last executing test programs:

7m19.287591646s ago: executing program 0 (id=2597):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000040)='@\x00zX')

7m16.961616027s ago: executing program 0 (id=2617):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

7m15.285445135s ago: executing program 0 (id=2628):
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x1, 0x0, &(0x7f00000031c0))

7m14.776229692s ago: executing program 0 (id=2631):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
rmdir(&(0x7f00000003c0)='./control\x00')

7m14.41767627s ago: executing program 0 (id=2632):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)

7m13.448203131s ago: executing program 0 (id=2636):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x4e, &(0x7f0000000840)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "8bf8"}]}}}}}}}}, 0x0)

7m12.885327301s ago: executing program 32 (id=2636):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x4e, &(0x7f0000000840)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "8bf8"}]}}}}}}}}, 0x0)

6m50.275489602s ago: executing program 5 (id=2783):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000040)=[{0xd, 0x2801, 0xfe, &(0x7f0000002700)="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"}], 0x1})

6m48.607478579s ago: executing program 5 (id=2797):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840", @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x404c014}, 0xd4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a31000000000500010007000000440007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x6c}, 0x1, 0x0, 0x0, 0xe730d03276346fbd}, 0x0)

6m48.219109339s ago: executing program 5 (id=2801):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000001240)=0xd, 0x4)
sendto$packet(r0, 0x0, 0x0, 0x24000014, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x6a}, 0x14)

6m48.000639531s ago: executing program 5 (id=2802):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000f80)='./mnt\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='mode=00000000000000000000202,umask=00000000000000000000002,dmode=00000000000000000100002,gid=forget,longad,shortad,novrs,iocharset=cp437,uid=forget,umask=00000000000000000000006,dmode=00000000000000000000010,gid=', @ANYRESDEC=0x0, @ANYRES32=0x0], 0x1, 0xc58, &(0x7f00000000c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

6m47.091533138s ago: executing program 5 (id=2808):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4)

6m45.684746962s ago: executing program 5 (id=2815):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="900736ffd7fb87465963b0d3522d82eab665c2832180d084a2b466cc4ea717ab45c96aea10a8c013fdd2a867d155cff2cc400602ee3af3f80c92a078afe315445c352d1695da6c390258ae2e7efc2c02fc161e1b5e271d98a04e5d977b6ca58c3c61f2e559489bcad21796d816c99b330ad4f7f0ff31a95635d4e18731539a4485d53546337f6453f17004a64899aa1c42bceea63fb4bb4a43deb4de7ddf18f773c836c304b2f2edf9c37e2859da3e0f28a1db43866032877a5b3218da48534a923d2b864964cf53bc0156359c23b20c4b5ed905fb9b6dd9178e6110aa63b24a24c71ff171dbf7bb65c26a4f3e3b960e", 0xf0}], 0x1}, 0x84)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xd0}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x600}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

6m45.059376345s ago: executing program 33 (id=2815):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="900736ffd7fb87465963b0d3522d82eab665c2832180d084a2b466cc4ea717ab45c96aea10a8c013fdd2a867d155cff2cc400602ee3af3f80c92a078afe315445c352d1695da6c390258ae2e7efc2c02fc161e1b5e271d98a04e5d977b6ca58c3c61f2e559489bcad21796d816c99b330ad4f7f0ff31a95635d4e18731539a4485d53546337f6453f17004a64899aa1c42bceea63fb4bb4a43deb4de7ddf18f773c836c304b2f2edf9c37e2859da3e0f28a1db43866032877a5b3218da48534a923d2b864964cf53bc0156359c23b20c4b5ed905fb9b6dd9178e6110aa63b24a24c71ff171dbf7bb65c26a4f3e3b960e", 0xf0}], 0x1}, 0x84)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xd0}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x600}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

4m7.740421445s ago: executing program 3 (id=3921):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c)
r1 = dup(r0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0)

4m6.733181788s ago: executing program 3 (id=3931):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r0, 0x1)
flock(r0, 0x1)

4m6.547921747s ago: executing program 3 (id=3933):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}, {{&(0x7f0000000300)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x117, 0x3, "da4ef6724d"}], 0x18}}], 0x2, 0xc000)

4m6.284096141s ago: executing program 3 (id=3937):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@fat=@showexec}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=")
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20)

4m5.971975867s ago: executing program 3 (id=3940):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a852000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000001a00))

4m5.412142336s ago: executing program 3 (id=3943):
r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000900)={0x0, 0x18, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m4.871117425s ago: executing program 34 (id=3943):
r0 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000900)={0x0, 0x18, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m22.632039257s ago: executing program 4 (id=4718):
io_setup(0x8, &(0x7f0000004200)=<r0=>0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = eventfd(0x7)
io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f0000000080)="c0eef9ae", 0x4, 0x0, 0x0, 0x1, r2}])

2m22.277080586s ago: executing program 4 (id=4721):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000070000000600000009"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=<r2=>r0], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3, r1}, 0xc)

2m22.056027718s ago: executing program 4 (id=4723):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf)
mlock2(&(0x7f0000863000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)

2m21.944954923s ago: executing program 4 (id=4724):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1)

2m21.466203208s ago: executing program 4 (id=4728):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x83, @dev={0xfe, 0x80, '\x00', 0x43}, 0xca}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b2c, &(0x7f0000000040))

2m20.295364719s ago: executing program 4 (id=4738):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xffffffe3)

2m19.796407825s ago: executing program 35 (id=4738):
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f00000001c0)=0xffffffe3)

1m31.815389583s ago: executing program 6 (id=5080):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x80000031)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x1}}, 0x24, 0x3)

1m31.499499979s ago: executing program 6 (id=5084):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

1m31.146985807s ago: executing program 6 (id=5089):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
preadv(r1, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc)

1m30.841001323s ago: executing program 6 (id=5092):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
r1 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300))

1m30.254609724s ago: executing program 6 (id=5100):
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x183)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xfffffff7)

1m29.982065278s ago: executing program 6 (id=5105):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000200)=0xfffffffffffffffd})

1m14.670048858s ago: executing program 36 (id=5105):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000200)=0xfffffffffffffffd})

3.790884072s ago: executing program 1 (id=5750):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ff9, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@mmap={0x0, 0x1, 0x4, 0x4000, 0x1, {0x77359400}, {0x1, 0xc, 0x6, 0x8, 0xfd, 0x30}, 0xa, 0x1, {}, 0x81})

3.421170281s ago: executing program 8 (id=5754):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000)

3.307963167s ago: executing program 1 (id=5755):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x2caa, 0x1)

3.307458047s ago: executing program 7 (id=5756):
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2800810, &(0x7f0000002780)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16=0x0], 0x3, 0x171, &(0x7f0000000100)="$eJzs2zGLE0EUB/C3l0RPba4WiwUbq6BWloqcIC4oyhZaKZw2d3LgNatV8JPY+uEEueoKYeQcTTRsMBDXDcnv1+SFPxPehJ0dZmFfXnt7eHB88ub4yWnsFkUM70YZZ0XsxU4MIpsEALBJzlKKr2n062tKqd9+AIDu5f0/pXRxEpc+2f8BYBv8df+/01NjAEBnnP8BYPs8e/7i0b2q2n9alrsRXyZN3dT5M+cPHlb7N8sf9majTpumHkzzWzkv/8xHcflnfrs1vxA3ruf8PLv/uJrLr8RB99MHAACArTAup1rP9+PxojxXvz0fmJ3fz4fWw7g6/H/zAACWd/L+w+Gro6PX7za8GK1HG4rWYmel6/BbSmkuKpYY/vFzXgLr8if806KIiNV+p+87E9C12aLvuxMAAAAAAAAAAAAAAGCRbt9GGvQ9PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGj1PQAA//9kAUaX")
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff", 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)

3.0549367s ago: executing program 1 (id=5758):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0xfffffffd}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x4}}]}, 0x48}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

3.004039823s ago: executing program 8 (id=5759):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x30}}], 0x1, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}, 0xfffffffc}], 0x400000000000179, 0x10022, 0x0)

2.937510897s ago: executing program 7 (id=5760):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x106, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x2e, 0xfa00, {{0xa, 0x4e20, 0x200, @empty, 0x3}, {0xa, 0x2, 0xfffffffe, @empty, 0x41}, r1, 0x86}}, 0x48)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7, 0x6, {"cd193e3ab41d9edef37a2057f346b152"}, 0x2, 0x1, 0xfffffffffffffff9}}}, 0x90)

2.746628797s ago: executing program 1 (id=5761):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rt_sigqueueinfo(0x0, 0x21, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r0, 0x0, 0x0)

2.656358341s ago: executing program 7 (id=5762):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0xffff, 0x4)
sendto$inet6(r0, &(0x7f00000000c0)="1c53", 0x2, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

2.655950152s ago: executing program 2 (id=5763):
signalfd(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000240)="5fd63e9c4ac1288130bfdbfd7360", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

2.575366605s ago: executing program 1 (id=5764):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x2a00000, &(0x7f0000000440)=ANY=[], 0x1, 0x6224, &(0x7f0000007240)="$eJzs3c1vHGcdB/DfvvolbWr1UJUIITctL6U0iZMSAgXaHuDApQeUK0rkulVECigJKK0s4soXDpz4C0BIHBHiiDjwB/TAlRsnTkSykUA9MdXYzxPPbnazdm3vrD2fj+TM/OaZ9T7j786+ZGb2CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgfvD9H660IuLGL9KCpYinohPRjlgo6+WIWFheyut3I+L52GmO5yKiNxdR3n7nn2ciXouIj89GbG2vr5aLL++zH9/70z9+/6Mzb//9j72L//vzvfHr3b//6//+5cFhthgAAACapyiKopU+5p9Ln+/bdXcKAJiK/PpfJHn5qa9/86+3/zpL/VGr1eoZqvsxW/1RH11dVYz2oFpExEb1NuV7BofjAeCE2YhP6u4CNZJ/o3Uj4kzdnQBmWqvuDnAstrbXV1sp31b19WB5tz2fCzKQ/0br0fUd46aTDJ9jMq3H12Z04tkx/VmYUh9mSc6/PZz/jd32flrvuPOflnH593cvfWqcnH9nOP8hpyf/9sj8myrn3z1Q/h35AwAAAADADMv//79U8/HfucNvyr486fjv8pT6AAAAAAAAAABH7bDj/z1ypOP/dV4ft57x/wAAAODgys/qpd+e3Vs27rvYyuXXWxFPD60PNEy6WGax7n4AAAAAAAAAAAAAQJN0d8/hvd6K6EXE04uLRVGUP1XD9UEd9vYnXdO3H5qs7id5AADY9fHZoWv5WxHzEXE9fddfb3FxsSjmFxaLxWJhLr+f7c/NFwuVz7V5Wi6b6+/jDXG3X5S/bL5yu6pJn5cntQ//vvK++kVnHx07Ir301xzTXFPYAJDsvhpteUU6ZYrimXFvPmCA/f8UWoqluh9XzL66H6YAAADA8SuKomilr/M+l475t+vuFAAwFfn1f/i4wKHq9pj2iKP5/Wq1Wq1Wqz9TXVWM9qBaRMRG9TblewbD8QPACbMRn9TdBWok/0brRsTzdXcCmGmtujvAsdjaXl9tpXxb1deDNL57PhdkIP+N1s7t8u1HTScZPsdkWo+vzejEs2P689yU+jBLcv7t4fxv7Lb303rHnf+0jMu/v3PJXPPk/DvD+Q85Pfm3R+bfVDn/7oHy78gfAAAAAABmWP7//yXHf/MmAwAAAAAAAMCJs7W9vpqve83H/z8/Yj3Xf55OOf/WQfNfSPPyP9Fy/u2h/L8ytF6nMv/wrb39/z/b66t/uPfvz+XpfvOfyzOt9MhqpUdEK91Tq5umh9m6QU+V+fc6/fKeeq12p5vO+Sl678atuB1rcWlg/Xb6e+y1rwy0lz3tDbRfHmjvPtZ+ZaC9l753oFjI7RdiNX4at+OdnfaybW7C9s9PaC8mtOf8O57/Gynn3638lPkvpvbW0LT08KP2Y/t9dTrqft689YVfXTr+zZloMzqPtq2q3L7zNfRn529yph8/v7t258L9m/fu3VmJNBlYejnS5Ijl/Hs7P3N7z/8v7rbn5/3q/vrwo/6B858Vm9Edm/+Llflye1+ect/qkPPvp5+c/zupffT+f5LzH7//v1JDfwAAAAAAAAAAAAAAAOBJiqLYuUT0zYi4mq7/qevaTABguvLrf5Hk5Wq1Wq1Wq09fXVWM9ka1iIi/VW9Tvmf45ahfBgDMsv9HxD/r7gS1kX+D5e/7K6cv1d0ZYKrufvDhj2/evr12527dPQEAAAAAAAAAPqs8/udyZfznlyJiaWi9gfFf34rlw47/2c0zjwYYPcKBvp9gs93vtCvDjb8QO+NzXxg3/vf5eHz87zwmbqe6HWP0JrT3J7TPTWifH7l0L62RF3pU5PxfqIx3XuZ/bmj49SaM/zo85n0T5PzPVx7PZf5fHlqvmn/xu5nLf2O/K25GeyD/i/fe/9nFux98+Oqt92++t/be2k+urKxcunL16rVr1y6+e+v22qXdf4+n1zMg55/HvnYeaLPk/HPm8m+WnP8XUy3/Zsn5fynV8m+WnH9+vyf/Zsn5588+8m+WnP/LqZZ/s+T8v5pq+TfL1vb6XJn/K6mWf7Pk/f9rqZZ/s+T8X021/Jsl538h1fJvlpz/xVTvI39fD3+K5PzzES77f7Pk/FdSLf9myflfTrX8myXnfyXV8m+WnP9rqZZ/s+T8v55q+TdLzv9qquXfLDn/b6Ra/s2S87+Wavk3S87/m6mWf7Pk/L+Vavk3S87/9VTLv1ly/t9OtfybJef/nVTLv1ly/t9NtfybJef/Rqrl3yx73/9vxowZM3mm7mcmAAAAAAAAAAAAAGDYNE4nrnsbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27i5GrrO+H/iZ9a69dhJiIAQnfwObxISQbLJrO/EL/6aY8NoApUBCoS84rndtFvyG1y6BItk0UKJiBKqoSC/aAkJtpKoiqrigFaW5qPpyVdoLelPRVqJqVAUUUJHaimarOed5np2ZnZ2Ztce7Z875fKTktztzZs6ZM2dm97vr7x4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrd8vr5TzeyLGv+l/9ve5Zd2/x469T2/LLXbPQWAgAAAFfqf/P/P3d9uuDQADdqWeavX/53X19aWlrK3rvptye+sLSUrpjKsoktWZZfFz31r+9rtC4TPJZNNsZaPh/rs/pNfa4f73P9RJ/rN/e5fkuf6yf7XL9iB6ywtfh5TH5nu/IPtxe7NLshm8iv29XlVo81toyNxZ/l5Br5bZYmjmUL2YlsPpttW75YtpEv/81bmut6SxbXNdayrp3NI+SHHz8at6ER9vGutnUt32f0/ddlUz/64ceP/sG5Z2/qNvvuhrb7K7bzjlub2/nJcEmxrY1sS9oncTvHWrZzZ5fnZFPbdjby2zU/7tzO5wbczk3Lm7muOp/zyWws//jb+X4ab/2xXtpPO8Nl/3VblmUXlze7c5kV68rGsm1tl4wtPz+TxRHZvI/mofSibHxNx+ktAxynzTm3q/047XxNxOf/lnC78VW2ofVp+v4nNq943td6nEbNR73aa6XzGBz2a6Usx2A8Lr6dP+jHux6Du8Lj//jtqx+DXY+dLsdgetwtx+Ct/Y7Bsc2b8m1OT0Ijv83yMbi7bflN+Zoa+Xzm9t7H4My5k2dmFj/6sbsXTh45Pn98/tTe3btn9+7bd+DAgZljCyfmZ4v/X+beLr9t2Vh6Ddwa9l18DbyqY9nWQ3Xpy8N7HU72eB1u71h22K/D8c4H11ifF+TKY7p4bTzU3OmTl8ayVV5j+fNz55W/DtPjbnkdjre8Drt+TenyOhwf4HXYXObMnYN9zzLe8l+3bbhaXwu2txyDnd+PdB6Dw/5+pCzH4GQ4Lv7pztW/FuwM2/v49Fq/H9m04hhMDze89zQvSd/vTx7IR7fj8ubmFddszs4vzp+959Ej586d3Z2FsS5e3HKsdB6v21oeU7bieB1b8/F6aOHlj9/c5fLtYV9N3t383+Sqz1VzmXvv6f1c5V/duu/Ptkv3ZGEM2Xrvz25fzZv7M2XJHvuzucwnZ678e/GUS1vefydWef+Nuf/5Yn3prh7bNDFevH43pb0z0fZ+3P5UjefvXY183c/NDPZ+PBH+W+/34xt6vB/v6Fh22O/HE50PLr4fN/r9tOPKdD6fk+E4OTHb+/24ucyOPWs9Jsd7vh/fFmYj7P9Xh6SQclHLsbPacZvWNT4+ER7XeFxD+3G6t235iZDNmut6cs/lHad33Fbc16b06Jat13E61bHssI/T9H612nHa6PfTt8vT+XxOhuPihr29j9PmMk/fe+XvnVvjhy3vnZv7HYMTmzY3t3kiHYTF+/3S1ngM3pMdzU5nJ7K5/NrN+fHUyNc1fd9gx+Dm8N96v1fu6HEM3tGx7LCPwfR1bLVjrzG+8sEPQefzORmOiyfu630MNpd5w/7hfu96R7gkLdPyvWvnz9dW+5nXzR276Wr+zKu5nX+5v/fPZpvLnDiw1pzZez/dFS65pst+6nz9rvaamsvWZz/tCNv57IHV91Nze5rLfOHggMfToSzLLnz4gfznveH3K39y/jtfb/u9S7ff6Vz48AM/uO7YX61l+wEYfc8XY1vxta7lN1OD/P4fAAAAGAkx94+Fmcj/AAAAUBkx98d/FZ7I/wAAAFAZMfePh5mE/N/vb9iNuh1veHbh+QtZauYvBfH69GOQB4vlYsd1Nnw+tbSsefkDX53/8Z9dGGzdY1mW/eTBX+u6/I4H43YVpsJ2PvXG9stX3vDCQOt/5OHl5Vr7618K9x8fz6A/BupWwZ3Nsuyb1382X8/U+y7l8+kHH8nnuy4+/lhzmecOFp/H2z/z4mL53w3l30PHjrTd/pmwH74X5uxbu++PeLuvXXr1zv3vWV5fvF3j1hfkD/uJ9xf3G/9OzucfK5aP+3m17f/zzzz5tebyj76y+/ZfGOu+/U+G+/1qmP/9smL51ueg+Xm83afC9sf1xdvd85Vvdd3+pz5dLH/mTcVyj4QZ139H+HzXm55daN1fjzaOtD2u7M3FcnH9s9/5XH59vL94/53bP3n4Utv+6Dw+nv6H4n5mOpaPl8f1RH/asf7m/bQen3H9T/7GI237ud/6n3rXMy9r3m/n+u/qWG5Tx+07/2LT733qs13XF7fn0B+faXs8h94ZXsdh/U+8PxyP4fr/eeqzbeuNHnln+/tPXP5L2y+0PZ7oLT8q1v/Ua4/n89+nfvw711x73QsuvqK577Ls2+8u7q/f+o///um27f/yjXfmz0e8Pnb0O9e/mrj+sx+ZPnV68fzCXMtezf92ztuK7dkyuXVbc3uvD++tHZ9vOXz63Afmz07NTs1m2VR1/4TeZftKmD8oxsW13v7Oh8PzefMXv7nt9r//TLz8Hx8qLr/01uLr1qvCcp8Pl28vnr+lxhWu/4lbbsxf342ni8/beuxDsHPXfxwYaMHw+Du/L4jH+5mXfCDfD83r8q8b8XV9hdv/3bnifr4R9utS+MvMt964vL7W5ePfRrj07uL1fsX7L7zNxef1D8Pz/fbvFfcftys+3u+G72O+taP9/S4eH9+4MNZ5//lf8bgY3k+yi8X1cam4vy89d2PXzYt/hyS7eFP++W+l+7lpTQ9zNYsfXZw5sXDq/KMz5+YXz80sfvRjh0+ePn/q3OH8b3ke/mC/2y+/P23L35/m5vfdm81uzbLsdDa7Dm9YV2f7mx8Ntv1nHj46t3/29rn5Y0fOHzv38Jn5s8ePLi4enZ9bvP3IsWPzH+l3+4W5+3fvObh3/57p4wtz9x84eHDvwemFU6ebm1FsVB/7Zj80fers4fwmi/ffe3D3fffdOzt98vTc/P37Z2enz/e7ff61abp561+dPjt/4si5hZPz04sLH5u/f/fBffv29P1rgCfPHFucmjl7/tTM+cX5szPFY5k6l1/c/NrX7/ZU0+I/F9/PdmoUf4gve8dd+9LfZ2366idWvatikY4/IPps+Fs0f/vCMwcG+Tzm/okwE7//BwAAgMqIuX9zmIn8DwAAAJURc/+WMBP5HwAAACoj5v7JMJOa5H/9f/3/wfr/xfX6//Xq/5/5cNErHfX+f+zPV6T/v6T/39sG9/+veP36//r/1ev/D96fH/Xt1//X/2elsvX/Y+7fmmW1zP8AAABQBzH3bwszkf8BAACgMmLuvybMRP4HAACAyoi5/9owk5rkf/3/gfr/e/oVrqrf/3f+f/3/bDT7//HJ0f+vjTX379/zUNun+v+B/v+A/f/f1P9vof+v/6//T7uJVa/ZqP5/zP3XhZnUJP8DAABAHcTc/4IwE/kfAAAAKiPm/uvDTOR/AAAAqIyY+7eHmdQk/+v/O///hvX/G/r/+v8jcP7/lo3R/x8Nzv/fm/5/H5d9/v9J/f9R7P9PDHf7y93/77v5+v9cFWU7/3/M/S8MM6lJ/gcAAIA6iLn/RWEm8j8AAABURsz9Lw4zkf8BAACgMmLuvyHMpCb5X/9f/79c5///4t3NPa//X9D/L2xo/7/n+f+Lj/T/y0X/vzf9/z4uu//v/P/ZKPb/h7z95e7/D/v8/xNv7Ly9/j/dlK3/H3P/S8JMapL/AQAAoA5i7r8xzET+BwAAgMqIuf+lYSbyPwAAAFRGzP07wkxqkv/1//X/y9X/d/5//f9R6v8X9P/LRf+/N/3/PvT/9f/1/wfr/3f55lf/n27K1v+Puf+mMJOa5H8AAACog5j7bw4zkf8BAACgMmLu/39hJvI/AAAAVEbM/TvDTGqS//X/9f/1/+vV/79rs/6//n+16f/3pv/fh/6//r/+/4Dn/19pLf3/Lf3ujMooW/8/5v6XhZnUJP8DAABAHcTc//IwE/kfAAAAKiPm/leEmcj/AAAAUBkx90+FmdQk/+v/V6v//0d/8cQrMv1//f8+669o/z8eBvr/Naf/35v+fx/6//r/+v/r0v+nPsrW/4+5/5Ywk5rkfwAAAKiDmPtvDTOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/V5hJTfK//n+1+v+R/r/+f6/1V7T/n+j/15v+fxctL1L9/z70//X/a9//j9/96v8zHGXr/8fc/8owk5rkfwAAAKiDmPtvDzOR/wEAAKAyYu5/VZiJ/A8AAACVEXP/HWEmNcn/+v/6//r/+v/6/93Xr/8/mvT/e1tr/3+z/r/+v/5/zfr/zv/PcG18/7/4zi1+HnP/q8NMapL/AQAAoA5i7r8zzET+BwAAgMqI/36z+Hev8j8AAABUUcz902EmI5r/u/XQe9H/1/+vU/+/of+v/6//X3n6/705/38f+v/6//r/+v8M1cb3/9s/j7n/7jCTEc3/AAAAwEox998TZiL/AwAAQGXE3D8TZiL/AwAAQGXE3D8bZpLn/4kN2qr1o/+v/1+n/r/z/+v/6/9Xn/5/b/r/fej/6/9Xrf+fZfr/bKiy9f9j7t8dZuL3/wAAAFAZMffvCTOR/wEAAKAyYu7fG2Yi/wMAAEBlxNx/b5hJTfK//r/+v/5/lfv/n/u3buvX/9f/rzL9/970//vQ/9f/r1r/3/n/2WBl6//H3H9fmElN8j8AAADUQcz9+8JM5H8AAACojJj794eZhPzf7d91AwAAAKMl5v4DYSY1+f2//n9F+v+//jdt69b/1//vtf7h9P+36v+Hqf9fLsv9+/x4rUr/v/Nlcdn0//vQ/9f/1//X/2eoytb/j7n/YJhJTfI/AAAA1EHM/a8JM5H/AQAAoDJi7v//YSbyPwAAAFRGzP0/FWZSk/yv/1+R/n8H/X/9/17rd/5//f8qc/7/3irV/x/T/9f/L9f26//r/7PS1e//x48G6//H3H9/mElN8j8AAADUQcz9Px1mIv8DAABAZcTc/9owE/kfAAAAKiPm/kNhJjXJ//r/+v/6//r/V6f//9qsUxn7/82DR/+/WvT/e6tU/9/5//X/S7b9+v/6/6xUtvP/x9z/ujCTmuR/AAAAqIOY+x8IM5H/AQAAoDJi7n99mIn8DwAAAJURc/8bwkxqkv/1//X/9f/1/53/v/v69f9Hk/5/b/r/fej/6//r/+v/M1Rl6//H3P/GMJOa5H8AAACog5j73xRmIv8DAABAZcTc/+YwE/kfAAAAKiPm/reEmdQk/+v/6//r/+v/6/93X/+g/f/sX/T/y6TG/f+JQRbS/+9D/1//X/9f/5+hKlv/P+b+nwkzqUn+BwAAgDqIuf/BMBP5HwAAACoj5v63hpnI/wAAAFAZMfe/LcykJvlf/1//X/9/mP3/7m1f/f9wPFS0/+/8/+Uyiv3/61o+dv5//X/9/9Hdfv1//X9WKlv/P+b+t4eZ1CT/AwAAQB3E3P+zYSbyPwAAAFRGzP3vCDOR/wEAAKC8uhWxe4i5/+fCTGqS//X/9f/L1f9futB6u9Hr/zv/f1bW/n/zRvr/tTCK/f9W+v/l6/9v0f/X/9f/1//nspWt/x9z/zvDTGqS/wEAAKAOYu5/V5iJ/A8AAACjYaL/IjH3vzvMRP4HAACAyoi5/6Ewk5rkf/3/Wvb/00MuX/9/1M//r/+flbX/7/z/taH/35v+fx/O/z+k/vy1+v/6//r/5MrW/4+5/+Ewk5rkfwAAAKiDmPvfE2Yi/wMAAEBlxNz/82Em8j8AAABURsz97w0zqUn+1/+vZf+/xOf/r1r/f7zt+KhT/3+y5flMx6X+v/7/OtD/703/vw/9f+f/L3P/PxzNW1e5vf4/ZVS2/n/M/e8LM6lJ/gcAAIA6iLn/F8JM5H8AAACojJj4f7HtM/kfAAAAqiTm/l8KM6lJ/tf/1//X/3f+f+f/775+/f/RpP/fm/5/H/r/+v9l7v/3of9PGZWt/x9z/y+Hmawa/H7wnwM8TAAAAKBEYu5/f5hJTX7/DwAAAHUQc//hMBP5HwAAACoj5v5Hwkxqkv/1/zv7//GMqvr/+v/6//r/+v+jaHj9/5del2X6//r/+v/6//r/+v9cibL1/2PuPxJmUpP8DwAAAHUQc/+vhJnI/wAAAFAZMfcfDTOR/wEAAKAyYu6fCzOpSf7fwP7/RDn7/87/f7n9/5/o/+v/B/r/3en/rw/n/+9N/78P/X/9f/1//X+Gqmz9/5j758NMapL/AQAAoMLSj4Nj7j8WZiL/AwAAQGXE3H88zET+BwAAgMqIuf8DYSY1yf/O/6//7/z/G9H/H29bXv+/oP+v/z8M+v+96f/3of+v/6//r//PUJWt/x9z/0KYSU3yPwAAANRBzP0fDDOR/wEAAKAyYu7/UJiJ/A8AAACVEXP/iTCTmuR//X/9/7r3/xtZdtH5//X/u61f/3806f/3pv/fh/6//r/+v/4/Q1W2/n/M/SfDTGqS//+Pvftosuus9jh8LKw0go/AmBFDGJmPwJQZVYzJJgfb5Awm52BMzpgcTc45Z5Mx2ZhoqBLl1lpLap3Te6vVu/vs/b7PM1lXKsl9BA23/lf3Vy8AAAD0IHf//eIW+x8AAACakbv//nGL/Q8AAADNyN3/gLhlqfv/1P5+uf5f/997/7/ayvv/u3+9/v8s/b/+fwpr/f3lm3/dXlH4nv3/Xe925b31//r/afr/k/Vj/f+ktv359f/6f9bNrf/P3f/AuGWp+x8AAABYk7v/QXGL/Q8AAADNyN3/4LjF/gcAAIBm5O6/Mm7pZP933f+fOvc5kv5f/7/zEz33/zfq//X/y+b9/2H6/xHe/9f/6//1/0xqbv1/7v6HxC2d7H8AAADoQe7+h8Yt9j8AAAA0I3f/w+IW+x8AAACakbv/4XFLJ/u/6/7f+//6/7CM/v+E9/8v+PPo//X/m+j/h+n/R+j/9f/6f/0/k5pb/5+7/xFxSyf7HwAAAHqQu/+RcYv9DwAAAM3I3f+ouMX+BwAAgGbk7n903NLJ/tf/6//1/0vp/4/o/X/9v/5/4a5bnfvvBP3/Ov3/iJH+f7XS/w+56H5+8x9vOZ9/D/p//T/r5tb/5+5/TNxyj9XqxKX+IQEAAIBZyd3/2Lilk7//BwAAgB7k7r8qbrH/AQAAoBm5+6+OWzrZ//p//b/+X/+v/9/89fX/y+T9/2EH7//vcqf73qff/t/7/8O8/z91/3/7d4b+n2WbW/+fu/+auKWT/Q8AAAA9yN3/uLjF/gcAAIBm5O5/fNxi/wMAAEAzcvc/IW7pZP/r/1vr/++w6/ed1//v1C76f/2//l//3zr9/zDv/4/Y+a+50/VD/b/+3/v/5/f/w6+j6//ZZG79f+7+J8Ytnex/AAAA6EHu/ifFLfY/AAAANCN3/5PjFvsfAAAAmpG7/ylxSyf7/2j6/81Bvv7f+//6f/2//l//PzX9/zD9/4hW3v+/xO+abffzB7Xtz99+/z9M/88mc+v/c/c/NW7pZP8DAABAD3L3Py1usf8BAACgGbn7nx632P8AAADQjNz9z4hbOtn/3v/X/y+j/8+voP/X/x9+/5/0/8uk/x+m/x/RSv9/ibbdzy/98+v/9f+sm1v/n7v/mXFLJ/sfAAAAepC7/1lxi/0PAAAAzcjd/+y4xf4HAACAZuTuf07c0sn+1//r/5fR/3v/X//v/X/9/8XR/w/T/4/Q/+v/9f979f+jf379P5vMrf/P3X9t3NLJ/gcAAIAe5O5/btxi/wMAAEAzcvc/L26x/wEAAKAZufufH7d0sv+30f8fO+/q//X/+n/9v/5f/z8l/f8w/f8I/b/+X//v/X8mNaP+/7zfdWr1grilk/0PAAAAPcjd/8K4xf4HAACAZuTuf1HcYv8DAABAM3L3vzhu6WT/e/9/Nv3/Ts7XVv9/erVa6f9Xnfb/p8/797O+L/X/+v8joP8ftv/+/+brz37nnqX/1/8P0f/r//X/XGhG/f/Oj3P3vyRu6WT/AwAAQA9y9780brH/AQAAoBm5+18Wt9j/AAAA0Izc/S+PWzrZ//r/2fT/O9rq/73/f+H3R0/9v/f/1+n/j4b+f5j3/0fo//X/+n/9P5OaW/+fu/8VcdOJ45f8RwQAAABmJnf/K+OWTv7+HwAAAHqQu/9VcYv9DwAAAAt17drP5O5/ddzSyf7X/0/b/5847+f0//r/C78/9P/6f/3/4dP/D9P/j9D/6//1//p/JjW3/j93/2vilk72PwAAAPQgd/91cYv9DwAAAM3I3f/auMX+BwAAgGbk7r8+bulk/+v/vf+v/9f/6/83f339/zLp/4fp/0fo//X/2+3/T577H/X/tGEf/f+ZM2euOvT+P3f/6+KWTvY/AAAA9CB3/+vjFvsfAAAAmpG7/w1xi/0PAAAAzcjd/8a4pZP9r//vtP/Pb/Vl9f9Xr1b6f/2//l//P0z/P0z/P0L/r//3/r/+n0nN7f3/3P1vils62f8AAADQg9z9b45b7H8AAABoRu7+t8Qt9j8AAAA0I3f/W+OWTva//r/T/t/7//p//f9R9/+3rfT/R2IR/f/pvb/+3Pv/a/T/+v8B3fX/97z7rh/q//X/rJtb/5+7/21xSyf7HwAAAHqQu//tcYv9DwAAAM3I3f+OuMX+BwAAgGbk7n9n3HR5J/tf/6//1//r//X/m7/+Eb//f2K1Wun/J7CI/n/A3Pv/ad7/v/A/5efo//X/S/78+n/9P+vm1v/n7n9X3NLJ/gcAAIAe5O5/d9xi/wMAAEAzcvffELfY/wAAANCM3P3viVs62f/6f/2//n+6/v+yPb4f9P/x/bCt/v+aRfT/3v+fiP5/2Dz6/73p//X/S/78+n/9PxdvW/1/7v73xi2d7H8AAADoQe7+98Ut9j8AAAA0I3f/++MW+x8AAACakbv/A3FLJ/tf/6//30//n59T/9/W+/8nZ9f/n9r1z+vk/X/9/0T0/8P0/yP0//p//f+1+n+mNLf3/3P3fzBu6WT/AwAAQA9y938obv2fbu1/AAAAaEbu/g/HLfY/AAAANCN3/0filk72v/5f/+/9/8X0/5flP2p+7//fsuvnZ/f+v/6/K/r/Yfr/Efr/Q+jnb//U+v8F9f/e/2dSc+v/c/d/NG7pZP8DAABAD3L3fyxusf8BAACgGbn7Px632P8AAADQjNz9N8Ytnex//b/+X/+/mP7/0N7/P3j/v9sS+/9j+v9m6P+HHU3/f1r/r/+vfv6y+E+B/l//P/b7adPc+v/c/Z+IWzrZ/wAAANCD3P2fjFvsfwAAAGhG7v5PxS32PwAAACzS5Rt+Lnf/p+OWTva//l//r//X/+v/N399/f8ybaX/z28K/b/3/0M//f+dd/3ooP38UX/+C//3l/5f/8/05tb/5+7/TNzSyf4HAACAHuTu/2zcYv8DAABAM3L3fy5usf8BAACgGbn7Px+3dLL/9f/L6P/zO1P/r//X/+v/9f/DvP8/TP8/Qv9/Mf38DXv9/qX1/1N/fv2//p91c+v/c/d/IW7pZP8DAABAD3L3fzFusf8BAACgGbn7vxS32P8AAADQjJ3dn3FZh/tf/7+M/t/7//p//b/+X/9/cfT/w/T/I/T/W+3nl/759f/6f9bNrf//8s7vOrX6StzSyf4HAACAHuTu/2rcYv8DAADALO39/yqwt9z9X4tb7H8AAABoRu7+r8ctnex//b/+fxn9/5kzZ67S/+v/d/95zvX/N+n/Kfr/Yfr/Efp//b/+X//PpObW/+fu/0bc0sn+BwAAgB7k7v9m3GL/AwAAQDNy938rbrH/AQAAoBm5+78dt3Sy//X/M+j/T+n/vf+v/195/1//PxH9/zD9/4gW+/9TF//H33Y/f1Db/vz6f/0/6+bW/+fu/07c0sn+BwAAgB7k7v9u3GL/AwAAQDNy938vbrH/AQAAoBm5+78ft3Sy//X/R9f/3/6vXS/v/59ebf78+n/9v/5f/3/Y9P/D9P8jWuz/92Hb/fzSP7/+X//Purn1/7n7fxC37B5+x/f3pwQAAADmJHf/D+OWTv7+HwAAAHqQu/9HcYv9DwAAAM3I3f/juKWT/a//n8H7/w32/97/3/z9of+fdf9/TP/fBv3/MP3/CP2//l//P1H/n9/N+v/eza3/z93/k7ilk/0PAAAAPcjd/9O4xf4HAACAZuTu/1ncYv8DAABAM3L33xS3nLf/N7XdrdD/6//1//p//f/mr6//Xyb9/7CL7f9Prg7W/yf9v/5f/99r/+/9f86aW/+fu//ncYu//wcAAIDFOb7Hz+fu/0XcYv8DAABAM3L3/zJusf8BAACgGbn7fxW33HpsWx/pSOn/9f/6f/2//n/z19f/L5P+f5j3/0ds6v9X+v999vNX6P/b6P9XK/0/Bze3/j93/6/jFn//DwAAAM3I3f+buMX+BwAAgGbk7v9t3GL/AwAAQDNy9/8ubulk/+v/9f8H7P930kz9/1n6/7P0/5vp/4+G/n+Y/n+E9/+9/6//9/4/k5pb/5+7/+a4pZP9DwAAAD3I3f/7uMX+BwAAgGbk7v9D3GL/AwAAQDNy9/8xbulk/2+t/49/qfX/i+//vf+v/9f/6/9nRf8/TP8/Qv+v/9f/6/+Z1Nz6/9z9f4pbOtn/AAAA0IPc/X+OW+x/AAAAaEbu/r/ELfY/AAAANCN3/1/jlk72v/f/D9r/nw1U9P+7P7/+fzf9f3w/6P/1/0dA/z9M/79Z/Rul/9f/6//1/0xqbv1/7v5b4pZO9j8AAAD0IHf/3+IW+x8AAACakbv/1rjF/gcAAIBm5O7/e9zSyf7X/3v/X/+v/9f/b/76+v9l0v8P22b/f687jn/ZZb7/f3ztH7Pg/j8/gv5f/6//ZxJz6/9z9/8jbulk/wMAAEAPcvf/M26x/wEAAKAZufv/FbfY/wAAANCM3P3/jls62f8j/f/J+oX6/0H6/92fX/+/+ftD/6//1/8fPv3/MO//j/D+v/f/9f/6fyY1t/4/d/9/4pZO9j8AAAD0IHf/bXGL/Q8AAADNyN3/37jF/gcAAIBm5O7/X9zSyf73/v+S+v8r9P/6f/2//l//P0L/P0z/P0L/r//X/+v/mdTc+v/c/f8PAAD//xhsRHk=")
r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x6100)
write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003)

2.499981299s ago: executing program 8 (id=5765):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa8, 0x0, &(0x7f00000007c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5810011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803c474719193467201bd7c0b9cad1d390aec6d1531001128afc5bbfcc20d431c6f04aa6846a184d8f21d2eed601ffcf943ac714f9b3e40dec9355bed06b122adb3a923a73e056f745b132d0f57b0041e37a646fe0cd27f108a4ec2338e16fe123fb981532a0bd4", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

2.380345396s ago: executing program 7 (id=5766):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xb8, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000340)='b', 0x1}], 0x1}}], 0x2, 0x10)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xffffffff}, 0xc)

2.356760547s ago: executing program 2 (id=5767):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3f}, 0x1c)
syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @remote, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0)

2.123767119s ago: executing program 8 (id=5769):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xba, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d998e6f578af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85617a3c037c8ea9f1a44bc30ed6239eb52ee012b4c3e1932780b192d2d6139d2f1b517210627c69e56ed195980a9a880700d5f059a6b7bb7b6a9787136a408914de373597695c519462765a11858c16e8e58a4e73115f8b65ee1bea3743cff6af6bb9ad3a5793d1295a1bf328", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

2.102702011s ago: executing program 2 (id=5770):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x91b46000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0)

2.066604102s ago: executing program 7 (id=5771):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
sendfile(r0, r1, 0x0, 0x8000fb00)

1.928019459s ago: executing program 9 (id=5772):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x92, 0x7fff0000}]})
r0 = getpgrp(0x0)
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x31, &(0x7f00000003c0)={0x40026, 0x7f, 0xfffffffe})

1.91261919s ago: executing program 8 (id=5773):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nodiscard}]}, 0x3, 0x466, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x60)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c65)
close(r0)

1.691434142s ago: executing program 9 (id=5775):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000100), 0x0}, 0x20)

1.438429515s ago: executing program 8 (id=5776):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5531, &(0x7f0000000b00)="$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")
r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
fallocate(r0, 0x0, 0x0, 0x8800000)

1.375952668s ago: executing program 9 (id=5777):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8808}, 0x0)

1.182942778s ago: executing program 9 (id=5778):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x80000001, 0x0, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x400, 0x0, 0x8008, 0x7ffffffffffffffc}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xe, 0x5, 0xffffffff, 0x1}}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0)

698.763063ms ago: executing program 1 (id=5779):
unshare(0x400)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r0, 0x9, 0x0)

552.077031ms ago: executing program 2 (id=5780):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x52, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x40044c4)
recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)}}], 0x2, 0x100, 0x0)

529.056253ms ago: executing program 9 (id=5781):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x57a7, 0x1, 0x2, 0x0, "518aba4d884c01ba95f3832700000000002000"})
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa41d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828eea399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f0e817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

324.028733ms ago: executing program 2 (id=5782):
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000800)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

204.27151ms ago: executing program 9 (id=5783):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x6c5, 0x9000, 0x1, r2, 0x4})

203.57475ms ago: executing program 7 (id=5784):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000001100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0)

0s ago: executing program 2 (id=5785):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500), &(0x7f0000000080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/201, 0xc9}], 0x1)
syz_clone(0x1200, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

er author to help with further stabilization of the driver.
[  701.292263][ T4340] pvrusb2: **********
[  701.296503][ T6581] syz-executor: attempt to access beyond end of device
[  701.296503][ T6581] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  701.315385][T17387] loop6: detected capacity change from 0 to 32768
[  701.409199][ T2310] pvrusb2: Invalid write control endpoint
[  701.438416][T17387] XFS (loop6): Mounting V5 Filesystem
[  701.568786][T17387] XFS (loop6): Ending clean mount
[  701.626215][T17395] pvrusb2: Invalid write control endpoint
[  701.633733][T17387] XFS (loop6): Quotacheck needed: Please wait.
[  701.669318][ T6072] usb 8-1: USB disconnect, device number 7
[  701.765892][T17423] ALSA: mixer_oss: invalid OSS volume 'dev/vbi#'
[  701.875655][T17387] XFS (loop6): Quotacheck: Done.
[  701.926148][ T2310] pvrusb2: Invalid write control endpoint
[  701.932589][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  701.986630][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  702.024423][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  702.054458][ T2310] pvrusb2: Device being rendered inoperable
[  702.099172][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  702.113541][T11890] XFS (loop6): Unmounting Filesystem
[  702.195866][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  702.246412][ T2310] pvrusb2: Attached sub-driver cx25840
[  702.263596][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  702.295503][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  702.840194][T17444] loop4: detected capacity change from 0 to 64
[  703.135540][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4701'.
[  703.184789][T17448] Bluetooth: hci5: Frame reassembly failed (-84)
[  703.279954][T17450] loop1: detected capacity change from 0 to 512
[  703.352852][T17450] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  703.375888][T17450] ext4 filesystem being mounted at /957/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  703.683828][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  703.778329][T17463] loop4: detected capacity change from 0 to 1024
[  704.155959][ T4269] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  704.355687][ T4269] usb 2-1: Using ep0 maxpacket: 8
[  704.363048][ T4269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  704.384685][ T4269] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  704.394235][ T4269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.431692][ T4269] usb 2-1: config 0 descriptor??
[  704.582053][T17483] loop6: detected capacity change from 0 to 1024
[  704.607754][T17483] EXT4-fs: Ignoring removed mblk_io_submit option
[  704.636554][T17483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  704.665328][ T4269] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  704.680689][T17483] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  704.771692][T11890] EXT4-fs (loop6): unmounting filesystem.
[  704.896361][ T4340] usb 2-1: USB disconnect, device number 25
[  705.170796][T17494] overlayfs: failed to clone upperpath
[  705.255792][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  705.344504][T17498] loop4: detected capacity change from 0 to 128
[  705.387099][T17498] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  705.823427][   T52] block nbd0: Possible stuck request ffff888024ea0000: control (read@0,4096B). Runtime 420 seconds
[  705.859496][ T6581] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh
[  705.916066][ T6581] UDF-fs: error (device loop4): udf_read_inode: (ino 114) failed !bh
[  706.368461][T17521] loop6: detected capacity change from 0 to 128
[  706.563447][T17521] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  706.605230][T17521] ext4 filesystem being mounted at /363/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  706.756415][T11890] EXT4-fs (loop6): unmounting filesystem.
[  707.070116][T17516] loop7: detected capacity change from 0 to 32768
[  707.260614][ T6797] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  707.272846][ T6797] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.283904][T17516] XFS (loop7): Mounting V5 Filesystem
[  707.335914][T17516] XFS (loop7): Ending clean mount
[  707.367306][T17516] XFS (loop7): Quotacheck needed: Please wait.
[  707.487206][ T6797] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  707.535668][ T6797] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.581742][T17516] XFS (loop7): Quotacheck: Done.
[  707.621570][   T26] audit: type=1800 audit(2000000523.902:293): pid=17516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4730" name="file1" dev="loop7" ino=4422 res=0 errno=0
[  707.826379][T15229] XFS (loop7): Unmounting Filesystem
[  707.839486][ T6797] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  707.850331][ T6797] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.107738][ T6797] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  708.183938][ T6797] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  708.446863][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  708.475824][ T4279] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  708.490362][ T4279] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  708.498339][ T4279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  708.507098][ T4279] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  708.514452][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  709.176349][T17583] loop6: detected capacity change from 0 to 512
[  709.238759][T17563] chnl_net:caif_netlink_parms(): no params data found
[  709.338548][T17583] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  709.356115][T17583] ext4 filesystem being mounted at /369/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  709.386275][T17568] loop1: detected capacity change from 0 to 32768
[  709.503581][T17583] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 18: comm syz.6.4754: lblock 23 mapped to illegal pblock 18 (length 1)
[  709.559547][T17601] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz.6.4754: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  709.583577][T17568] XFS (loop1): Mounting V5 Filesystem
[  709.634206][T17568] XFS (loop1): Ending clean mount
[  709.677132][T17563] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.684486][T17563] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.693583][T17563] device bridge_slave_0 entered promiscuous mode
[  709.703598][T17563] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.709467][T17601] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 12: comm syz.6.4754: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  709.723914][T17563] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.758262][T17563] device bridge_slave_1 entered promiscuous mode
[  709.786142][T17601] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 13: comm syz.6.4754: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  709.816555][ T4278] XFS (loop1): Unmounting Filesystem
[  709.833497][T17563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  709.875268][T17601] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 14: comm syz.6.4754: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  709.965845][T17601] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 15: comm syz.6.4754: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  710.014417][T17563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  710.167320][T17609] netem: incorrect gi model size
[  710.177171][T11890] EXT4-fs (loop6): unmounting filesystem.
[  710.196413][T17609] netem: change failed
[  710.393814][T17563] team0: Port device team_slave_0 added
[  710.428201][T17563] team0: Port device team_slave_1 added
[  710.488500][T17563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  710.517700][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  710.587435][T17563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  710.615745][ T4279] Bluetooth: hci2: command 0x0409 tx timeout
[  710.634623][T17563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  710.707599][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  710.765023][T17618] loop7: detected capacity change from 0 to 8192
[  710.788180][T17563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  711.052779][T17563] device hsr_slave_0 entered promiscuous mode
[  711.075441][T17563] device hsr_slave_1 entered promiscuous mode
[  711.903709][T17630] loop6: detected capacity change from 0 to 512
[  711.973965][T17630] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  712.043508][T17630] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  712.695797][ T4279] Bluetooth: hci2: command 0x041b tx timeout
[  712.731081][T17646] loop6: detected capacity change from 0 to 64
[  712.788379][T17626] loop1: detected capacity change from 0 to 32768
[  712.937950][T17646] BFS-fs: bfs_readdir(): Bad f_pos=00000002 for loop6:00000002
[  713.028769][T17563] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  713.103699][T17563] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  713.296832][T17563] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  713.338301][T17563] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  713.720257][T17668] loop7: detected capacity change from 0 to 2048
[  713.842857][T17668] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  714.201192][T17680] netlink: 'syz.1.4783': attribute type 10 has an invalid length.
[  714.273724][T17678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  714.335250][ T1118] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  714.415193][ T1118] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  714.435879][ T1118] EXT4-fs (loop7): This should not happen!! Data will be lost
[  714.435879][ T1118] 
[  714.456243][ T1118] EXT4-fs (loop7): Total free blocks count 0
[  714.462495][ T1118] EXT4-fs (loop7): Free/Dirty block details
[  714.482761][ T1118] EXT4-fs (loop7): free_blocks=4096
[  714.495813][ T1118] EXT4-fs (loop7): dirty_blocks=512
[  714.501120][ T1118] EXT4-fs (loop7): Block reservation details
[  714.515762][ T1118] EXT4-fs (loop7): i_reserved_data_blocks=32
[  714.539800][ T1118] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[  714.653973][T17563] 8021q: adding VLAN 0 to HW filter on device bond0
[  714.769179][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  714.776841][ T4279] Bluetooth: hci2: command 0x040f tx timeout
[  714.784784][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  715.151200][T17563] 8021q: adding VLAN 0 to HW filter on device team0
[  715.275447][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  715.305101][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  715.357077][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.364269][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state
[  715.390841][ T6797] device hsr_slave_0 left promiscuous mode
[  715.422226][ T6797] device hsr_slave_1 left promiscuous mode
[  715.443564][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  715.469407][ T6797] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.506317][ T6797] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  715.513927][ T6797] batman_adv: batadv0: Removing interface: batadv_slave_1
[  715.537000][ T6797] device bridge_slave_1 left promiscuous mode
[  715.543434][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.567246][ T6797] device bridge_slave_0 left promiscuous mode
[  715.586072][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state
[  715.721033][ T6797] device veth1_macvtap left promiscuous mode
[  715.749506][ T6797] device veth0_macvtap left promiscuous mode
[  715.773933][ T6797] device veth1_vlan left promiscuous mode
[  715.786322][ T6797] device veth0_vlan left promiscuous mode
[  715.832349][T17710] loop7: detected capacity change from 0 to 4096
[  715.930780][T17710] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  716.002567][T17710] overlayfs: upper fs does not support tmpfile.
[  716.039778][T17710] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  716.051447][T17710] overlayfs: failed to resolve './cgroup': -2
[  716.364930][ T6797] team0 (unregistering): Port device batadv1 removed
[  716.867360][ T4279] Bluetooth: hci2: command 0x0419 tx timeout
[  717.443007][T17733] loop6: detected capacity change from 0 to 1920
[  717.460281][T17733] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  717.483612][T17733] NILFS (loop6): total number of segment blocks 1008 exceeds device size (960 blocks)
[  717.838670][   T14] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  718.006263][ T6797] team0 (unregistering): Port device team_slave_1 removed
[  718.059662][   T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  718.094865][   T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  718.106924][   T14] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  718.120644][   T14] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  718.129844][   T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  718.151055][   T14] usb 8-1: config 0 descriptor??
[  718.214410][ T6797] team0 (unregistering): Port device team_slave_0 removed
[  718.314691][ T6797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  718.419521][ T6797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  718.636354][   T14] microsoft 0003:045E:07DA.0029: ignoring exceeding usage max
[  718.647228][   T14] microsoft 0003:045E:07DA.0029: unsupported Resolution Multiplier 0
[  718.657796][   T14] microsoft 0003:045E:07DA.0029: implement() called with n (152) > 32! (kworker/0:1)
[  718.848737][   T14] microsoft 0003:045E:07DA.0029: unsupported Resolution Multiplier 0
[  718.858136][   T14] microsoft 0003:045E:07DA.0029: No inputs registered, leaving
[  718.869525][   T14] microsoft 0003:045E:07DA.0029: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  718.881512][   T14] microsoft 0003:045E:07DA.0029: no inputs found
[  718.888023][   T14] microsoft 0003:045E:07DA.0029: could not initialize ff, continuing anyway
[  719.055310][ T6605] usb 8-1: USB disconnect, device number 8
[  719.098287][T17739] fido_id[17739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  719.301576][ T6797] bond0 (unregistering): Released all slaves
[  719.455139][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  719.465327][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  719.474645][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  719.483461][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.490740][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.584408][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  719.594332][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  719.646727][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  719.697657][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  719.737324][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  719.789206][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  719.823716][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  719.846126][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  719.876328][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  719.904479][T17563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  719.950489][T17563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  720.027089][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  720.057921][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  720.326743][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4808'.
[  720.362418][T17760] loop7: detected capacity change from 0 to 256
[  720.406100][T17759] syzkaller0: tun_chr_ioctl cmd 3221841430
[  720.425774][T17760] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  720.486028][T17760] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  720.516697][T17760] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  720.579469][   T26] audit: type=1800 audit(2000000536.862:294): pid=17760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4809" name="file1" dev="loop7" ino=1048744 res=0 errno=0
[  721.315985][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  721.324404][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  721.349170][T17563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  722.560541][T17819] option changes via remount are deprecated (pid=17818 comm=syz.2.4827)
[  723.073189][T17836] loop1: detected capacity change from 0 to 256
[  723.082828][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  723.101829][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  723.135521][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  723.160393][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  723.212646][T17563] device veth0_vlan entered promiscuous mode
[  723.228929][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  723.250781][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  723.302284][T17563] device veth1_vlan entered promiscuous mode
[  723.445989][T12237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  723.467605][T12237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  723.511176][T17563] device veth0_macvtap entered promiscuous mode
[  723.546413][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4837'.
[  723.576578][T17563] device veth1_macvtap entered promiscuous mode
[  723.617044][T17842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4837'.
[  723.664997][T17563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.710711][T17563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.744976][T17563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.799110][T17563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.835721][T17563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.882367][T17563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  723.952704][T17563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  723.984224][T17563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.005335][T17563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  724.019564][T17563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.042355][T17563] batman_adv: batadv0: Interface activated: batadv_slave_0
[  724.083583][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  724.109349][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  724.151093][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  724.232816][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  724.296958][T17563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  724.385727][T17563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.420126][T17563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  724.461387][T17563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.490745][T17563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  724.543968][T17563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.586430][T17563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  724.609405][T17563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.644145][T17563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  724.676018][T17563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.716876][T17563] batman_adv: batadv0: Interface activated: batadv_slave_1
[  724.749687][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  724.766926][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  724.782309][T17563] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  724.822284][T17563] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  724.831764][   T14] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  724.846577][T17563] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  724.862871][T17563] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  724.880429][T17872] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4848'.
[  725.069814][   T14] usb 8-1: Using ep0 maxpacket: 16
[  725.090655][   T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  725.123280][   T14] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  725.147193][   T14] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  725.174327][   T14] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  725.186860][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  725.194766][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  725.243154][   T14] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.263695][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  725.274982][   T14] usb 8-1: config 0 descriptor??
[  725.309476][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  725.322671][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  725.421801][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  725.714694][   T14] microsoft 0003:045E:07DA.002A: No inputs registered, leaving
[  725.745966][   T14] microsoft 0003:045E:07DA.002A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  725.789525][   T14] microsoft 0003:045E:07DA.002A: no inputs found
[  725.817439][   T14] microsoft 0003:045E:07DA.002A: could not initialize ff, continuing anyway
[  725.923450][ T4269] usb 8-1: USB disconnect, device number 9
[  726.264076][T17892] fido_id[17892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  726.494076][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4856'.
[  726.522801][T17902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  726.728683][T17907] loop6: detected capacity change from 0 to 4096
[  726.804318][T17907] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  726.837407][ T4269] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  726.837645][T17907] ntfs3: loop6: Failed to load $Extend.
[  726.874955][T17902] batman_adv: batadv0: Removing interface: batadv_slave_1
[  727.038258][ T4269] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  727.055435][ T4269] usb 9-1: config 0 interface 0 has no altsetting 0
[  727.074330][ T4269] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  727.112042][ T4269] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  727.133127][ T4269] usb 9-1: Product: syz
[  727.158170][ T4269] usb 9-1: Manufacturer: syz
[  727.169880][ T4269] usb 9-1: SerialNumber: syz
[  727.183932][ T4269] usb 9-1: config 0 descriptor??
[  727.215719][ T4269] usb 9-1: selecting invalid altsetting 0
[  727.223254][   T26] audit: type=1800 audit(2000000543.512:295): pid=17914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4858" name="file1" dev="loop6" ino=30 res=0 errno=0
[  727.442156][ T4269] usb 9-1: USB disconnect, device number 2
[  727.536209][T17923] netlink: 340 bytes leftover after parsing attributes in process `syz.7.4863'.
[  727.707015][T17930] input: syz0 as /devices/virtual/input/input30
[  727.779004][ T4691] udevd[4691]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  727.994535][T17936] netlink: 'syz.2.4868': attribute type 3 has an invalid length.
[  728.079767][T17936] netlink: 812 bytes leftover after parsing attributes in process `syz.2.4868'.
[  728.130637][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4870'.
[  728.175915][T17938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4870'.
[  728.185063][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4870'.
[  728.221791][T17938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4870'.
[  728.305632][T17938] netlink: 'syz.1.4870': attribute type 6 has an invalid length.
[  729.037686][T17968] device batadv0 entered promiscuous mode
[  729.058506][T17968] device bond0 entered promiscuous mode
[  729.072463][T17968] device bond_slave_0 entered promiscuous mode
[  729.084408][T17968] device bond_slave_1 entered promiscuous mode
[  729.128244][T17968] 8021q: adding VLAN 0 to HW filter on device hsr1
[  729.167519][T17968] device batadv0 left promiscuous mode
[  729.192816][T17968] device bond0 left promiscuous mode
[  729.211371][T17968] device bond_slave_0 left promiscuous mode
[  729.231021][T17968] device bond_slave_1 left promiscuous mode
[  729.279112][T17974] loop7: detected capacity change from 0 to 512
[  729.327903][T17974] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  729.354609][T17974] EXT4-fs (loop7): 1 truncate cleaned up
[  729.374580][T17974] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  729.925088][T15229] EXT4-fs (loop7): unmounting filesystem.
[  730.151361][T17995] loop7: detected capacity change from 0 to 128
[  730.232460][T17995] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  730.310423][    C1] vkms_vblank_simulate: vblank timer overrun
[  730.321105][T17995] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  730.849763][T15229] EXT4-fs (loop7): unmounting filesystem.
[  731.070837][T18019] loop7: detected capacity change from 0 to 256
[  731.131549][T18019] exfat: Deprecated parameter 'utf8'
[  731.176530][T18019] exfat: Deprecated parameter 'namecase'
[  731.206156][T18019] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  731.600093][T18032] loop8: detected capacity change from 0 to 256
[  731.624677][T18034] loop7: detected capacity change from 0 to 256
[  731.674578][T18034] exfat: Deprecated parameter 'namecase'
[  731.680687][T18034] exfat: Deprecated parameter 'namecase'
[  731.763843][T18034] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  731.970240][ T4269] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  732.172207][ T4269] usb 9-1: Using ep0 maxpacket: 32
[  732.195677][ T4269] usb 9-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  732.260423][ T4269] usb 9-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  732.295011][ T4269] usb 9-1: config 0 interface 0 has no altsetting 0
[  732.318656][ T4269] usb 9-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[  732.336326][T18045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4902'.
[  732.357791][ T4269] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.367457][T18015] loop6: detected capacity change from 0 to 32768
[  732.399254][ T4269] usb 9-1: config 0 descriptor??
[  732.581502][T18015] XFS (loop6): Mounting V5 Filesystem
[  732.722942][T18015] XFS (loop6): Ending clean mount
[  732.816886][T18063] netlink: 'syz.7.4904': attribute type 10 has an invalid length.
[  732.830663][ T4269] wacom 0003:056A:00C6.002B: unknown main item tag 0x0
[  732.856218][ T4269] wacom 0003:056A:00C6.002B: unknown main item tag 0x0
[  732.863215][ T4269] wacom 0003:056A:00C6.002B: unknown main item tag 0x0
[  732.888194][ T4269] wacom 0003:056A:00C6.002B: unknown main item tag 0x0
[  732.895314][ T4269] wacom 0003:056A:00C6.002B: unknown main item tag 0x0
[  732.910875][ T4269] wacom 0003:056A:00C6.002B: unknown main item tag 0x0
[  732.922245][ T4269] wacom 0003:056A:00C6.002B: unknown main item tag 0x6
[  732.933919][ T4269] wacom 0003:056A:00C6.002B: unknown main item tag 0x3
[  732.960792][ T4269] wacom 0003:056A:00C6.002B: unknown main item tag 0x7
[  732.989913][ T4269] wacom 0003:056A:00C6.002B: hidraw0: USB HID v0.81 Device [HID 056a:00c6] on usb-dummy_hcd.8-1/input0
[  733.142858][   T14] usb 9-1: USB disconnect, device number 3
[  733.149965][   T26] audit: type=1800 audit(2000000549.432:296): pid=18015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4891" name="file1" dev="loop6" ino=6150 res=0 errno=0
[  733.235799][ T6605] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  733.260254][T18071] fido_id[18071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  733.295406][T18063] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  733.317538][T11890] XFS (loop6): Unmounting Filesystem
[  733.335083][T18062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  733.434696][ T6605] usb 2-1: unable to get BOS descriptor or descriptor too short
[  733.466755][ T6605] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  733.511883][ T6605] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  733.541749][ T6605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.566711][T18077] use of bytesused == 0 is deprecated and will be removed in the future,
[  733.595681][ T6605] usb 2-1: Product: syz
[  733.600168][ T6605] usb 2-1: Manufacturer: syz
[  733.604832][ T6605] usb 2-1: SerialNumber: syz
[  733.651180][T18077] use the actual size instead.
[  733.859728][ T6605] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  734.078731][ T6605] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  734.108345][ T6605] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  734.220110][   T26] audit: type=1400 audit(2000000550.502:297): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A3A302020343A302020353A302020363A3020373A300A20454752455353207072696F72697479206D617070696E67733A pid=18084 comm="syz.7.4913"
[  734.480989][ T6605] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  734.526667][ T6603] kernel write not supported for file [eventfd] (pid: 6603 comm: kworker/1:11)
[  734.586811][ T6605] usb 2-1: USB disconnect, device number 26
[  734.605350][T18096] IPVS: sh: FWM 4 0x00000004 - no destination available
[  734.627790][T18095] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4917'.
[  734.867944][T18101] loop7: detected capacity change from 0 to 64
[  734.898336][ T4630] udevd[4630]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  735.553406][T18121] loop1: detected capacity change from 0 to 1024
[  735.896568][   T52] block nbd0: Possible stuck request ffff888024ea0000: control (read@0,4096B). Runtime 450 seconds
[  736.265624][ T6603] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  736.312082][T18142] loop6: detected capacity change from 0 to 256
[  736.465717][ T6603] usb 3-1: Using ep0 maxpacket: 32
[  736.474019][ T6603] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  736.522313][ T6603] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  736.595891][T18149] loop7: detected capacity change from 0 to 128
[  736.600101][ T6603] usb 3-1: config 0 interface 0 has no altsetting 0
[  736.622455][T18149] EXT4-fs: inline encryption not supported
[  736.652703][ T6603] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  736.673403][T18149] EXT4-fs (loop7): Test dummy encryption mode enabled
[  736.706530][ T6603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.752575][ T6603] usb 3-1: Product: syz
[  736.757346][T18149] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  736.773404][ T6603] usb 3-1: Manufacturer: syz
[  736.778735][ T6603] usb 3-1: SerialNumber: syz
[  736.794761][ T6603] usb 3-1: config 0 descriptor??
[  736.812291][T18149] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  737.217546][ T6603] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  737.416223][T18149] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  737.582402][T15229] EXT4-fs (loop7): unmounting filesystem.
[  737.621496][ T6603] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  737.669318][ T6603] usb 3-1: USB disconnect, device number 48
[  737.951713][T18179] loop1: detected capacity change from 0 to 256
[  737.987432][T18179] exfat: Deprecated parameter 'utf8'
[  737.992852][T18179] exfat: Deprecated parameter 'namecase'
[  738.097751][T18179] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  738.527544][T18197] loop1: detected capacity change from 0 to 1024
[  738.534950][T18197] EXT4-fs: Ignoring removed orlov option
[  738.707429][T18197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  738.822108][T18197] EXT4-fs error (device loop1): __ext4_new_inode:1291: comm syz.1.4947: failed to insert inode 12: doubly allocated?
[  739.169967][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  739.863725][T18238] netlink: 'syz.6.4961': attribute type 10 has an invalid length.
[  740.027529][T18238] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  740.112170][T18237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  740.186406][T18248] loop8: detected capacity change from 0 to 1024
[  740.219458][T18250] program syz.7.4966 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  740.235755][T18248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  740.419790][T18256] device macvlan2 entered promiscuous mode
[  740.452075][T18256] device bridge0 entered promiscuous mode
[  740.585649][   T14] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  740.805910][   T14] usb 2-1: Using ep0 maxpacket: 8
[  740.817401][   T14] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  740.859099][   T14] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  740.926672][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.968668][   T14] usb 2-1: Product: syz
[  740.973018][   T14] usb 2-1: Manufacturer: syz
[  740.985698][   T14] usb 2-1: SerialNumber: syz
[  741.027509][   T14] usb 2-1: config 0 descriptor??
[  741.058018][   T14] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  741.098152][   T14] usb 2-1: setting power ON
[  741.102773][   T14] dvb-usb: bulk message failed: -22 (2/0)
[  741.152741][   T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  741.183866][   T14] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  741.210237][   T14] usb 2-1: media controller created
[  741.260068][T18252] dvb-usb: bulk message failed: -22 (3/0)
[  741.273251][   T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  741.285835][T18252] dvb-usb: bulk message failed: -22 (4/0)
[  741.291787][T18252] cxusb: i2c read failed
[  741.332765][   T14] usb 2-1: selecting invalid altsetting 6
[  741.349621][   T14] usb 2-1: digital interface selection failed (-22)
[  741.362377][T18274] cxusb: i2c rd: len=147 is too big!
[  741.362377][T18274] 
[  741.370813][   T14] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  741.411477][   T14] usb 2-1: setting power OFF
[  741.445613][   T14] dvb-usb: bulk message failed: -22 (2/0)
[  741.465827][   T14] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  741.532713][   T14] (NULL device *): no alternate interface
[  741.639011][   T14] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  741.703312][   T14] usb 2-1: USB disconnect, device number 27
[  742.011704][T18260] loop7: detected capacity change from 0 to 32768
[  742.068117][T18260] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.4970 (18260)
[  742.139495][T18260] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  742.189151][T18260] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  742.233361][T18260] BTRFS info (device loop7): enabling auto defrag
[  742.242780][T18295] input: syz0 as /devices/virtual/input/input34
[  742.272782][T18260] BTRFS info (device loop7): use no compression
[  742.306692][T18260] BTRFS info (device loop7): max_inline at 4096
[  742.313090][T18260] BTRFS info (device loop7): using free space tree
[  742.622682][T18260] BTRFS info (device loop7): enabling ssd optimizations
[  742.679542][T18312] netlink: 1748 bytes leftover after parsing attributes in process `syz.8.4986'.
[  742.945458][T15229] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  743.089786][T18286] loop6: detected capacity change from 0 to 32768
[  743.178851][    C1] vkms_vblank_simulate: vblank timer overrun
[  743.253615][T18286] jfs_rename did not expect dtDelete to return rc = -2
[  743.276934][    C1] vkms_vblank_simulate: vblank timer overrun
[  743.285950][   T14] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  743.326085][T18294] loop1: detected capacity change from 0 to 32768
[  743.394171][T18286] ERROR: (device loop6): jfs_rename: 
[  743.394171][T18286] 
[  743.475808][T18286] ERROR: (device loop6): remounting filesystem as read-only
[  743.485915][   T14] usb 9-1: Using ep0 maxpacket: 32
[  743.499420][   T14] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  743.619137][   T14] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  743.659988][   T14] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  743.713915][    C1] vkms_vblank_simulate: vblank timer overrun
[  743.715765][   T14] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.804165][   T14] usb 9-1: config 0 descriptor??
[  743.827888][    C1] vkms_vblank_simulate: vblank timer overrun
[  743.849633][   T14] hub 9-1:0.0: USB hub found
[  744.032722][   T14] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  744.450240][   T14] hid-generic 0003:046D:C31C.002C: item fetching failed at offset 0/1
[  744.478055][   T14] hid-generic: probe of 0003:046D:C31C.002C failed with error -22
[  744.765855][ T6601] usb 9-1: USB disconnect, device number 4
[  745.446997][T18378] syzkaller1: tun_chr_ioctl cmd 1074025677
[  745.464671][T18378] syzkaller1: linktype set to 768
[  745.839774][T18391] input: syz1 as /devices/virtual/input/input35
[  745.885722][ T8885] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  745.937839][T18393] loop1: detected capacity change from 0 to 2048
[  746.020674][T18393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  746.066191][T18393] ext4 filesystem being mounted at /1018/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  746.096555][ T8885] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  746.117022][ T8885] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  746.163155][T18393] EXT4-fs (loop1): re-mounted. Quota mode: none.
[  746.177999][ T8885] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  746.235175][ T8885] usb 3-1: config 64 interface 0 has no altsetting 0
[  746.254296][ T8885] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  746.293551][ T8885] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  746.313689][ T8885] usb 3-1: config 64 interface 0 has no altsetting 0
[  746.324423][ T8885] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  746.341285][ T8885] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  746.361319][ T8885] usb 3-1: config 64 interface 0 has no altsetting 0
[  746.388890][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  746.392189][ T8885] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  746.415733][ T8885] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  746.437837][ T8885] usb 3-1: config 64 interface 0 has no altsetting 0
[  746.447361][ T8885] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  746.457511][ T8885] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  746.469194][ T8885] usb 3-1: config 64 interface 0 has no altsetting 0
[  746.477623][ T8885] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  746.487594][ T8885] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  746.497631][    C1] vkms_vblank_simulate: vblank timer overrun
[  746.520376][ T8885] usb 3-1: config 64 interface 0 has no altsetting 0
[  746.554607][ T8885] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  746.608263][ T8885] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  746.641120][ T8885] usb 3-1: config 64 interface 0 has no altsetting 0
[  746.663663][ T8885] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9
[  746.710569][ T8885] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  746.738714][ T8885] usb 3-1: config 64 interface 0 has no altsetting 0
[  746.751227][ T8885] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  746.764700][ T8885] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  746.779938][ T8885] usb 3-1: Product: syz
[  746.782090][T18417] loop8: detected capacity change from 0 to 512
[  746.799457][ T8885] usb 3-1: Manufacturer: syz
[  746.835724][ T8885] usb 3-1: SerialNumber: syz
[  746.847896][ T8885] yurex 3-1:64.0: USB YUREX device now attached to Yurex #0
[  746.885362][T18417] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  746.985103][T18417] EXT4-fs (loop8): 1 truncate cleaned up
[  747.025761][T18417] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  747.114583][T18422] loop7: detected capacity change from 0 to 8192
[  747.135249][T18422] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  747.148729][T18422] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal
[  747.159384][T18422] REISERFS (device loop7): using ordered data mode
[  747.178237][T18422] reiserfs: using flush barriers
[  747.191803][T18422] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  747.233065][T17563] EXT4-fs (loop8): unmounting filesystem.
[  747.295629][    C1] vkms_vblank_simulate: vblank timer overrun
[  747.301222][T18422] REISERFS (device loop7): checking transaction log (loop7)
[  747.306340][ T6601] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  747.384294][    C0] usb 3-1: yurex_control_callback - control failed: -2
[  747.428879][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  747.435336][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  747.451615][  T125] usb 3-1: USB disconnect, device number 49
[  747.476255][  T125] yurex 3-1:64.0: USB YUREX #0 now disconnected
[  747.506895][ T6601] usb 2-1: Using ep0 maxpacket: 16
[  747.515150][ T6601] usb 2-1: config 0 has no interfaces?
[  747.541095][ T6601] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  747.562219][ T6601] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  747.591453][ T6601] usb 2-1: Manufacturer: syz
[  747.604884][ T6601] usb 2-1: config 0 descriptor??
[  747.611117][T18422] REISERFS (device loop7): Using tea hash to sort names
[  747.636261][T18422] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  747.863226][ T8885] usb 2-1: USB disconnect, device number 28
[  748.034690][T18432] input: syz0 as /devices/virtual/input/input36
[  748.536530][T18444] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5027'.
[  749.129450][T18464] device veth1_to_team entered promiscuous mode
[  749.174370][T18467] device veth1_to_team left promiscuous mode
[  750.095862][  T125] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  750.285721][  T125] usb 8-1: Using ep0 maxpacket: 16
[  750.296899][  T125] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  750.345034][  T125] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.370669][  T125] usb 8-1: Product: syz
[  750.406206][  T125] usb 8-1: Manufacturer: syz
[  750.410910][  T125] usb 8-1: SerialNumber: syz
[  750.456029][ T6601] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  750.465297][  T125] usb 8-1: config 0 descriptor??
[  750.583195][T18475] loop1: detected capacity change from 0 to 32768
[  750.645810][ T6601] usb 3-1: Using ep0 maxpacket: 16
[  750.659058][ T6601] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  750.711599][ T6601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.759496][ T6601] usb 3-1: Product: syz
[  750.784574][ T6601] usb 3-1: Manufacturer: syz
[  750.800418][ T6601] usb 3-1: SerialNumber: syz
[  750.894888][  T125] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  750.937132][  T125] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  750.978010][  T125] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  751.007981][  T125] usb 8-1: media controller created
[  751.041121][ T6601] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  751.074875][T18510] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5051'.
[  751.085906][ T6601] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  751.110349][  T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  751.187289][ T6601] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  751.214388][ T6601] usb 3-1: media controller created
[  751.261932][  T125] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  751.299256][ T6601] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  751.319902][  T125] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  751.419865][ T6601] zl10353_read_register: readreg error (reg=127, ret==-71)
[  751.532091][  T125] usb 8-1: USB disconnect, device number 10
[  751.544417][ T6601] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5
[  751.610660][ T6601] usb 3-1: USB disconnect, device number 50
[  751.641295][  T125] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  751.959593][T18530] loop1: detected capacity change from 0 to 512
[  752.028634][T18530] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5056: bg 0: block 255: padding at end of block bitmap is not set
[  752.056277][T18530] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  752.154072][T18530] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5056: invalid indirect mapped block 65536 (level 0)
[  752.243998][T18530] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.5056: invalid indirect mapped block 32768 (level 2)
[  752.336838][T18530] EXT4-fs (loop1): 1 truncate cleaned up
[  752.363178][T18530] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  752.666415][ T4323] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  752.857794][ T4323] usb 8-1: config index 0 descriptor too short (expected 65170, got 92)
[  752.873218][ T4323] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  752.880938][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  752.924976][ T4323] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  752.968029][ T4323] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.994257][ T4323] usb 8-1: Product: syz
[  753.009150][ T4323] usb 8-1: Manufacturer: syz
[  753.027698][ T4323] usb 8-1: SerialNumber: syz
[  753.305715][ T6080] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  753.449029][T18556] loop1: detected capacity change from 0 to 64
[  753.505862][ T6080] usb 9-1: Using ep0 maxpacket: 32
[  753.516553][ T6080] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  753.562017][ T6080] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.603365][ T6080] usb 9-1: config 0 descriptor??
[  753.833684][ T6080] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  753.857256][ T6080] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  753.886613][ T4323] cdc_ncm 8-1:1.0: SET_CRC_MODE failed
[  753.909328][ T4323] cdc_ncm 8-1:1.0: bind() failure
[  753.916258][ T6080] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  753.923587][ T6080] usb 9-1: media controller created
[  753.942972][ T4323] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[  753.962351][ T4323] cdc_ncm 8-1:1.1: bind() failure
[  753.994208][ T6080] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  754.003544][ T4323] usb 8-1: USB disconnect, device number 11
[  754.023076][T18563] loop1: detected capacity change from 0 to 4096
[  754.097047][ T6080] az6027: usb out operation failed. (-71)
[  754.127957][ T6080] az6027: usb out operation failed. (-71)
[  754.134068][ T6080] stb0899_attach: Driver disabled by Kconfig
[  754.146392][T18568] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  754.197659][ T6080] az6027: no front-end attached
[  754.197659][ T6080] 
[  754.231310][ T6080] az6027: usb out operation failed. (-71)
[  754.282785][ T6080] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  754.313572][ T6080] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input37
[  754.356198][ T6080] dvb-usb: schedule remote query interval to 400 msecs.
[  754.380361][ T6080] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  754.421287][ T6080] usb 9-1: USB disconnect, device number 5
[  754.617357][ T6080] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  754.852110][T18585] loop8: detected capacity change from 0 to 512
[  755.093559][T18585] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  755.138875][T18585] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  755.582554][T17563] EXT4-fs (loop8): unmounting filesystem.
[  756.784472][T18651] device ip6gre2 entered promiscuous mode
[  756.828180][ T4269] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  756.843604][ T4269] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  756.896833][ T6080] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  756.946374][T18659] netlink: 'syz.7.5098': attribute type 3 has an invalid length.
[  757.281958][T18674] loop7: detected capacity change from 0 to 512
[  757.326048][ T6080] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  757.857442][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5108'.
[  757.896020][ T4269] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  758.113481][T18691] loop8: detected capacity change from 0 to 1024
[  758.499983][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5115'.
[  759.595418][T18718] loop7: detected capacity change from 0 to 1024
[  759.692608][T18718] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  759.856956][T18718] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  760.208391][T15229] EXT4-fs (loop7): unmounting filesystem.
[  760.287946][T18734] loop8: detected capacity change from 0 to 256
[  760.295307][T18734] exfat: Deprecated parameter 'namecase'
[  760.438664][T18734] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  760.677200][T18742] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5127'.
[  760.775892][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  761.655770][ T4348] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  761.847907][ T4348] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 14129, setting to 64
[  761.875686][ T4348] usb 3-1: config 0 interface 0 has no altsetting 0
[  761.914935][ T4348] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  761.939595][ T4348] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  761.959701][ T4348] usb 3-1: Product: syz
[  761.969928][ T4348] usb 3-1: Manufacturer: syz
[  761.986170][ T4348] usb 3-1: SerialNumber: syz
[  762.005705][ T4348] usb 3-1: config 0 descriptor??
[  762.046367][ T4348] usb 3-1: selecting invalid altsetting 0
[  762.147611][ T4340] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  762.242437][T18782] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  762.251912][T18782] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  762.262278][T18782] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  762.273159][T18782] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  762.282099][ T4348] usb 3-1: USB disconnect, device number 51
[  762.358418][ T4340] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  762.390015][ T4340] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16648, setting to 1024
[  762.422193][ T4340] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  762.442636][ T4340] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.477928][ T4340] usb 8-1: config 0 descriptor??
[  762.918597][ T4340] keytouch 0003:0926:3333.002D: fixing up Keytouch IEC report descriptor
[  762.943647][ T4340] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.002D/input/input38
[  763.118090][    C1] usb 8-1: input irq status -75 received
[  763.191126][ T4340] keytouch 0003:0926:3333.002D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0
[  763.334714][ T4340] usb 8-1: USB disconnect, device number 12
[  763.654793][T18800] fido_id[18800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  763.777128][T18808] loop8: detected capacity change from 0 to 2048
[  763.853026][T18808] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  763.992394][T18812] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  764.094950][ T4630] udevd[4630]: incorrect nilfs2 checksum on /dev/loop8
[  764.708734][T18828] loop8: detected capacity change from 0 to 256
[  764.812767][T18828] FAT-fs (loop8): unable to read block(103987194760) for building NFS inode
[  765.319359][T18833] loop8: detected capacity change from 0 to 4096
[  765.568958][T18841] loop7: detected capacity change from 0 to 256
[  765.609839][T18841] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  765.670005][T17563] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22.
[  765.706228][T17563] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  765.718332][   T26] audit: type=1800 audit(2000000581.992:298): pid=18841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5157" name="file1" dev="loop7" ino=1048753 res=0 errno=0
[  765.793744][   T26] audit: type=1800 audit(2000000581.992:299): pid=18841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5157" name="file1" dev="loop7" ino=1048753 res=0 errno=0
[  765.827738][   T46] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008)
[  765.862030][   T46] FAT-fs (loop7): Filesystem has been set read-only
[  765.885814][   T46] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008)
[  765.936251][T18847] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  765.979624][   T52] block nbd0: Possible stuck request ffff888024ea0000: control (read@0,4096B). Runtime 480 seconds
[  766.041219][T18851] loop1: detected capacity change from 0 to 1024
[  766.151205][T18851] hfsplus: bad catalog entry type
[  766.376176][    T9] hfsplus: b-tree write err: -5, ino 25
[  766.382108][    T9] hfsplus: b-tree write err: -5, ino 4
[  766.402273][    T9] hfsplus: b-tree write err: -5, ino 2
[  766.418838][    T9] hfsplus: b-tree write err: -5, ino 26
[  767.077896][T18877] loop1: detected capacity change from 0 to 1024
[  767.198453][T18877] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  767.379629][T18877] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5168: bg 0: block 313: padding at end of block bitmap is not set
[  767.516010][T18877] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  767.663916][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  767.906262][T18898] loop7: detected capacity change from 0 to 64
[  767.945201][T18898] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing
[  768.535743][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  768.595827][ T4348] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  768.805821][ T4348] usb 8-1: Using ep0 maxpacket: 8
[  768.813330][ T4348] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  768.845682][ T4348] usb 8-1: config 179 has no interface number 0
[  768.852482][ T4348] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  768.900925][ T4348] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  768.944642][ T4348] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  768.987381][ T4348] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  769.021259][ T4348] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  769.055970][ T4348] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  769.076863][ T4348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.097436][T18909] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  769.347190][ T4348] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input39
[  769.553198][ T6080] usb 8-1: USB disconnect, device number 13
[  769.553248][    C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  769.567666][    C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  769.576496][ T6080] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  769.678211][T18931] loop8: detected capacity change from 0 to 2048
[  769.736954][T18931] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  769.779470][T18931] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  770.605692][ T4348] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  770.817855][ T4348] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  770.838498][ T4348] usb 8-1: config 0 interface 0 has no altsetting 0
[  770.875791][ T4348] usb 8-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  770.915644][ T4348] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  770.942236][T18956] loop8: detected capacity change from 0 to 4096
[  770.956977][ T4348] usb 8-1: config 0 descriptor??
[  771.046426][T18958] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  771.377414][ T4348] monterey 0003:0566:3004.002E: unknown main item tag 0x0
[  771.401600][ T4348] monterey 0003:0566:3004.002E: unknown main item tag 0x0
[  771.422482][ T4348] monterey 0003:0566:3004.002E: unknown main item tag 0x0
[  771.451743][ T4348] monterey 0003:0566:3004.002E: unknown main item tag 0x0
[  771.484719][ T4348] monterey 0003:0566:3004.002E: hidraw0: USB HID v10.09 Device [HID 0566:3004] on usb-dummy_hcd.7-1/input0
[  771.504876][T18967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5204'.
[  771.595007][ T4348] usb 8-1: USB disconnect, device number 14
[  771.783869][T18973] loop1: detected capacity change from 0 to 2048
[  771.797075][T18969] fido_id[18969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  771.924520][T18973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  772.015093][T18972] loop8: detected capacity change from 0 to 32768
[  772.025636][T18972] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.5206 (18972)
[  772.057355][T18972] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  772.067995][T18972] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm
[  772.077678][T18972] BTRFS info (device loop8): force zlib compression, level 3
[  772.085151][T18972] BTRFS info (device loop8): force clearing of disk cache
[  772.092428][T18972] BTRFS info (device loop8): setting nodatasum
[  772.099002][T18972] BTRFS info (device loop8): allowing degraded mounts
[  772.106568][T18972] BTRFS info (device loop8): enabling disk space caching
[  772.113664][T18972] BTRFS info (device loop8): disk space caching is enabled
[  772.416014][T18972] BTRFS info (device loop8): rebuilding free space tree
[  772.440335][T18972] BTRFS info (device loop8): disabling free space tree
[  772.450326][T18972] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  772.461426][T18972] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  772.557210][T18972] BTRFS info (device loop8): balance: start -susage=1,usage=1..0,drange=6..6,vrange=8..15,limit=2,stripes=7..3
[  772.572652][T18972] BTRFS info (device loop8): balance: ended with status: 0
[  772.706459][T18997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5211'.
[  772.758951][T17563] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  772.944215][T19000] tipc: Started in network mode
[  772.978690][T19000] tipc: Node identity , cluster identity 4711
[  772.985050][T19000] tipc: Failed to set node id, please configure manually
[  773.062929][T19000] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  773.360613][T19007] loop7: detected capacity change from 0 to 128
[  773.409145][T19007] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  773.446212][T19007] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  773.523175][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  773.539143][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  773.549339][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  773.557425][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  773.576678][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  773.586898][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  774.126512][T15229] EXT4-fs (loop7): unmounting filesystem.
[  774.231084][T19012] chnl_net:caif_netlink_parms(): no params data found
[  774.468662][T19012] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.476734][T19012] bridge0: port 1(bridge_slave_0) entered disabled state
[  774.485424][T19012] device bridge_slave_0 entered promiscuous mode
[  774.495962][T19012] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.503321][T19012] bridge0: port 2(bridge_slave_1) entered disabled state
[  774.513477][T19012] device bridge_slave_1 entered promiscuous mode
[  774.545651][ T4320] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  774.575993][T19012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  774.599085][T19012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  774.744472][T19012] team0: Port device team_slave_0 added
[  774.767501][ T4320] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  774.798782][ T4320] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  774.817478][T19012] team0: Port device team_slave_1 added
[  774.865614][ T4320] usb 9-1: config 1 has no interface number 0
[  774.896323][ T4320] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  774.955770][ T4320] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  774.980063][ T4320] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  775.005038][ T4320] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  775.024827][ T4320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.038235][ T4320] usb 9-1: Product: syz
[  775.042491][ T4320] usb 9-1: Manufacturer: syz
[  775.047622][ T4320] usb 9-1: SerialNumber: syz
[  775.086278][T19020] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  775.103403][T19037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5224'.
[  775.145301][T19012] batman_adv: batadv0: Adding interface: batadv_slave_0
[  775.155680][T19012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  775.287852][T19012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  775.325183][T19025] loop7: detected capacity change from 0 to 32768
[  775.487944][T19025] XFS (loop7): Mounting V5 Filesystem
[  775.516294][T19020] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  775.569288][T19012] batman_adv: batadv0: Adding interface: batadv_slave_1
[  775.589852][T19012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  775.632661][T19012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  775.656110][ T4279] Bluetooth: hci5: command 0x0409 tx timeout
[  775.688878][T19025] XFS (loop7): Ending clean mount
[  775.770250][T19025] XFS (loop7): Quotacheck needed: Please wait.
[  775.942250][ T4320] cdc_ncm 9-1:1.1: bind() failure
[  776.037365][ T4320] usb 9-1: USB disconnect, device number 6
[  776.057107][T19025] XFS (loop7): Quotacheck: Done.
[  776.152929][   T41] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.216430][T19012] device hsr_slave_0 entered promiscuous mode
[  776.252617][T19012] device hsr_slave_1 entered promiscuous mode
[  776.279710][T19012] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  776.299966][T19012] Cannot create hsr debugfs directory
[  776.323392][T15229] XFS (loop7): Unmounting Filesystem
[  776.480970][   T41] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.531293][T19064] loop1: detected capacity change from 0 to 2048
[  776.561129][T19064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  776.758362][   T41] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.250064][   T41] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.738326][ T4279] Bluetooth: hci5: command 0x041b tx timeout
[  777.904536][T19012] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  777.956399][T19012] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  778.010304][T19012] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  778.081565][T19012] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  778.346069][T19075] loop8: detected capacity change from 0 to 32768
[  778.408863][T19075] JBD2: Ignoring recovery information on journal
[  778.626089][T19075] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  778.813819][T19086] loop1: detected capacity change from 0 to 32768
[  778.866693][T17563] ocfs2: Unmounting device (7,8) on (node local)
[  779.002948][T19086] XFS (loop1): Mounting V5 Filesystem
[  779.337526][T19086] XFS (loop1): Ending clean mount
[  779.560183][T19122] loop7: detected capacity change from 0 to 1024
[  779.651437][ T4278] XFS (loop1): Unmounting Filesystem
[  779.815806][ T4279] Bluetooth: hci5: command 0x040f tx timeout
[  779.904400][T19012] 8021q: adding VLAN 0 to HW filter on device bond0
[  780.275852][T19012] 8021q: adding VLAN 0 to HW filter on device team0
[  780.283012][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  780.301780][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  780.545793][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  780.567396][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  780.622100][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.629472][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state
[  780.646191][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  780.694389][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  780.771437][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state
[  780.778788][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state
[  780.817890][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  781.169373][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  781.253970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  781.268365][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  781.335611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  781.390894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  781.648799][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  781.686649][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  781.744032][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  781.801333][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  781.849787][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  781.865517][T19180] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5273'.
[  781.883478][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  781.892284][T19182] loop8: detected capacity change from 0 to 256
[  781.898880][ T4279] Bluetooth: hci5: command 0x0419 tx timeout
[  781.919758][T19182] exfat: Deprecated parameter 'namecase'
[  782.004593][T19012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  782.025719][T19182] exfat: Deprecated parameter 'namecase'
[  782.102264][T19182] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  782.782537][T19201] loop7: detected capacity change from 0 to 256
[  782.816793][T19201] exfat: Deprecated parameter 'utf8'
[  782.853992][T19201] exfat: Deprecated parameter 'namecase'
[  782.938152][T19201] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d)
[  783.019753][   T41] bond0: (slave wlan1): Releasing backup interface
[  783.718718][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  783.734745][ T6797] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  783.864415][T19012] 8021q: adding VLAN 0 to HW filter on device batadv0
[  783.905764][   T41] device hsr_slave_0 left promiscuous mode
[  783.944762][   T41] device hsr_slave_1 left promiscuous mode
[  783.977177][T19227] loop8: detected capacity change from 0 to 256
[  784.034810][T19227] exfat: Deprecated parameter 'utf8'
[  784.068512][T19227] exfat: Deprecated parameter 'namecase'
[  784.096731][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  784.104254][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  784.136001][T19227] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d)
[  784.244171][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  784.266527][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  784.296570][   T41] device bridge_slave_1 left promiscuous mode
[  784.338555][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  784.416848][   T41] device bridge_slave_0 left promiscuous mode
[  784.444385][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  784.535905][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  784.621599][   T41] device dummy0 left promiscuous mode
[  784.644277][   T41] device veth1_macvtap left promiscuous mode
[  784.665690][   T41] device veth0_macvtap left promiscuous mode
[  784.682350][   T41] device veth1_vlan left promiscuous mode
[  784.702555][   T41] device veth0_vlan left promiscuous mode
[  784.725684][ T6072] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  784.916085][ T6072] usb 8-1: Using ep0 maxpacket: 8
[  784.932785][ T6072] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  784.964887][ T6072] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  785.001891][ T6072] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  785.038820][T19245] loop8: detected capacity change from 0 to 4096
[  785.040766][ T6072] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  785.092263][ T6072] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  785.133344][ T6072] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.306990][T19233] loop1: detected capacity change from 0 to 32768
[  785.397458][ T6072] usb 8-1: GET_CAPABILITIES returned 0
[  785.403128][ T6072] usbtmc 8-1:16.0: can't read capabilities
[  785.417012][T19233] JBD2: Ignoring recovery information on journal
[  785.619968][T19233] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  785.656011][T19238] usb 8-1: usbtmc_ioctl_clear_in_halt returned -32
[  785.678699][ T4348] usb 8-1: USB disconnect, device number 15
[  785.894041][ T4278] ocfs2: Unmounting device (7,1) on (node local)
[  786.095642][ T6072] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  786.305858][ T6072] usb 3-1: Using ep0 maxpacket: 8
[  786.313806][ T6072] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  786.357783][ T6072] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  786.385680][ T6072] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  786.401911][ T6072] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  786.435856][ T6072] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  786.476469][ T6072] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  786.491106][ T6072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.790002][ T6072] usb 3-1: GET_CAPABILITIES returned 0
[  786.795992][ T6072] usbtmc 3-1:16.0: can't read capabilities
[  787.004499][ T6072] usb 3-1: USB disconnect, device number 52
[  787.805293][   T41] team0 (unregistering): Port device team_slave_1 removed
[  787.972666][   T41] team0 (unregistering): Port device team_slave_0 removed
[  788.007682][T19285] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5312'.
[  788.123095][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  788.215997][ T4320] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  788.238076][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  788.436820][ T4320] usb 3-1: config 0 has no interfaces?
[  788.443878][ T4320] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  788.473088][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  788.490235][ T4320] usb 3-1: config 0 descriptor??
[  788.715848][T19283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  788.730434][T19283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  788.770283][ T4320] usb 3-1: USB disconnect, device number 53
[  789.126513][   T41] bond0 (unregistering): Released all slaves
[  789.324255][T19275] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5307'.
[  789.366638][ T4320] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  789.577432][ T4320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  789.609733][ T4320] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40
[  789.649801][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.706482][ T4320] usb 3-1: config 0 descriptor??
[  789.909424][ T4279] Bluetooth: hci0: urb ffff888025df6900 submission failed (2)
[  789.972885][ T4320] usb 3-1: USB disconnect, device number 54
[  789.998735][T19306] raw_sendmsg: syz.7.5318 forgot to set AF_INET. Fix it!
[  790.526834][T19299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  790.551765][T19299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  790.594995][T19314] program syz.7.5320 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  790.607703][T12237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  790.628111][T12237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  790.731468][T19012] device veth0_vlan entered promiscuous mode
[  790.776478][T12237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  790.794081][T12237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  790.824121][T19012] device veth1_vlan entered promiscuous mode
[  791.007651][T19012] device veth0_macvtap entered promiscuous mode
[  791.017923][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  791.040787][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  791.079522][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  791.119450][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  791.144139][T19012] device veth1_macvtap entered promiscuous mode
[  791.189549][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  791.237487][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  791.310744][T19012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  791.373962][T19012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.442585][T19012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  791.472619][T19012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.538023][T19012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  791.605766][T19012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.648629][T19012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  791.686124][T19012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.725861][T19012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  791.778870][T19012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  791.829511][T19012] batman_adv: batadv0: Interface activated: batadv_slave_0
[  791.874956][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  791.917985][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  791.948734][T19012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  792.011107][T19012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.045926][T19012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  792.104190][T19012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.133079][T19012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  792.164335][T19012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.262248][T19012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  792.305822][T19012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  792.366241][T19012] batman_adv: batadv0: Interface activated: batadv_slave_1
[  792.376195][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  792.385201][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  792.424600][T19012] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  792.473350][T19012] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  792.497887][T19012] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  792.538441][T19012] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  792.849277][T19352] loop1: detected capacity change from 0 to 8192
[  792.994081][T19352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5331'.
[  793.171090][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.221513][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.237994][ T6072] kernel write not supported for file /dsp (pid: 6072 comm: kworker/0:12)
[  793.248822][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  793.423109][T12237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  793.446985][T12237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  793.493114][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  793.938351][T19377] loop7: detected capacity change from 0 to 16
[  793.988279][T19377] erofs: (device loop7): mounted with root inode @ nid 36.
[  794.101167][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 320 @ nid 36
[  794.176891][T19388] syz.7.5350: attempt to access beyond end of device
[  794.176891][T19388] loop7: rw=0, sector=8, nr_sectors = 32 limit=16
[  794.263878][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 299 @ nid 36
[  794.337087][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 298 @ nid 36
[  794.389868][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 297 @ nid 36
[  794.443697][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 296 @ nid 36
[  794.494535][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 288 @ nid 36
[  794.547460][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 280 @ nid 36
[  794.611364][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 186 @ nid 36
[  794.662469][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 185 @ nid 36
[  794.712634][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 184 @ nid 36
[  794.760634][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 155 @ nid 36
[  794.817870][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 154 @ nid 36
[  794.864237][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 153 @ nid 36
[  794.902303][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 152 @ nid 36
[  794.963792][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 139 @ nid 36
[  795.003742][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 138 @ nid 36
[  795.045709][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 137 @ nid 36
[  795.095875][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 136 @ nid 36
[  795.158929][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 128 @ nid 36
[  795.178956][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 120 @ nid 36
[  795.233240][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 82 @ nid 36
[  795.233796][T19407] loop8: detected capacity change from 0 to 8192
[  795.298008][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 81 @ nid 36
[  795.355883][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 80 @ nid 36
[  795.365308][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 72 @ nid 36
[  795.407284][T19407] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  795.476561][T19407] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal
[  795.515715][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 64 @ nid 36
[  795.527088][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 48 @ nid 36
[  795.542708][T19407] REISERFS (device loop8): using ordered data mode
[  795.555726][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 39 @ nid 36
[  795.576504][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 38 @ nid 36
[  795.585978][T19407] reiserfs: using flush barriers
[  795.615642][T19407] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  795.639792][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 37 @ nid 36
[  795.660427][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 36 @ nid 36
[  795.684718][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 35 @ nid 36
[  795.713831][T19407] REISERFS (device loop8): checking transaction log (loop8)
[  795.746320][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 34 @ nid 36
[  795.802351][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 33 @ nid 36
[  795.847476][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 32 @ nid 36
[  795.906231][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 24 @ nid 36
[  795.915413][T19377] erofs: (device loop7): z_erofs_readahead: readahead error at page 16 @ nid 36
[  795.989759][T19377] syz.7.5350: attempt to access beyond end of device
[  795.989759][T19377] loop7: rw=524288, sector=1049272, nr_sectors = 32 limit=16
[  796.045695][T19377] syz.7.5350: attempt to access beyond end of device
[  796.045695][T19377] loop7: rw=524288, sector=376, nr_sectors = 32 limit=16
[  796.063172][   T52] block nbd0: Possible stuck request ffff888024ea0000: control (read@0,4096B). Runtime 510 seconds
[  796.101499][T19407] REISERFS (device loop8): Using r5 hash to sort names
[  796.120244][T19377] syz.7.5350: attempt to access beyond end of device
[  796.120244][T19377] loop7: rw=524288, sector=384, nr_sectors = 32 limit=16
[  796.134915][T19407] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  796.200712][T19377] syz.7.5350: attempt to access beyond end of device
[  796.200712][T19377] loop7: rw=524288, sector=720, nr_sectors = 32 limit=16
[  796.285421][T19377] syz.7.5350: attempt to access beyond end of device
[  796.285421][T19377] loop7: rw=524288, sector=728, nr_sectors = 32 limit=16
[  796.368222][T19377] syz.7.5350: attempt to access beyond end of device
[  796.368222][T19377] loop7: rw=524288, sector=525144, nr_sectors = 32 limit=16
[  796.445793][T19377] syz.7.5350: attempt to access beyond end of device
[  796.445793][T19377] loop7: rw=524288, sector=525152, nr_sectors = 32 limit=16
[  796.506065][T19377] syz.7.5350: attempt to access beyond end of device
[  796.506065][T19377] loop7: rw=524288, sector=13478624032, nr_sectors = 32 limit=16
[  796.592252][T19377] syz.7.5350: attempt to access beyond end of device
[  796.592252][T19377] loop7: rw=524288, sector=13478624040, nr_sectors = 32 limit=16
[  796.706674][T19415] loop9: detected capacity change from 0 to 32768
[  796.827556][T19415] XFS (loop9): Mounting V5 Filesystem
[  797.013300][T19415] XFS (loop9): Ending clean mount
[  797.355267][T19012] XFS (loop9): Unmounting Filesystem
[  798.674379][T19500] loop7: detected capacity change from 0 to 512
[  798.733226][T19500] EXT4-fs: Ignoring removed nobh option
[  798.792720][T19500] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  798.908279][T19500] EXT4-fs (loop7): 1 truncate cleaned up
[  798.914313][T19500] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  798.998779][   T26] audit: type=1800 audit(2000000871.286:300): pid=19500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5378" name="file1" dev="loop7" ino=15 res=0 errno=0
[  799.141817][T15229] EXT4-fs (loop7): unmounting filesystem.
[  799.215665][ T4340] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  799.290089][T19519] loop8: detected capacity change from 0 to 256
[  799.304560][T19521] loop7: detected capacity change from 0 to 256
[  799.313038][T19519] exfat: Deprecated parameter 'utf8'
[  799.359901][T19521] exfat: Deprecated parameter 'utf8'
[  799.378023][T19519] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  799.396816][T19521] exfat: Deprecated parameter 'namecase'
[  799.417922][ T4340] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  799.431112][ T4340] usb 3-1: config 0 has no interface number 0
[  799.447141][T19521] exfat: Deprecated parameter 'namecase'
[  799.453147][T19521] exfat: Deprecated parameter 'utf8'
[  799.468022][ T4340] usb 3-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  799.514899][ T4340] usb 3-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  799.516103][T19521] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  799.588937][ T4340] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  799.620428][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  799.648609][ T4340] usb 3-1: config 0 descriptor??
[  800.103752][ T4340] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x2
[  800.128462][ T4340] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x0
[  800.153411][ T4340] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x0
[  800.178591][ T4340] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x0
[  800.205803][ T4340] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x0
[  800.214574][ T4340] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0x0
[  800.276303][ T4340] steelseries_srws1 0003:1038:1410.002F: unknown main item tag 0xd
[  800.284420][ T4340] steelseries_srws1 0003:1038:1410.002F: unknown global tag 0xc
[  800.341772][ T4340] steelseries_srws1 0003:1038:1410.002F: item 0 1 1 12 parsing failed
[  800.368138][ T4340] steelseries_srws1 0003:1038:1410.002F: parse failed
[  800.375081][ T4340] steelseries_srws1: probe of 0003:1038:1410.002F failed with error -22
[  800.396715][T19540] loop7: detected capacity change from 0 to 16
[  800.426121][ T4340] usb 3-1: USB disconnect, device number 55
[  800.502422][T19540] erofs: (device loop7): mounted with root inode @ nid 36.
[  801.286458][T19563] netlink: 165 bytes leftover after parsing attributes in process `syz.7.5397'.
[  802.405019][T19565] loop8: detected capacity change from 0 to 32768
[  802.482121][T19565] JBD2: Ignoring recovery information on journal
[  802.646631][T19565] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  803.118290][T19605] loop1: detected capacity change from 0 to 256
[  803.161382][T19607] loop9: detected capacity change from 0 to 64
[  803.190312][T17563] ocfs2: Unmounting device (7,8) on (node local)
[  803.653739][T19615] loop9: detected capacity change from 0 to 512
[  803.812789][T19615] EXT4-fs error (device loop9): ext4_orphan_get:1405: inode #15: comm syz.9.5416: inode has both inline data and extents flags
[  803.854297][T19615] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.5416: couldn't read orphan inode 15 (err -117)
[  803.925672][T19615] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  804.466461][T19012] EXT4-fs (loop9): unmounting filesystem.
[  804.682482][T19645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5424'.
[  804.693015][   T26] audit: type=1326 audit(2000000876.986:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19644 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786f9c819 code=0x7ffc0000
[  804.778369][   T26] audit: type=1326 audit(2000000876.986:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19644 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786f9c819 code=0x7ffc0000
[  804.814133][T19651] loop7: detected capacity change from 0 to 256
[  804.848867][   T26] audit: type=1326 audit(2000000876.996:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19644 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786f9c819 code=0x7ffc0000
[  805.066483][   T26] audit: type=1326 audit(2000000877.016:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19644 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6786f5d04e code=0x7ffc0000
[  805.179154][   T26] audit: type=1326 audit(2000000877.016:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19644 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786f9c819 code=0x7ffc0000
[  805.302379][   T26] audit: type=1326 audit(2000000877.016:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19644 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786f9c819 code=0x7ffc0000
[  805.409258][   T26] audit: type=1326 audit(2000000877.016:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19644 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786f9c819 code=0x7ffc0000
[  805.538351][   T26] audit: type=1326 audit(2000000877.016:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19644 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786f9c819 code=0x7ffc0000
[  805.663749][   T26] audit: type=1326 audit(2000000877.016:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19644 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f6786f9c819 code=0x7ffc0000
[  805.784309][   T26] audit: type=1326 audit(2000000877.016:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19644 comm="syz.9.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786f9c819 code=0x7ffc0000
[  805.826174][ T4279] Bluetooth: hci3: command 0x0406 tx timeout
[  806.401994][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5439'.
[  806.549523][T19690] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5441'.
[  806.655842][ T4348] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  806.845768][ T4348] usb 2-1: Using ep0 maxpacket: 32
[  806.852806][ T4348] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  806.873287][ T4348] usb 2-1: config 0 has no interface number 0
[  806.909054][ T4348] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  806.955728][ T4348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.996048][ T4348] usb 2-1: Product: syz
[  807.016042][ T4348] usb 2-1: Manufacturer: syz
[  807.031228][ T4348] usb 2-1: SerialNumber: syz
[  807.084889][ T4348] usb 2-1: config 0 descriptor??
[  807.107381][ T4348] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  807.208179][T19679] loop9: detected capacity change from 0 to 32768
[  807.290374][T19703] loop8: detected capacity change from 0 to 2048
[  807.334314][ T4348] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  807.422171][T19703] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  807.432760][ T4348] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  807.498739][T19703] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  807.719598][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  807.728097][ T8885] usb 2-1: USB disconnect, device number 29
[  807.771240][ T8885] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  807.840078][ T8885] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  807.857720][T17563] EXT4-fs (loop8): unmounting filesystem.
[  807.919541][ T8885] quatech2 2-1:0.51: device disconnected
[  808.859421][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  808.866510][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  809.107611][T19710] loop7: detected capacity change from 0 to 32768
[  809.240905][T19710] XFS (loop7): Mounting V5 Filesystem
[  809.322625][T19751] loop9: detected capacity change from 0 to 512
[  809.352210][T19751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  809.442124][T19710] XFS (loop7): Ending clean mount
[  809.456989][T19751] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  809.535778][T19751] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  809.615922][T19751] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  809.637276][T19758] tap0: tun_chr_ioctl cmd 1074025677
[  809.643153][T19758] tap0: linktype set to 1
[  809.701935][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  809.701952][   T26] audit: type=1804 audit(2000000881.976:320): pid=19710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.5446" name="/newroot/270/file1/file1" dev="loop7" ino=4422 res=1 errno=0
[  809.736321][T19751] EXT4-fs (loop9): revision level too high, forcing read-only mode
[  809.796787][T19751] EXT4-fs (loop9): orphan cleanup on readonly fs
[  809.820089][T19751] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5457: bg 0: block 34: padding at end of block bitmap is not set
[  809.917994][T19751] Quota error (device loop9): write_blk: dquota write failed
[  809.933574][T19751] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota
[  809.955037][T19751] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.5457: Failed to acquire dquot type 1
[  810.051047][T15229] XFS (loop7): Unmounting Filesystem
[  810.064811][T19751] EXT4-fs (loop9): 1 truncate cleaned up
[  810.091715][T19751] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  810.211832][T19751] EXT4-fs error (device loop9): ext4_lookup:1862: inode #2: comm syz.9.5457: deleted inode referenced: 12
[  810.361743][T19012] EXT4-fs (loop9): unmounting filesystem.
[  810.474032][T19776] program syz.1.5464 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  810.967823][T19768] syz.8.5461 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  811.959023][T19811] loop1: detected capacity change from 0 to 2048
[  812.029203][T19811] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  812.049501][T19816] loop8: detected capacity change from 0 to 256
[  812.135417][T19811] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  812.840079][ T6073] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  813.037945][ T6073] usb 9-1: unable to get BOS descriptor or descriptor too short
[  813.053454][ T6073] usb 9-1: not running at top speed; connect to a high speed hub
[  813.088880][ T6073] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  813.124131][ T6073] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  813.156060][ T6073] usb 9-1: string descriptor 0 read error: -22
[  813.171925][ T6073] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  813.200421][ T6073] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.212294][T19848] loop1: detected capacity change from 0 to 512
[  813.254059][ T6073] usb 9-1: 0:2 : does not exist
[  813.290353][T19848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  813.333398][T19848] ext4 filesystem being mounted at /1131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  813.587543][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  813.814458][T19822] loop7: detected capacity change from 0 to 40427
[  813.869713][T19822] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  813.905693][T19822] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  814.023366][T19822] F2FS-fs (loop7): Found nat_bits in checkpoint
[  814.078759][ T6073] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  814.138628][ T6073] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5)
[  814.184577][ T6073] usb 9-1: 5:0: failed to get current value for ch 1 (-22)
[  814.306484][T19822] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  814.319656][T19822] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  814.371180][ T6073] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5)
[  814.451473][ T6073] usb 9-1: USB disconnect, device number 7
[  814.560950][T19877] loop9: detected capacity change from 0 to 64
[  815.274706][T19887] loop1: detected capacity change from 0 to 8192
[  815.804008][T19902] loop8: detected capacity change from 0 to 2048
[  815.868409][T19902] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  815.930148][T19902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  816.055206][T19912] loop1: detected capacity change from 0 to 512
[  816.132356][T19912] EXT4-fs: Ignoring removed nobh option
[  816.185827][T19912] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  816.354474][T19912] EXT4-fs (loop1): 1 truncate cleaned up
[  816.385006][T19912] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  816.499298][T19921] cgroup: noprefix used incorrectly
[  816.588030][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  816.852814][T19931] loop9: detected capacity change from 0 to 4096
[  816.932913][T19936] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  816.997402][ T4340] kernel write not supported for file /admmidi2 (pid: 4340 comm: kworker/1:5)
[  817.025651][ T6605] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  817.099968][T19899] loop7: detected capacity change from 0 to 32768
[  817.196169][T19899] XFS (loop7): Mounting V5 Filesystem
[  817.225585][ T6605] usb 2-1: Using ep0 maxpacket: 16
[  817.233719][ T6605] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  817.291207][ T6605] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  817.343373][ T6605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  817.396016][ T6605] usb 2-1: Product: syz
[  817.400282][ T6605] usb 2-1: Manufacturer: syz
[  817.405027][ T6605] usb 2-1: SerialNumber: syz
[  817.434756][T19899] XFS (loop7): Ending clean mount
[  817.460648][ T6605] r8152-cfgselector 2-1: config 0 descriptor??
[  817.542438][T19899] XFS (loop7): Quotacheck needed: Please wait.
[  817.696907][T19899] XFS (loop7): Quotacheck: Done.
[  817.732066][ T6605] r8152-cfgselector 2-1: Unknown version 0x0000
[  817.766763][ T6605] r8152-cfgselector 2-1: Unknown version 0x0000
[  817.773393][ T6605] r8152-cfgselector 2-1: bad CDC descriptors
[  817.815755][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  817.842506][ T6605] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  817.885816][T19299] usb 2-1: config 0 descriptor??
[  817.919139][T19961] loop8: detected capacity change from 0 to 2048
[  818.004987][T15229] XFS (loop7): Unmounting Filesystem
[  818.025738][ T8885] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  818.046972][ T6605] usb 2-1: USB disconnect, device number 30
[  818.057073][T19299] usb 2-1: can't set config #0, error -71
[  818.086187][T19961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  818.217443][T19964] loop6: detected capacity change from 0 to 8
[  818.225635][ T8885] usb 10-1: Using ep0 maxpacket: 32
[  818.233195][ T8885] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  818.259223][T19964] Dev loop6: unable to read RDB block 8
[  818.275760][ T8885] usb 10-1: config 0 has no interface number 0
[  818.294016][T19964]  loop6: unable to read partition table
[  818.300542][ T8885] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  818.317716][T19964] loop6: partition table beyond EOD, truncated
[  818.339058][ T8885] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  818.350619][T19964] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í¯ÊºöÙXDˆÚ
bÔÌp0ìO{š¸›>.) failed (rc=-5)
[  818.366990][ T8885] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  818.377126][ T8885] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.396992][ T8885] usb 10-1: config 0 descriptor??
[  819.062921][ T8885] uclogic 0003:28BD:0094.0030: pen parameters not found
[  819.081015][ T8885] uclogic 0003:28BD:0094.0030: interface is invalid, ignoring
[  819.136317][ T8885] usb 10-1: USB disconnect, device number 2
[  819.265714][T19980] loop1: detected capacity change from 0 to 512
[  819.315819][T19980] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  819.379447][T19980] EXT4-fs (loop1): 1 truncate cleaned up
[  819.435666][T19980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  819.573072][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  819.978366][T19997] rtc_cmos 00:00: Alarms can be up to one day in the future
[  820.255349][  T125] rtc_cmos 00:00: Alarms can be up to one day in the future
[  820.294242][  T125] rtc_cmos 00:00: Alarms can be up to one day in the future
[  820.317745][  T125] rtc_cmos 00:00: Alarms can be up to one day in the future
[  820.396434][  T125] rtc_cmos 00:00: Alarms can be up to one day in the future
[  820.403910][  T125] rtc rtc0: __rtc_set_alarm: err=-22
[  820.481279][T20008] loop8: detected capacity change from 0 to 512
[  820.537207][T20008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  820.585174][T20008] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  820.605668][T20008] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  820.656090][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5541'.
[  820.691516][T20008] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  820.734138][T20014] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5541'.
[  820.778255][T20008] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  820.813244][T20008] EXT4-fs (loop8): orphan cleanup on readonly fs
[  820.886655][T20008] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.5538: bg 0: block 34: padding at end of block bitmap is not set
[  820.926290][T20008] Quota error (device loop8): write_blk: dquota write failed
[  820.933945][T20008] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  820.974796][T20008] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.5538: Failed to acquire dquot type 1
[  820.987566][T20022] program syz.1.5545 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  821.056531][T20008] EXT4-fs (loop8): 1 truncate cleaned up
[  821.089456][T20008] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  821.145659][ T6073] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  821.187940][T20008] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.5538: deleted inode referenced: 12
[  821.339469][ T6073] usb 10-1: config 0 has an invalid interface number: 251 but max is 0
[  821.369551][ T6073] usb 10-1: config 0 has no interface number 0
[  821.377778][T17563] EXT4-fs (loop8): unmounting filesystem.
[  821.431421][ T6073] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  821.481940][ T6073] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.526871][ T6073] usb 10-1: Product: syz
[  821.531247][ T6073] usb 10-1: Manufacturer: syz
[  821.587762][ T6073] usb 10-1: SerialNumber: syz
[  821.609417][ T6073] usb 10-1: config 0 descriptor??
[  822.250528][ T6073] asix 10-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  822.271575][ T6073] asix: probe of 10-1:0.251 failed with error -524
[  822.465818][ T6073] usb 10-1: USB disconnect, device number 3
[  822.663025][T20027] loop7: detected capacity change from 0 to 40427
[  822.736150][T20027] F2FS-fs (loop7): invalid crc value
[  822.766722][T20027] F2FS-fs (loop7): Found nat_bits in checkpoint
[  822.935333][T20027] F2FS-fs (loop7): Start checkpoint disabled!
[  823.050153][T20027] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  823.642042][T19299] bio_check_eod: 34 callbacks suppressed
[  823.642062][T19299] kworker/u4:1: attempt to access beyond end of device
[  823.642062][T19299] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  824.011532][T20080] loop9: detected capacity change from 0 to 256
[  824.106815][T20080] FAT-fs (loop9): Directory bread(block 64) failed
[  824.140849][T20080] FAT-fs (loop9): Directory bread(block 65) failed
[  824.158343][T20080] FAT-fs (loop9): Directory bread(block 66) failed
[  824.192341][T20080] FAT-fs (loop9): Directory bread(block 67) failed
[  824.235789][T20080] FAT-fs (loop9): Directory bread(block 68) failed
[  824.279086][T20080] FAT-fs (loop9): Directory bread(block 69) failed
[  824.291989][T20080] FAT-fs (loop9): Directory bread(block 70) failed
[  824.322403][T20080] FAT-fs (loop9): Directory bread(block 71) failed
[  824.354761][T20080] FAT-fs (loop9): Directory bread(block 72) failed
[  824.394533][T20080] FAT-fs (loop9): Directory bread(block 73) failed
[  824.722313][T20094] tap0: tun_chr_ioctl cmd 1074025677
[  824.785905][T20094] tap0: linktype set to 780
[  825.555081][T20117] loop6: detected capacity change from 0 to 8
[  825.565202][T20117] Dev loop6: unable to read RDB block 8
[  825.574594][T20117]  loop6: unable to read partition table
[  825.599480][T20117] loop6: partition table beyond EOD, truncated
[  825.657270][T20117] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í¯ÊºöÙXDˆÚ
bÔÌp0ìO{š¸›>.) failed (rc=-5)
[  826.165899][   T52] block nbd0: Possible stuck request ffff888024ea0000: control (read@0,4096B). Runtime 540 seconds
[  826.410320][ T8885] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  826.543052][T20143] loop1: detected capacity change from 0 to 1024
[  826.572400][T20143] EXT4-fs: Ignoring removed bh option
[  826.615849][ T8885] usb 3-1: Using ep0 maxpacket: 8
[  826.623442][ T8885] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  826.664070][ T8885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  826.696119][ T8885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 168
[  826.717706][ T8885] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  826.729341][T20143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  826.739724][T20108] loop8: detected capacity change from 0 to 40427
[  826.748674][ T8885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  826.759802][ T8885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.770353][T20108] F2FS-fs (loop8): invalid crc value
[  826.783386][T20108] F2FS-fs (loop8): Found nat_bits in checkpoint
[  826.837365][T20108] F2FS-fs (loop8): Start checkpoint disabled!
[  826.850288][T20108] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  826.987660][ T8885] usb 3-1: GET_CAPABILITIES returned 0
[  826.993289][ T8885] usbtmc 3-1:16.0: can't read capabilities
[  827.168988][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  827.226279][ T8885] usb 3-1: USB disconnect, device number 56
[  827.390510][T20162] loop9: detected capacity change from 0 to 64
[  827.397965][   T41] kworker/u4:2: attempt to access beyond end of device
[  827.397965][   T41] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  828.325798][ T6605] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  828.523409][ T6605] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  828.560869][ T6605] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  828.592851][ T6605] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  828.630621][ T6605] usb 10-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40
[  828.660592][ T6605] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.687701][ T6605] usb 10-1: Product: syz
[  828.704248][ T6605] usb 10-1: Manufacturer: syz
[  828.716143][ T6605] usb 10-1: SerialNumber: syz
[  829.009529][ T6605] usb 10-1: USB disconnect, device number 4
[  829.316977][ T6169] udevd[6169]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  829.662935][T20219] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5607'.
[  829.895770][ T4279] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  830.353388][T20206] loop8: detected capacity change from 0 to 32768
[  830.485329][T20206] XFS (loop8): Mounting V5 Filesystem
[  830.743459][T20206] XFS (loop8): Ending clean mount
[  831.245257][T17563] XFS (loop8): Unmounting Filesystem
[  832.321627][T20307] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5628'.
[  832.361888][T20307] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5628'.
[  832.387575][T20300] loop7: detected capacity change from 0 to 4096
[  832.462939][T20300] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[  832.623246][T20313] loop9: detected capacity change from 0 to 64
[  833.400899][T20338] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  834.189454][T20370] loop9: detected capacity change from 0 to 512
[  834.269668][T20370] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  834.345430][T20370] EXT4-fs (loop9): invalid journal inode
[  834.401096][T20370] EXT4-fs (loop9): can't get journal size
[  834.462538][T20370] EXT4-fs (loop9): 1 truncate cleaned up
[  834.476502][T20370] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  834.644577][T20386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5666'.
[  835.055767][T19012] EXT4-fs (loop9): unmounting filesystem.
[  835.661447][T20419] Attempt to restore checkpoint with obsolete wellknown handles
[  836.074984][T20434] loop9: detected capacity change from 0 to 256
[  836.781925][T20453] loop7: detected capacity change from 0 to 2048
[  836.863818][T20453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  836.963862][T20459] loop9: detected capacity change from 0 to 2048
[  837.113007][T20459] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  837.302350][T20459] overlayfs: failed to resolve './file0': -2
[  837.448243][ T4323] hid-generic 0004:0004:FFFF0001.0031: unknown main item tag 0x0
[  837.483624][ T4323] hid-generic 0004:0004:FFFF0001.0031: unknown main item tag 0x0
[  837.505785][ T4323] hid-generic 0004:0004:FFFF0001.0031: unknown main item tag 0x0
[  837.526405][ T4323] hid-generic 0004:0004:FFFF0001.0031: hidraw0: <UNKNOWN> HID v0.b3 Device [syz0] on syz1
[  837.542407][T19012] EXT4-fs (loop9): unmounting filesystem.
[  837.792793][T20444] loop8: detected capacity change from 0 to 32768
[  837.925968][T20444] XFS (loop8): Mounting V5 Filesystem
[  838.031415][T20444] XFS (loop8): Ending clean mount
[  838.038461][T20444] XFS (loop8): Quotacheck needed: Please wait.
[  838.130825][T20444] XFS (loop8): Quotacheck: Done.
[  838.149917][T20479] block nbd1: server does not support multiple connections per device.
[  838.160672][T20479] block nbd1: shutting down sockets
[  838.381053][T17563] XFS (loop8): Unmounting Filesystem
[  838.659227][T20464] loop1: detected capacity change from 0 to 32768
[  839.890899][T20517] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  840.082070][T20523] loop7: detected capacity change from 0 to 4096
[  840.146423][T20523] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[  840.298981][T20523] ntfs3: loop7: ino=1b, "file0" directory corrupted
[  841.030035][T20550] loop8: detected capacity change from 0 to 64
[  841.245308][T20552] loop1: detected capacity change from 0 to 1024
[  841.296551][T20552] EXT4-fs: Ignoring removed orlov option
[  841.328439][T20552] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  841.444094][T20552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  841.486098][T20564] loop8: detected capacity change from 0 to 128
[  841.498380][T20564] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  841.598643][T20564] hpfs: filesystem error: improperly stopped
[  841.604839][T20564] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  841.656033][T20564] hpfs: You really don't want any checks? You are crazy...
[  841.700754][T20564] hpfs: hpfs_map_sector(): read error
[  841.749646][T20564] hpfs: code page support is disabled
[  841.787589][T20564] hpfs: hpfs_map_4sectors(): unaligned read
[  841.826759][T20564] hpfs: hpfs_map_4sectors(): unaligned read
[  841.833222][T20564] hpfs: filesystem error: unable to find root dir
[  842.041881][ T4278] EXT4-fs (loop1): unmounting filesystem.
[  842.108783][T20578] loop7: detected capacity change from 0 to 128
[  842.477619][T20589] loop1: detected capacity change from 0 to 1024
[  842.599112][T20589] hfsplus: invalid length 65281 has been corrected to 255
[  842.641146][T20589] hfsplus: invalid length 65281 has been corrected to 255
[  842.971428][T20596] dvmrp1: tun_chr_ioctl cmd 1074025681
[  842.974362][T20598] loop1: detected capacity change from 0 to 256
[  843.018996][T20598] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  843.045991][T20574] loop9: detected capacity change from 0 to 32768
[  843.061440][T20598] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  843.118535][T20598] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  843.466579][T20574] read_mapping_page failed!
[  843.873558][T20611] netlink: 'syz.8.5754': attribute type 10 has an invalid length.
[  843.929722][T20613] loop7: detected capacity change from 0 to 128
[  844.226666][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5758'.
[  844.272174][T20617] netlink: 'syz.1.5758': attribute type 21 has an invalid length.
[  844.789025][T20637] program syz.8.5765 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  845.121140][T20646] program syz.8.5769 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  845.395433][T20655] loop8: detected capacity change from 0 to 512
[  845.471377][T20655] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  845.545292][T20655] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.5773: invalid indirect mapped block 9 (level 0)
[  845.568752][T20655] EXT4-fs (loop8): 1 truncate cleaned up
[  845.574787][T20655] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  845.751222][T17563] EXT4-fs (loop8): unmounting filesystem.
[  845.984249][T20635] loop1: detected capacity change from 0 to 32768
[  847.102270][T12237] wlan1: Trigger new scan to find an IBSS to join
[  847.186009][    T9] ------------[ cut here ]------------
[  847.192872][    T9] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40
[  847.204865][    T9] WARNING: CPU: 0 PID: 9 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880
[  847.215128][    T9] Modules linked in:
[  847.219173][    T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  847.226560][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  847.236816][    T9] Workqueue: events_unbound cfg80211_wiphy_work
[  847.243177][    T9] RIP: 0010:__rate_control_send_low+0x635/0x880
[  847.249551][    T9] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 e0 b9 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 0b c6 a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  847.269890][    T9] RSP: 0018:ffffc900000e7400 EFLAGS: 00010246
[  847.276074][    T9] RAX: ed785be36a4b2900 RBX: 000000000000000c RCX: ffff88813fe98000
[  847.284402][    T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  847.292502][    T9] RBP: 0000000000000084 R08: ffffc900000e7087 R09: 1ffff9200001ce10
[  847.300587][    T9] R10: dffffc0000000000 R11: fffff5200001ce11 R12: 0000000000000040
[  847.308672][    T9] R13: dffffc0000000000 R14: ffff88807698b358 R15: ffff88802e9f4a28
[  847.316856][    T9] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  847.326481][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  847.333385][    T9] CR2: 00007f3271f4da08 CR3: 0000000064940000 CR4: 00000000003526f0
[  847.341655][    T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  847.350617][    T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  847.358741][    T9] Call Trace:
[  847.362090][    T9]  <TASK>
[  847.365099][    T9]  rate_control_send_low+0x194/0x790
[  847.370997][    T9]  rate_control_get_rate+0x207/0x5c0
[  847.377100][    T9]  ieee80211_tx_h_rate_ctrl+0xb1a/0x1750
[  847.383093][    T9]  ? ieee80211_tx_h_select_key+0x17b0/0x17b0
[  847.389343][    T9]  ? ieee80211_queue_skb+0xc2/0x21c0
[  847.394722][    T9]  invoke_tx_handlers_late+0xb6/0x1810
[  847.400346][    T9]  ? ieee80211_tx_h_select_key+0x126d/0x17b0
[  847.406465][    T9]  ? sta_info_get+0x289/0x2a0
[  847.411217][    T9]  ? invoke_tx_handlers_early+0xa11/0x1d40
[  847.417186][    T9]  ieee80211_tx+0x2d4/0x460
[  847.421892][    T9]  ? ieee80211_skb_resize+0x630/0x630
[  847.427714][    T9]  ? ieee80211_set_qos_hdr+0x1c6/0x510
[  847.433315][    T9]  ? __bpf_trace_tasklet+0x10/0x10
[  847.438550][    T9]  ? ieee80211_xmit+0x30c/0x3f0
[  847.443600][    T9]  ? __ieee80211_tx_skb_tid_band+0x48c/0x610
[  847.449814][    T9]  __ieee80211_tx_skb_tid_band+0x4d1/0x610
[  847.455742][    T9]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  847.462145][    T9]  ieee80211_scan_state_send_probe+0x560/0x930
[  847.465824][ T6605] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  847.468532][    T9]  ieee80211_scan_work+0x4d3/0x1bc0
[  847.481293][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  847.486547][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  847.492397][    T9]  cfg80211_wiphy_work+0x221/0x260
[  847.497672][    T9]  ? process_one_work+0x7b0/0x1160
[  847.502942][    T9]  process_one_work+0x8a2/0x1160
[  847.508118][    T9]  ? worker_detach_from_pool+0x240/0x240
[  847.513955][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  847.519328][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  847.524964][    T9]  ? kthread_data+0x4b/0xc0
[  847.529799][    T9]  worker_thread+0xaa2/0x1270
[  847.534678][    T9]  kthread+0x29d/0x330
[  847.538899][    T9]  ? worker_clr_flags+0x1a0/0x1a0
[  847.544004][    T9]  ? kthread_blkcg+0xd0/0xd0
[  847.548824][    T9]  ret_from_fork+0x1f/0x30
[  847.553338][    T9]  </TASK>
[  847.556484][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  847.563981][    T9] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  847.571323][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  847.581703][    T9] Workqueue: events_unbound cfg80211_wiphy_work
[  847.588019][    T9] Call Trace:
[  847.591429][    T9]  <TASK>
[  847.594493][    T9]  dump_stack_lvl+0x188/0x24e
[  847.599252][    T9]  ? memcpy+0x3c/0x60
[  847.603392][    T9]  ? show_regs_print_info+0x12/0x12
[  847.608667][    T9]  ? load_image+0x400/0x400
[  847.613353][    T9]  panic+0x2e5/0x730
[  847.617417][    T9]  ? bpf_jit_dump+0xd0/0xd0
[  847.622075][    T9]  ? ret_from_fork+0x1f/0x30
[  847.626737][    T9]  __warn+0x2f8/0x4f0
[  847.630784][    T9]  ? __rate_control_send_low+0x635/0x880
[  847.636479][    T9]  ? __rate_control_send_low+0x635/0x880
[  847.642170][    T9]  report_bug+0x2ba/0x4f0
[  847.646569][    T9]  ? __rate_control_send_low+0x635/0x880
[  847.652707][    T9]  handle_bug+0x3a/0x70
[  847.657020][    T9]  exc_invalid_op+0x16/0x40
[  847.661679][    T9]  asm_exc_invalid_op+0x16/0x20
[  847.666790][    T9] RIP: 0010:__rate_control_send_low+0x635/0x880
[  847.673316][    T9] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 e0 b9 a6 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 0b c6 a4 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  847.693521][    T9] RSP: 0018:ffffc900000e7400 EFLAGS: 00010246
[  847.699693][    T9] RAX: ed785be36a4b2900 RBX: 000000000000000c RCX: ffff88813fe98000
[  847.707812][    T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  847.715957][    T9] RBP: 0000000000000084 R08: ffffc900000e7087 R09: 1ffff9200001ce10
[  847.723982][    T9] R10: dffffc0000000000 R11: fffff5200001ce11 R12: 0000000000000040
[  847.732278][    T9] R13: dffffc0000000000 R14: ffff88807698b358 R15: ffff88802e9f4a28
[  847.740617][    T9]  rate_control_send_low+0x194/0x790
[  847.746497][    T9]  rate_control_get_rate+0x207/0x5c0
[  847.751959][    T9]  ieee80211_tx_h_rate_ctrl+0xb1a/0x1750
[  847.757976][    T9]  ? ieee80211_tx_h_select_key+0x17b0/0x17b0
[  847.764697][    T9]  ? ieee80211_queue_skb+0xc2/0x21c0
[  847.771386][    T9]  invoke_tx_handlers_late+0xb6/0x1810
[  847.771407][ T6605] usb 8-1: Using ep0 maxpacket: 8
[  847.781016][ T6605] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  847.781105][ T6605] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  847.781173][ T6605] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  847.781246][ T6605] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  847.781343][ T6605] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  847.781411][ T6605] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.843469][    T9]  ? ieee80211_tx_h_select_key+0x126d/0x17b0
[  847.849520][    T9]  ? sta_info_get+0x289/0x2a0
[  847.854274][    T9]  ? invoke_tx_handlers_early+0xa11/0x1d40
[  847.860173][    T9]  ieee80211_tx+0x2d4/0x460
[  847.864834][    T9]  ? ieee80211_skb_resize+0x630/0x630
[  847.870473][    T9]  ? ieee80211_set_qos_hdr+0x1c6/0x510
[  847.876111][    T9]  ? __bpf_trace_tasklet+0x10/0x10
[  847.881292][    T9]  ? ieee80211_xmit+0x30c/0x3f0
[  847.886195][    T9]  ? __ieee80211_tx_skb_tid_band+0x48c/0x610
[  847.892216][    T9]  __ieee80211_tx_skb_tid_band+0x4d1/0x610
[  847.898237][    T9]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  847.904640][    T9]  ieee80211_scan_state_send_probe+0x560/0x930
[  847.911032][    T9]  ieee80211_scan_work+0x4d3/0x1bc0
[  847.916465][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  847.921555][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  847.927164][    T9]  cfg80211_wiphy_work+0x221/0x260
[  847.932408][    T9]  ? process_one_work+0x7b0/0x1160
[  847.937562][    T9]  process_one_work+0x8a2/0x1160
[  847.942593][    T9]  ? worker_detach_from_pool+0x240/0x240
[  847.948267][    T9]  ? _raw_spin_lock_irq+0xb7/0xf0
[  847.953387][    T9]  ? _raw_spin_lock_irqsave+0x100/0x100
[  847.958966][    T9]  ? kthread_data+0x4b/0xc0
[  847.963522][    T9]  worker_thread+0xaa2/0x1270
[  847.968318][    T9]  kthread+0x29d/0x330
[  847.972413][    T9]  ? worker_clr_flags+0x1a0/0x1a0
[  847.977473][    T9]  ? kthread_blkcg+0xd0/0xd0
[  847.982206][    T9]  ret_from_fork+0x1f/0x30
[  847.986773][    T9]  </TASK>
[  847.990541][    T9] Kernel Offset: disabled
[  847.995077][    T9] Rebooting in 86400 seconds..