000
[  973.996386][   T26] audit: type=1326 audit(1776705227.040:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21803 comm="syz.1.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1fd9c819 code=0x7ffc0000
[  974.040691][ T4315] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  974.078154][   T26] audit: type=1326 audit(1776705227.040:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21803 comm="syz.1.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b1fd5d04e code=0x7ffc0000
[  974.106144][ T4315] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  974.143921][ T4315] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  974.180984][   T26] audit: type=1326 audit(1776705227.040:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21803 comm="syz.1.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1fd9c819 code=0x7ffc0000
[  974.224340][ T4315] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  974.270884][ T4315] usb 3-1: USB disconnect, device number 33
[  974.287401][   T26] audit: type=1326 audit(1776705227.040:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21803 comm="syz.1.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1fd9c819 code=0x7ffc0000
[  974.406668][   T26] audit: type=1326 audit(1776705227.040:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21803 comm="syz.1.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1fd9c819 code=0x7ffc0000
[  974.477963][ T6003] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  974.678878][ T6003] usb 1-1: Using ep0 maxpacket: 32
[  974.694947][ T6003] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  974.733888][ T6003] usb 1-1: config 0 has no interface number 0
[  974.754215][ T6003] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  974.793631][ T6003] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  974.816352][ T6003] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  974.838109][ T4281] Bluetooth: hci1: command 0x0406 tx timeout
[  974.905456][ T6003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.956667][ T6003] usb 1-1: config 0 descriptor??
[  975.181314][T21809] loop3: detected capacity change from 0 to 32768
[  975.338992][T21809] XFS (loop3): Mounting V5 Filesystem
[  975.513492][T21840] loop1: detected capacity change from 0 to 64
[  975.644219][ T6003] uclogic 0003:28BD:0094.0030: pen parameters not found
[  975.664751][T21809] XFS (loop3): Ending clean mount
[  975.671024][ T6003] uclogic 0003:28BD:0094.0030: interface is invalid, ignoring
[  975.690381][T21809] XFS (loop3): Quotacheck needed: Please wait.
[  975.737604][ T6003] usb 1-1: USB disconnect, device number 35
[  976.025963][T21809] XFS (loop3): Quotacheck: Done.
[  976.074540][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5782'.
[  976.313330][T15077] XFS (loop3): Unmounting Filesystem
[  976.649361][T21858] cgroup: noprefix used incorrectly
[  977.756452][T21862] loop1: detected capacity change from 0 to 32768
[  978.384277][T21898] loop3: detected capacity change from 0 to 256
[  980.070892][T21937] loop6: detected capacity change from 0 to 1024
[  980.195212][T21937] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  980.229181][T21937] EXT4-fs (loop6): orphan cleanup on readonly fs
[  980.236770][T21937] EXT4-fs error (device loop6): ext4_free_blocks:6220: comm syz.6.5813: Freeing blocks not in datazone - block = 0, count = 4096
[  980.429246][T21937] EXT4-fs (loop6): Remounting filesystem read-only
[  980.446922][T21937] EXT4-fs (loop6): 1 orphan inode deleted
[  980.476319][T21937] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  980.693467][T19864] EXT4-fs (loop6): unmounting filesystem.
[  981.558013][ T4367] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  981.756002][T21947] loop3: detected capacity change from 0 to 40427
[  981.768924][ T4367] usb 1-1: Using ep0 maxpacket: 32
[  981.776307][ T4367] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  981.805195][ T4367] usb 1-1: config 0 has no interface number 0
[  981.833923][ T4367] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  981.874205][T21947] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  981.905932][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.914846][T21947] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  981.946175][ T4367] usb 1-1: Product: syz
[  981.956406][T21976] loop1: detected capacity change from 0 to 8192
[  981.964291][ T4367] usb 1-1: Manufacturer: syz
[  981.992733][ T4367] usb 1-1: SerialNumber: syz
[  982.016843][ T4367] usb 1-1: config 0 descriptor??
[  982.028200][T21976] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  982.061211][ T4367] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  982.096711][T21947] F2FS-fs (loop3): Found nat_bits in checkpoint
[  982.098442][T21976] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  982.216917][T21976] REISERFS (device loop1): using ordered data mode
[  982.248186][ T4367] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  982.265459][T21976] reiserfs: using flush barriers
[  982.327641][T21976] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  982.345238][ T4367] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  982.458287][T21976] REISERFS (device loop1): checking transaction log (loop1)
[  982.502381][ T6003] kernel write not supported for file /admmidi2 (pid: 6003 comm: kworker/1:10)
[  982.508232][T21947] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  982.547883][T21947] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  982.677355][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  982.689195][ T4367] usb 1-1: USB disconnect, device number 36
[  982.713716][ T4367] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  982.823358][ T4367] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  982.887396][ T4367] quatech2 1-1:0.51: device disconnected
[  982.929553][T21976] REISERFS (device loop1): Using r5 hash to sort names
[  982.937075][T21976] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  983.045408][T22005] loop6: detected capacity change from 0 to 2048
[  983.129227][T22005] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  983.229342][T22005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  984.480133][T22028] loop6: detected capacity change from 0 to 512
[  984.487659][T22028] EXT4-fs: Ignoring removed nobh option
[  984.557325][T22028] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  984.573044][T22031] tap0: tun_chr_ioctl cmd 1074025677
[  984.580927][T22031] tap0: linktype set to 780
[  984.717970][ T4326] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  984.738998][T22028] EXT4-fs (loop6): 1 truncate cleaned up
[  984.763586][T22028] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  984.940073][ T4326] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  984.973341][ T4326] usb 2-1: config 0 interface 0 has no altsetting 0
[  985.003853][ T4326] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  985.047555][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.068681][T19864] EXT4-fs (loop6): unmounting filesystem.
[  985.089169][ T4326] usb 2-1: config 0 descriptor??
[  985.531499][ T4326] monterey 0003:0566:3004.0031: unknown main item tag 0x0
[  985.549762][ T4326] monterey 0003:0566:3004.0031: unknown main item tag 0x0
[  985.571875][ T4326] monterey 0003:0566:3004.0031: unknown main item tag 0x0
[  985.598040][ T4326] monterey 0003:0566:3004.0031: unknown main item tag 0x0
[  985.636356][ T4326] monterey 0003:0566:3004.0031: hidraw0: USB HID v10.09 Device [HID 0566:3004] on usb-dummy_hcd.1-1/input0
[  985.760902][  T952] usb 2-1: USB disconnect, device number 11
[  986.063351][T22050] fido_id[22050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  986.355440][T22065] loop6: detected capacity change from 0 to 8
[  986.394668][ T4487] Dev loop6: unable to read RDB block 8
[  986.437920][ T4487]  loop6: unable to read partition table
[  986.443879][ T4487] loop6: partition table beyond EOD, truncated
[  986.520898][T22036] syz.0.5842 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  986.661784][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5853'.
[  986.708030][T22073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5853'.
[  987.517404][T22101] loop1: detected capacity change from 0 to 512
[  987.584818][T22101] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  987.704980][T22101] EXT4-fs (loop1): 1 truncate cleaned up
[  987.757886][T22101] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  987.959539][T19355] EXT4-fs (loop1): unmounting filesystem.
[  988.155773][T22114] rtc_cmos 00:00: Alarms can be up to one day in the future
[  988.753056][ T4315] rtc_cmos 00:00: Alarms can be up to one day in the future
[  988.808860][ T4315] rtc_cmos 00:00: Alarms can be up to one day in the future
[  988.854046][ T4315] rtc_cmos 00:00: Alarms can be up to one day in the future
[  988.884487][ T4315] rtc_cmos 00:00: Alarms can be up to one day in the future
[  988.927882][ T4315] rtc rtc0: __rtc_set_alarm: err=-22
[  989.650287][T22158] program syz.0.5882 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  990.312703][T22172] loop3: detected capacity change from 0 to 512
[  990.373114][T22172] EXT4-fs: Ignoring removed nobh option
[  990.420482][T22172] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  990.570324][T22172] EXT4-fs (loop3): 1 truncate cleaned up
[  990.576072][T22172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  990.684879][T15077] EXT4-fs (loop3): unmounting filesystem.
[  991.397062][T22205] loop6: detected capacity change from 0 to 512
[  991.500284][T22205] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  991.518051][T22205] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  991.561646][ T4326] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  991.709129][T19864] EXT4-fs (loop6): unmounting filesystem.
[  991.788938][ T4326] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  991.797305][ T4326] usb 4-1: config 0 has no interface number 0
[  991.861713][ T4326] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  991.881913][ T4326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.907432][ T4326] usb 4-1: Product: syz
[  991.914072][ T4326] usb 4-1: Manufacturer: syz
[  991.933006][ T4326] usb 4-1: SerialNumber: syz
[  991.989089][ T4326] usb 4-1: config 0 descriptor??
[  992.239655][T22230] loop1: detected capacity change from 0 to 64
[  992.288827][T22229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5906'.
[  992.638741][ T4326] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  992.668000][ T4326] asix: probe of 4-1:0.251 failed with error -524
[  992.891548][ T4316] usb 4-1: USB disconnect, device number 47
[  993.067907][ T4315] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  993.240347][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  993.246848][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  993.268039][ T4315] usb 2-1: Using ep0 maxpacket: 8
[  993.275280][ T4315] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  993.322013][ T4315] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  993.352712][ T4315] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 168
[  993.404482][ T4315] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  993.460886][ T4315] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  993.518979][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  993.778184][ T4315] usb 2-1: GET_CAPABILITIES returned 0
[  993.783948][ T4315] usbtmc 2-1:16.0: can't read capabilities
[  994.006870][ T4315] usb 2-1: USB disconnect, device number 12
[  994.190244][T22278] loop3: detected capacity change from 0 to 4096
[  994.240012][T22278] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  994.444414][T22289] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5929'.
[  996.791908][T22363] loop3: detected capacity change from 0 to 16
[  996.849456][T22363] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  996.928207][ T4281] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  997.231371][   T52] block nbd0: Possible stuck request ffff888024e78000: control (read@0,4096B). Runtime 540 seconds
[  997.646399][T22384] IPv6: Can't replace route, no match found
[  997.758147][T22387] loop0: detected capacity change from 0 to 64
[  997.793697][T22390] Attempt to restore checkpoint with obsolete wellknown handles
[  998.197542][ T4315] hid-generic 0004:0004:FFFF0001.0032: unknown main item tag 0x0
[  998.227099][ T4315] hid-generic 0004:0004:FFFF0001.0032: unknown main item tag 0x0
[  998.252769][ T4315] hid-generic 0004:0004:FFFF0001.0032: unknown main item tag 0x0
[  998.278516][ T4315] hid-generic 0004:0004:FFFF0001.0032: hidraw0: <UNKNOWN> HID v0.b3 Device [syz0] on syz1
[  999.627952][T22413] loop3: detected capacity change from 0 to 32768
[  999.760976][T22413] XFS (loop3): Mounting V5 Filesystem
[  999.899359][T22413] XFS (loop3): Ending clean mount
[ 1000.210645][T22455] loop1: detected capacity change from 0 to 4096
[ 1000.218396][T15077] XFS (loop3): Unmounting Filesystem
[ 1000.267601][T22455] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[ 1000.508472][T22455] ntfs3: loop1: ino=1b, "file0" directory corrupted
[ 1001.330518][T22452] loop0: detected capacity change from 0 to 32768
[ 1001.528044][  T952] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1001.729780][  T952] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1001.758351][  T952] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1001.770107][T22479] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1001.808174][  T952] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1001.854218][  T952] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40
[ 1001.878307][  T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.925408][  T952] usb 3-1: Product: syz
[ 1001.940480][T22483] loop1: detected capacity change from 0 to 256
[ 1001.943587][  T952] usb 3-1: Manufacturer: syz
[ 1001.973961][  T952] usb 3-1: SerialNumber: syz
[ 1002.310574][  T952] usb 3-1: USB disconnect, device number 34
[ 1002.689306][ T7501] udevd[7501]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1002.902013][T22504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6001'.
[ 1003.411057][T22516] block nbd2: server does not support multiple connections per device.
[ 1003.443646][T22516] block nbd2: shutting down sockets
[ 1004.179947][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6017'.
[ 1004.219494][T22541] netlink: 'syz.6.6017': attribute type 21 has an invalid length.
[ 1004.526205][T22549] loop6: detected capacity change from 0 to 512
[ 1004.591662][T22549] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1004.660093][T22549] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1004.705705][T22554] loop0: detected capacity change from 0 to 256
[ 1004.738451][T22549] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[ 1004.746648][T22549] System zones: 1-12
[ 1004.790905][T22554] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1004.801724][T22549] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 1004.832155][T22549] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.6020: invalid indirect mapped block 2 (level 2)
[ 1004.857826][T22554] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[ 1004.947082][T22554] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1004.998865][T22549] EXT4-fs (loop6): Remounting filesystem read-only
[ 1005.005919][T22549] EXT4-fs (loop6): 1 truncate cleaned up
[ 1005.058117][T22549] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1005.480868][T22567] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[ 1005.856694][T19864] EXT4-fs (loop6): unmounting filesystem.
[ 1006.722392][T22601] loop6: detected capacity change from 0 to 2048
[ 1006.840608][T22609] loop0: detected capacity change from 0 to 512
[ 1006.903151][T22601] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 1006.995373][T22609] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1007.048105][T22609] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1007.072379][T22601] overlayfs: failed to resolve './file0': -2
[ 1007.152911][T22609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[ 1007.198361][T22609] System zones: 1-12
[ 1007.203850][T22609] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1007.277468][T22609] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 33619980: comm syz.0.6041: invalid block
[ 1007.320165][T19864] EXT4-fs (loop6): unmounting filesystem.
[ 1007.465984][T22625] loop3: detected capacity change from 0 to 2048
[ 1007.544597][T22609] EXT4-fs (loop0): Remounting filesystem read-only
[ 1007.551565][T22609] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.6041: invalid indirect mapped block 2 (level 2)
[ 1007.571874][T22609] EXT4-fs (loop0): Remounting filesystem read-only
[ 1007.589256][T22609] EXT4-fs (loop0): 1 truncate cleaned up
[ 1007.597877][T22628] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1007.615901][T22609] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 1007.829779][T22634] loop1: detected capacity change from 0 to 1024
[ 1008.008148][T22634] hfsplus: invalid length 65281 has been corrected to 255
[ 1008.098272][T22634] hfsplus: invalid length 65281 has been corrected to 255
[ 1008.466614][T21072] EXT4-fs (loop0): unmounting filesystem.
[ 1008.965905][T22653] dvmrp1: tun_chr_ioctl cmd 1074025681
[ 1009.058899][T22657] bond0: (slave wlan1): Error: Slave device does not support XDP
[ 1009.382690][T22639] loop3: detected capacity change from 0 to 32768
[ 1009.567158][T22639] XFS (loop3): Mounting V5 Filesystem
[ 1009.687991][T22639] XFS (loop3): Ending clean mount
[ 1009.885579][T22678] loop0: detected capacity change from 0 to 128
[ 1009.948951][T22678] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1010.023503][T22678] hpfs: filesystem error: improperly stopped
[ 1010.049453][T22678] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1010.096007][T22678] hpfs: You really don't want any checks? You are crazy...
[ 1010.113434][T22681] loop1: detected capacity change from 0 to 64
[ 1010.143770][T22678] hpfs: hpfs_map_sector(): read error
[ 1010.168926][T22678] hpfs: code page support is disabled
[ 1010.174825][T22678] hpfs: hpfs_map_4sectors(): unaligned read
[ 1010.198773][T15077] XFS (loop3): Unmounting Filesystem
[ 1010.288111][T22678] hpfs: hpfs_map_4sectors(): unaligned read
[ 1010.337961][T22678] hpfs: filesystem error: unable to find root dir
[ 1011.095546][T22703] netlink: 'syz.0.6067': attribute type 10 has an invalid length.
[ 1011.231488][T22705] loop6: detected capacity change from 0 to 128
[ 1011.979468][T22719] program syz.6.6073 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1012.396134][T22732] loop0: detected capacity change from 0 to 512
[ 1012.463587][T22732] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1012.531373][T22732] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.6077: invalid indirect mapped block 9 (level 0)
[ 1012.578196][T22732] EXT4-fs (loop0): 1 truncate cleaned up
[ 1012.584266][T22732] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1012.922181][T21072] EXT4-fs (loop0): unmounting filesystem.
[ 1014.141052][T22771] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1014.360173][T22777] program syz.6.6092 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1014.817303][T22781] loop3: detected capacity change from 0 to 8192
[ 1014.915340][T22781] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1015.356738][T22801] usb usb1: usbfs: process 22801 (syz.2.6100) did not claim interface 8 before use
[ 1015.445126][T22769] loop0: detected capacity change from 0 to 32768
[ 1016.123401][T22818] loop3: detected capacity change from 0 to 512
[ 1016.227677][T22821] loop0: detected capacity change from 0 to 1764
[ 1016.562893][T22822] loop1: detected capacity change from 0 to 8192
[ 1016.603266][T22828] loop3: detected capacity change from 0 to 256
[ 1016.641665][T22822] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1016.704177][T22822] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[ 1016.746908][T22828] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[ 1016.820162][T22822] REISERFS (device loop1): using ordered data mode
[ 1016.826870][T22822] reiserfs: using flush barriers
[ 1016.873678][   T26] kauditd_printk_skb: 11 callbacks suppressed
[ 1016.873699][   T26] audit: type=1800 audit(1776705269.970:368): pid=22828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6112" name="file1" dev="loop3" ino=1048854 res=0 errno=0
[ 1016.942179][T22822] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1017.042316][T22822] REISERFS (device loop1): checking transaction log (loop1)
[ 1017.080669][T22822] REISERFS (device loop1): Using r5 hash to sort names
[ 1017.115027][T22822] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[ 1017.764723][T22847] netlink: 87 bytes leftover after parsing attributes in process `syz.6.6119'.
[ 1017.845446][T22851] loop1: detected capacity change from 0 to 8
[ 1019.695577][T22872] loop1: detected capacity change from 0 to 131072
[ 1019.723297][T22872] F2FS-fs (loop1): invalid crc value
[ 1019.848147][T22872] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1019.918974][T22872] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1019.968701][T22872] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36
[ 1020.081882][T22888] loop0: detected capacity change from 0 to 1764
[ 1020.263622][T22888] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1020.658665][T22902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6137'.
[ 1020.730637][T22900] loop3: detected capacity change from 0 to 4096
[ 1020.804798][T22900] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[ 1022.008486][T22904] loop1: detected capacity change from 0 to 32768
[ 1022.127169][T22904] JBD2: Ignoring recovery information on journal
[ 1022.317186][T22904] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1022.886219][T19355] ocfs2: Unmounting device (7,1) on (node local)
[ 1023.338169][ T4316] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1023.346219][ T4315] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1023.537849][ T4315] usb 4-1: Using ep0 maxpacket: 8
[ 1023.549490][ T4315] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1023.561214][ T4316] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1023.592477][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.612772][ T4315] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1023.641306][ T4316] usb 2-1: Product: syz
[ 1023.645865][ T4316] usb 2-1: Manufacturer: syz
[ 1023.652272][ T4315] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1023.663088][ T4316] usb 2-1: SerialNumber: syz
[ 1023.671292][ T4316] usb 2-1: config 0 descriptor??
[ 1023.677456][ T4315] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1023.714715][ T4316] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1023.728749][ T4315] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1023.752623][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1024.010053][ T4315] usb 4-1: GET_CAPABILITIES returned 0
[ 1024.016889][ T4315] usbtmc 4-1:16.0: can't read capabilities
[ 1024.165933][T22950] loop6: detected capacity change from 0 to 40427
[ 1024.226525][T22950] F2FS-fs (loop6): Invalid SB checksum offset: 0
[ 1024.259429][ T4315] usb 4-1: USB disconnect, device number 48
[ 1024.268026][T22950] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[ 1024.314582][T22950] F2FS-fs (loop6): invalid crc value
[ 1024.411264][T22950] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[ 1024.534145][ T4316] gspca_sunplus: reg_w_riv err -71
[ 1024.550733][ T4316] sunplus: probe of 2-1:0.0 failed with error -71
[ 1024.601627][ T4316] usb 2-1: USB disconnect, device number 13
[ 1024.685323][T22950] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[ 1024.711227][T22950] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1024.991196][T19864] syz-executor: attempt to access beyond end of device
[ 1024.991196][T19864] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1025.115952][T22990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6162'.
[ 1025.233160][T22993] loop0: detected capacity change from 0 to 128
[ 1025.384769][T22993] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 1025.400501][T22993] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1025.711908][T21072] EXT4-fs (loop0): unmounting filesystem.
[ 1025.763689][T23009] program syz.3.6169 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1026.578123][ T4315] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1026.768430][ T4315] usb 1-1: Using ep0 maxpacket: 16
[ 1026.782835][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1026.826019][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1026.857315][ T4315] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1026.942389][ T4315] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1026.983670][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.049086][ T4315] usb 1-1: config 0 descriptor??
[ 1027.480035][ T4315] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max
[ 1027.510789][ T4315] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max
[ 1027.540959][ T4315] microsoft 0003:045E:07DA.0033: collection stack underflow
[ 1027.588371][ T4315] microsoft 0003:045E:07DA.0033: item 0 4 0 12 parsing failed
[ 1027.625911][ T4315] microsoft 0003:045E:07DA.0033: parse failed
[ 1027.654036][ T4315] microsoft: probe of 0003:045E:07DA.0033 failed with error -22
[ 1027.679058][T23024] futex_wake_op: syz.0.6184 tries to shift op by -1; fix this program
[ 1027.766751][ T4315] usb 1-1: USB disconnect, device number 37
[ 1027.799279][   T52] block nbd0: Possible stuck request ffff888024e78000: control (read@0,4096B). Runtime 570 seconds
[ 1027.903982][T23052] loop6: detected capacity change from 0 to 128
[ 1028.107031][T23052] syz.6.6181: attempt to access beyond end of device
[ 1028.107031][T23052] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128
[ 1028.590845][T23065] loop0: detected capacity change from 0 to 1024
[ 1029.697141][T23061] loop1: detected capacity change from 0 to 32768
[ 1029.756828][T23061] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.6185 (23061)
[ 1029.852764][T23063] loop3: detected capacity change from 0 to 32768
[ 1029.864474][T23061] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1029.909172][T23061] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[ 1029.934257][T23063] 
[ 1029.934257][T23063]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1029.934257][T23063] 
[ 1029.977949][T23061] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1030.015274][T23089] netlink: 'syz.2.6195': attribute type 2 has an invalid length.
[ 1030.033169][T23061] BTRFS info (device loop1): use zstd compression, level 3
[ 1030.065471][T23063] 
[ 1030.065471][T23063]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1030.065471][T23063] 
[ 1030.082999][T23061] BTRFS info (device loop1): using free space tree
[ 1030.130976][T23063] 
[ 1030.130976][T23063]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1030.130976][T23063] 
[ 1030.207166][T23063] 
[ 1030.207166][T23063]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1030.207166][T23063] 
[ 1030.218297][T23063] 
[ 1030.218297][T23063]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1030.218297][T23063] 
[ 1030.238848][T23063] ialloc: diAlloc returned -5!
[ 1030.302204][  T107] 
[ 1030.302204][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1030.302204][  T107] 
[ 1030.465375][T15077] 
[ 1030.465375][T15077]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1030.465375][T15077] 
[ 1030.520444][T15077] 
[ 1030.520444][T15077]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1030.520444][T15077] 
[ 1030.553637][T23061] BTRFS info (device loop1): enabling ssd optimizations
[ 1031.272483][T19355] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1032.797879][ T4315] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1033.278008][ T4315] usb 4-1: Using ep0 maxpacket: 16
[ 1033.295296][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1033.329771][ T4315] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1033.364667][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1033.386912][ T4315] usb 4-1: Product: syz
[ 1033.398041][ T4315] usb 4-1: Manufacturer: syz
[ 1033.402959][ T4315] usb 4-1: SerialNumber: syz
[ 1033.433494][ T4315] usb 4-1: config 0 descriptor??
[ 1033.504879][ T4315] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1033.565669][ T4315] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 1034.108775][ T4315] em28xx 4-1:0.0: chip ID is em2874
[ 1034.395827][ T4315] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1034.454654][ T4315] em28xx 4-1:0.0: board has no eeprom
[ 1034.568194][ T4315] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1034.586652][T23186] loop1: detected capacity change from 0 to 256
[ 1034.598424][ T4315] em28xx 4-1:0.0: dvb set to bulk mode.
[ 1034.636036][ T4315] usb 4-1: USB disconnect, device number 49
[ 1034.683614][ T4315] em28xx 4-1:0.0: Disconnecting em28xx
[ 1034.722550][ T4316] em28xx 4-1:0.0: Binding DVB extension
[ 1035.101033][T23195] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1035.235685][ T4316] em28xx 4-1:0.0: Registering input extension
[ 1035.516429][T23208] loop1: detected capacity change from 0 to 64
[ 1035.628087][ T4316] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[ 1035.634924][ T4316] Registered IR keymap rc-empty
[ 1035.852507][ T4316] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1035.896507][ T4316] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input49
[ 1036.025964][ T4316] em28xx 4-1:0.0: Input extension successfully initialized
[ 1036.044960][ T4315] em28xx 4-1:0.0: Closing input extension
[ 1036.087498][ T4316] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1036.113507][T23221] syz.2.6233 (23221) used greatest stack depth: 19312 bytes left
[ 1036.117381][ T4316] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1036.149094][ T4316] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1036.168485][ T4316] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1036.188256][ T4316] rtc rtc0: __rtc_set_alarm: err=-22
[ 1036.815526][ T4315] em28xx 4-1:0.0: Freeing device
[ 1036.864898][T23218] loop1: detected capacity change from 0 to 32768
[ 1036.919184][T23218] 
[ 1036.919184][T23218]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1036.919184][T23218] 
[ 1037.104624][T19355] non-latin1 character 0x3ff found in JFS file name
[ 1037.123319][T19355] mount with iocharset=utf8 to access
[ 1037.153638][T19355] ERROR: (device loop1): diWrite: ixpxd invalid
[ 1037.153638][T19355] 
[ 1037.188689][T19355] ERROR: (device loop1): remounting filesystem as read-only
[ 1037.206088][T19355] ERROR: (device loop1): txCommit: 
[ 1037.206088][T19355] 
[ 1037.209730][ T4315] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1037.478267][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1037.496818][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1037.520693][ T4315] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1037.548774][ T4315] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1037.568215][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.591119][ T4315] usb 4-1: config 0 descriptor??
[ 1037.927614][   T26] audit: type=1326 audit(1776705291.020:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23249 comm="syz.2.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bef99c819 code=0x7ffc0000
[ 1037.991253][   T26] audit: type=1326 audit(1776705291.060:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23249 comm="syz.2.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bef99c819 code=0x7ffc0000
[ 1038.022875][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.065810][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.095587][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.137661][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.146181][   T26] audit: type=1326 audit(1776705291.060:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23249 comm="syz.2.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bef99c819 code=0x7ffc0000
[ 1038.170868][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.199051][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.245288][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.264235][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.274368][   T26] audit: type=1326 audit(1776705291.060:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23249 comm="syz.2.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9bef99c819 code=0x7ffc0000
[ 1038.312905][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.337902][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.354933][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.364356][   T26] audit: type=1326 audit(1776705291.060:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23249 comm="syz.2.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bef99c819 code=0x7ffc0000
[ 1038.421200][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.441761][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.467842][   T26] audit: type=1326 audit(1776705291.060:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23249 comm="syz.2.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bef99c819 code=0x7ffc0000
[ 1038.491399][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.513382][ T4315] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[ 1038.574922][ T4315] plantronics 0003:047F:FFFF.0034: No inputs registered, leaving
[ 1038.596810][   T26] audit: type=1326 audit(1776705291.060:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23249 comm="syz.2.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bef99c819 code=0x7ffc0000
[ 1038.708810][ T4325] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1038.718254][   T26] audit: type=1326 audit(1776705291.060:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23249 comm="syz.2.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bef99c819 code=0x7ffc0000
[ 1038.749259][ T4325] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1038.783671][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6246'.
[ 1038.847976][   T26] audit: type=1326 audit(1776705291.060:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23249 comm="syz.2.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9bef99c819 code=0x7ffc0000
[ 1038.929777][ T4315] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1038.967893][   T26] audit: type=1326 audit(1776705291.060:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23249 comm="syz.2.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bef99c819 code=0x7ffc0000
[ 1039.049908][ T4315] usb 4-1: USB disconnect, device number 50
[ 1039.341765][ T4325] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1039.391850][ T4325] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.491273][T23262] fido_id[23262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1040.086203][ T4325] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1040.114553][ T4325] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.481034][ T4325] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1040.493358][ T4288] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1040.502099][ T4325] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.530747][ T4288] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1040.543796][ T4288] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1040.552558][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1040.565479][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1040.573649][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1041.475698][T23293] chnl_net:caif_netlink_parms(): no params data found
[ 1041.577906][ T4364] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1041.767897][ T4364] usb 3-1: Using ep0 maxpacket: 8
[ 1041.776628][ T4364] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1041.828206][ T4364] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1041.857885][ T4364] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1041.865025][ T4364] usb 3-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[ 1041.875263][ T4364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1041.888480][   T28] INFO: task udevd:8239 blocked for more than 143 seconds.
[ 1041.896422][   T28]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1041.934035][ T4364] usb 3-1: config 0 descriptor??
[ 1041.948405][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1041.989373][   T28] task:udevd           state:D stack:22928 pid:8239  ppid:3638   flags:0x00004006
[ 1042.030885][   T28] Call Trace:
[ 1042.053160][   T28]  <TASK>
[ 1042.066549][   T28]  __schedule+0x11d1/0x40e0
[ 1042.125363][   T28]  ? mark_lock+0x94/0x320
[ 1042.147974][   T28]  ? __sched_text_start+0x8/0x8
[ 1042.181836][   T28]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1042.212956][   T28]  ? lock_chain_count+0x20/0x20
[ 1042.260101][   T28]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1042.312689][   T28]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1042.324368][   T28]  schedule+0xb9/0x180
[ 1042.328858][   T28]  io_schedule+0x7c/0xd0
[ 1042.333200][   T28]  folio_wait_bit_common+0x70a/0xfa0
[ 1042.388207][   T28]  ? folio_wait_bit+0x30/0x30
[ 1042.393390][   T28]  ? migration_entry_wait_on_locked+0xe90/0xe90
[ 1042.416593][   T28]  do_read_cache_folio+0x1a9/0x760
[ 1042.438221][   T28]  ? blkdev_writepage+0x30/0x30
[ 1042.443225][   T28]  read_part_sector+0xce/0x350
[ 1042.474467][   T28]  adfspart_check_POWERTEC+0xc0/0x890
[ 1042.518170][   T28]  ? adfspart_check_ADFS+0x570/0x570
[ 1042.523943][   T28]  ? snprintf+0xe5/0x140
[ 1042.556336][   T28]  ? adfspart_check_ICS+0xa30/0xa30
[ 1042.565444][   T28]  ? vscnprintf+0x80/0x80
[ 1042.577836][   T28]  ? alloc_pages+0x4d8/0x740
[ 1042.582585][   T28]  bdev_disk_changed+0x7d9/0x14a0
[ 1042.587677][   T28]  ? rcu_is_watching+0x11/0xa0
[ 1042.616550][   T28]  ? blk_drop_partitions+0x1b0/0x1b0
[ 1042.642150][   T28]  ? _atomic_dec_and_lock+0x8f/0x110
[ 1042.647562][   T28]  ? iput+0x3c0/0x980
[ 1042.664851][   T28]  blkdev_get_whole+0x2e8/0x370
[ 1042.678047][ T4281] Bluetooth: hci1: command 0x0409 tx timeout
[ 1042.687925][   T28]  blkdev_get_by_dev+0x32e/0xa60
[ 1042.693000][   T28]  ? __rwlock_init+0x140/0x140
[ 1042.711818][   T28]  blkdev_open+0x11e/0x2e0
[ 1042.716359][   T28]  ? blkdev_mmap+0x1a0/0x1a0
[ 1042.724870][   T28]  do_dentry_open+0x7e9/0x10d0
[ 1042.734609][   T28]  path_openat+0x2635/0x2ee0
[ 1042.743374][   T28]  ? verify_lock_unused+0x140/0x140
[ 1042.754070][   T28]  ? do_syscall_64+0x4c/0xa0
[ 1042.790187][   T28]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1042.796402][   T28]  ? do_filp_open+0x430/0x430
[ 1042.818199][   T28]  do_filp_open+0x1f1/0x430
[ 1042.822854][   T28]  ? vfs_tmpfile+0x480/0x480
[ 1042.827575][   T28]  ? _raw_spin_unlock+0x24/0x40
[ 1042.832677][   T28]  ? alloc_fd+0x58f/0x630
[ 1042.837128][   T28]  do_sys_openat2+0x150/0x4b0
[ 1042.842054][   T28]  ? __x64_sys_recvmsg+0x21d/0x2e0
[ 1042.847280][   T28]  ? do_sys_open+0xe0/0xe0
[ 1042.851979][   T28]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1042.866890][   T28]  ? lock_chain_count+0x20/0x20
[ 1042.872505][   T28]  __x64_sys_openat+0x135/0x160
[ 1042.878563][   T28]  do_syscall_64+0x4c/0xa0
[ 1042.883302][   T28]  ? clear_bhb_loop+0x60/0xb0
[ 1042.888137][   T28]  ? clear_bhb_loop+0x60/0xb0
[ 1042.893065][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1042.899280][   T28] RIP: 0033:0x7f52a76a7407
[ 1042.903802][   T28] RSP: 002b:00007ffc29795250 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1042.913110][   T28] RAX: ffffffffffffffda RBX: 00007f52a7e85880 RCX: 00007f52a76a7407
[ 1042.937910][   T28] RDX: 00000000000a0800 RSI: 0000563f39d35660 RDI: ffffffffffffff9c
[ 1042.946086][   T28] RBP: 0000563f39d11910 R08: 0000000000000000 R09: 0000000000000000
[ 1042.968241][   T28] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563f39d386d0
[ 1042.977036][   T28] R13: 0000563f39d29410 R14: 0000000000000000 R15: 0000563f39d386d0
[ 1042.994235][   T28]  </TASK>
[ 1042.997598][   T28] 
[ 1042.997598][   T28] Showing all locks held in the system:
[ 1043.029122][   T28] 1 lock held by rcu_tasks_kthre/12:
[ 1043.034610][   T28]  #0: ffffffff8cb2df70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[ 1043.107843][   T28] 1 lock held by rcu_tasks_trace/13:
[ 1043.113364][   T28]  #0: ffffffff8cb2e790 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00
[ 1043.208520][   T28] 1 lock held by khungtaskd/28:
[ 1043.213924][   T28]  #0: ffffffff8cb2d5e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[ 1043.262903][   T28] 2 locks held by kworker/u4:3/47:
[ 1043.295118][   T28]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1043.357608][   T28]  #1: ffffc90000b87d00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1043.398705][   T28] 2 locks held by getty/4029:
[ 1043.403479][   T28]  #0: ffff88814d2b6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[ 1043.437820][   T28]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390
[ 1043.498016][   T28] 3 locks held by kworker/0:4/4319:
[ 1043.503308][   T28]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1043.566689][   T28]  #1: ffffc9000454fd00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1043.597967][   T28]  #2: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890
[ 1043.645627][   T28] 5 locks held by kworker/u4:5/4325:
[ 1043.677010][   T28]  #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1043.703962][   T28]  #1: ffffc900045afd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1043.722630][   T28]  #2: ffffffff8dd3b090 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0
[ 1043.735414][   T28]  #3: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: ip6gre_exit_batch_net+0xc7/0x4a0
[ 1043.753350][   T28]  #4: ffffffff8cb332b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890
[ 1043.766758][   T28] 4 locks held by kworker/0:5/4326:
[ 1043.780280][   T28]  #0: ffff8880b8e3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[ 1043.800108][   T28]  #1: ffff8880b8e27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0
[ 1043.812274][   T28]  #2: ffff88807b792078 (&group->avgs_lock){+.+.}-{3:3}, at: psi_avgs_work+0x4a/0x160
[ 1043.822333][   T28]  #3: ffff8880b8e28458 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270
[ 1043.834752][   T28] 3 locks held by kworker/u4:6/4329:
[ 1043.840746][   T28]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1043.852440][   T28]  #1: ffffc9000457fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1043.877914][   T28]  #2: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[ 1043.887181][   T28] 5 locks held by kworker/0:7/4364:
[ 1043.907910][   T28]  #0: ffff88801b68f138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1043.919802][   T28]  #1: ffffc9000458fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1043.933090][   T28]  #2: ffff88802800f190 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x5560
[ 1043.943577][   T28]  #3: ffff88823bd82990 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480
[ 1043.968138][   T28]  #4: ffff8880309a9118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480
[ 1043.978393][   T28] 2 locks held by kworker/0:18/6773:
[ 1043.983952][   T28]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1043.997016][   T28]  #1: ffffc90003307d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[ 1044.016577][   T28] 1 lock held by udevd/8239:
[ 1044.023554][   T28]  #0: ffff888024dc24c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x13d/0xa60
[ 1044.042530][   T28] 3 locks held by syz.6.5519/21010:
[ 1044.054855][   T28]  #0: ffff88805d3a9468 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500
[ 1044.073921][   T28]  #1: ffff88805d3a8428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x45b/0xf40
[ 1044.086325][   T28]  #2: ffffffff8dea6428 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290
[ 1044.107522][   T28] 1 lock held by syz-executor/23293:
[ 1044.124445][   T28]  #0: ffffffff8dd47f68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x824/0xfc0
[ 1044.137285][   T28] 3 locks held by syz.2.6265/23315:
[ 1044.142724][   T28]  #0: ffff888079a5d468 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500
[ 1044.153415][   T28]  #1: ffff888079a5c428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x45b/0xf40
[ 1044.167395][   T28]  #2: ffffffff8dea6428 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290
[ 1044.185793][   T28] 3 locks held by syz.0.6267/23321:
[ 1044.191683][   T28]  #0: ffff888057ead468 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x20e/0x500
[ 1044.211946][   T28]  #1: ffff888057eac428 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x45b/0xf40
[ 1044.225904][   T28]  #2: ffffffff8dea6428 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xac/0x290
[ 1044.246010][   T28] 2 locks held by sed/23342:
[ 1044.252290][   T28] 
[ 1044.254676][   T28] =============================================
[ 1044.254676][   T28] 
[ 1044.277223][   T28] NMI backtrace for cpu 1
[ 1044.281661][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[ 1044.288923][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1044.299046][   T28] Call Trace:
[ 1044.302398][   T28]  <TASK>
[ 1044.305387][   T28]  dump_stack_lvl+0x188/0x24e
[ 1044.310156][   T28]  ? irq_work_queue+0xb8/0x140
[ 1044.315003][   T28]  ? show_regs_print_info+0x12/0x12
[ 1044.320302][   T28]  ? load_image+0x400/0x400
[ 1044.325540][   T28]  ? vprintk_emit+0x59f/0x6a0
[ 1044.330852][   T28]  ? printk_sprint+0x460/0x460
[ 1044.335842][   T28]  nmi_cpu_backtrace+0x3e6/0x460
[ 1044.340936][   T28]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[ 1044.347532][   T28]  ? _printk+0xda/0x130
[ 1044.351767][   T28]  ? load_image+0x400/0x400
[ 1044.356353][   T28]  ? load_image+0x400/0x400
[ 1044.360935][   T28]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[ 1044.367171][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1044.373314][   T28]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[ 1044.379390][   T28]  watchdog+0xeee/0xf30
[ 1044.383666][   T28]  ? watchdog+0x1ed/0xf30
[ 1044.388355][   T28]  kthread+0x29d/0x330
[ 1044.392929][   T28]  ? hungtask_pm_notify+0x40/0x40
[ 1044.398128][   T28]  ? kthread_blkcg+0xd0/0xd0
[ 1044.402799][   T28]  ret_from_fork+0x1f/0x30
[ 1044.407306][   T28]  </TASK>
[ 1044.412208][   T28] Sending NMI from CPU 1 to CPUs 0:
[ 1044.417590][    C0] NMI backtrace for cpu 0
[ 1044.417606][    C0] CPU: 0 PID: 23316 Comm: syz.3.6266 Not tainted syzkaller #0
[ 1044.417627][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1044.417639][    C0] RIP: 0010:__lock_acquire+0x3086/0x7d10
[ 1044.417676][    C0] Code: 45 50 11 ff c0 25 ff 0f 00 00 89 05 a4 45 50 11 48 85 db 0f 84 a6 05 00 00 4c 8d 73 10 4d 89 f5 49 c1 ed 03 41 80 7c 15 00 00 <74> 12 4c 89 f7 e8 d0 0e 6f 00 48 ba 00 00 00 00 00 fc ff df 4d 8b
[ 1044.417693][    C0] RSP: 0018:ffffc90003b87160 EFLAGS: 00000046
[ 1044.417711][    C0] RAX: ffffffff9341a838 RBX: ffffffff9341a838 RCX: 0000000000000008
[ 1044.417724][    C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffffffff904ad190
[ 1044.417737][    C0] RBP: ffffc90003b873b0 R08: ffffc90003b87337 R09: ffffc90003b87300
[ 1044.417751][    C0] R10: dffffc0000000000 R11: fffff52000770e67 R12: ffff8880498746f8
[ 1044.417764][    C0] R13: 1ffffffff2683509 R14: ffffffff9341a848 R15: ffffffff904ade4c
[ 1044.417779][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1044.417795][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1044.417809][    C0] CR2: 00007f2ec78feeb8 CR3: 000000005e188000 CR4: 00000000003506f0
[ 1044.417826][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1044.417836][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1044.417848][    C0] Call Trace:
[ 1044.417858][    C0]  <TASK>
[ 1044.417868][    C0]  ? _raw_spin_unlock+0x40/0x40
[ 1044.417900][    C0]  ? kasan_save_stack+0x4c/0x60
[ 1044.417930][    C0]  ? verify_lock_unused+0x140/0x140
[ 1044.417957][    C0]  ? shrink_dcache_for_umount+0x65/0x110
[ 1044.417978][    C0]  ? do_group_exit+0x217/0x2d0
[ 1044.418004][    C0]  ? get_signal+0x1272/0x1350
[ 1044.418033][    C0]  ? arch_do_signal_or_restart+0xc4/0x1350
[ 1044.418058][    C0]  ? exit_to_user_mode_loop+0x70/0x110
[ 1044.418086][    C0]  ? exit_to_user_mode_prepare+0xee/0x180
[ 1044.418116][    C0]  ? mark_lock+0x94/0x320
[ 1044.418143][    C0]  ? __lock_acquire+0x13cf/0x7d10
[ 1044.418170][    C0]  lock_acquire+0x1bb/0x4a0
[ 1044.418195][    C0]  ? alloc_object+0x1c0/0x640
[ 1044.418221][    C0]  ? do_raw_spin_lock+0x128/0x2f0
[ 1044.418238][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1044.418264][    C0]  ? __rwlock_init+0x140/0x140
[ 1044.418280][    C0]  ? call_rcu+0x6a8/0x990
[ 1044.418311][    C0]  _raw_spin_lock+0x2a/0x40
[ 1044.418331][    C0]  ? alloc_object+0x1c0/0x640
[ 1044.418352][    C0]  alloc_object+0x1c0/0x640
[ 1044.418375][    C0]  ? rcu_force_quiescent_state+0x230/0x230
[ 1044.418405][    C0]  debug_object_activate+0x140/0x4f0
[ 1044.418429][    C0]  ? __d_free_external+0x60/0x60
[ 1044.418449][    C0]  call_rcu+0xa2/0x990
[ 1044.418476][    C0]  ? __dentry_kill+0x4e7/0x650
[ 1044.418506][    C0]  ? __lock_acquire+0x7d10/0x7d10
[ 1044.418537][    C0]  ? do_raw_spin_lock+0x128/0x2f0
[ 1044.418554][    C0]  ? rcu_force_quiescent_state+0x230/0x230
[ 1044.418583][    C0]  ? __rwlock_init+0x140/0x140
[ 1044.418600][    C0]  ? _raw_spin_unlock+0x24/0x40
[ 1044.418629][    C0]  ? do_raw_spin_unlock+0x11d/0x230
[ 1044.418648][    C0]  __dentry_kill+0x4ef/0x650
[ 1044.418679][    C0]  dentry_kill+0xb8/0x290
[ 1044.418706][    C0]  ? dput+0x37/0x1d0
[ 1044.418733][    C0]  dput+0xfa/0x1d0
[ 1044.418759][    C0]  shrink_dcache_for_umount+0x65/0x110
[ 1044.418780][    C0]  generic_shutdown_super+0x63/0x340
[ 1044.418803][    C0]  kill_litter_super+0x72/0xa0
[ 1044.418824][    C0]  gadgetfs_kill_sb+0x22/0x100
[ 1044.418853][    C0]  deactivate_locked_super+0x93/0xf0
[ 1044.418874][    C0]  cleanup_mnt+0x42c/0x4b0
[ 1044.418897][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1044.418920][    C0]  task_work_run+0x1d0/0x260
[ 1044.418947][    C0]  ? task_work_cancel+0x220/0x220
[ 1044.418971][    C0]  ? do_exit+0x97d/0x2480
[ 1044.418996][    C0]  ? kmem_cache_free+0xf7/0x290
[ 1044.419019][    C0]  do_exit+0x982/0x2480
[ 1044.419050][    C0]  ? put_task_struct+0x80/0x80
[ 1044.419078][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 1044.419106][    C0]  ? lock_chain_count+0x20/0x20
[ 1044.419131][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[ 1044.419153][    C0]  do_group_exit+0x217/0x2d0
[ 1044.419179][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[ 1044.419200][    C0]  get_signal+0x1272/0x1350
[ 1044.419237][    C0]  arch_do_signal_or_restart+0xc4/0x1350
[ 1044.419266][    C0]  ? __might_sleep+0xd0/0xd0
[ 1044.419284][    C0]  ? rcu_force_quiescent_state+0x230/0x230
[ 1044.419312][    C0]  ? get_sigframe_size+0x10/0x10
[ 1044.419335][    C0]  ? blkcg_maybe_throttle_current+0x1a0/0xa80
[ 1044.419374][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1044.419402][    C0]  exit_to_user_mode_loop+0x70/0x110
[ 1044.419430][    C0]  exit_to_user_mode_prepare+0xee/0x180
[ 1044.419458][    C0]  syscall_exit_to_user_mode+0x16/0x40
[ 1044.419479][    C0]  do_syscall_64+0x58/0xa0
[ 1044.419507][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1044.419538][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1044.419563][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1044.419586][    C0] RIP: 0033:0x7fa34599c819
[ 1044.419602][    C0] Code: Unable to access opcode bytes at 0x7fa34599c7ef.
[ 1044.419611][    C0] RSP: 002b:00007fffe2a28298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1044.419632][    C0] RAX: 0000000000000000 RBX: 00007fa345c17da0 RCX: 00007fa34599c819
[ 1044.419645][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1044.419656][    C0] RBP: 00007fa345c17da0 R08: 0000000000000006 R09: 0000000000000000
[ 1044.419668][    C0] R10: 00000000003ffd7c R11: 0000000000000246 R12: 00000000000fe6d8
[ 1044.419681][    C0] R13: 00007fa345c15fac R14: 00000000000fe48e R15: 00007fffe2a283a0
[ 1044.419700][    C0]  </TASK>
[ 1044.987239][ T4281] Bluetooth: hci1: command 0x041b tx timeout
[ 1045.353969][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 1045.361622][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[ 1045.368982][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1045.379194][   T28] Call Trace:
[ 1045.382538][   T28]  <TASK>
[ 1045.385708][   T28]  dump_stack_lvl+0x188/0x24e
[ 1045.390773][   T28]  ? memcpy+0x3c/0x60
[ 1045.395096][   T28]  ? show_regs_print_info+0x12/0x12
[ 1045.400601][   T28]  ? load_image+0x400/0x400
[ 1045.405810][   T28]  panic+0x2e5/0x730
[ 1045.409859][   T28]  ? schedule_preempt_disabled+0x20/0x20
[ 1045.415724][   T28]  ? bpf_jit_dump+0xd0/0xd0
[ 1045.420451][   T28]  ? __irq_work_queue_local+0x12c/0x190
[ 1045.426076][   T28]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[ 1045.432483][   T28]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[ 1045.438721][   T28]  watchdog+0xf2d/0xf30
[ 1045.443209][   T28]  ? watchdog+0x1ed/0xf30
[ 1045.447729][   T28]  kthread+0x29d/0x330
[ 1045.452047][   T28]  ? hungtask_pm_notify+0x40/0x40
[ 1045.457155][   T28]  ? kthread_blkcg+0xd0/0xd0
[ 1045.461813][   T28]  ret_from_fork+0x1f/0x30
[ 1045.466438][   T28]  </TASK>
[ 1045.470452][   T28] Kernel Offset: disabled
[ 1045.474931][   T28] Rebooting in 86400 seconds..