last executing test programs:

8.133540548s ago: executing program 4 (id=1557):
r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x0, 0x7ad, &(0x7f00000007c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYBLOB="55ac88cf517af1b04be776ee9c0ec53f9628c15cb14edefde39762fe236b4ce8c60a7c43543970516a02d827011407c1362a6f3ee218574d1d03907f069e233eb8845406027ad215c6cb94b3c1660b0b307d92fda8ceeaee13ddad398c29967c9b3a2a2f4e8bcaccaa614de8b11d51221fd15e41511f4946f3ea66f5e4386903f94da6eafe8f943cbc7fb75ab04f9afe9f69e5bc6c21ca487b92ca6050937ae8af3ec55050ee8cccf22ea07fbe0f0eac590000000000000000000000002c4a6956a304640a061636c8a834f9bdf9ce332357af4b2a62d0fda693f4f22bc69e7ac38c41e010a61f8de542f687", @ANYRES32, @ANYRES8=r0, @ANYRES8, @ANYRES8, @ANYRES64], 0x1, 0x1cf, &(0x7f0000000fc0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40286608, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0})

6.897569956s ago: executing program 4 (id=1566):
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x837c}, 0x4)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@mpls_newroute={0xc0, 0x18, 0x100, 0x0, 0x25dfdbff, {0x1c, 0x80, 0x20, 0x0, 0xfe}, [@RTA_NEWDST={0x84, 0x13, [{0x9}, {}, {0x7}, {}, {0x100}, {}, {}, {0x23f}, {0x4}, {0x5}, {}, {}, {}, {}, {0x80}, {0x7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0xf7fff, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0xd9f4}, {0x8}, {}, {0x2}, {0x6, 0x0, 0x1}, {}, {}, {}, {0x3}, {0x8000}, {0x400, 0x0, 0x1}, {0x1}, {0x1, 0x0, 0x1}]}, @RTA_DST={0x8}, @RTA_DST={0x8, 0x1, {0x3, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x20}, @RTA_DST={0x8, 0x1, {0x100}}]}, 0xc0}}, 0x0)

6.744682278s ago: executing program 4 (id=1569):
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f0104"], 0x0)

6.306482902s ago: executing program 2 (id=1571):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
close(0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
poll(0x0, 0x0, 0x0)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$VT_RELDISP(r2, 0x5450)

6.110337218s ago: executing program 2 (id=1573):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38)
setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f00000001c0), 0x4)

6.108425948s ago: executing program 1 (id=1574):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, 0x0, 0xfffffecc)
r1 = socket$packet(0x11, 0x3, 0x300)
socket(0x0, 0x800000003, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}})

5.898690844s ago: executing program 1 (id=1575):
add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0x1, 0xfffffffffffffffe)

5.592061409s ago: executing program 1 (id=1576):
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
socket$netlink(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
gettid()
rt_sigprocmask(0x0, &(0x7f0000000200), 0x0, 0x8)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="01"], 0x8)
rt_sigreturn()
poll(0x0, 0x0, 0x6c)
rt_sigreturn()
mlockall(0x3)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
uname(0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0)

5.163975093s ago: executing program 2 (id=1578):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0)

5.118791756s ago: executing program 1 (id=1579):
pipe(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xa)
close(r2)
r3 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x4, 0x4)
splice(r0, 0x0, r2, 0x0, 0x19404, 0x0)

4.872146556s ago: executing program 1 (id=1581):
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/psched\x00')
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x1, @thr={&(0x7f00000000c0)="30f275796de6e2a11e965004dee676fef41dc825d23267a82843d53f8b84e810777453884ede7e963782cb4fb60f720be4b9555ad6116160cc63cc75f69f074b05f1bff4d9e6ce1e2579e1d16a1900b1b614f85e764ea50000000000", &(0x7f0000001780)="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"}}, &(0x7f0000000140))
eventfd(0x0)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78)
socket$inet6_udp(0xa, 0x2, 0x0)
rt_sigreturn()
futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0)
rt_sigreturn()
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCGETS(r1, 0x5401, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@private1, 0x7d})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0x0)

4.106267746s ago: executing program 4 (id=1583):
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(r0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mlockall(0x1)
socket$inet6_icmp(0xa, 0x2, 0x3a)

4.104507876s ago: executing program 2 (id=1584):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f}})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x1, 0x29a, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x66, 0x0, 0x5, 0x7f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x56, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast2, 0x10001}, {@remote, 0x7ff}]}, @timestamp_addr={0x44, 0xc, 0x26, 0x1, 0x5, [{@multicast2, 0xf96}]}]}}}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050403eeffffffffffff02000000", @ANYBLOB="a2ecedb96bdfb333cdf029d2f6edebe526ca5e3d58640a5adf1226cb471068cca56664", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', <r11=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000104000000000000000000fcee00", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x28}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r13, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)

3.80629533s ago: executing program 2 (id=1587):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
mkdir(&(0x7f0000001040)='./file0\x00', 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, <r1=>0x0})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
setpgid(0x0, r1)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200400, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x848]}, 0x8, 0x80800)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000001c0)={0x4088, 0x20, '\x00', 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]})
r4 = syz_usb_connect(0x0, 0x242, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xec, 0x66, 0x7d, 0x40, 0x4dd, 0x9032, 0xfd0b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x230, 0x1, 0xfc, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x26, 0x0, 0x6, 0x2, 0xa, 0x0, 0x20, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x68}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x4, 0xff}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x9, [0xfffa, 0x7, 0x7, 0x8]}, @obex={0x5, 0x24, 0x15, 0x8fd}, @country_functional={0xe, 0x24, 0x7, 0x2, 0x5, [0x6, 0x87a, 0x6, 0x1]}]}, @hid_hid={0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x684}}], [{{0x9, 0x5, 0x8, 0x1, 0x20, 0xa1, 0x0, 0x81, [@generic={0x2b, 0x31, "99cafb4059b853eeae2c08fe06940283435047a69c63082c1c96ff34589001f89870d566eec4745605"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x1, 0xd4, 0x9, [@generic={0x94, 0x9, "98ec4da9cdc3fb10db971c6b1bf8cf2ea074deb9a8b74be8d2b51b23410fa9fa43addd1a80f4bd3a76a7ac25f76914d2e169eb794561e1f6213f813800c491c38c9eff89761446e53d68bfa4f1dc2d1462466d71040a2ce1c354192e807a83579e1939f9fa2dd30326211b6066d1c9f2a606067e7ba2ba93e913ed95740af0587fcfc3155cbe9d1ee49d2d2b77a1ba3f3d35"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x40, 0x84, 0x1, [@generic={0xb0, 0xb, "bb3431f4d8cdb38cdfeee5854e3b1667f721d5dc1d4dce214ebb6acf117c16cbc721bcf8c9e34100844d834c36189e9718a49819a3821fa609b231fefc2a8245142e65cea1428d1c446981190e217cb98e6ba9e49faa6f651eb33bde7ef47bc7ba8582fd0609041201f2a2d6b8cf83ac9185e19ebbaded7811106d56892fbb0b14e1eb5bc19e8ef1aa32c14df1a54969b1f671a015031db45b227e1fdcd6f8fa67fac9fd1fcd089913e7e8a22e8d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x7, 0x7, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x1, 0x8}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x9, 0x6, 0xd2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x20, 0x5, 0x63, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x3, 0x3}]}}]}}]}}]}}, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={<r5=>0x0, 0x4}, &(0x7f0000000440)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000480)={r5, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x9}, &(0x7f0000000540)=0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90b24fc600400057a0a080200122582c137", 0x21}], 0x1}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000340)=ANY=[@ANYRESHEX], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20040810)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x67}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x8885)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x2, "41bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000f00)={0xc4, 0x0, &(0x7f0000000d80)=[@increfs_done, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x3}, @exit_looper, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000700)={@ptr={0x70742a85, 0x0, &(0x7f00000005c0)=""/18, 0x12, 0x2, 0x24}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000600)=""/200, 0xc8, 0x2, 0x2b}}, &(0x7f0000000800)={0x0, 0x28, 0x40}}, 0x40}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000cc0)={@ptr={0x70742a85, 0x0, &(0x7f0000000840)=""/35, 0x23, 0x1, 0x27}, @ptr={0x70742a85, 0x0, &(0x7f0000000880)=""/11, 0xb, 0x1, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000c00)=""/179, 0xb3, 0x2, 0x36}}, &(0x7f0000000d40)={0x0, 0x28, 0x50}}}], 0x56, 0x0, &(0x7f0000000e80)="8c382d8269b948e6cc0015388e07bf894cab0475b0bbda864524bb55d3491d2e6a3fff7ce86b6ce5bcbb34e0fd3f53d848186c797b0a02acc9456e5434ecc831f8032f9332af797a6d778416f5e41fe934b218c3a7c0"})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.746230485s ago: executing program 3 (id=1588):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38)
setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f00000001c0), 0x4)

3.513966463s ago: executing program 0 (id=1589):
gettid()
r0 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46)
r4 = dup3(r2, r1, 0x0)
sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)}, 0x0)
close(r1)
rt_sigreturn()
futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0)
rt_sigreturn()
mlockall(0x0)
pipe2(&(0x7f00000001c0)={<r5=>0x0, <r6=>0x0}, 0x0)
close(r5)
r7 = socket$unix(0x1, 0x2, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, 0x0, 0x3f)
r8 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000004c0)=[@rights={{0x24, 0x1, 0x1, [r6, r8, r7, r6, r5]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x30, 0x1, 0x1, [r8, 0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r2, r3, r1]}}, @rights={{0x18, 0x1, 0x1, [r6, r1]}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0xc0, 0x20000000}, 0x800)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r9, 0x0)
r10 = dup3(r9, r8, 0x0)
accept$unix(r10, 0x0, 0x0)

2.818571338s ago: executing program 0 (id=1590):
socket(0x10, 0x3, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TIOCOUTQ(r0, 0x541b, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x5, &(0x7f000000d380))
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x4300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3502020001ffffffff685f1158e2fafc0e1f00020000000c00009c70baa363"], 0x38)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
creat(0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x2000, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x658}, {@broadcast}, {@remote, 0x96}, {@loopback}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@broadcast}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20000}, {@broadcast, 0x52b1}, {@multicast2, 0x3}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@empty, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x3, [@private=0xa010101, @multicast1, @private=0xa010102, @remote]}]}}}}})
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c000310"], 0xf)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

2.710299756s ago: executing program 3 (id=1591):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket(0x2, 0x3, 0x6)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000640)="8ce2ad5f4f95ea87a7846d3f816a9c26488997", 0x13, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10)

2.709898746s ago: executing program 0 (id=1592):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bb00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.639648302s ago: executing program 0 (id=1593):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0)

2.607757885s ago: executing program 3 (id=1594):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_buf(r3, 0x29, 0x19, 0x0, 0x0)

2.518313511s ago: executing program 4 (id=1595):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095", @ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
unshare(0x2a020400)
semget$private(0x0, 0x2, 0x0)
semtimedop(0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="1d22829213b87e101d3c809b421c233c5a11413fa6db85238ae47b3982f9706ca051c8d564463c828aa0d13754a66fa248c6ebddd5d1d65b71eb6db9c3bb73229ca6516242448bd7d299cfc27c1d896804a531b14a1b6e4536f5cdde041f6259492545a0ca86a8deb21d8f4d0f71eeaffc3d87ff500df61053f9839d089e9eeeb88df0662d9af419cfaefc1ff61aca8d25e7e2c4f43f0fcea19bfb0be1"], 0x7)
r4 = socket(0x10, 0x80002, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095fc0dc125000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000180)={'wlan0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_emit_vhci(0x0, 0xf)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
io_setup(0x20, &(0x7f0000001140)=<r6=>0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r7, &(0x7f0000000080)='\r', 0xffffff1f}])
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)

2.463713066s ago: executing program 0 (id=1596):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x800454d2, &(0x7f0000000040)={'wlan0\x00'})

1.27383161s ago: executing program 3 (id=1597):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f}})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x1, 0x29a, {{0xf, 0x4, 0x3, 0x0, 0x3c, 0x66, 0x0, 0x5, 0x7f, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x56, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast2, 0x10001}, {@remote, 0x7ff}]}, @timestamp_addr={0x44, 0xc, 0x26, 0x1, 0x5, [{@multicast2, 0xf96}]}]}}}}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000050403eeffffffffffff02000000", @ANYBLOB="a2ecedb96bdfb333cdf029d2f6edebe526ca5e3d58640a5adf1226cb471068cca56664", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', <r11=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000010000104000000000000000000fcee00", @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n'], 0x28}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r13, @ANYBLOB], 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)

998.387611ms ago: executing program 3 (id=1598):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x118, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_bpf={{0x8}, {0x68, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{}, {}, {}, {}, {}, {}, {}]}}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x70, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x5c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8}]}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x118}}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000140)="2a6964b6e862bbb7ace52f4024afa4a037aa7a2c42a917c9800a8355448b1022eb5829e387283555dbf20602b0befa124cf12670989c944e", 0x38}], 0x1, 0x0, 0x0)
r0 = socket(0x10, 0x0, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x57}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x52}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x8}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

997.825032ms ago: executing program 0 (id=1599):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, 0x0, 0xfffffecc)
r1 = socket$packet(0x11, 0x3, 0x300)
socket(0x0, 0x800000003, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'lo\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x0, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffff00000000}, 0x0, r2})

888.0584ms ago: executing program 4 (id=1600):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008412, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x5, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298)
memfd_create(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071180600000000009500000000000000ca8c6f3101c074e1d5c073f1da6529485ed04d44d85b9953fc0766729fdcce8e89351e57db90cf673ba9fc53bb6e23f34beb6cbc0d299841b2ba3af4f577cea8fea5d95cc47df0d40fa37ff314df3f0c7b5ef1f7dcab83ce0e258ec2ca24922a58250ffd88bdd6303523f6a30e753c96489db349d65a79ff85f0fee518aea7f8cc671fcdd0af8162f9c2f1846a22e5639560d1deb761761836cc1dd43141e41aa4afbedf5768abd7f076e86206e3b80c9d38d31c4ebc5c49f3aa6736e180ba5368b0665a76e638a77e276b086365f7a39b54584f94"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
lsetxattr$security_ima(0x0, &(0x7f0000000040), 0x0, 0x2, 0x0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfe3c)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xae3, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40086602, &(0x7f0000000000))
creat(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c6e6f6465766d61702c63616368653d667363616368652c6163636573733d636c69656e742c866d61702c616e616d653d25"])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61)

833.174285ms ago: executing program 3 (id=1601):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38)
setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f00000001c0), 0x4)

662.465078ms ago: executing program 1 (id=1602):
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000002280), 0x0, 0x0)
openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0)
r1 = socket(0x1, 0x3, 0x0)
recvmsg$inet_nvme(r1, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0)
close(r2)
ioctl$TIOCL_GETSHIFTSTATE(r0, 0x5451, 0x0)

0s ago: executing program 2 (id=1603):
socket(0x10, 0x3, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TIOCOUTQ(r0, 0x541b, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x5, &(0x7f000000d380))
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x4300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e3502020001ffffffff685f1158e2fafc0e1f00020000000c00009c70baa363"], 0x38)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
creat(0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x2000, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x658}, {@broadcast}, {@remote, 0x96}, {@loopback}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@broadcast}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x20000}, {@broadcast, 0x52b1}, {@multicast2, 0x3}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@empty, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x3, [@private=0xa010101, @multicast1, @private=0xa010102, @remote]}]}}}}})
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c000310"], 0xf)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

kernel console output (not intermixed with test programs):

tooth: hci1: unknown advertising packet type: 0x63
[  250.792299][ T3554] Bluetooth: hci1: unexpected event for opcode 0x1003
[  250.996388][ T3792] usb 5-1: Using ep0 maxpacket: 32
[  251.347799][ T3792] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87
[  252.039682][ T3792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.150166][ T3792] usb 5-1: config 0 descriptor??
[  252.230983][ T3792] usb 5-1: probing VID:PID(2201:012C)   
[  252.238126][ T3792] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  252.340258][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'.
[  252.365305][ T3792] vub300: probe of 5-1:0.0 failed with error -22
[  252.431446][ T3792] usb 5-1: USB disconnect, device number 15
[  252.508989][ T1148] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  252.608857][ T3554] Bluetooth: hci4: command tx timeout
[  252.708849][ T1148] usb 2-1: device descriptor read/64, error -71
[  252.978954][ T1148] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  253.144038][ T7480] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  253.178916][ T1148] usb 2-1: device descriptor read/64, error -71
[  253.209372][ T7480] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  253.273598][ T7480] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  253.299004][ T1148] usb usb2-port1: attempt power cycle
[  253.330665][ T7628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1048'.
[  253.359970][ T7480] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  253.683425][ T7480] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.709349][ T1148] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  253.759876][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  253.769012][ T3599] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  253.789968][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  253.808918][ T1148] usb 2-1: device descriptor read/8, error -71
[  253.830666][ T7480] 8021q: adding VLAN 0 to HW filter on device team0
[  253.892356][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  253.909833][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  253.941922][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.949139][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.987464][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  254.008005][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  254.028013][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.035262][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.044118][ T3599] usb 5-1: Using ep0 maxpacket: 16
[  254.071381][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  254.086229][ T1148] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  254.122007][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  254.131618][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  254.140846][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  254.161518][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  254.177713][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  254.197239][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  254.205537][ T1148] usb 2-1: device descriptor read/8, error -71
[  254.233193][ T7480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  254.248980][ T3599] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  254.263843][ T3599] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  254.301789][ T7480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  254.329041][ T1148] usb usb2-port1: unable to enumerate USB device
[  254.363413][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  254.378987][ T3599] usb 5-1: language id specifier not provided by device, defaulting to English
[  254.403171][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  254.431056][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  254.450631][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  254.461045][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  254.492503][ T1148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  254.529159][ T3599] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  254.548434][ T3599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.613883][ T3599] usb 5-1: Product: 㰊
[  254.638527][ T3599] usb 5-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎
[  254.659309][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'.
[  254.689878][ T3599] usb 5-1: SerialNumber: ఊ
[  254.849357][ T3554] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  254.858048][ T3554] Bluetooth: hci1: Injecting HCI hardware error event
[  254.861352][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'.
[  254.870963][   T48] Bluetooth: hci1: hardware error 0x00
[  255.028941][ T7632] IPVS: Error connecting to the multicast addr
[  255.110248][ T3599] cdc_ncm 5-1:1.0: skipping garbage
[  255.119436][ T3599] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[  255.126904][ T3599] cdc_ncm 5-1:1.0: bind() failure
[  255.182736][ T3599] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  255.212679][ T7480] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.230802][ T3599] cdc_ncm 5-1:1.1: bind() failure
[  255.248860][ T1148] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  255.280360][ T3599] usb 5-1: USB disconnect, device number 16
[  255.328484][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  255.338685][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  255.357029][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  255.370821][ T3789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  255.421846][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  255.428181][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  255.436020][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  255.444921][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  255.460831][ T7480] device veth0_vlan entered promiscuous mode
[  255.508795][ T1148] usb 4-1: Using ep0 maxpacket: 32
[  255.539615][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  255.547839][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  255.568020][ T7480] device veth1_vlan entered promiscuous mode
[  255.612684][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  255.629292][ T1148] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87
[  255.639813][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  255.651076][ T7480] device veth0_macvtap entered promiscuous mode
[  255.658927][ T1148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.668817][ T3593] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  255.693797][ T1148] usb 4-1: config 0 descriptor??
[  255.719441][ T7480] device veth1_macvtap entered promiscuous mode
[  255.771248][ T1148] usb 4-1: probing VID:PID(2201:012C)   
[  255.788009][ T1148] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[  255.791410][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.824698][ T1148] vub300: probe of 4-1:0.0 failed with error -22
[  255.835308][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.887734][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.917915][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.935155][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.946160][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  255.956732][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  255.981139][ T1148] usb 4-1: USB disconnect, device number 14
[  256.000399][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.017426][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.037860][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.048036][ T3593] usb 2-1: config 252 has an invalid interface number: 38 but max is 0
[  256.051072][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.067151][ T3593] usb 2-1: config 252 has no interface number 0
[  256.074432][ T3593] usb 2-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7
[  256.091368][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'.
[  256.099927][ T3593] usb 2-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  256.119360][ T3593] usb 2-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9
[  256.136657][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  256.145596][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  256.157120][ T3593] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  256.166442][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  256.189590][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  256.198142][ T3593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.220015][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.235593][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.246259][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.257452][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.271420][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.288453][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.308212][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.328516][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.349850][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.368893][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.390270][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.425162][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'.
[  256.451319][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  256.479435][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  256.500313][ T7480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.546014][ T7480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.577183][ T7480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.588883][ T3593] usb 2-1: string descriptor 0 read error: -71
[  256.595820][ T3593] usb 2-1: unsupported MDLM descriptors
[  256.625689][ T7480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.633602][ T3593] usb 2-1: USB disconnect, device number 20
[  256.929365][   T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  257.165216][ T5691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.191900][ T5691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.200475][ T6515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.213445][ T6515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.230306][ T3596] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  257.253396][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  257.278938][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  257.448897][ T3596] usb 5-1: device descriptor read/64, error -71
[  257.520589][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'.
[  257.583624][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'.
[  257.592809][ T4558] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  257.614092][ T7744] device bridge_slave_1 left promiscuous mode
[  257.630247][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.651353][ T7744] device bridge_slave_0 left promiscuous mode
[  257.657579][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.718896][ T3596] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  257.848865][ T4558] usb 2-1: Using ep0 maxpacket: 16
[  257.929164][ T3596] usb 5-1: device descriptor read/64, error -71
[  258.306940][ T4558] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  258.317185][ T3596] usb usb5-port1: attempt power cycle
[  258.323520][ T4558] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  258.378915][ T4558] usb 2-1: language id specifier not provided by device, defaulting to English
[  258.509676][ T4558] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  258.535443][ T4558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.572778][ T4558] usb 2-1: Product: 㰊
[  258.590466][ T4558] usb 2-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎
[  258.633343][ T4558] usb 2-1: SerialNumber: ఊ
[  258.739131][ T3596] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  258.839235][ T3596] usb 5-1: device descriptor read/8, error -71
[  258.887754][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1089'.
[  258.956036][ T7731] IPVS: Error connecting to the multicast addr
[  259.058631][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1091'.
[  259.059957][ T4558] cdc_ncm 2-1:1.0: skipping garbage
[  259.093027][ T4558] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[  259.108879][ T4558] cdc_ncm 2-1:1.0: bind() failure
[  259.130540][ T4558] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  259.137451][ T4558] cdc_ncm 2-1:1.1: bind() failure
[  259.143079][ T3596] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  259.175588][ T4558] usb 2-1: USB disconnect, device number 21
[  259.259312][ T3596] usb 5-1: device descriptor read/8, error -71
[  259.399397][ T3596] usb usb5-port1: unable to enumerate USB device
[  259.488966][ T3627] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  259.714503][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'.
[  259.849062][ T3627] usb 1-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f
[  259.871575][ T3627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.918039][ T3627] usb 1-1: config 0 descriptor??
[  259.981199][ T3627] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  260.012603][ T7820] loop1: detected capacity change from 0 to 4096
[  260.020438][ T3627] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22
[  260.223445][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'.
[  260.325465][ T7815] ntfs3: loop1: failed to convert "0000" to iso8859-3
[  260.342209][ T7815] ntfs3: loop1: failed to convert name for inode 1e.
[  260.738941][ T3627] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  260.828804][ T3594] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  260.916890][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1110'.
[  260.938844][ T3627] usb 4-1: device descriptor read/64, error -71
[  260.946296][ T7852] device bridge_slave_1 left promiscuous mode
[  260.978907][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.019377][ T7852] device bridge_slave_0 left promiscuous mode
[  261.025654][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.068802][ T3594] usb 5-1: Using ep0 maxpacket: 16
[  261.219009][ T3627] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  261.277950][ T3594] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  261.290614][ T3594] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  261.359042][ T3594] usb 5-1: language id specifier not provided by device, defaulting to English
[  261.438860][ T3627] usb 4-1: device descriptor read/64, error -71
[  261.559825][ T3627] usb usb4-port1: attempt power cycle
[  261.644677][ T3594] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  261.654905][ T3594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.663742][ T3594] usb 5-1: Product: 㰊
[  261.667932][ T3594] usb 5-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎
[  261.680433][ T3594] usb 5-1: SerialNumber: ఊ
[  262.176331][ T7837] IPVS: Error connecting to the multicast addr
[  262.317085][ T1148] usb 1-1: USB disconnect, device number 19
[  262.369709][ T3594] cdc_ncm 5-1:1.0: skipping garbage
[  262.378451][ T3594] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[  262.408772][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'.
[  262.421420][ T3594] cdc_ncm 5-1:1.0: bind() failure
[  262.438920][ T3627] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  262.469174][ T3594] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  262.488831][ T3594] cdc_ncm 5-1:1.1: bind() failure
[  262.521496][ T3594] usb 5-1: USB disconnect, device number 21
[  262.609568][ T3627] usb 4-1: device descriptor read/8, error -71
[  262.761857][ T7873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.837730][ T7873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.859514][ T7873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.889670][ T3627] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  262.999656][ T3627] usb 4-1: device descriptor read/8, error -71
[  263.140010][ T3627] usb usb4-port1: unable to enumerate USB device
[  263.184331][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'.
[  263.368792][ T1148] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  263.710031][ T7901] loop1: detected capacity change from 0 to 2048
[  263.730614][ T1148] usb 5-1: config 252 has an invalid interface number: 38 but max is 0
[  263.740926][ T1148] usb 5-1: config 252 has no interface number 0
[  263.747262][ T1148] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7
[  263.778478][ T7902] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  263.787388][ T7901] syz.1.1128: attempt to access beyond end of device
[  263.787388][ T7901] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  263.806153][ T1148] usb 5-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  263.817797][   T48] Bluetooth: hci4: command tx timeout
[  263.857806][ T1148] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9
[  263.869757][ T1148] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  263.879075][ T1148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.882546][ T7901] syz.1.1128: attempt to access beyond end of device
[  263.882546][ T7901] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  264.007559][ T7903] syz.1.1128: attempt to access beyond end of device
[  264.007559][ T7903] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  264.044056][ T7903] syz.1.1128: attempt to access beyond end of device
[  264.044056][ T7903] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  264.107906][ T7903] syz.1.1128: attempt to access beyond end of device
[  264.107906][ T7903] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  264.190427][ T7903] syz.1.1128: attempt to access beyond end of device
[  264.190427][ T7903] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  264.258894][ T1148] usb 5-1: string descriptor 0 read error: -71
[  264.267843][ T1148] usb 5-1: unsupported MDLM descriptors
[  264.280478][ T7905] syz.1.1128: attempt to access beyond end of device
[  264.280478][ T7905] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  264.328596][ T1148] usb 5-1: USB disconnect, device number 22
[  264.962419][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'.
[  265.699096][ T4551] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  266.008999][ T4551] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  266.108967][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.128864][ T4551] usb 5-1: config 0 has no interfaces?
[  266.219023][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.238380][ T4551] usb 5-1: config 0 has no interfaces?
[  266.348857][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.369169][ T4551] usb 5-1: config 0 has no interfaces?
[  266.478814][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.497785][ T4551] usb 5-1: config 0 has no interfaces?
[  266.618884][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.638600][ T4551] usb 5-1: config 0 has no interfaces?
[  266.654637][ T7942] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  266.739380][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.769829][ T4551] usb 5-1: config 0 has no interfaces?
[  266.884531][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.919187][ T4551] usb 5-1: config 0 has no interfaces?
[  267.249298][ T7952] loop0: detected capacity change from 0 to 40427
[  267.259082][ T7952] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  267.266854][ T7952] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  267.288882][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.299221][ T4551] usb 5-1: config 0 has no interfaces?
[  267.316778][ T7952] F2FS-fs (loop0): Found nat_bits in checkpoint
[  267.364033][ T7952] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  267.371221][ T7952] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  267.521020][ T4551] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  267.540517][ T7960] syz.0.1144: attempt to access beyond end of device
[  267.540517][ T7960] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  267.565237][   T27] audit: type=1804 audit(1719965316.360:26): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1144" name="/newroot/267/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  267.588148][ T4551] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  267.588188][ T4551] usb 5-1: Product: syz
[  267.588203][ T4551] usb 5-1: Manufacturer: syz
[  267.588222][ T4551] usb 5-1: SerialNumber: syz
[  267.670405][ T4551] usb 5-1: config 0 descriptor??
[  267.883088][   T27] audit: type=1804 audit(1719965316.660:27): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1144" name="/newroot/267/bus/file0" dev="loop0" ino=11 res=1 errno=0
[  267.976480][ T1148] usb 5-1: USB disconnect, device number 23
[  268.363343][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1147'.
[  268.695094][ T7982] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  268.858119][ T7989] sctp: [Deprecated]: syz.4.1152 (pid 7989) Use of struct sctp_assoc_value in delayed_ack socket option.
[  268.858119][ T7989] Use struct sctp_sack_info instead
[  268.929074][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  269.122426][ T7999] xt_TCPMSS: Only works on TCP SYN packets
[  269.266099][ T7997] loop0: detected capacity change from 0 to 40427
[  269.275065][ T7997] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  269.282919][ T7997] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  269.316838][ T7997] F2FS-fs (loop0): Found nat_bits in checkpoint
[  269.376298][ T7997] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  269.383518][ T7997] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  269.545220][ T8008] syz.0.1156: attempt to access beyond end of device
[  269.545220][ T8008] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  269.561901][   T27] audit: type=1804 audit(1719965318.360:28): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1156" name="/newroot/271/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  269.746059][   T27] audit: type=1804 audit(1719965318.490:29): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1156" name="/newroot/271/bus/file0" dev="loop0" ino=11 res=1 errno=0
[  269.780301][ T8013] device hsr_slave_0 left promiscuous mode
[  269.839850][ T8008] 9pnet_fd: Insufficient options for proto=fd
[  270.012647][ T8013] device hsr_slave_1 left promiscuous mode
[  270.708870][ T4551] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  270.999008][ T4551] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  271.073026][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1173'.
[  271.091117][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.097803][ T8042] device bridge_slave_1 left promiscuous mode
[  271.121560][ T4551] usb 5-1: config 0 has no interfaces?
[  271.137139][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.156442][ T8042] device bridge_slave_0 left promiscuous mode
[  271.166479][ T8047] xt_TCPMSS: Only works on TCP SYN packets
[  271.176472][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.209005][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.238731][ T4551] usb 5-1: config 0 has no interfaces?
[  271.339072][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.368734][ T4551] usb 5-1: config 0 has no interfaces?
[  271.448943][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.489406][ T4551] usb 5-1: config 0 has no interfaces?
[  271.569227][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.599465][ T4551] usb 5-1: config 0 has no interfaces?
[  271.688966][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.708782][ T4551] usb 5-1: config 0 has no interfaces?
[  271.798930][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.819049][ T4551] usb 5-1: config 0 has no interfaces?
[  271.888942][ T3594] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  271.909068][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.948745][ T4551] usb 5-1: config 0 has no interfaces?
[  272.109485][ T4551] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  272.118568][ T4551] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  272.138812][ T3594] usb 4-1: Using ep0 maxpacket: 32
[  272.157756][ T4551] usb 5-1: Product: syz
[  272.162186][ T4551] usb 5-1: Manufacturer: syz
[  272.166801][ T4551] usb 5-1: SerialNumber: syz
[  272.193599][ T4551] usb 5-1: config 0 descriptor??
[  272.259005][ T3594] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=e7.87
[  272.282926][ T3594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.314523][ T3594] usb 4-1: config 0 descriptor??
[  272.374709][ T3594] usb 4-1: probing VID:PID(2201:012C)   
[  272.391847][ T3594] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[  272.412104][ T3594] vub300: probe of 4-1:0.0 failed with error -22
[  272.450269][ T3594] usb 5-1: USB disconnect, device number 24
[  272.575442][ T3792] usb 4-1: USB disconnect, device number 19
[  274.848947][ T3792] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  275.098946][ T3792] usb 1-1: Using ep0 maxpacket: 16
[  275.319589][ T3792] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  275.348927][ T3792] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  275.449041][ T3792] usb 1-1: language id specifier not provided by device, defaulting to English
[  275.499143][ T8085] xt_TCPMSS: Only works on TCP SYN packets
[  275.578969][ T3792] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  275.598805][ T3792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.624559][ T3792] usb 1-1: Product: 㰊
[  275.639042][ T3792] usb 1-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎
[  275.718759][ T3792] usb 1-1: SerialNumber: ఊ
[  275.865418][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1187'.
[  276.015989][ T8079] IPVS: Error connecting to the multicast addr
[  276.109792][ T3792] cdc_ncm 1-1:1.0: skipping garbage
[  276.117162][ T3792] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[  276.147345][ T3792] cdc_ncm 1-1:1.0: bind() failure
[  276.179531][ T3792] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  276.193134][ T3792] cdc_ncm 1-1:1.1: bind() failure
[  276.222034][ T3792] usb 1-1: USB disconnect, device number 20
[  276.628938][ T4551] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  276.969116][ T4551] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  277.058955][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.088993][ T4551] usb 5-1: config 0 has no interfaces?
[  277.198843][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.222811][ T4551] usb 5-1: config 0 has no interfaces?
[  277.318934][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.348729][ T4551] usb 5-1: config 0 has no interfaces?
[  277.438875][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.468776][ T4551] usb 5-1: config 0 has no interfaces?
[  277.548958][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.578774][ T4551] usb 5-1: config 0 has no interfaces?
[  277.689001][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.709002][ T4551] usb 5-1: config 0 has no interfaces?
[  277.789109][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.809345][ T4551] usb 5-1: config 0 has no interfaces?
[  277.891957][ T4551] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.919495][ T4551] usb 5-1: config 0 has no interfaces?
[  278.078870][ T4551] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  278.098134][ T4551] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  278.128456][ T4551] usb 5-1: Product: syz
[  278.138557][ T4551] usb 5-1: Manufacturer: syz
[  278.147647][ T4551] usb 5-1: SerialNumber: syz
[  278.190622][ T4551] usb 5-1: config 0 descriptor??
[  278.604049][ T3627] usb 5-1: USB disconnect, device number 25
[  278.907749][ T8138] loop0: detected capacity change from 0 to 2048
[  278.984070][ T8141] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.995012][ T8138] syz.0.1202: attempt to access beyond end of device
[  278.995012][ T8138] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  279.045540][ T8138] syz.0.1202: attempt to access beyond end of device
[  279.045540][ T8138] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  279.121377][ T8138] syz.0.1202: attempt to access beyond end of device
[  279.121377][ T8138] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  279.203235][ T8138] syz.0.1202: attempt to access beyond end of device
[  279.203235][ T8138] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  279.238470][ T8144] syz.0.1202: attempt to access beyond end of device
[  279.238470][ T8144] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  279.280633][ T8144] syz.0.1202: attempt to access beyond end of device
[  279.280633][ T8144] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  279.409123][ T8138] syz.0.1202: attempt to access beyond end of device
[  279.409123][ T8138] loop0: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  280.618886][ T3627] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  280.835896][ T8191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.879939][ T3792] wlan1: authenticate with 08:02:11:00:00:00
[  280.888389][ T3792] wlan1: No basic rates, using min rate instead
[  280.915236][ T3792] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  280.920512][ T8191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.931211][ T5935] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 65532 (expected 2)
[  280.949214][ T3627] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  280.980233][ T8191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.039152][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.059164][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  281.068049][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0
[  281.179015][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.198789][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  281.207748][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0
[  281.309245][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.328720][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  281.337700][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0
[  281.460101][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.509408][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  281.518442][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0
[  281.538765][ T5935] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  281.643960][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.655347][ T5935] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  281.676192][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  281.696896][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0
[  281.778856][    T9] wlan1: authentication with 08:02:11:00:00:00 timed out
[  281.789016][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.829334][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  281.851655][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0
[  281.958902][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  281.989778][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  282.009734][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0
[  282.089574][ T3627] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.120208][ T3627] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  282.128856][ T1148] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  282.150534][ T3627] usb 5-1: config 0 interface 0 has no altsetting 0
[  282.358948][ T3627] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  282.388967][ T1148] usb 3-1: Using ep0 maxpacket: 32
[  282.409781][ T3627] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  282.429563][ T3627] usb 5-1: Product: syz
[  282.433749][ T3627] usb 5-1: Manufacturer: syz
[  282.438354][ T3627] usb 5-1: SerialNumber: syz
[  282.464597][ T3627] usb 5-1: config 0 descriptor??
[  282.509012][ T1148] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.530629][ T3627] yurex 5-1:0.0: Could not find endpoints
[  282.542212][ T1148] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  282.735212][ T1148] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  282.744781][ T1148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.755883][ T3627] usb 5-1: USB disconnect, device number 26
[  282.760730][ T1148] usb 3-1: config 0 descriptor??
[  283.518607][ T8230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.637910][ T8230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.889020][ T8244] loop4: detected capacity change from 0 to 512
[  283.931200][ T8244] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  283.988914][ T8244] System zones: 0-5
[  283.995042][ T8244] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  284.175088][ T8244] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1239: bg 0: block 161: padding at end of block bitmap is not set
[  284.297409][ T8249] loop0: detected capacity change from 0 to 40427
[  284.307465][ T8249] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  284.315308][ T8249] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  284.334877][ T3557] EXT4-fs (loop4): unmounting filesystem.
[  284.368149][ T8249] F2FS-fs (loop0): Found nat_bits in checkpoint
[  284.447067][ T8249] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  284.454519][ T8249] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  284.605876][ T8257] syz.0.1240: attempt to access beyond end of device
[  284.605876][ T8257] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  284.626883][   T27] audit: type=1804 audit(1719965333.420:30): pid=8257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1240" name="/newroot/294/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  284.782858][ T8262] loop4: detected capacity change from 0 to 256
[  284.834361][ T8262] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  284.957418][ T8262] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  285.014524][ T3627] usb 3-1: USB disconnect, device number 9
[  285.981630][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'.
[  287.054112][ T4551] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  287.478909][ T4551] usb 3-1: config 252 has an invalid interface number: 38 but max is 0
[  287.498417][ T4551] usb 3-1: config 252 has no interface number 0
[  287.527750][ T4551] usb 3-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7
[  287.539378][ T4551] usb 3-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  287.575068][ T4551] usb 3-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9
[  287.607210][ T4551] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  287.648433][ T4551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.424827][ T8310] loop1: detected capacity change from 0 to 1024
[  288.640294][ T8310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  288.700015][ T8310] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  288.718051][   T27] audit: type=1800 audit(1719965337.510:31): pid=8310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1259" name="bus" dev="loop1" ino=18 res=0 errno=0
[  288.758947][ T4551] usb 3-1: string descriptor 0 read error: -71
[  288.765812][ T4551] usb 3-1: unsupported MDLM descriptors
[  289.004759][ T4551] usb 3-1: USB disconnect, device number 10
[  289.027036][ T6257] EXT4-fs (loop1): unmounting filesystem.
[  289.768385][ T8322] netlink: 'syz.3.1263': attribute type 27 has an invalid length.
[  289.795555][ T8322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'.
[  290.985409][ T8330] loop0: detected capacity change from 0 to 32768
[  291.026046][ T8330] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1264 (8330)
[  291.054832][ T8345] loop4: detected capacity change from 0 to 4096
[  291.182856][ T8330] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  291.212954][ T8330] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  291.273180][ T8330] BTRFS info (device loop0): force zlib compression, level 3
[  291.300166][ T8330] BTRFS info (device loop0): force clearing of disk cache
[  291.317595][ T8330] BTRFS info (device loop0): setting nodatasum
[  291.327725][ T8330] BTRFS info (device loop0): allowing degraded mounts
[  291.345079][ T8330] BTRFS info (device loop0): enabling disk space caching
[  291.368838][ T8330] BTRFS info (device loop0): disk space caching is enabled
[  291.391482][ T8352] loop1: detected capacity change from 0 to 4096
[  291.429463][ T8352] ntfs3: Unknown parameter 'iochar_et'
[  291.501233][ T8330] BTRFS info (device loop0): rebuilding free space tree
[  291.569977][ T8330] BTRFS info (device loop0): disabling free space tree
[  291.619724][ T8330] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  291.665650][ T8330] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  291.816876][ T8330] overlayfs: missing 'workdir'
[  291.831072][ T8347] loop2: detected capacity change from 0 to 32768
[  291.881222][ T8347] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1270 (8347)
[  291.946393][ T8330] BTRFS info (device loop0): balance: start 
[  291.959364][ T8330] BTRFS info (device loop0): balance: ended with status: 0
[  291.978162][ T8347] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  292.011758][ T8347] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  292.068826][ T8347] BTRFS info (device loop2): turning on flush-on-commit
[  292.095939][ T8347] BTRFS info (device loop2): turning off barriers
[  292.124768][ T8347] BTRFS info (device loop2): doing ref verification
[  292.155901][ T3548] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  292.168904][ T8347] BTRFS info (device loop2): force clearing of disk cache
[  292.176763][ T8347] BTRFS info (device loop2): enabling disk space caching
[  292.215660][ T8347] BTRFS info (device loop2): turning on sync discard
[  292.318268][ T8347] BTRFS info (device loop2): using default commit interval 30s
[  292.364027][ T8347] BTRFS info (device loop2): disk space caching is enabled
[  292.559212][ T8347] BTRFS info (device loop2): enabling ssd optimizations
[  292.586354][ T8347] BTRFS info (device loop2): rebuilding free space tree
[  292.624514][ T8352] loop1: detected capacity change from 0 to 32768
[  292.636020][ T8322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.662520][ T8352] jfs: Unrecognized mount option "prealloc" or missing value
[  292.679714][ T8347] BTRFS info (device loop2): disabling free space tree
[  292.697224][ T8347] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  292.724369][ T8347] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  292.788823][ T8345] loop4: detected capacity change from 0 to 32768
[  292.805868][ T8345] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  292.819805][ T8322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.844650][ T8345] CPU: 0 PID: 8345 Comm: syz.4.1269 Not tainted 6.1.96-syzkaller #0
[  292.852680][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  292.862763][ T8345] Call Trace:
[  292.866072][ T8345]  <TASK>
[  292.869016][ T8345]  dump_stack_lvl+0x1e3/0x2cb
[  292.873750][ T8345]  ? nf_tcp_handle_invalid+0x642/0x642
[  292.879230][ T8345]  ? panic+0x764/0x764
[  292.883323][ T8345]  sysfs_create_dir_ns+0x2c6/0x390
[  292.888461][ T8345]  ? sysfs_warn_dup+0xa0/0xa0
[  292.893172][ T8345]  kobject_add_internal+0x6df/0xd10
[  292.898396][ T8345]  kobject_init_and_add+0x120/0x190
[  292.903610][ T8345]  ? lockdep_softirqs_off+0x420/0x420
[  292.909003][ T8345]  ? widen_string+0x3a/0x310
[  292.913612][ T8345]  ? kobject_add+0x210/0x210
[  292.918221][ T8345]  ? __init_swait_queue_head+0xaa/0x140
[  292.923796][ T8345]  gfs2_sys_fs_add+0x237/0x4a0
[  292.928588][ T8345]  ? gfs2_recover_set+0x240/0x240
[  292.933634][ T8345]  ? snprintf+0xd6/0x120
[  292.937900][ T8345]  ? vscnprintf+0x80/0x80
[  292.942254][ T8345]  ? read_word_at_a_time+0xe/0x20
[  292.947304][ T8345]  ? strscpy+0x89/0x220
[  292.951482][ T8345]  gfs2_fill_super+0x1228/0x26e0
[  292.956457][ T8345]  ? gfs2_reconfigure+0xcf0/0xcf0
[  292.961496][ T8345]  ? ptr_to_hashval+0x70/0x70
[  292.966190][ T8345]  ? up_write+0x19d/0x580
[  292.970554][ T8345]  ? set_blocksize+0x1c6/0x350
[  292.975333][ T8345]  get_tree_bdev+0x3fe/0x620
[  292.979943][ T8345]  ? gfs2_reconfigure+0xcf0/0xcf0
[  292.984992][ T8345]  gfs2_get_tree+0x50/0x210
[  292.989522][ T8345]  ? bpf_lsm_capable+0x5/0x10
[  292.994230][ T8345]  vfs_get_tree+0x88/0x270
[  292.998674][ T8345]  do_new_mount+0x2ba/0xb40
[  293.003198][ T8345]  ? ns_capable+0x85/0xe0
[  293.007547][ T8345]  ? do_move_mount_old+0x160/0x160
[  293.012711][ T8345]  __se_sys_mount+0x2d5/0x3c0
[  293.016501][ T8394] tipc: Failed to remove unknown binding: 66,1,1/0:53097797/53097799
[  293.017422][ T8345]  ? __x64_sys_mount+0xc0/0xc0
[  293.030615][ T8345]  ? syscall_enter_from_user_mode+0x2e/0x230
[  293.036613][ T8345]  ? lockdep_hardirqs_on+0x94/0x130
[  293.039879][ T8394] tipc: Failed to remove unknown binding: 66,1,1/0:53097797/53097799
[  293.041907][ T8345]  ? __x64_sys_mount+0x1c/0xc0
[  293.041945][ T8345]  do_syscall_64+0x3b/0xb0
[  293.058735][ T8394] tipc: Failed to remove unknown binding: 66,1,1/0:53097797/53097799
[  293.059454][ T8345]  ? clear_bhb_loop+0x45/0xa0
[  293.072222][ T8345]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  293.078147][ T8345] RIP: 0033:0x7f8a3077761a
[  293.082583][ T8345] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.102196][ T8345] RSP: 002b:00007f8a31533e78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  293.110612][ T8345] RAX: ffffffffffffffda RBX: 00007f8a31533f00 RCX: 00007f8a3077761a
[  293.118583][ T8345] RDX: 00000000200003c0 RSI: 0000000020037f80 RDI: 00007f8a31533ec0
[  293.126549][ T8345] RBP: 00000000200003c0 R08: 00007f8a31533f00 R09: 0000000000008000
[  293.134511][ T8345] R10: 0000000000008000 R11: 0000000000000206 R12: 0000000020037f80
[  293.142489][ T8345] R13: 00007f8a31533ec0 R14: 0000000000037f59 R15: 0000000020000400
[  293.150487][ T8345]  </TASK>
[  293.155159][ T3599] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  293.247715][ T8345] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  293.308125][ T8345] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  293.519120][ T3599] usb 1-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f
[  293.539578][ T3599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.561988][ T3599] usb 1-1: config 0 descriptor??
[  293.601062][ T3599] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  293.608455][ T3599] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22
[  293.691347][ T8345] loop4: detected capacity change from 0 to 512
[  293.721949][ T8345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  293.752005][ T7480] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  293.797959][ T8345] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1269: casefold flag without casefold feature
[  293.846370][ T8345] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1269: missing EA_INODE flag
[  293.861682][ T8345] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1269: error while reading EA inode 12 err=-117
[  293.876576][ T8345] EXT4-fs (loop4): 1 orphan inode deleted
[  293.894842][ T8345] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  294.073797][ T3557] EXT4-fs (loop4): unmounting filesystem.
[  294.319432][ T8322] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.329022][ T8322] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.337922][ T8322] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.347599][ T8322] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  294.568408][ T8388] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1273'.
[  294.600603][ T4553] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  295.088994][ T4553] usb 5-1: config 252 has an invalid interface number: 38 but max is 0
[  295.115314][ T4553] usb 5-1: config 252 has no interface number 0
[  295.161440][ T4553] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7
[  295.205375][ T4553] usb 5-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  295.260053][ T4553] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9
[  295.306008][ T4553] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  295.335858][ T4553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.665744][ T3594] usb 1-1: USB disconnect, device number 21
[  295.838781][ T4553] usb 5-1: string descriptor 0 read error: -71
[  296.464931][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'.
[  296.510863][ T4553] usb 5-1: unsupported MDLM descriptors
[  296.592252][ T4553] usb 5-1: USB disconnect, device number 27
[  297.204116][ T8446] netlink: 'syz.0.1291': attribute type 27 has an invalid length.
[  297.254186][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'.
[  297.796203][ T8434] loop1: detected capacity change from 0 to 40427
[  297.815141][ T8434] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  297.831800][ T8434] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  297.913653][ T8434] F2FS-fs (loop1): Found nat_bits in checkpoint
[  298.215344][ T8434] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  298.222740][ T8434] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  298.389749][   T27] audit: type=1800 audit(1719965347.190:32): pid=8434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1287" name="bus" dev="loop1" ino=10 res=0 errno=0
[  298.415592][ T8434] syz.1.1287: attempt to access beyond end of device
[  298.415592][ T8434] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  300.228759][ T4557] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  300.327358][ T8446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  300.430983][ T8446] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  300.799342][ T4557] usb 2-1: config 252 has an invalid interface number: 38 but max is 0
[  300.824599][ T4557] usb 2-1: config 252 has no interface number 0
[  300.861118][ T4557] usb 2-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7
[  300.916998][ T4557] usb 2-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  300.968369][ T4557] usb 2-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9
[  301.022544][ T4557] usb 2-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  301.065897][ T4557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.424018][ T8446] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.433207][ T8446] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.449177][ T8446] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.468333][ T8446] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  301.528949][ T4557] usb 2-1: string descriptor 0 read error: -71
[  301.536402][ T4557] usb 2-1: unsupported MDLM descriptors
[  301.569807][ T4557] usb 2-1: USB disconnect, device number 22
[  301.644053][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1300'.
[  301.664366][ T8483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1301'.
[  302.988834][ T4558] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  303.279615][ T4558] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  303.411755][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1315'.
[  304.086951][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.098773][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  304.107741][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  304.131191][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0
[  304.259022][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.318762][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  304.337905][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  304.355022][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0
[  304.439013][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.455779][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  304.475516][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  304.507993][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0
[  304.551066][ T8538] netlink: 'syz.0.1319': attribute type 27 has an invalid length.
[  304.561448][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'.
[  304.619137][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.652040][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  304.679219][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  304.708895][ T3593] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  304.726712][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0
[  304.818974][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.839331][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  304.848235][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  304.929282][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0
[  305.048967][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.078987][ T3593] usb 4-1: config 252 has an invalid interface number: 38 but max is 0
[  305.080725][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  305.097067][ T3593] usb 4-1: config 252 has no interface number 0
[  305.104733][ T3593] usb 4-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7
[  305.117633][ T3593] usb 4-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  305.150522][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  305.182231][ T3593] usb 4-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9
[  305.202565][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0
[  305.207396][ T3593] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  305.219707][ T3593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.309295][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.325608][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  305.352283][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  305.373824][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0
[  305.458954][ T4558] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.469220][ T4558] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  305.478290][ T4558] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  305.491832][ T4558] usb 5-1: config 0 interface 0 has no altsetting 0
[  305.608872][ T3593] usb 4-1: string descriptor 0 read error: -71
[  305.630628][ T3593] usb 4-1: unsupported MDLM descriptors
[  305.668948][ T4558] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  305.678584][ T3593] usb 4-1: USB disconnect, device number 20
[  305.688415][ T4558] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  306.592514][ T4558] usb 5-1: Product: syz
[  306.596915][ T4558] usb 5-1: Manufacturer: syz
[  306.601993][ T4558] usb 5-1: SerialNumber: syz
[  306.620283][ T4558] usb 5-1: config 0 descriptor??
[  306.639237][ T4558] usb 5-1: can't set config #0, error -71
[  306.654303][ T4558] usb 5-1: USB disconnect, device number 28
[  306.982512][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1328'.
[  308.599086][   T26] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  308.814393][ T3562] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  308.825203][ T3562] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  308.834192][ T3562] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  308.844985][ T3562] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  308.854136][ T3562] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  308.862204][ T3562] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.898974][   T26] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  309.009537][   T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.020498][   T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  309.029851][   T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  309.043171][   T26] usb 5-1: config 0 interface 0 has no altsetting 0
[  309.129144][   T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.140509][   T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  309.150057][   T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  309.163437][   T26] usb 5-1: config 0 interface 0 has no altsetting 0
[  309.208896][ T8598] chnl_net:caif_netlink_parms(): no params data found
[  309.238936][   T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.259156][   T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  309.309004][   T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  309.340116][   T26] usb 5-1: config 0 interface 0 has no altsetting 0
[  309.408135][ T8598] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.415365][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.422919][   T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.434097][ T8598] device bridge_slave_0 entered promiscuous mode
[  309.440612][   T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  309.451596][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.458761][   T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  309.472173][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.480771][ T8598] device bridge_slave_1 entered promiscuous mode
[  309.487184][   T26] usb 5-1: config 0 interface 0 has no altsetting 0
[  309.608058][ T8598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.619147][   T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.639585][   T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  309.671862][ T8598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.682326][   T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  309.705954][   T26] usb 5-1: config 0 interface 0 has no altsetting 0
[  309.809324][ T3562] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  310.006256][ T8598] team0: Port device team_slave_0 added
[  310.104798][ T8598] team0: Port device team_slave_1 added
[  310.138850][   T48] Bluetooth: hci5: command 0x0406 tx timeout
[  310.379546][   T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.408844][   T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.417803][   T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.519223][   T26] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.560537][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.567509][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.604532][ T8598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.616099][   T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.634395][   T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.645113][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.652303][   T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.678822][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.714985][   T26] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.724359][ T8598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  310.799218][   T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.817220][   T26] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  310.824336][ T3792] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  310.830256][   T26] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.854341][   T26] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.905948][ T8598] device hsr_slave_0 entered promiscuous mode
[  310.926046][ T8598] device hsr_slave_1 entered promiscuous mode
[  310.932308][ T3554] Bluetooth: hci6: command tx timeout
[  311.038801][ T3792] usb 1-1: device descriptor read/64, error -71
[  311.045469][   T26] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  311.059017][   T26] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  311.077664][   T26] usb 5-1: Product: syz
[  311.086643][   T26] usb 5-1: Manufacturer: syz
[  311.095898][   T26] usb 5-1: SerialNumber: syz
[  311.101511][ T8638] loop2: detected capacity change from 0 to 32768
[  311.110820][ T8638] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1354 (8638)
[  311.128169][ T8638] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  311.133187][   T26] usb 5-1: config 0 descriptor??
[  311.138659][ T8638] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  311.155610][ T8638] BTRFS info (device loop2): turning on flush-on-commit
[  311.163460][ T8638] BTRFS info (device loop2): turning off barriers
[  311.193375][ T8638] BTRFS info (device loop2): doing ref verification
[  311.217901][ T8638] BTRFS info (device loop2): force clearing of disk cache
[  311.230260][   T26] yurex 5-1:0.0: Could not find endpoints
[  311.235627][ T8638] BTRFS info (device loop2): enabling disk space caching
[  311.299128][ T8638] BTRFS info (device loop2): turning on sync discard
[  311.308893][ T8638] BTRFS info (device loop2): using default commit interval 30s
[  311.316472][ T8638] BTRFS info (device loop2): disk space caching is enabled
[  311.318957][ T3792] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  311.348344][ T3627] usb 5-1: USB disconnect, device number 29
[  311.534963][ T3792] usb 1-1: device descriptor read/64, error -71
[  311.611410][ T8638] BTRFS info (device loop2): enabling ssd optimizations
[  311.613019][ T8674] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1359'.
[  311.645947][ T8638] BTRFS info (device loop2): rebuilding free space tree
[  311.662760][ T3792] usb usb1-port1: attempt power cycle
[  311.677731][ T8638] BTRFS info (device loop2): disabling free space tree
[  311.693320][ T8638] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  311.703306][ T8638] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  311.919667][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  311.958749][ T3791] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  311.990132][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.020733][ T8683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.078890][ T3792] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  312.169053][ T3792] usb 1-1: device descriptor read/8, error -71
[  312.329167][ T3791] usb 5-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f
[  312.343682][ T7480] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  312.352062][ T3791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.371024][ T3791] usb 5-1: config 0 descriptor??
[  312.394751][ T8598] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  312.421170][ T3791] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  312.438254][ T3791] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22
[  312.445687][ T3792] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  312.539113][ T3792] usb 1-1: device descriptor read/8, error -71
[  312.572600][ T8598] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  312.620978][ T8598] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  312.659077][ T3792] usb usb1-port1: unable to enumerate USB device
[  313.029406][ T3554] Bluetooth: hci6: command tx timeout
[  313.322084][ T8598] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  313.828301][   T48] Bluetooth: hci4: unknown advertising packet type: 0x63
[  313.836161][   T48] Bluetooth: hci4: unexpected event for opcode 0x1003
[  313.970817][ T3739] device hsr_slave_0 left promiscuous mode
[  314.012004][ T3739] device hsr_slave_1 left promiscuous mode
[  314.024317][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.053873][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.318799][   T22] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  314.640234][ T3794] usb 5-1: USB disconnect, device number 30
[  314.720556][   T22] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  314.798875][   T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  314.808064][   T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  314.819457][   T22] usb 3-1: config 0 interface 0 has no altsetting 0
[  314.929036][   T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  314.965859][   T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  314.997282][   T22] usb 3-1: config 0 interface 0 has no altsetting 0
[  315.007633][ T3739] team0 (unregistering): Port device team_slave_1 removed
[  315.019815][ T8742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.088986][   T48] Bluetooth: hci6: command tx timeout
[  315.098384][ T8742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.109239][   T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  315.122115][   T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  315.154726][   T22] usb 3-1: config 0 interface 0 has no altsetting 0
[  315.162425][ T3739] team0 (unregistering): Port device team_slave_0 removed
[  315.208912][ T8742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  315.269052][   T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  315.293808][   T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  315.313928][ T3739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.319556][   T22] usb 3-1: config 0 interface 0 has no altsetting 0
[  315.391129][ T3739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.439241][   T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  315.450512][   T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  315.468329][   T22] usb 3-1: config 0 interface 0 has no altsetting 0
[  315.574783][   T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  315.589789][   T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  315.613192][   T22] usb 3-1: config 0 interface 0 has no altsetting 0
[  315.708873][   T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  315.717810][   T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  315.780508][   T22] usb 3-1: config 0 interface 0 has no altsetting 0
[  315.868982][   T22] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  315.892155][   T22] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  315.938776][   T22] usb 3-1: config 0 interface 0 has no altsetting 0
[  316.119037][   T22] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  316.132638][   T22] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  316.142321][   T22] usb 3-1: Product: syz
[  316.311708][   T22] usb 3-1: Manufacturer: syz
[  316.316856][   T22] usb 3-1: SerialNumber: syz
[  316.325514][   T22] usb 3-1: config 0 descriptor??
[  316.369890][ T3739] bond0 (unregistering): Released all slaves
[  316.370376][   T22] yurex 3-1:0.0: Could not find endpoints
[  316.608471][   T22] usb 3-1: USB disconnect, device number 11
[  316.929723][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  316.936820][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  317.168971][   T48] Bluetooth: hci6: command tx timeout
[  317.213990][ T8598] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.255692][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  317.264455][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  317.289701][ T8598] 8021q: adding VLAN 0 to HW filter on device team0
[  317.309956][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  317.321458][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  317.340445][ T3715] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.347592][ T3715] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.379060][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  317.397183][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  317.406088][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  317.415097][ T3715] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.422278][ T3715] bridge0: port 2(bridge_slave_1) entered forwarding state
[  317.444319][ T3715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  317.468366][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  317.478221][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  317.487919][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  317.497818][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  317.514945][ T3627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  317.706301][ T8598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  317.722189][ T8598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  317.760450][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  317.769236][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  317.778109][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  317.786956][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  317.804523][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  317.833768][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  317.889088][ T3554] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  317.897934][ T3554] Bluetooth: hci4: Injecting HCI hardware error event
[  317.909184][ T3554] Bluetooth: hci4: hardware error 0x00
[  318.110822][ T8778] overlayfs: missing 'workdir'
[  318.184853][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  318.199580][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  318.232361][ T8598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.256938][ T8781] loop1: detected capacity change from 0 to 2048
[  318.302245][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  318.316433][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  318.344205][ T8784] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  318.379534][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  318.398462][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  318.430362][ T8598] device veth0_vlan entered promiscuous mode
[  318.439253][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  318.449142][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  318.462920][ T8781] syz.1.1382: attempt to access beyond end of device
[  318.462920][ T8781] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  318.514219][ T8598] device veth1_vlan entered promiscuous mode
[  318.525595][ T8781] syz.1.1382: attempt to access beyond end of device
[  318.525595][ T8781] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  318.576076][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  318.588820][ T3792] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  318.589942][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  318.618574][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  318.640726][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  318.653739][ T8598] device veth0_macvtap entered promiscuous mode
[  318.672018][ T8787] syz.1.1382: attempt to access beyond end of device
[  318.672018][ T8787] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  318.702997][ T8598] device veth1_macvtap entered promiscuous mode
[  318.715974][ T8789] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1385'.
[  318.726061][ T8787] syz.1.1382: attempt to access beyond end of device
[  318.726061][ T8787] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  318.746806][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.767859][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.822276][ T8790] syz.1.1382: attempt to access beyond end of device
[  318.822276][ T8790] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  318.849846][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.859157][ T3792] usb 1-1: Using ep0 maxpacket: 32
[  318.868207][ T8790] syz.1.1382: attempt to access beyond end of device
[  318.868207][ T8790] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  318.882949][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.882972][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.882987][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.883004][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.883017][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.900195][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.952727][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  318.963993][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  318.969986][ T8791] syz.1.1382: attempt to access beyond end of device
[  318.969986][ T8791] loop1: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  318.972961][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  318.997230][ T3710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  318.999034][ T3792] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  319.019904][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.032613][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.038859][ T3792] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  319.043429][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.089491][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.098781][ T3792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.107291][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.107349][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.107365][ T8598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.158793][ T8598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.189055][   T22] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  319.198140][ T8598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.224075][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  319.241273][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  319.265111][ T3792] usb 1-1: config 0 descriptor??
[  319.276005][ T8598] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.305766][ T8598] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.335810][ T8598] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.363701][ T8598] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.555343][ T3637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.564154][   T22] usb 3-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f
[  319.583643][ T3637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.583691][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.652149][   T22] usb 3-1: config 0 descriptor??
[  319.673763][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  319.690839][   T22] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  319.705258][   T22] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22
[  319.731894][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.759604][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.800762][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  319.972591][ T3554] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  320.592005][ T8812] overlayfs: missing 'workdir'
[  320.718884][   T22] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  321.009753][   T22] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  321.099503][   T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  321.108620][   T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  321.119295][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  321.198834][   T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  321.207720][   T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  321.238758][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  321.287693][ T3794] usb 1-1: USB disconnect, device number 26
[  321.318935][   T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  321.327844][   T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  321.377696][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  321.638995][   T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  321.659984][   T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  321.681905][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  321.715260][ T3710] usb 3-1: USB disconnect, device number 12
[  321.762065][   T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  321.796599][   T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  321.826023][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  321.919069][   T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  321.936133][   T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  321.946481][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  322.028960][   T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  322.041705][   T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  322.068888][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  322.159230][   T22] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  322.173053][   T22] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  322.198117][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  322.343942][ T8843] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  322.448859][   T22] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  322.464649][   T22] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  322.483437][   T22] usb 2-1: Product: syz
[  322.493565][   T22] usb 2-1: Manufacturer: syz
[  322.503720][   T22] usb 2-1: SerialNumber: syz
[  322.516187][   T22] usb 2-1: config 0 descriptor??
[  322.570359][   T22] yurex 2-1:0.0: Could not find endpoints
[  322.678801][ T3710] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  322.797437][   T22] usb 2-1: USB disconnect, device number 23
[  322.918769][ T3710] usb 4-1: Using ep0 maxpacket: 32
[  323.039009][ T3710] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  323.054024][ T3710] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  323.064772][ T3710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.075099][ T3710] usb 4-1: config 0 descriptor??
[  323.100982][ T8862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1408'.
[  323.162591][ T8863] overlayfs: missing 'workdir'
[  323.394038][ T3794] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  323.819270][ T3794] usb 3-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f
[  323.835843][ T3794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.858210][ T3794] usb 3-1: config 0 descriptor??
[  323.911335][ T3794] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  323.921751][ T3794] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22
[  324.111392][ T3794] usb 3-1: USB disconnect, device number 13
[  325.052038][ T8906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1419'.
[  325.237843][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1421'.
[  325.773662][ T3794] usb 4-1: USB disconnect, device number 21
[  326.075471][ T8926] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1429'.
[  326.393189][   T22] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  326.799067][   T22] usb 2-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f
[  326.814404][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.876154][   T22] usb 2-1: config 0 descriptor??
[  326.941117][   T22] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  326.975197][   T22] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22
[  327.143944][ T3710] usb 2-1: USB disconnect, device number 24
[  327.186132][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1439'.
[  327.278795][   T22] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  327.545889][   T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  327.555227][   T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  327.565196][   T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  327.573695][   T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  327.581681][   T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  327.589376][   T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  327.662593][   T22] usb 1-1: config 252 has an invalid interface number: 38 but max is 0
[  327.677011][   T22] usb 1-1: config 252 has no interface number 0
[  327.691157][   T22] usb 1-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7
[  327.754669][   T22] usb 1-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  327.775354][   T22] usb 1-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9
[  327.808724][   T22] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  327.817777][   T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.032263][ T5691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.070265][ T8967] chnl_net:caif_netlink_parms(): no params data found
[  328.218839][   T22] usb 1-1: string descriptor 0 read error: -71
[  328.227082][   T22] usb 1-1: unsupported MDLM descriptors
[  328.276221][   T22] usb 1-1: USB disconnect, device number 27
[  328.707900][ T5691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.160808][ T5691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.214973][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.233781][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.267760][ T8967] device bridge_slave_0 entered promiscuous mode
[  329.319704][ T5691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.348308][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.361508][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.386705][ T8967] device bridge_slave_1 entered promiscuous mode
[  329.388807][ T3595] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  329.497959][ T8967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.532391][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'.
[  329.570799][ T8967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.650463][ T3554] Bluetooth: hci4: command tx timeout
[  329.659566][ T3595] usb 2-1: Using ep0 maxpacket: 16
[  329.796718][ T8967] team0: Port device team_slave_0 added
[  329.825837][ T8967] team0: Port device team_slave_1 added
[  329.879194][ T3595] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  329.905829][ T3595] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  329.959126][ T3595] usb 2-1: language id specifier not provided by device, defaulting to English
[  330.002497][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.010306][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.040154][ T8967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.086282][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.097887][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.168765][ T8967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.299073][ T3595] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  330.316046][ T3595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.339782][ T3595] usb 2-1: Product: 㰊
[  330.354575][ T3595] usb 2-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎
[  330.472140][ T8967] device hsr_slave_0 entered promiscuous mode
[  330.509283][ T8967] device hsr_slave_1 entered promiscuous mode
[  330.530407][ T8967] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.567459][ T8967] Cannot create hsr debugfs directory
[  330.666647][ T9005] IPVS: Error connecting to the multicast addr
[  330.729784][ T3595] cdc_ncm 2-1:1.0: skipping garbage
[  330.734994][ T3595] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[  330.778203][ T3595] cdc_ncm 2-1:1.0: bind() failure
[  330.795678][ T3595] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  330.955156][ T3595] cdc_ncm 2-1:1.1: bind() failure
[  331.012061][ T3593] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  331.718957][ T3595] usb 2-1: USB disconnect, device number 25
[  331.729070][ T3554] Bluetooth: hci4: command tx timeout
[  331.799030][ T3593] usb 5-1: config 252 has an invalid interface number: 38 but max is 0
[  331.807601][ T3593] usb 5-1: config 252 has no interface number 0
[  331.854416][ T3593] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7
[  331.866642][ T3593] usb 5-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  331.879003][ T3593] usb 5-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9
[  331.890667][ T3593] usb 5-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  331.907157][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.318855][ T3593] usb 5-1: string descriptor 0 read error: -71
[  332.330654][ T3593] usb 5-1: unsupported MDLM descriptors
[  332.375207][ T3593] usb 5-1: USB disconnect, device number 31
[  332.399620][ T9080] overlayfs: missing 'workdir'
[  332.406815][ T9072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1467'.
[  332.449140][ T3554] Bluetooth: hci6: command tx timeout
[  332.636846][ T5691] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.652312][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.672978][ T5691] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.688352][ T5691] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.767272][ T5691] device veth1_macvtap left promiscuous mode
[  332.774856][ T5691] device veth0_macvtap left promiscuous mode
[  332.788302][ T5691] device veth1_vlan left promiscuous mode
[  332.794526][ T5691] device veth0_vlan left promiscuous mode
[  333.810167][   T48] Bluetooth: hci4: command tx timeout
[  334.299479][ T3554] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection
[  334.756270][ T5691] team0 (unregistering): Port device team_slave_1 removed
[  334.844227][ T5691] team0 (unregistering): Port device team_slave_0 removed
[  334.977082][ T5691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.033597][ T5691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.918986][ T3554] Bluetooth: hci4: command tx timeout
[  336.308260][ T5691] bond0 (unregistering): Released all slaves
[  336.776956][ T8967] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  336.790976][ T8967] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  336.811501][ T8967] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  336.854180][ T8967] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  337.115908][ T8967] 8021q: adding VLAN 0 to HW filter on device bond0
[  337.156875][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.199505][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.239152][ T9179] loop1: detected capacity change from 0 to 40427
[  337.250036][ T9179] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  337.257808][ T9179] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  337.270619][ T8967] 8021q: adding VLAN 0 to HW filter on device team0
[  337.278091][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.327129][ T8967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  337.346189][ T9179] F2FS-fs (loop1): Found nat_bits in checkpoint
[  337.368777][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.376184][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.396411][ T9179] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  337.404211][ T9179] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  337.424636][ T8967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  337.590811][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.598301][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.606970][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.743841][ T9192] syz.1.1497: attempt to access beyond end of device
[  337.743841][ T9192] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  337.745959][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.829072][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.843509][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.854509][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.871316][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  337.910113][   T27] audit: type=1804 audit(1719965386.560:33): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1497" name="/newroot/147/bus/bus" dev="loop1" ino=10 res=1 errno=0
[  340.350442][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.438235][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.469836][   T27] audit: type=1804 audit(1719965389.140:34): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1497" name="/newroot/147/bus/file0" dev="loop1" ino=11 res=1 errno=0
[  340.477390][ T9202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.501144][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.538813][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.576723][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.598755][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.606153][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.631845][ T9202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.659053][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.660149][ T9202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.700051][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.725634][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.752410][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.798786][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.806191][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.838738][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.859098][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.866624][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.898717][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.906122][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.938860][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.946259][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  340.982464][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  341.000235][ T8967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.007974][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  341.039019][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  341.046425][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  341.077827][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  341.089127][ T8967] device veth0_vlan entered promiscuous mode
[  341.108755][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  341.116218][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  341.134786][ T8967] device veth1_vlan entered promiscuous mode
[  341.140895][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  341.148283][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  341.179519][ T3791] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  341.202168][ T8967] device veth0_macvtap entered promiscuous mode
[  341.229876][ T3791] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  341.240737][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  341.248563][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  341.523208][ T9211] delete_channel: no stack
[  341.737978][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  341.746831][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  341.755353][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.762492][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.770326][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  341.779113][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  341.787614][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.794743][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.803625][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  341.812951][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  341.822222][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  341.832629][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  341.842049][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  341.850945][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  341.859711][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  341.868160][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  341.886669][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  341.908004][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  341.932154][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  341.940513][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  341.947937][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  341.956884][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  341.965745][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  341.974241][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  341.982992][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  341.991445][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  341.999710][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  342.008238][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  342.019251][ T8967] device veth1_macvtap entered promiscuous mode
[  342.041858][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  342.051133][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  342.089484][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  342.097219][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  342.129673][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  342.137426][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  342.205922][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.228765][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.248916][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.272117][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.296337][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.317848][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.330136][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.349574][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.393281][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.426581][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  342.439499][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  342.475311][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.508696][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.518518][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.568744][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.578571][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.638692][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.648520][ T8967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.701082][ T8967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.740044][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.747381][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  342.768778][ T3794] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  342.779844][ T3792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  342.807364][ T8967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.842534][ T8967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.869093][ T8967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.877805][ T8967] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.028915][ T3794] usb 5-1: Using ep0 maxpacket: 16
[  343.223132][ T3643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.264271][ T3643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.389468][ T3794] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  343.400051][ T3593] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  343.457705][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.497810][ T3794] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  343.517486][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.722447][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  343.732519][ T3794] usb 5-1: language id specifier not provided by device, defaulting to English
[  343.872706][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  344.069147][ T3794] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  344.072170][ T9270] loop1: detected capacity change from 0 to 128
[  344.078210][ T3794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.078234][ T3794] usb 5-1: Product: 㰊
[  344.078248][ T3794] usb 5-1: Manufacturer: 굗R뼁ࢠ曓䲌䊃첵ᝬ牉걾⴨ॣḴ睱㕧۔ꛓꗲ잙럂⵻㫭ྯ鮢ఙϘ兿餎
[  344.122898][ T9270] FAT-fs (loop1): bogus number of reserved sectors
[  344.132030][ T9270] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  344.142305][ T9270] FAT-fs (loop1): Can't find a valid FAT filesystem
[  344.192610][ T3593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  344.198906][ T4785] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  344.204207][ T3593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  344.218299][ T9274] loop2: detected capacity change from 0 to 2048
[  344.253911][ T3593] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  344.287592][ T3593] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  344.310770][ T3593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.339444][ T3593] usb 4-1: config 0 descriptor??
[  344.353898][ T9281] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  344.359934][ T9274] syz.2.1440: attempt to access beyond end of device
[  344.359934][ T9274] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  344.392280][ T9257] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  344.437565][ T9238] IPVS: Error connecting to the multicast addr
[  344.465676][ T9274] syz.2.1440: attempt to access beyond end of device
[  344.465676][ T9274] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  344.543016][ T9274] syz.2.1440: attempt to access beyond end of device
[  344.543016][ T9274] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  344.634062][ T9274] syz.2.1440: attempt to access beyond end of device
[  344.634062][ T9274] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  344.660621][ T3794] cdc_ncm 5-1:1.0: skipping garbage
[  344.678947][ T3794] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[  344.721459][ T3794] cdc_ncm 5-1:1.0: bind() failure
[  344.743666][ T9288] syz.2.1440: attempt to access beyond end of device
[  344.743666][ T9288] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  344.776613][ T3794] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  344.807832][ T3794] cdc_ncm 5-1:1.1: bind() failure
[  344.848984][ T3794] usb 5-1: USB disconnect, device number 32
[  344.855977][ T9288] syz.2.1440: attempt to access beyond end of device
[  344.855977][ T9288] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  344.892080][ T3593] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  344.924402][ T3593] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  344.952479][ T9296] syz.2.1440: attempt to access beyond end of device
[  344.952479][ T9296] loop2: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  345.050943][ T3593] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  345.465195][ T9302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.586004][ T9302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.632904][ T9302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.900860][ T9317] loop0: detected capacity change from 0 to 512
[  345.929406][ T9317] EXT4-fs: Ignoring removed i_version option
[  345.959286][ T9317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002]
[  345.975325][ T9317] System zones: 1-12
[  346.000146][ T9317] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1522: bg 0: block 131: padding at end of block bitmap is not set
[  346.026087][ T9317] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  346.053581][ T9317] EXT4-fs (loop0): 1 truncate cleaned up
[  346.059402][ T9317] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  346.104721][ T9322] loop1: detected capacity change from 0 to 256
[  346.197908][ T3548] EXT4-fs (loop0): unmounting filesystem.
[  346.296548][ T9324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1524'.
[  346.395943][ T9324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1524'.
[  346.403224][ T9332] loop1: detected capacity change from 0 to 512
[  346.432511][ T9332] EXT4-fs: Ignoring removed i_version option
[  346.451273][ T3595] kernel write not supported for file bpf-prog (pid: 3595 comm: kworker/1:4)
[  346.466656][ T9332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002]
[  346.479096][ T9332] System zones: 1-12
[  346.484173][ T9332] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1526: bg 0: block 131: padding at end of block bitmap is not set
[  346.526010][ T9332] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  346.553206][ T9332] EXT4-fs (loop1): 1 truncate cleaned up
[  346.559506][ T9332] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  346.673515][ T6257] EXT4-fs (loop1): unmounting filesystem.
[  346.733838][ T9341] loop4: detected capacity change from 0 to 8
[  346.778536][ T9345] loop1: detected capacity change from 0 to 128
[  346.786285][ T9341] SQUASHFS error: lzo decompression failed, data probably corrupt
[  346.812789][ T9341] SQUASHFS error: Failed to read block 0x91: -5
[  346.829629][ T9341] SQUASHFS error: Unable to read metadata cache entry [8f]
[  346.840485][ T9345] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  346.888843][ T9341] SQUASHFS error: Unable to read inode 0x11f
[  346.902146][ T9345] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038 (0x7fffffff)
[  346.936212][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'.
[  347.118306][   T26] usb 4-1: USB disconnect, device number 22
[  347.166146][ T6257] EXT4-fs (loop1): unmounting filesystem.
[  347.336143][ T9353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.374760][ T9363] loop1: detected capacity change from 0 to 1024
[  347.411475][ T9365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1538'.
[  347.438830][ T9365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1538'.
[  347.462105][ T9353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.499436][ T9353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.607380][   T27] audit: type=1326 audit(1719965396.400:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9369 comm="syz.4.1541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a30775f19 code=0x0
[  347.681200][ T5935] hfsplus: b-tree write err: -5, ino 4
[  347.886312][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1546'.
[  348.700738][ T9392] loop1: detected capacity change from 0 to 128
[  348.781718][ T9392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  348.803369][ T9402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1551'.
[  348.852513][ T9392] ext4 filesystem being mounted at /160/mnt supports timestamps until 2038 (0x7fffffff)
[  348.901150][ T9402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1551'.
[  349.042193][ T6257] EXT4-fs (loop1): unmounting filesystem.
[  349.100154][ T9414] loop4: detected capacity change from 0 to 2048
[  349.142606][ T9418] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1559'.
[  349.211313][ T9414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  349.233912][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'.
[  349.328828][ T3293] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  349.438949][ T3794] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  349.501180][ T9414] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full
[  349.669766][ T3293] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  349.762054][ T3557] EXT4-fs (loop4): unmounting filesystem.
[  349.819695][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  349.869234][ T3794] usb 2-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice= 9.4f
[  349.895572][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  349.919895][ T3794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.044267][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  350.073058][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0
[  350.081507][ T3794] usb 2-1: config 0 descriptor??
[  350.132536][ T3794] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  350.144127][ T3794] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22
[  350.189071][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  350.222564][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  350.284485][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  350.306045][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0
[  350.333035][ T3593] usb 2-1: USB disconnect, device number 26
[  350.389042][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  350.408151][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  350.419643][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  350.429860][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0
[  350.518936][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  350.530457][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  350.552142][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  350.562406][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0
[  350.588787][ T3794] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  350.626607][ T9452] loop2: detected capacity change from 0 to 2048
[  350.651607][ T9452] EXT4-fs error (device loop2): __ext4_fill_super:5399: inode #2: comm syz.2.1570: casefold flag without casefold feature
[  350.664688][ T3792] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  350.672479][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  350.676005][ T9452] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  350.688816][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  350.705290][ T9452] EXT4-fs (loop2): Errors on filesystem, clearing orphan list.
[  350.713205][ T9452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  350.722445][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  350.748774][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0
[  350.795698][ T8967] EXT4-fs (loop2): unmounting filesystem.
[  350.839029][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  350.858822][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  350.870130][ T3794] usb 1-1: Using ep0 maxpacket: 16
[  350.876958][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  350.888369][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0
[  350.953061][ T3792] usb 5-1: Using ep0 maxpacket: 8
[  350.969277][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  350.978207][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  351.000071][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  351.174719][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0
[  351.182059][ T3794] usb 1-1: unable to get BOS descriptor or descriptor too short
[  351.208852][ T3792] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  351.217215][ T3792] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  351.229197][ T3792] usb 5-1: config 179 has no interface number 0
[  351.250058][ T3792] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  351.262571][ T3794] usb 1-1: unable to read config index 0 descriptor/start: -71
[  351.276443][ T3792] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  351.312919][ T3293] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  351.328496][ T3794] usb 1-1: can't read configurations, error -71
[  351.342021][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  351.443543][ T3792] usb 5-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  351.478273][ T3293] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  351.627506][ T3293] usb 4-1: config 0 interface 0 has no altsetting 0
[  351.646766][ T3792] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  351.816836][ T3792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.934757][ T9449] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  351.949052][ T3293] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  351.956050][ T9473] loop0: detected capacity change from 0 to 2048
[  351.994098][ T3293] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  352.011679][ T3293] usb 4-1: Product: syz
[  352.016014][ T3293] usb 4-1: Manufacturer: syz
[  352.016895][ T9473] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  352.021578][ T3293] usb 4-1: SerialNumber: syz
[  352.035859][ T3293] usb 4-1: config 0 descriptor??
[  352.068970][ T3293] usb 4-1: can't set config #0, error -71
[  352.079123][ T3293] usb 4-1: USB disconnect, device number 23
[  352.186313][ T3792] usb 5-1: USB disconnect, device number 33
[  352.938594][ T9473] EXT4-fs warning (device loop0): verify_group_input:169: Last group not full
[  353.097786][ T9497] __nla_validate_parse: 2 callbacks suppressed
[  353.097803][ T9497] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1584'.
[  353.152368][ T3548] EXT4-fs (loop0): unmounting filesystem.
[  353.161935][ T9500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'.
[  353.718767][ T3715] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  354.109251][ T3715] usb 3-1: config 252 has an invalid interface number: 38 but max is 0
[  354.154586][ T3715] usb 3-1: config 252 has no interface number 0
[  354.264272][ T3715] usb 3-1: config 252 interface 38 altsetting 0 endpoint 0x8 has an invalid bInterval 161, changing to 7
[  354.329148][ T3715] usb 3-1: config 252 interface 38 altsetting 0 has a duplicate endpoint with address 0x8, skipping
[  354.399470][ T3715] usb 3-1: config 252 interface 38 altsetting 0 endpoint 0xB has an invalid bInterval 32, changing to 9
[  354.448736][ T3715] usb 3-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b
[  354.481397][ T3715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.848854][ T3715] usb 3-1: string descriptor 0 read error: -71
[  355.859906][ T3715] usb 3-1: unsupported MDLM descriptors
[  355.903571][ T9537] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1597'.
[  355.928142][ T3715] usb 3-1: USB disconnect, device number 14
[  355.971528][ T9537] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1597'.
[  356.597430][ T9547] loop4: detected capacity change from 0 to 40427
[  356.620313][ T9547] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  356.628064][ T9547] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  356.668514][ T9547] F2FS-fs (loop4): Found nat_bits in checkpoint
[  357.229651][   T28] INFO: task syz-executor:3558 blocked for more than 143 seconds.
[  357.245779][   T28]       Not tainted 6.1.96-syzkaller #0
[  357.310483][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  357.329865][   T28] task:syz-executor    state:D stack:21224 pid:3558  ppid:1      flags:0x00004004
[  357.350465][   T28] Call Trace:
[  357.357495][   T28]  <TASK>
[  357.365278][   T28]  __schedule+0x142d/0x4550
[  357.378118][   T28]  ? _raw_spin_unlock+0x40/0x40
[  357.390482][   T28]  ? __mod_timer+0x956/0xee0
[  357.401097][   T28]  ? __sched_text_start+0x8/0x8
[  357.412178][   T28]  ? lockdep_softirqs_off+0x420/0x420
[  357.428331][ T9547] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  357.435544][ T9547] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  357.446556][   T28]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  357.452622][   T28]  ? _raw_spin_unlock+0x40/0x40
[  357.457581][   T28]  schedule+0xbf/0x180
[  357.462799][   T28]  schedule_timeout+0x1b9/0x300
[  357.467688][   T28]  ? console_conditional_schedule+0x40/0x40
[  357.473656][   T28]  ? update_process_times+0x1b0/0x1b0
[  357.479113][   T28]  ? prepare_to_wait_event+0x3b5/0x3f0
[  357.484614][   T28]  gfs2_gl_hash_clear+0x19f/0x310
[  357.489757][   T28]  ? gfs2_jindex_free+0x468/0x4f0
[  357.494812][   T28]  ? withdraw_dq+0x240/0x240
[  357.499496][   T28]  ? gfs2_jindex_free+0x495/0x4f0
[  357.504710][   T28]  ? wake_bit_function+0x210/0x210
[  357.509930][   T28]  ? gfs2_setbit+0x630/0x630
[  357.514775][   T28]  ? gfs2_clear_rgrpd+0x6e6/0x710
[  357.519965][   T28]  gfs2_put_super+0x823/0x890
[  357.524863][   T28]  ? gfs2_evict_inode+0x1280/0x1280
[  357.531439][   T28]  generic_shutdown_super+0x130/0x340
[  357.538246][   T28]  kill_block_super+0x7a/0xe0
[  357.543027][   T28]  deactivate_locked_super+0xa0/0x110
[  357.548442][   T28]  cleanup_mnt+0x490/0x520
[  357.553013][   T28]  ? lockdep_hardirqs_on+0x94/0x130
[  357.559160][   T28]  task_work_run+0x246/0x300
[  357.564718][   T28]  ? task_work_cancel+0x2b0/0x2b0
[  357.571350][   T28]  ? exit_to_user_mode_loop+0x39/0x100
[  357.576837][   T28]  exit_to_user_mode_loop+0xde/0x100
[  357.582390][   T28]  exit_to_user_mode_prepare+0xb1/0x140
[  357.588415][   T28]  syscall_exit_to_user_mode+0x60/0x270
[  357.594073][   T28]  do_syscall_64+0x47/0xb0
[  357.598517][   T28]  ? clear_bhb_loop+0x45/0xa0
[  357.602047][ T9561] syz.4.1600: attempt to access beyond end of device
[  357.602047][ T9561] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  357.603335][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  357.624563][   T27] audit: type=1804 audit(1719965406.420:36): pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1600" name="/newroot/342/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  357.630802][   T28] RIP: 0033:0x7f6f5b577247
[  357.658689][   T28] RSP: 002b:00007ffe09c99908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  357.667124][   T28] RAX: 0000000000000000 RBX: 00007f6f5b5e365d RCX: 00007f6f5b577247
[  357.676397][   T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe09c999c0
[  357.685610][   T28] RBP: 00007ffe09c999c0 R08: 0000000000000000 R09: 0000000000000000
[  357.694799][   T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe09c9aa90
[  357.703408][   T28] R13: 00007f6f5b5e365d R14: 0000000000030b04 R15: 0000000000000005
[  357.715941][   T28]  </TASK>
[  357.719103][   T28] 
[  357.719103][   T28] Showing all locks held in the system:
[  357.726921][   T28] 1 lock held by rcu_tasks_kthre/12:
[  357.732344][   T28]  #0: ffffffff8d12ae90 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  357.782438][   T28] 1 lock held by rcu_tasks_trace/13:
[  357.791816][ T9547] syz.4.1600: attempt to access beyond end of device
[  357.791816][ T9547] loop4: rw=2049, sector=45224, nr_sectors = 8 limit=40427
[  357.817648][   T28]  #0: ffffffff8d12b690 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  357.840272][   T48] Bluetooth: hci4: unknown advertising packet type: 0x63
[  357.847377][   T28] 1 lock held by khungtaskd/28:
[  357.878786][   T28]  #0: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  357.890295][   T28] 2 locks held by getty/3309:
[  357.896269][   T28]  #0: ffff888028a66098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  357.938530][   T28]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  357.968462][   T28] 1 lock held by syz-executor/3557:
[  357.978728][   T28]  #0: ffffffff8d1302b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  357.990491][   T28] 1 lock held by syz-executor/3558:
[  357.995733][   T28]  #0: ffff888013a7e0e0 (&type->s_umount_key#57){++++}-{3:3}, at: deactivate_super+0xa9/0xe0
[  358.006012][   T28] 2 locks held by kworker/1:11/3715:
[  358.011410][   T28]  #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  358.022457][   T28]  #1: ffffc90004cf7d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  358.034147][   T28] 
[  358.034980][ T3557] syz-executor: attempt to access beyond end of device
[  358.034980][ T3557] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  358.036701][   T28] =============================================
[  358.036701][   T28] 
[  358.080134][   T28] NMI backtrace for cpu 0
[  358.084491][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0
[  358.092307][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  358.102379][   T28] Call Trace:
[  358.105666][   T28]  <TASK>
[  358.108589][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  358.113273][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  358.118733][   T28]  ? panic+0x764/0x764
[  358.122812][   T28]  ? vprintk_emit+0x622/0x740
[  358.127508][   T28]  ? printk_sprint+0x490/0x490
[  358.132277][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  358.137397][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  358.142344][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  358.148525][   T28]  ? _printk+0xd1/0x111
[  358.152679][   T28]  ? panic+0x764/0x764
[  358.156746][   T28]  ? __wake_up_klogd+0xcc/0x100
[  358.161596][   T28]  ? panic+0x764/0x764
[  358.165677][   T28]  ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0
[  358.171750][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  358.177823][   T28]  nmi_trigger_cpumask_backtrace+0x1b0/0x3f0
[  358.183805][   T28]  watchdog+0xf88/0xfd0
[  358.187965][   T28]  ? watchdog+0x1f8/0xfd0
[  358.192306][   T28]  kthread+0x28d/0x320
[  358.196373][   T28]  ? hungtask_pm_notify+0x50/0x50
[  358.201397][   T28]  ? kthread_blkcg+0xd0/0xd0
[  358.205981][   T28]  ret_from_fork+0x1f/0x30
[  358.210404][   T28]  </TASK>
[  358.214230][   T28] Sending NMI from CPU 0 to CPUs 1:
[  358.219764][    C1] NMI backtrace for cpu 1
[  358.219773][    C1] CPU: 1 PID: 5691 Comm: kworker/u4:8 Not tainted 6.1.96-syzkaller #0
[  358.219789][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  358.219798][    C1] Workqueue: phy21 ieee80211_iface_work
[  358.219820][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60
[  358.219842][    C1] Code: 64 db 77 7e 65 8b 15 65 db 77 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc
[  358.219854][    C1] RSP: 0018:ffffc900030cf430 EFLAGS: 00000246
[  358.219866][    C1] RAX: ffffffff89e6da5f RBX: 0000000000256a20 RCX: ffff8880224ebb80
[  358.219877][    C1] RDX: 0000000000000000 RSI: 0000000000256a20 RDI: 0000000000256a20
[  358.219905][    C1] RBP: ffff888076b1b7bc R08: ffffffff89e6d9f4 R09: ffffffff89e6d441
[  358.219917][    C1] R10: 0000000000000006 R11: ffff8880224ebb80 R12: 000000000000000d
[  358.219928][    C1] R13: ffff888076b1b7c0 R14: 0000000000000008 R15: 0000000000256a20
[  358.219939][    C1] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  358.219953][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  358.219964][    C1] CR2: 00007fff39ca4eb8 CR3: 000000000ce8e000 CR4: 00000000003506e0
[  358.219982][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  358.219991][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  358.220001][    C1] Call Trace:
[  358.220006][    C1]  <NMI>
[  358.220011][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  358.220036][    C1]  ? read_lock_is_recursive+0x10/0x10
[  358.220062][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  358.220087][    C1]  ? nmi_handle+0x25/0x440
[  358.220118][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  358.220142][    C1]  ? nmi_handle+0x12e/0x440
[  358.220165][    C1]  ? nmi_handle+0x25/0x440
[  358.220189][    C1]  ? __sanitizer_cov_trace_pc+0x32/0x60
[  358.220208][    C1]  ? default_do_nmi+0x62/0x150
[  358.220225][    C1]  ? exc_nmi+0xa8/0x100
[  358.220239][    C1]  ? end_repeat_nmi+0x16/0x31
[  358.220264][    C1]  ? ieee80211_channel_to_freq_khz+0x31/0x1a0
[  358.220284][    C1]  ? ieee80211_get_channel_khz+0x104/0x910
[  358.220303][    C1]  ? ieee80211_get_channel_khz+0x16f/0x910
[  358.220324][    C1]  ? __sanitizer_cov_trace_pc+0x32/0x60
[  358.220350][    C1]  ? __sanitizer_cov_trace_pc+0x32/0x60
[  358.220371][    C1]  ? __sanitizer_cov_trace_pc+0x32/0x60
[  358.220391][    C1]  </NMI>
[  358.220395][    C1]  <TASK>
[  358.220399][    C1]  ieee80211_get_channel_khz+0x16f/0x910
[  358.220422][    C1]  cfg80211_inform_bss_frame_data+0x4da/0x1680
[  358.220448][    C1]  ? cfg80211_parse_mbssid_data+0x3410/0x3410
[  358.220474][    C1]  ? __lock_acquire+0x1f80/0x1f80
[  358.220504][    C1]  ieee80211_bss_info_update+0x847/0xf00
[  358.220532][    C1]  ? __lock_acquire+0x1f80/0x1f80
[  358.220555][    C1]  ? ieee80211_rx_bss_put+0x60/0x60
[  358.220583][    C1]  ? ieee80211_ibss_rx_queued_mgmt+0xeba/0x2dd0
[  358.220602][    C1]  ? ieee80211_vif_get_shift+0x225/0x280
[  358.220627][    C1]  ? __lock_acquire+0x1f80/0x1f80
[  358.220648][    C1]  ? ieee80211_sta_get_rates+0x65c/0x720
[  358.220673][    C1]  ieee80211_ibss_rx_queued_mgmt+0x1962/0x2dd0
[  358.220700][    C1]  ? ieee80211_ibss_rx_queued_mgmt+0xeba/0x2dd0
[  358.220719][    C1]  ? ieee80211_ibss_rx_no_sta+0x740/0x740
[  358.220742][    C1]  ? mark_lock+0x9a/0x340
[  358.220767][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  358.220791][    C1]  ? print_irqtrace_events+0x210/0x210
[  358.220815][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  358.220832][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  358.220851][    C1]  ? skb_dequeue+0x10f/0x140
[  358.220870][    C1]  ieee80211_iface_work+0x7aa/0xce0
[  358.220892][    C1]  ? process_one_work+0x7a9/0x11d0
[  358.220910][    C1]  process_one_work+0x8a9/0x11d0
[  358.220936][    C1]  ? worker_detach_from_pool+0x260/0x260
[  358.220956][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  358.220975][    C1]  ? kthread_data+0x4e/0xc0
[  358.221000][    C1]  ? wq_worker_running+0x97/0x190
[  358.221025][    C1]  worker_thread+0xa47/0x1200
[  358.221056][    C1]  kthread+0x28d/0x320
[  358.221069][    C1]  ? worker_clr_flags+0x190/0x190
[  358.221086][    C1]  ? kthread_blkcg+0xd0/0xd0
[  358.221100][    C1]  ret_from_fork+0x1f/0x30
[  358.221129][    C1]  </TASK>
[  358.275392][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  358.275406][   T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0
[  358.275426][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  358.275437][   T28] Call Trace:
[  358.275444][   T28]  <TASK>
[  358.275452][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  358.275489][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  358.275519][   T28]  ? panic+0x764/0x764
[  358.275539][   T28]  ? llist_add_batch+0x160/0x1d0
[  358.275569][   T28]  ? vscnprintf+0x59/0x80
[  358.275594][   T28]  panic+0x318/0x764
[  358.275616][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  358.275647][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  358.275690][   T28]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  358.275721][   T28]  ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0
[  358.275755][   T28]  ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0
[  358.275790][   T28]  watchdog+0xfc7/0xfd0
[  358.275822][   T28]  ? watchdog+0x1f8/0xfd0
[  358.275871][   T28]  kthread+0x28d/0x320
[  358.275889][   T28]  ? hungtask_pm_notify+0x50/0x50
[  358.275916][   T28]  ? kthread_blkcg+0xd0/0xd0
[  358.275937][   T28]  ret_from_fork+0x1f/0x30
[  358.275981][   T28]  </TASK>
[  358.282745][   T28] Kernel Offset: disabled
[  358.760845][   T28] Rebooting in 86400 seconds..