last executing test programs:

37.811662809s ago: executing program 4 (id=244):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x3, {0x0, 0x1}}, 0x18)
close_range(r0, 0xffffffffffffffff, 0x0)

37.258336682s ago: executing program 4 (id=250):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

34.413850635s ago: executing program 4 (id=269):
syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
rename(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000001340)='./file1\x00')

33.846129924s ago: executing program 4 (id=273):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x56f, &(0x7f00000020c0)="$eJzs3U1vE0cfAPD/OnF4Cc9DkBBqe6gicSgVxSFJX6jUAz1WLSpSe6dWYiIUB6PYQSRFKhzKpZcqqlRVRaL9AL1zRP0C/RRIBQlVKGoPvaRaZx0MjhMnMcTg308yzOyOPTOe/U9mvWs5gL41mv6Ti3g9Ir5PIg437RuMbOfoWrmVx9en0kcSq6tf/JVEkm1rlE+y/4ezzGsR8fu3ESdzrfVWF5dmi+VyaT7Lj9XmroxVF5dOXZorzpRmSpcnJifPvDc58eEH73etr2+f/+enz+99cua74ys//vbwyHISZ+NQtq+5H7twozkzGqPZe5KPs88UHO9CZb0k2esGsCMDWZznI50DDsdAFvXAq++biFgF+lQi/qFPNdYBjXP7Lp0HvzQefbx2AtTa/8G1z0Zif/3c6OBK8tSZUXq+O9KF+tM67j74Zfnug9vL0b3PIQC2dONmRJweHGyd/5Js/tu50x2UebaObc5/q9tsEtDkXrr+eWej9U9uff0TG6x/hjeI3Z1oif+Wj59zD7tQTVvp+u+jDde/6xetRgay3P/qa758cvFSuZTObf+PiBOR35fmN7uec2blftt5am39d3u58Ujrb6wFs3Y8HNz39HOmi7Xibvrc7NHNiDc2XP8m6+OftIx/vv5+nO+wjmOl22+227d1/5+v1V8j3tpw/J9c0Uo2vz45Vj8exhpHRau/bx37o139e93/dPwPbt7/kaT5em11+3Xc2f9vqd2+nR7/Q8mX9fRQtu1asVabH48YSj5r3T7x5LmNfKN82v8Txzef/1qP/4gDEfFVh/2/dfRW26K9MP7T2xr/7Sfuf/r1z+3q72z8362nTmRbOpn/Om3gbt47AAAAAAAA6DW5iDgUSa6wns7lCoW1+zuOxsFcuVKtnbxYWbg8HfXvyo5EPte40j3cdD/EeHY/bCM/8Ux+MiKORMQPAwfq+cJUpTy9150HAAAAAAAAAAAAAAAAAACAHjHc5vv/qT8H9rp1wHPnJ7+hTw11UKYbv/QE9CR//6F/iX/oX+If+pf4h/4l/qF/iX/oX+If+le7+L/zgtsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAr4jz586lj9WVx9en0vz01cWF2crVU9Ol6mxhbmGqMFWZv1KYqVRmyqXCVGVuq9crVypXxidi4dpYrVStjVUXly7MVRYu1y5cmivOlC6U8i+kVwAAAAAAAAAAAAAAAAAAAPByqS4uzRbL5dJ8DySGoieaIbGtxGBvNENiLdEI7F2/4N7OSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7L8AAAD//zVwND4=")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

33.540948521s ago: executing program 4 (id=275):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000180)=ANY=[])

29.898299224s ago: executing program 4 (id=295):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x5, 0x12)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1)

29.266078504s ago: executing program 32 (id=295):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x5, 0x12)
readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/197, 0xc5}], 0x1)

21.08795003s ago: executing program 1 (id=337):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0xe, 0x7, 0x101, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x3}}, 0xffffff70}, 0x1, 0x0, 0x0, 0x20005080}, 0x80)

20.555485119s ago: executing program 1 (id=339):
r0 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c)
close(r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']})

20.31469165s ago: executing program 1 (id=342):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0)
r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x0, 0x200000}, &(0x7f0000000480), &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0)

20.159363128s ago: executing program 1 (id=343):
syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x1, 0x189, &(0x7f00000027c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

19.649500761s ago: executing program 1 (id=349):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="2e000000010001", 0x7)

18.574237962s ago: executing program 1 (id=355):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

17.929270349s ago: executing program 33 (id=355):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)

6.333145671s ago: executing program 3 (id=421):
syz_mount_image$jfs(&(0x7f0000005d00), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0073458d2943a06970e57c94dc6187052b32da7d81a006f584a4507bb6f0fc81e37906e6fa19e78409ba2571c50f1f5016405f3a0e158e812965f7e812ec7192ea261b9cdcef9e033c75cce2d2c8447a006674a10cca3c985ff446aefa303234a224f3202f3c90948c90dd7f18857bcdd84f1eef4fd2a46ba5f147f247ab59cb874a63c52b5c063d343b0e110de6218caf4c31e1598eb9b0312ae0cff267f45e3ffe97096c6407cbdc0faac2da4e718683cf1cb1e57aedb4633a72865791233ba0da05ee46da6f06132201b9f1c685e1687ead388aee"], 0x1, 0x5d9d, &(0x7f000000a240)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1)

5.404618653s ago: executing program 0 (id=426):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004400), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000010)

4.981025636s ago: executing program 0 (id=428):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000100)={0x3, 0x100, 0xe})

4.67358532s ago: executing program 2 (id=429):
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)='j', 0x1}], 0x1, &(0x7f0000002d40)=ANY=[], 0x350}}], 0x2, 0xc8000)
syz_emit_ethernet(0x3e, &(0x7f0000000480)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0)
sendmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000004c0)="6d78ce", 0x3}], 0x1}}], 0x1, 0x40080)

4.319335069s ago: executing program 2 (id=430):
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}}, {@in6=@remote, 0x4d2, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @mark={0xc, 0x15, {0x350759, 0xc}}]}, 0x144}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0)

4.054094893s ago: executing program 3 (id=431):
syz_emit_ethernet(0x165, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x12f, 0x0, 0x0, @private2, @local, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433"}}}}}, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x121040)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})

3.772966431s ago: executing program 2 (id=433):
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x2003001, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000008c0)='./file1\x00', 0x2000000, &(0x7f0000000040)=ANY=[], 0x1, 0x7d5, &(0x7f0000003800)="$eJzs3U9oHOfZAPBnFNmWFT5/Id+HP2McZ2LnAxscZSUnCiKHZLMayZOsdsXuKtiUkphaDsZyEuIGah/q+NLS0lJ66jHNoZf2VHppKbTQQttToT300lsg0EPS0kIPLQGVndm1JUu78h/ZCuH3E9a8+84z8z4zu8yjsTQzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEUputVCaTqOeNpdPpYLXZVnNhyPz++n65bjJk3Iik+y/GxuJA2XXgf2/O3t/9diQOla8OxVh3MhZXH97/yPP/MzrSX35IQtttdLPOy1euXjy7srL8zgNM5D745s/XvfzBeNzmnp3PGnm7mS9U57M0bzfTmenpytOn5trpXF7P2mfanWwhrbWyaqfZSo/VjqeTMzMn02ziTHOpMT9brWfpaNn53FNTlcp0+vLEYlZttZuNp1+eaNdO5fV63pgvFuzO7sY81/0gvpJ30k5WXUjT8xdWlk+uT2nvhiS7QZPrej5dXfvq0JOPfPTuh/+4sDy11eZOVaamJienpiann5159rlKZXRDR+UWsSHigX5o+Qza5iM43L2RXv2PeuTRiKU4HemmX7WYjVY0Y2HA/J5+/f//p//6+2Hjrq3/ZZUfOXTg5uyDUdT/w+Wrw4Pqfzn27j0DcrpfX31pXI4rcTUuxtlYiZVYjnfuy3jJ9q1rZHszm48sGpFHO5qRx0JUi56015PGTEzHdFTitTgVc9GONOYij3pk0Y4z0Y5OZMUnqhatyKIanWhGK9I4FrU4HmlMxkzMxMlII4uJOBPNWIpGzMdsVIu1nI8LxX4/eUte+7/6+s/e+MNH7xfvVj9octgufi+iCPr7kCD1n3u3vQdwuAer/foPAAAAfG4lxf++d8//d8VjRWsur2df2GKp0e639x5MhgAAAMC9Kn7zf6g72dVtPRZJ9/y/sj7oR7t2JjkAAABgWyTFNXZJRIzH42Wrf7lUZadzAwAAALZH8fv/w93JeMS1osP5PwAAAHzOvPqTXqO8x/7YjXvsfti/x257cU/yi79Fq7Urub54+snkUrUbXr30ULlcb7Ja2BMRnbmDSf9+gsW6pkevPtztGK1lh5L+3S8/3VNOPym+Hxy9kdD6e/2/uLfsTZJkiwRu6iawr7cVNxIoXsW34oky5olz5fRcf065teNzeT2bqDXrz09GtbpvpJOd7rz75oWvRLH532gs7Evi/IWV5YkvvbVyrsjlenct1y/1NnjDfRSH5LLa2wPx2OZ3N95VXIjRG3e8HLeydvtHLu/rNkbuYMyvxZEy5sh4OR1fv/1j3TEnJwZt/Xi5fZMbtnx04wdraBZHuxG74+ixonH02CZZTA3LorsvptZm0dsJd7YvjpYxa7P49Z+KrvefuHb6n79pJtnJrbI4eY9ZAOyU88Vdf26tQv8uy/lqt/63Wrt2x7q6Uy5wu0e5pBhliyf53H51/9fqkCP6sTLmWPnzxOjBTepKZZMj+tsX3v5t74j+zA+/9/0vHv7dj++6ro/1Q/b2G4/+6uGRKLLY28viam9Oa1fy7RuVpKyqH3T7Pxg4brs+lXR34UNfvvR27L985epTFy6dfWP5jeU3p6ZOTleeqVSeTZLem7da/MSg9gCwiSNxuCzkA5+xM+ApPMUPAGXtfmbYWfVDkTx6408KujXxrViJc3GiuNogIh7ffNzxNX+GcGKLs9bxNU94ObHZWd2a2N0RvdipLWPH1zxe5qb/++79fD8A4EE4skUdHlj/15y7n9jivPtmHf3vOBHHy9jj/QwG13IA4P7IWp8k452vJ61Wvvja5MzMZLVzKktbzdoraSufnc/SvNHJWjFabcxn6WKr2WnWmvVu49V8Nmun7aXFxWark841W+lis52fLp78nvYe/d7OFqqNTl5rL9azajtLa81Gp1rrpLN5u5YuLr1Uz9unslaxcHsxq+Vzea3ayZuNtN1catWyiTRtZ9mawHw2a3TyubzbbKSLrXyh2roeEfWlhSydzdq1Vr7YaZYr7I+VN+aarYVitX/Zt9N7GwA+Gy5fuXrx7MrK8jt31/jz7QQPHn3MjYUBYAfcrNIf/9et817YmZQAAAAAAAAAAAAAAIBb3OP1fxsbe+94qX4qm8aMDVt89dpmSyWrq6t3kPPe2CJmdy+/bd5RD6RxfVvWMzLo3bnHxuPbtJ5k8KzXX3jh4qDFX7p24NTtf0SHxoxGRO9S1/c+3v3T75SzXryrzRm586X+GBF3MdZqMiRmxw5JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDQfwIAAP//2S5sNA==")
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x0, 0x3)

3.095631881s ago: executing program 2 (id=434):
pipe2$watch_queue(&(0x7f0000000540)={<r0=>0xffffffffffffffff}, 0x80)
r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x5a)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff)

2.922241933s ago: executing program 3 (id=435):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4cb, &(0x7f00000005c0)="$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")
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xc)

2.598707887s ago: executing program 2 (id=436):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}})
write$tun(r0, &(0x7f0000000ec0)={@val={0x1c, 0x800}, @val={0x2, 0x4, 0x2, 0x7, 0x1, 0x404}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x27, 0x44, 0x65, 0x0, 0xc, 0x11, 0x0, @private=0xa010102, @broadcast}, {0x4e20, 0x4e21, 0x30, 0x0, @opaque="d753a18867af63e626b9e90eca7d1b662b8454f3fad73c1bfdc3de229774aafc5a5765dc897aec99"}}}}, 0x52)

2.299256963s ago: executing program 3 (id=437):
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="95eafffa0d6feeeb42bf4e37b6c0b74407b58804cf5ba055dadeba63e5b320b564e3a98141d3cfef9ef496d07c66d1251fc7acced8b3c3d5111af32e7788335317510eff7d09", 0x46}], 0x1, 0x0, 0x0, 0x8000}, 0x4040044)
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r0, &(0x7f0000000180)=ANY=[], 0xd2)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

2.189646122s ago: executing program 5 (id=438):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

1.97690969s ago: executing program 3 (id=439):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x400, 0x0, 0x2, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x0, 0x0, 0xee01}, {0x1, 0x80000000, 0x0, 0x0, 0x4, 0x0, 0x10}, {0x0, 0x0, 0x1000, 0x2}, 0x10, 0x6e6bb4}}, 0xb8}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0)

1.942235707s ago: executing program 5 (id=440):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x1, 0x3}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x48ce, 0x0, 0x0, 0x0, 0x0)
read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f)

1.779290023s ago: executing program 6 (id=297):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xb3d22000)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4804)

1.682263368s ago: executing program 2 (id=441):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001940)={0x1c, &(0x7f0000001840)={0x0, 0x15, 0x1a, "1b7814d5ff8b1784848afab32e46ca2065f369e96725e203e1ae"}, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

1.677240164s ago: executing program 0 (id=442):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}}, 0x44)

1.383336971s ago: executing program 3 (id=443):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000ff"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.178230746s ago: executing program 5 (id=444):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

1.177875784s ago: executing program 0 (id=445):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)

928.347721ms ago: executing program 0 (id=446):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f0000002fc0)='1', 0x1)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003040), 0x2, 0x0)
write$6lowpan_control(r1, &(0x7f0000003080)='connect aa:aa:aa:aa:aa:11 0', 0x1b)

876.387721ms ago: executing program 5 (id=447):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

366.148414ms ago: executing program 5 (id=448):
r0 = socket$inet(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0)

365.690151ms ago: executing program 0 (id=449):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)={@val, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x3, 0x6, 0x100, @void}, "7b2b8265eb7aa43b11412d2e579ee189352a08dfec8a8364f845f85dcd445874"}}}}}}}, 0x52)

0s ago: executing program 5 (id=450):
r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0)
fcntl$addseals(r0, 0x409, 0x2)
r1 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r0, 0x1, 0x0, 0x8000})

kernel console output (not intermixed with test programs):

[   93.993272][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   94.097736][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   94.108337][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.116067][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.123883][ T5831] bridge_slave_0: entered allmulticast mode
[   94.131020][ T5831] bridge_slave_0: entered promiscuous mode
[   94.182549][ T5834] hsr_slave_0: entered promiscuous mode
[   94.189203][ T5834] hsr_slave_1: entered promiscuous mode
[   94.208760][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.216166][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.224705][ T5831] bridge_slave_1: entered allmulticast mode
[   94.231761][ T5831] bridge_slave_1: entered promiscuous mode
[   94.387914][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.398103][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.405499][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.413002][ T5844] bridge_slave_0: entered allmulticast mode
[   94.419975][ T5844] bridge_slave_0: entered promiscuous mode
[   94.451248][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.458789][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.466199][ T5833] bridge_slave_0: entered allmulticast mode
[   94.473518][ T5833] bridge_slave_0: entered promiscuous mode
[   94.498354][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.527951][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.535406][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.542754][ T5844] bridge_slave_1: entered allmulticast mode
[   94.549718][ T5844] bridge_slave_1: entered promiscuous mode
[   94.571132][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.581288][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.588883][ T5833] bridge_slave_1: entered allmulticast mode
[   94.595953][ T5833] bridge_slave_1: entered promiscuous mode
[   94.629587][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.636848][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.644259][ T5836] bridge_slave_0: entered allmulticast mode
[   94.651468][ T5836] bridge_slave_0: entered promiscuous mode
[   94.663895][ T5831] team0: Port device team_slave_0 added
[   94.682287][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.714549][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.721702][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.729408][ T5836] bridge_slave_1: entered allmulticast mode
[   94.736780][ T5836] bridge_slave_1: entered promiscuous mode
[   94.756666][ T5831] team0: Port device team_slave_1 added
[   94.766696][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.794141][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.806758][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.829086][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.837723][ T5848] Bluetooth: hci3: command tx timeout
[   94.839295][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.851479][ T5832] bridge_slave_0: entered allmulticast mode
[   94.858872][ T5832] bridge_slave_0: entered promiscuous mode
[   94.911637][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.912243][ T5847] Bluetooth: hci4: command tx timeout
[   94.925161][ T5853] Bluetooth: hci0: command tx timeout
[   94.925185][ T5850] Bluetooth: hci5: command tx timeout
[   94.925452][ T5850] Bluetooth: hci1: command tx timeout
[   94.931256][ T5848] Bluetooth: hci2: command tx timeout
[   94.948429][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.956006][ T5832] bridge_slave_1: entered allmulticast mode
[   94.963161][ T5832] bridge_slave_1: entered promiscuous mode
[   94.972686][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.990884][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.998102][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.024266][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.040004][ T5844] team0: Port device team_slave_0 added
[   95.084080][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.105540][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.113155][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.139254][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.157480][ T5844] team0: Port device team_slave_1 added
[   95.170559][ T5833] team0: Port device team_slave_0 added
[   95.184911][ T5833] team0: Port device team_slave_1 added
[   95.193250][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.218234][ T5836] team0: Port device team_slave_0 added
[   95.269320][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.306503][ T5836] team0: Port device team_slave_1 added
[   95.335593][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.342834][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.369293][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.411512][ T5832] team0: Port device team_slave_0 added
[   95.439401][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.446748][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.473076][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.500961][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.508329][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.535130][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.548921][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.556099][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.582433][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.595931][ T5832] team0: Port device team_slave_1 added
[   95.610692][ T5831] hsr_slave_0: entered promiscuous mode
[   95.617145][ T5831] hsr_slave_1: entered promiscuous mode
[   95.623910][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.631799][ T5831] Cannot create hsr debugfs directory
[   95.650409][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.657482][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.684248][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.697456][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.705188][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.731519][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.808792][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.817406][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.845495][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.880442][ T5833] hsr_slave_0: entered promiscuous mode
[   95.887471][ T5833] hsr_slave_1: entered promiscuous mode
[   95.893968][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.901569][ T5833] Cannot create hsr debugfs directory
[   95.930015][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.937146][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.963790][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.000298][ T5844] hsr_slave_0: entered promiscuous mode
[   96.006684][ T5844] hsr_slave_1: entered promiscuous mode
[   96.013359][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.020953][ T5844] Cannot create hsr debugfs directory
[   96.043037][ T5836] hsr_slave_0: entered promiscuous mode
[   96.049547][ T5836] hsr_slave_1: entered promiscuous mode
[   96.056367][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.064023][ T5836] Cannot create hsr debugfs directory
[   96.192224][ T5832] hsr_slave_0: entered promiscuous mode
[   96.198508][ T5832] hsr_slave_1: entered promiscuous mode
[   96.205068][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.213627][ T5832] Cannot create hsr debugfs directory
[   96.237129][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   96.287349][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   96.342289][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   96.353979][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.596138][   T47] cfg80211: failed to load regulatory.db
[   96.700988][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.729385][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.741676][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.759602][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   96.829446][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.838274][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.851649][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.891446][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.903367][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.915674][ T5848] Bluetooth: hci3: command tx timeout
[   96.968780][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   96.992175][ T5848] Bluetooth: hci1: command tx timeout
[   96.992222][ T5850] Bluetooth: hci2: command tx timeout
[   96.997633][ T5840] Bluetooth: hci0: command tx timeout
[   97.003248][ T5850] Bluetooth: hci5: command tx timeout
[   97.008593][ T5847] Bluetooth: hci4: command tx timeout
[   97.020618][ T5844] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   97.032914][ T5844] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   97.062425][ T5844] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   97.076785][ T5844] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   97.113892][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.121285][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.132916][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.140035][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.211084][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.226849][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.261349][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.273801][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.336215][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.428064][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   97.441158][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   97.454471][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   97.485788][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   97.506252][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   97.561270][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.568428][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.597354][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.604521][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.675365][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.768332][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   97.801143][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   97.861566][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.868769][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.881167][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.888323][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.916580][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.940699][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.001225][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.015624][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.036420][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   98.080603][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.087775][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.123030][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.190798][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   98.217811][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   98.227547][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.235222][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.273488][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.280719][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.325360][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.332537][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.364077][ T5834] veth0_vlan: entered promiscuous mode
[   98.386118][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.393317][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.416955][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.484443][ T5834] veth1_vlan: entered promiscuous mode
[   98.520734][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.527994][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.681622][ T5833] veth0_vlan: entered promiscuous mode
[   98.736903][ T5833] veth1_vlan: entered promiscuous mode
[   98.763859][ T5834] veth0_macvtap: entered promiscuous mode
[   98.781508][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.831087][ T5834] veth1_macvtap: entered promiscuous mode
[   98.866279][ T5833] veth0_macvtap: entered promiscuous mode
[   98.893870][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.927291][ T5833] veth1_macvtap: entered promiscuous mode
[   98.976591][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.008235][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.016116][ T5847] Bluetooth: hci3: command tx timeout
[   99.049296][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.065237][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.076665][ T5847] Bluetooth: hci5: command tx timeout
[   99.082394][ T5847] Bluetooth: hci4: command tx timeout
[   99.087929][ T5847] Bluetooth: hci0: command tx timeout
[   99.092212][ T5840] Bluetooth: hci1: command tx timeout
[   99.094091][ T5847] Bluetooth: hci2: command tx timeout
[   99.106755][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.119494][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.129882][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.139877][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.149428][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.188397][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.208149][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.219734][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.265906][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.276100][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.286995][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.297035][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.345294][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.361394][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.391568][ T5831] veth0_vlan: entered promiscuous mode
[   99.458923][ T5831] veth1_vlan: entered promiscuous mode
[   99.650007][ T5836] veth0_vlan: entered promiscuous mode
[   99.715155][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.738345][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.749734][ T5831] veth0_macvtap: entered promiscuous mode
[   99.764417][ T5836] veth1_vlan: entered promiscuous mode
[   99.791279][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.816034][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.839766][ T5831] veth1_macvtap: entered promiscuous mode
[   99.927426][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.938618][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.940007][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.946955][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.970489][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.984335][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.995595][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.027310][ T5832] veth0_vlan: entered promiscuous mode
[  100.079954][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.099952][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.110931][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.132360][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.145034][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.156618][ T5832] veth1_vlan: entered promiscuous mode
[  100.162449][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  100.191733][ T5844] veth0_vlan: entered promiscuous mode
[  100.210225][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.220822][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.236549][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.238864][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.260923][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.270619][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.323260][ T5836] veth0_macvtap: entered promiscuous mode
[  100.357276][ T5836] veth1_macvtap: entered promiscuous mode
[  100.379390][ T5844] veth1_vlan: entered promiscuous mode
[  100.405933][ T5832] veth0_macvtap: entered promiscuous mode
[  100.454815][ T5832] veth1_macvtap: entered promiscuous mode
[  100.480010][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.499013][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.509458][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.520900][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.531161][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.560539][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.593528][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.609400][ T5943] loop1: detected capacity change from 0 to 1024
[  100.658474][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.678801][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.689287][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.709430][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.722738][ T5943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.742142][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.752849][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.764507][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.776404][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.785304][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.794231][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.812118][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.821874][ T5943] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  100.849400][ T5844] veth0_macvtap: entered promiscuous mode
[  100.933645][ T3441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.947167][ T3441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.977700][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.003063][ T5844] veth1_macvtap: entered promiscuous mode
[  101.036034][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.057597][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.068971][ T5951] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET)
[  101.075719][ T5847] Bluetooth: hci3: command tx timeout
[  101.084278][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.102050][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.121953][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.132691][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.144294][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.155481][ T5847] Bluetooth: hci1: command tx timeout
[  101.155808][ T5850] Bluetooth: hci0: command tx timeout
[  101.160894][ T5847] Bluetooth: hci4: command tx timeout
[  101.167146][ T5840] Bluetooth: hci5: command tx timeout
[  101.171741][ T5847] Bluetooth: hci2: command tx timeout
[  101.178974][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.218435][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.273895][ T5951] syzkaller1: entered promiscuous mode
[  101.280807][ T5951] syzkaller1: entered allmulticast mode
[  101.296042][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.326234][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.340911][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.362080][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.377100][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.398288][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.413909][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.424510][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.434547][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.446396][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.463583][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.595838][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.642190][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.664922][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.702181][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.720834][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.762184][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.784181][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.809068][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.822110][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.839533][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.851306][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.901014][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.924468][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.972039][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.980820][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.034818][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.068600][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.069640][ T5971] loop3: detected capacity change from 0 to 256
[  102.079750][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.092781][ T5971] =======================================================
[  102.092781][ T5971] WARNING: The mand mount option has been deprecated and
[  102.092781][ T5971]          and is ignored by this kernel. Remove the mand
[  102.092781][ T5971]          option from the mount to silence this warning.
[  102.092781][ T5971] =======================================================
[  102.104797][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.150875][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.162365][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.173140][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.184256][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.201995][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  102.213268][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  102.225595][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  102.243159][ T5967] tun0: tun_chr_ioctl cmd 1074025675
[  102.248682][ T5967] tun0: persist enabled
[  102.255130][ T5965] tun0: tun_chr_ioctl cmd 1074025675
[  102.261325][ T5965] tun0: persist disabled
[  102.270234][ T5844] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.279845][ T5844] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.288774][ T5844] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.297825][ T5844] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.315825][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.348998][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.565302][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.580564][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.735852][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.753551][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.761409][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.784354][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.843570][ T5904] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  102.983095][   T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.990988][   T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.014166][ T5980] loop0: detected capacity change from 0 to 2048
[  103.033419][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.041356][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.066220][ T5904] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[  103.116934][ T5904] usb 4-1: config 0 has no interface number 0
[  103.129699][ T5980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.142965][ T5904] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 57, changing to 9
[  103.190328][ T5904] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 9527, setting to 1024
[  103.244249][ T5904] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  103.274844][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.313735][ T5904] usb 4-1: config 0 descriptor??
[  103.353584][ T5973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  103.429368][ T5904] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input5
[  103.462533][ T5901] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  103.667358][ T5901] usb 3-1: unable to get BOS descriptor or descriptor too short
[  103.706667][ T5901] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  103.751873][ T5901] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32
[  103.788673][ T5897] usb 4-1: USB disconnect, device number 2
[  103.808220][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  103.875850][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  103.930899][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  103.968390][ T5901] usb 3-1: SerialNumber: syz
[  104.003634][ T5988] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  104.055111][ T5988] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  104.338294][ T5988] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  104.372315][ T5988] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  104.744083][ T6010] batadv0: entered promiscuous mode
[  104.817942][ T6010] batadv_slave_0: entered promiscuous mode
[  104.820806][ T5901] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  104.880082][ T6010] batadv_slave_0: left promiscuous mode
[  104.922424][ T6010] batadv0: left promiscuous mode
[  104.956434][ T6016] loop1: detected capacity change from 0 to 2048
[  105.000522][ T6016] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  105.111182][ T6020] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.184573][   T47] usb 3-1: USB disconnect, device number 2
[  105.212565][ T6016] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  105.240168][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.31'.
[  105.287787][ T6016] Remounting filesystem read-only
[  105.314555][ T6026] iou-wrk-6024 (6026): drop_caches: 0
[  105.325008][ T6016] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  105.347847][ T6027] iou-wrk-6024 (6027): drop_caches: 0
[  105.386500][ T6025] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  105.648164][   T29] audit: type=1326 audit(1739775639.065:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6013 comm="syz.0.29" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60b178cde9 code=0x7fc00000
[  105.974215][ T6040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.37'.
[  106.429836][ T6051] warning: `syz.4.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  107.053508][   T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  107.162437][ T6066] hub 1-0:1.0: USB hub found
[  107.178871][ T6066] hub 1-0:1.0: 1 port detected
[  107.200920][ T6043] loop2: detected capacity change from 0 to 32768
[  107.242392][   T47] usb 2-1: Using ep0 maxpacket: 16
[  107.265589][   T47] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  107.310213][ T6043] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  107.312009][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.422722][   T47] usb 2-1: Product: syz
[  107.430097][   T47] usb 2-1: Manufacturer: syz
[  107.441954][   T47] usb 2-1: SerialNumber: syz
[  107.457931][   T47] usb 2-1: config 0 descriptor??
[  107.500287][   T47] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  107.527053][   T47] usb 2-1: Detected FT232H
[  107.712506][   T47] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  107.750660][ T6043] XFS (loop2): Ending clean mount
[  107.792961][ T5847] Bluetooth: hci5: command tx timeout
[  107.966364][ T6088] loop0: detected capacity change from 0 to 1024
[  108.112418][ T6043] syz.2.39 (6043) used greatest stack depth: 19808 bytes left
[  108.179106][   T47] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  108.291483][ T6088] EXT4-fs (loop0): Test dummy encryption mode enabled
[  108.309280][ T6088] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  108.320163][ T5836] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  108.361727][   T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  108.384232][ T6088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.421447][ T5901] usb 2-1: USB disconnect, device number 2
[  108.456739][ T5901] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  108.480622][ T5901] ftdi_sio 2-1:0.0: device disconnected
[  108.552004][   T25] usb 5-1: Using ep0 maxpacket: 32
[  108.555276][ T6097] loop3: detected capacity change from 0 to 4096
[  108.595229][   T25] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  108.638091][   T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  108.711189][   T25] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  108.731957][   T25] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  108.761207][   T25] usb 5-1: config 0 interface 0 has no altsetting 0
[  108.813594][   T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  108.823522][   T25] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  108.849863][   T25] usb 5-1: Product: syz
[  108.862194][   T25] usb 5-1: Manufacturer: syz
[  108.866852][   T25] usb 5-1: SerialNumber: syz
[  108.894501][   T25] usb 5-1: config 0 descriptor??
[  108.921041][ T6088] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  108.932300][   T25] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  108.984414][   T25] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  109.031007][ T6083] loop5: detected capacity change from 0 to 32768
[  109.144945][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.194475][ T6083] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt
[  109.194475][ T6083] 
[  109.245353][ T6083] ERROR: (device loop5): remounting filesystem as read-only
[  109.379130][ T6093] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  109.380927][   T25] usb 5-1: USB disconnect, device number 2
[  109.386399][    C1] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  109.442798][   T25] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  110.106591][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.5.63'.
[  110.142092][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  110.342095][ T5901] usb 1-1: Using ep0 maxpacket: 32
[  110.382378][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.452189][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.488926][ T5901] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  110.532089][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.573367][ T5901] usb 1-1: config 0 descriptor??
[  111.089810][ T5901] ft260 0003:0403:6030.0001: unknown main item tag 0x0
[  111.245821][ T5901] ft260 0003:0403:6030.0001: chip code: 0000 0000
[  111.290771][ T6149] loop5: detected capacity change from 0 to 64
[  111.463720][ T6151] loop3: detected capacity change from 0 to 736
[  111.474773][ T5848] Bluetooth: hci6: command 0xfc11 tx timeout
[  111.482696][ T5847] Bluetooth: hci6: Entering manufacturer mode failed (-110)
[  111.710257][   T47] usb 1-1: USB disconnect, device number 2
[  112.099549][ T6159] loop2: detected capacity change from 0 to 4096
[  112.135123][ T6159] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  112.176974][ T6131] netlink: 'syz.4.68': attribute type 13 has an invalid length.
[  112.197148][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.81'.
[  112.255949][ T6131] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  112.285177][ T6159] ntfs3(loop2): Inode r=19 is not in use!
[  112.291048][ T6159] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  112.342289][   T47] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  112.427285][ T6159] ntfs3(loop2): ino=1b, mi_enum_attr
[  112.462178][ T6159] ntfs3(loop2): ino=1b, mi_enum_attr
[  112.512336][   T47] usb 6-1: Using ep0 maxpacket: 16
[  112.530067][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.560687][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.597073][ T6171] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  112.622146][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  112.642053][ T5901] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  112.647344][   T47] usb 6-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00
[  112.708551][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.799919][   T47] usb 6-1: config 0 descriptor??
[  112.868588][ T5901] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  112.891985][ T5901] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  112.933920][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  112.997215][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  113.038824][   T25] kernel write not supported for file /34/attr/exec (pid: 25 comm: kworker/1:0)
[  113.046427][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  113.093863][ T5901] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  113.095496][ T6162] loop5: detected capacity change from 0 to 512
[  113.103377][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  113.163333][ T5901] usb 4-1: Product: syz
[  113.167582][ T5901] usb 4-1: Manufacturer: syz
[  113.205910][ T5901] cdc_wdm 4-1:1.0: skipping garbage
[  113.211283][ T5901] cdc_wdm 4-1:1.0: skipping garbage
[  113.212061][ T6162] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  113.229693][ T5901] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  113.247857][ T5901] cdc_wdm 4-1:1.0: Unknown control protocol
[  113.272545][ T6162] EXT4-fs (loop5): orphan cleanup on readonly fs
[  113.281022][ T6162] Quota error (device loop5): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  113.312290][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  113.334746][ T6162] EXT4-fs warning (device loop5): ext4_enable_quotas:7141: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  113.420674][ T6162] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  113.456160][ T6162] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #16: comm syz.5.82: casefold flag without casefold feature
[  113.482486][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.518107][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  113.528654][ T6162] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.82: couldn't read orphan inode 16 (err -117)
[  113.556194][    T9] usb 1-1: config 1 has no interface number 0
[  113.582415][    T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.616117][ T6162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  113.646218][    T9] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  113.670672][    T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  113.690423][    T9] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  113.718584][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  113.740049][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.763429][    T9] usb 1-1: Product: syz
[  113.767666][    T9] usb 1-1: Manufacturer: syz
[  113.791278][    T9] usb 1-1: SerialNumber: syz
[  113.925571][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'.
[  113.984352][   T47] wacom 0003:056A:0325.0002: hidraw0: USB HID v0.08 Device [HID 056a:0325] on usb-dummy_hcd.5-1/input0
[  114.132140][ T2146] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  114.169886][   T47] usb 6-1: USB disconnect, device number 2
[  114.372608][ T2146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.411979][ T2146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.472378][ T2146] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  114.495694][ T2146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.538072][ T2146] usb 3-1: config 0 descriptor??
[  114.642882][    T9] cdc_ncm 1-1:1.1: bind() failure
[  114.646230][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.658661][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.813721][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.855586][    T9] usb 1-1: USB disconnect, device number 3
[  114.983394][ T6203] loop4: detected capacity change from 0 to 4096
[  114.997877][ T2146] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[  115.052472][ T2146] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  115.595580][ T5896] usb 4-1: USB disconnect, device number 3
[  115.653512][ T6207] loop5: detected capacity change from 0 to 32768
[  115.664546][ T2146] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE
[  115.708251][ T6207] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  115.716925][ T6207] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  115.751637][ T6207] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  115.858432][ T6207] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  115.880676][ T2146] cp2112 0003:10C4:EA90.0003: error requesting SMBus config
[  115.905622][ T2146] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71
[  115.931088][ T2146] usb 3-1: USB disconnect, device number 3
[  116.285702][    T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  116.491667][    T9] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  116.523727][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.531803][    T9] usb 1-1: Product: syz
[  116.570381][    T9] usb 1-1: Manufacturer: syz
[  116.578993][    T9] usb 1-1: SerialNumber: syz
[  116.610218][    T9] usb 1-1: config 0 descriptor??
[  116.718336][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.107'.
[  116.953805][ T6236] loop2: detected capacity change from 0 to 512
[  117.021747][ T6236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.070180][    T9] airspy 1-1:0.0: Board ID: 00
[  117.108924][    T9] airspy 1-1:0.0: Firmware version: 
[  117.134076][ T6236] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.234206][ T6236] EXT4-fs error (device loop2): ext4_get_first_dir_block:3548: inode #12: block 32: comm syz.2.113: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  117.290707][ T6236] EXT4-fs error (device loop2): ext4_get_first_dir_block:3552: inode #12: comm syz.2.113: directory missing '.'
[  117.427187][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.453150][ T6228] loop4: detected capacity change from 0 to 32768
[  117.541315][ T6228] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  117.676162][    T9] airspy 1-1:0.0: usb_control_msg() failed -71 request 12
[  117.696391][    T9] airspy 1-1:0.0: Registered as swradio24
[  117.703041][    T9] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  117.729487][    T9] usb 1-1: USB disconnect, device number 4
[  117.763056][    T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  117.932010][    T8] usb 4-1: Using ep0 maxpacket: 32
[  117.933815][ T6228] XFS (loop4): Ending clean mount
[  117.947909][ T6262] hub 1-0:1.0: USB hub found
[  117.960701][    T8] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  117.970230][ T6262] hub 1-0:1.0: 1 port detected
[  117.979422][    T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  118.003128][ T6228] XFS (loop4): Quotacheck needed: Please wait.
[  118.031872][    T8] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  118.077434][    T8] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  118.140966][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.148280][ T6228] XFS (loop4): Quotacheck: Done.
[  118.181264][    T8] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  118.201990][    T8] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  118.222384][    T8] usb 4-1: Product: syz
[  118.230624][    T8] usb 4-1: Manufacturer: syz
[  118.238664][    T8] usb 4-1: SerialNumber: syz
[  118.249669][    T8] usb 4-1: config 0 descriptor??
[  118.270219][    T8] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  118.297925][    T8] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  118.522392][ T5832] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  118.610596][ T6271] loop0: detected capacity change from 0 to 1024
[  118.646521][ T6271] EXT4-fs: Ignoring removed orlov option
[  118.709596][ T2146] usb 4-1: USB disconnect, device number 4
[  118.709632][    C0] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  118.742175][ T6250] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  118.755093][ T6271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.800593][ T2146] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  119.030427][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.082056][    T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  119.245286][ T6282] loop0: detected capacity change from 0 to 1024
[  119.271773][    T8] usb 2-1: Using ep0 maxpacket: 8
[  119.285361][    T8] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  119.302772][    T8] usb 2-1: config 179 has no interface number 0
[  119.327212][    T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  119.373215][    T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  119.406223][    T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  119.417800][    T8] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  119.444856][ T6258] netlink: 'syz.5.118': attribute type 13 has an invalid length.
[  119.474672][ T6282] hfsplus: xattr searching failed
[  119.487558][    T8] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  119.514904][ T6258] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  119.522201][    T8] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  119.627367][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.690733][ T6277] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  119.737580][ T3441] hfsplus: b-tree write err: -5, ino 3
[  119.773130][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'.
[  119.980951][    T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input9
[  120.052699][ T6279] loop2: detected capacity change from 0 to 32768
[  120.247187][ T2146] usb 2-1: USB disconnect, device number 3
[  120.247245][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  120.261728][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  120.270845][    C0] vkms_vblank_simulate: vblank timer overrun
[  120.278826][ T2146] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  120.296810][ T6279] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  120.707344][ T6302] loop0: detected capacity change from 0 to 128
[  120.778694][ T5836] ocfs2: Unmounting device (7,2) on (node local)
[  120.789430][ T6302] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  120.853434][ T6302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.957414][   T29] audit: type=1800 audit(1739775654.375:3): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.132" name="bus" dev="loop0" ino=89 res=0 errno=0
[  121.003185][ T6302] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  121.025887][ T6284] loop4: detected capacity change from 0 to 32768
[  121.075487][ T6284] jfs: Bad value for 'uid'
[  121.079990][ T6284] jfs: Bad value for 'uid'
[  121.203894][ T2146] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  121.444768][ T2146] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  121.464243][ T2146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.501001][ T2146] usb 6-1: Product: syz
[  121.515040][ T2146] usb 6-1: Manufacturer: syz
[  121.544197][ T2146] usb 6-1: SerialNumber: syz
[  121.615868][ T2146] usb 6-1: config 0 descriptor??
[  121.662737][ T6320] hub 1-0:1.0: USB hub found
[  121.693087][ T6320] hub 1-0:1.0: 1 port detected
[  122.111351][ T2146] airspy 6-1:0.0: Board ID: 00
[  122.132804][ T2146] airspy 6-1:0.0: Firmware version: 
[  122.252180][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  122.324690][ T6345] loop3: detected capacity change from 0 to 2048
[  122.348599][ T6345] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.422123][    T9] usb 2-1: Using ep0 maxpacket: 32
[  122.436672][    T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  122.478047][    T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  122.532309][    T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  122.590438][    T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  122.666521][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  122.693453][    T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  122.707607][    T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  122.723624][ T2146] airspy 6-1:0.0: usb_control_msg() failed -71 request 12
[  122.736061][ T2146] airspy 6-1:0.0: Registered as swradio24
[  122.736240][    T9] usb 2-1: Product: syz
[  122.751405][ T2146] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  122.753990][    T9] usb 2-1: Manufacturer: syz
[  122.772169][    T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  122.787095][ T2146] usb 6-1: USB disconnect, device number 3
[  122.812142][    T9] usb 2-1: SerialNumber: syz
[  122.838060][    T9] usb 2-1: config 0 descriptor??
[  122.852131][    T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  122.866555][    T9] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  122.953878][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.000711][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.061487][    T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  123.078772][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.115286][    T8] usb 5-1: config 0 descriptor??
[  123.242903][ T6340] netlink: 'syz.0.144': attribute type 13 has an invalid length.
[  123.303991][ T6335] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  123.312179][ T6340] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  123.355846][    T9] usb 2-1: USB disconnect, device number 4
[  123.361748][    C0] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  123.417654][    T9] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  123.523273][ T6362] batadv1: entered promiscuous mode
[  123.529642][ T6362] batadv1: entered allmulticast mode
[  123.593702][    T8] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  123.601049][    T8] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  123.627235][    T8] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0004/input/input10
[  123.731792][    T8] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[  123.871433][    T8] usb 5-1: USB disconnect, device number 3
[  124.180396][ T6372] hub 1-0:1.0: USB hub found
[  124.200005][ T6372] hub 1-0:1.0: 1 port detected
[  124.467409][ T6380] input: syz1 as /devices/virtual/input/input11
[  124.716417][ T6384] loop4: detected capacity change from 0 to 1024
[  124.759547][ T6384] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  124.797579][ T6384] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  124.842849][ T6384] JBD2: no valid journal superblock found
[  124.848645][ T6384] EXT4-fs (loop4): Could not load journal inode
[  125.027455][   T47] kernel write not supported for file /70/loginuid (pid: 47 comm: kworker/1:1)
[  125.438352][ T6396] loop5: detected capacity change from 0 to 2048
[  125.510049][ T6396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.523624][ T6371] loop2: detected capacity change from 0 to 32768
[  125.552617][ T5897] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  125.561551][ T6396] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  125.572270][   T29] audit: type=1800 audit(1739775658.975:4): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="file2" dev="loop2" ino=5 res=0 errno=0
[  125.692342][   T29] audit: type=1800 audit(1739775659.105:5): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.167" name="file0" dev="loop5" ino=13 res=0 errno=0
[  125.728646][ T6396] fs-verity: sha512 using implementation "sha512-avx2"
[  125.770895][ T5897] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  125.816266][   T29] audit: type=1800 audit(1739775659.135:6): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.167" name="file0" dev="loop5" ino=13 res=0 errno=0
[  125.822004][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.872243][   T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  125.924949][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.939502][ T5897] usb 2-1: Product: syz
[  125.950114][ T5897] usb 2-1: Manufacturer: syz
[  125.955671][ T5897] usb 2-1: SerialNumber: syz
[  125.980646][ T5897] usb 2-1: config 0 descriptor??
[  126.068589][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.103203][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.132219][   T47] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  126.152224][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.186008][   T47] usb 1-1: config 0 descriptor??
[  126.382285][ T2146] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  126.459071][ T5897] airspy 2-1:0.0: Board ID: 00
[  126.465711][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.478483][ T5897] airspy 2-1:0.0: Firmware version: 
[  126.496046][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.558085][ T6401] netlink: 'syz.3.169': attribute type 13 has an invalid length.
[  126.562013][ T2146] usb 6-1: Using ep0 maxpacket: 32
[  126.584430][ T2146] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  126.598051][ T6401] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  126.601960][ T2146] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  126.652142][ T2146] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  126.682197][ T2146] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  126.712024][ T2146] usb 6-1: config 0 interface 0 has no altsetting 0
[  126.739345][   T47] sony 0003:054C:024B.0005: unexpected long global item
[  126.753945][ T2146] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  126.772780][   T47] sony 0003:054C:024B.0005: parse failed
[  126.778614][   T47] sony 0003:054C:024B.0005: probe with driver sony failed with error -22
[  126.787430][ T2146] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  126.796816][ T2146] usb 6-1: Product: syz
[  126.801057][ T2146] usb 6-1: Manufacturer: syz
[  126.812346][ T2146] usb 6-1: SerialNumber: syz
[  126.825186][ T2146] usb 6-1: config 0 descriptor??
[  126.845905][ T2146] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  126.868235][ T2146] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  126.942282][    T9] usb 1-1: USB disconnect, device number 5
[  127.079930][ T5897] airspy 2-1:0.0: usb_control_msg() failed -71 request 12
[  127.093655][ T5897] airspy 2-1:0.0: Registered as swradio24
[  127.099436][ T5897] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  127.158759][ T5897] usb 2-1: USB disconnect, device number 5
[  127.284966][ T5904] usb 6-1: USB disconnect, device number 4
[  127.285082][    C0] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[  127.302129][ T6414] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  127.311278][ T5904] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  127.540949][ T6430] hub 1-0:1.0: USB hub found
[  127.547451][ T6430] hub 1-0:1.0: 1 port detected
[  128.206715][    T8] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0
[  128.245101][    T8] hid-generic 0000:0003:0000.0006: unknown main item tag 0x0
[  128.285331][    T8] hid-generic 0000:0003:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  128.402303][ T5901] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  128.562073][ T5901] usb 1-1: Using ep0 maxpacket: 32
[  128.570661][ T6438] loop2: detected capacity change from 0 to 32768
[  128.581756][ T5901] usb 1-1: unable to get BOS descriptor or descriptor too short
[  128.590459][ T5901] usb 1-1: unable to read config index 0 descriptor/start: -71
[  128.607331][ T6438] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.180 (6438)
[  128.621155][ T5901] usb 1-1: can't read configurations, error -71
[  128.696566][ T6438] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  128.721863][ T6438] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  128.734711][ T6438] BTRFS info (device loop2): using free-space-tree
[  128.842793][ T6438] BTRFS info (device loop2): rebuilding free space tree
[  129.198014][ T5836] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  129.217054][ T6478] loop4: detected capacity change from 0 to 128
[  129.242699][ T6478] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  129.563616][    T8] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  129.772436][    T8] usb 5-1: unable to get BOS descriptor or descriptor too short
[  129.795424][    T8] usb 5-1: not running at top speed; connect to a high speed hub
[  129.805285][    T8] usb 5-1: config 128 has an invalid interface number: 127 but max is 3
[  129.814035][    T8] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  129.880839][    T8] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4
[  129.899570][    T8] usb 5-1: config 128 has no interface number 0
[  129.936081][    T8] usb 5-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  129.952474][ T6490] hub 1-0:1.0: USB hub found
[  129.976569][ T6490] hub 1-0:1.0: 1 port detected
[  129.991998][    T8] usb 5-1: config 128 interface 127 has no altsetting 0
[  130.014271][    T8] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  130.042030][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.061859][    T8] usb 5-1: Product: syz
[  130.066157][    T8] usb 5-1: Manufacturer: syz
[  130.098546][    T8] usb 5-1: SerialNumber: syz
[  130.198073][ T6492] loop0: detected capacity change from 0 to 4096
[  130.238965][ T6492] ntfs3(loop0): Primary boot: invalid bytes per sector 0.
[  130.251646][ T6492] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[  130.463303][    T8] usb 5-1: USB disconnect, device number 4
[  130.742293][ T6508] loop5: detected capacity change from 0 to 1024
[  130.761372][ T6508] EXT4-fs: Ignoring removed bh option
[  130.794144][ T6508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  130.814919][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.980795][ T5904] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  131.114125][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  131.212701][ T5904] usb 1-1: Using ep0 maxpacket: 32
[  131.256951][ T5904] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  131.286437][ T5904] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  131.321587][ T5904] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  131.366428][ T5904] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  131.439988][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0
[  131.476920][ T6530] loop5: detected capacity change from 0 to 256
[  131.484521][ T5904] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  131.502312][ T5904] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  131.524430][ T5904] usb 1-1: Product: syz
[  131.528642][ T5904] usb 1-1: Manufacturer: syz
[  131.533664][ T6496] netlink: 'syz.2.188': attribute type 13 has an invalid length.
[  131.551007][ T6530] exfat: Deprecated parameter 'namecase'
[  131.556725][ T5904] usb 1-1: SerialNumber: syz
[  131.559484][ T5904] usb 1-1: config 0 descriptor??
[  131.604320][ T6496] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  131.615485][ T5904] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  131.672415][ T5904] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  131.693821][ T6530] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d)
[  131.811970][ T6534] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  131.998526][ T6510] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  131.999562][    T8] usb 1-1: USB disconnect, device number 8
[  132.005743][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  132.091461][    T8] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  132.229468][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'.
[  132.365199][ T6544] hsr0: entered promiscuous mode
[  132.403372][ T6545] hsr_slave_0: left promiscuous mode
[  132.451309][ T6545] hsr_slave_1: left promiscuous mode
[  132.545744][ T6545] hsr0 (unregistering): left promiscuous mode
[  132.784598][ T6558] loop3: detected capacity change from 0 to 1024
[  132.882599][ T6558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.038533][ T6566] loop1: detected capacity change from 0 to 256
[  133.622305][ T5901] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  133.807318][ T6588] loop0: detected capacity change from 0 to 2048
[  133.815819][ T5901] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  133.826148][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.837046][ T6588] EXT4-fs: Ignoring removed nomblk_io_submit option
[  133.878405][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  133.902192][ T6588] EXT4-fs: Ignoring removed nobh option
[  133.946290][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  133.959345][ T6588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.161556][   T29] audit: type=1800 audit(1739775667.545:7): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.237" name="bus" dev="loop0" ino=18 res=0 errno=0
[  134.172404][ T6593] netlink: 'syz.3.238': attribute type 21 has an invalid length.
[  134.212077][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18286, setting to 1024
[  134.240491][ T5901] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  134.249731][ T6593] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.238'.
[  134.305444][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  134.329393][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.358191][ T5901] usb 3-1: Product: syz
[  134.373680][ T5901] usb 3-1: Manufacturer: syz
[  134.395098][ T6574] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  134.404448][ T5901] cdc_wdm 3-1:1.0: skipping garbage
[  134.416071][ T5901] cdc_wdm 3-1:1.0: skipping garbage
[  134.448060][ T5901] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  134.476969][ T5901] cdc_wdm 3-1:1.0: Unknown control protocol
[  134.610342][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  134.617262][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  134.623702][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  134.630345][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  134.636739][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  134.643377][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  134.649796][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  134.656434][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  134.662753][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  134.669384][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  134.675898][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  134.682535][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  134.689584][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  134.696221][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  134.703334][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  134.709972][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  134.716344][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  134.722965][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  134.729272][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  134.735906][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  134.749818][ T5901] usb 3-1: USB disconnect, device number 4
[  134.999038][ T6578] netlink: 'syz.1.234': attribute type 13 has an invalid length.
[  135.036906][ T6578] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  135.605459][ T6610] process 'syz.3.243' launched './file1' with NULL argv: empty string added
[  135.811360][ T5901] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  135.959330][ T6617] overlayfs: upper fs does not support file handles, falling back to index=off.
[  136.005019][ T5901] usb 3-1: Using ep0 maxpacket: 32
[  136.035395][ T5901] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  136.043895][ T5901] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  136.062202][ T6619] loop3: detected capacity change from 0 to 2048
[  136.101682][ T5901] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  136.144614][ T6619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.151978][ T5901] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  136.188941][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0
[  136.198538][ T5901] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  136.208105][ T5901] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  136.208348][ T6619] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.217343][ T5901] usb 3-1: Product: syz
[  136.233135][ T5901] usb 3-1: Manufacturer: syz
[  136.237784][ T5901] usb 3-1: SerialNumber: syz
[  136.249907][ T5901] usb 3-1: config 0 descriptor??
[  136.300162][ T5901] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  136.329419][ T5901] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  136.533577][ T5904] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  136.583379][ T6619] EXT4-fs error (device loop3): ext4_validate_block_bitmap:440: comm syz.3.249: bg 0: block 345: padding at end of block bitmap is not set
[  136.760493][ T5904] usb 5-1: Using ep0 maxpacket: 32
[  136.767723][ T5901] usb 3-1: USB disconnect, device number 5
[  136.773736][    C0] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  136.782279][ T6608] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  136.820513][ T5901] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  136.821850][ T5904] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  136.857516][   T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32777 with max blocks 1 with error 28
[  136.889671][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.922150][   T11] EXT4-fs (loop3): This should not happen!! Data will be lost
[  136.922150][   T11] 
[  136.932404][ T5904] usb 5-1: Product: syz
[  136.932438][ T6632] loop5: detected capacity change from 0 to 256
[  136.936586][ T5904] usb 5-1: Manufacturer: syz
[  136.962174][   T11] EXT4-fs (loop3): Total free blocks count 0
[  136.968229][   T11] EXT4-fs (loop3): Free/Dirty block details
[  136.990600][ T5904] usb 5-1: SerialNumber: syz
[  137.010885][ T6632] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  137.013164][ T5904] usb 5-1: config 0 descriptor??
[  137.029400][   T11] EXT4-fs (loop3): free_blocks=0
[  137.029464][   T11] EXT4-fs (loop3): dirty_blocks=16
[  137.029491][   T11] EXT4-fs (loop3): Block reservation details
[  137.029514][   T11] EXT4-fs (loop3): i_reserved_data_blocks=1
[  137.053948][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.075033][ T5904] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  137.155691][ T6606] netlink: 'syz.0.254': attribute type 13 has an invalid length.
[  137.224405][ T6606] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  137.585042][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  137.591826][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  138.005061][ T6646] loop5: detected capacity change from 0 to 256
[  138.077974][ T6646] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  138.126575][ T5904] gspca_ov534_9: reg_w failed -71
[  138.269718][ T6655] Bluetooth: MGMT ver 1.23
[  138.413740][ T5904] gspca_ov534_9: Unknown sensor 0000
[  138.413822][ T5904] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  138.427429][ T5897] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  138.505970][ T5904] usb 5-1: USB disconnect, device number 5
[  138.622343][ T5897] usb 2-1: Using ep0 maxpacket: 16
[  138.645001][ T5897] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  138.674402][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.697874][ T5897] usb 2-1: config 0 has no interface number 0
[  138.760484][ T5897] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  138.780140][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.805800][ T5897] usb 2-1: Product: syz
[  138.818970][ T5897] usb 2-1: Manufacturer: syz
[  138.829477][ T5897] usb 2-1: SerialNumber: syz
[  138.847399][ T5897] usb 2-1: config 0 descriptor??
[  138.962037][ T5896] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  138.974580][ T6665] loop4: detected capacity change from 0 to 256
[  139.034613][ T6665] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  139.103140][ T5904] usb 2-1: USB disconnect, device number 6
[  139.148576][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.186395][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.227531][ T5896] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  139.274000][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.302886][ T5896] usb 1-1: config 0 descriptor??
[  139.459440][ T6673] loop4: detected capacity change from 0 to 1024
[  139.508549][ T6673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.598243][ T6659] loop2: detected capacity change from 0 to 32768
[  139.646995][ T5832] EXT4-fs error (device loop4): ext4_readdir:259: inode #11: block 34: comm syz-executor: path /42/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  139.673902][ T5832] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=2048, inode=393216, rec_len=0, size=1024 fake=0
[  139.678430][ T6659] 
[  139.678430][ T6659]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.678430][ T6659] 
[  139.715085][ T5832] EXT4-fs error (device loop4): ext4_readdir:259: inode #11: block 34: comm syz-executor: path /42/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  139.764033][ T5896] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[  139.792092][ T5896] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  139.823579][ T5832] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=2048, inode=393216, rec_len=0, size=1024 fake=0
[  139.853503][ T6659] ERROR: (device loop2): diWrite: ixpxd invalid
[  139.853503][ T6659] 
[  139.884129][ T6659] ERROR: (device loop2): remounting filesystem as read-only
[  139.892236][ T5832] EXT4-fs error (device loop4): ext4_readdir:259: inode #11: block 34: comm syz-executor: path /42/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  139.922323][ T6659] ERROR: (device loop2): txAbort: 
[  139.922323][ T6659] 
[  139.938039][ T5896] cp2112 0003:10C4:EA90.0007: Part Number: 0xAD Device Version: 0x7A
[  139.949082][ T6682] 
[  139.949082][ T6682]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.949082][ T6682] 
[  139.961815][ T5832] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=2048, inode=393216, rec_len=0, size=1024 fake=0
[  139.990691][ T5832] EXT4-fs error (device loop4): ext4_readdir:259: inode #11: block 34: comm syz-executor: path /42/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  140.022438][ T6682] 
[  140.022438][ T6682]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.022438][ T6682] 
[  140.036077][ T5832] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=2048, inode=393216, rec_len=0, size=1024 fake=0
[  140.109402][ T5836] 
[  140.109402][ T5836]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.109402][ T5836] 
[  140.109655][ T5832] EXT4-fs error (device loop4): ext4_readdir:259: inode #11: block 34: comm syz-executor: path /42/file1/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  140.177835][ T5832] EXT4-fs error (device loop4): ext4_empty_dir:3134: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=2048, inode=393216, rec_len=0, size=1024 fake=0
[  140.230936][ T5836] 
[  140.230936][ T5836]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.230936][ T5836] 
[  140.362564][ T5896] cp2112 0003:10C4:EA90.0007: error setting SMBus config
[  140.372241][ T5896] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71
[  140.496585][ T5896] usb 1-1: USB disconnect, device number 9
[  141.164991][ T6685] loop1: detected capacity change from 0 to 32768
[  141.303370][ T6685] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  141.325663][ T6700] loop2: detected capacity change from 0 to 1024
[  141.333993][ T6678] netlink: 'syz.5.274': attribute type 13 has an invalid length.
[  141.376074][ T6678] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  141.396658][ T6700] EXT4-fs: Ignoring removed orlov option
[  141.415703][ T6700] EXT4-fs: Ignoring removed nomblk_io_submit option
[  141.476697][ T6700] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  141.533676][ T6700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.864777][ T5834] ocfs2: Unmounting device (7,1) on (node local)
[  142.016548][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.103010][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.121881][ T6710] loop5: detected capacity change from 0 to 32768
[  143.128637][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.143603][ T6710] XFS: ikeep mount option is deprecated.
[  143.170742][ T6710] XFS: noikeep mount option is deprecated.
[  143.314167][ T5840] Bluetooth: hci5: command 0x0405 tx timeout
[  143.357204][ T6710] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  143.399977][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.585132][ T6710] XFS (loop5): Ending clean mount
[  143.648268][ T6710] XFS (loop5): Quotacheck needed: Please wait.
[  143.746127][ T6710] XFS (loop5): Quotacheck: Done.
[  143.754793][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.780321][   T29] audit: type=1800 audit(1739775677.195:8): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.284" name="bus" dev="loop5" ino=1067 res=0 errno=0
[  143.896726][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.144430][ T5844] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  144.197237][ T6751] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gretap0, syncid = 4, id = 0
[  144.356680][   T35] bridge_slave_1: left allmulticast mode
[  144.370309][   T35] bridge_slave_1: left promiscuous mode
[  144.393359][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.469523][ T6741] loop3: detected capacity change from 0 to 32768
[  144.592647][   T35] bridge_slave_0: left allmulticast mode
[  144.609535][   T35] bridge_slave_0: left promiscuous mode
[  144.642326][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.673772][ T6741] read_mapping_page failed!
[  144.678596][ T6741] bread failed!
[  145.036092][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  145.047139][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  145.057604][ T6759] loop1: detected capacity change from 0 to 2048
[  145.061338][ T6765] loop0: detected capacity change from 0 to 512
[  145.077253][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  145.102222][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  145.102660][ T6759] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  145.129537][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  145.137960][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  145.161831][ T6759] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  145.169816][ T6759] UDF-fs: Scanning with blocksize 512 failed
[  145.219303][ T6765] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.307: corrupted in-inode xattr: invalid ea_ino
[  145.239423][ T6759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.254237][ T6765] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.307: couldn't read orphan inode 15 (err -117)
[  145.313269][ T6765] EXT4-fs (loop0): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.577731][ T5833] EXT4-fs (loop0): unmounting filesystem 00000007-0000-0000-0000-000000000000.
[  145.607520][ T5834] UDF-fs: warning (device loop1): udf_evict_inode: Inode 851 (mode 100000) has inode size 1099511628801 different from extent length 1099511629824. Filesystem need not be standards compliant.
[  145.682419][   T29] audit: type=1326 audit(1739775679.095:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.5.309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5bed8cde9 code=0x0
[  146.040429][ T6782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.312'.
[  146.064130][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'.
[  146.248950][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.266325][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.277978][   T35] bond0 (unregistering): Released all slaves
[  146.960642][ T6799] IPv6: sit1: Disabled Multicast RS
[  146.985768][ T6799] sit1: entered allmulticast mode
[  147.232119][ T5847] Bluetooth: hci2: command tx timeout
[  148.197233][   T35] hsr_slave_0: left promiscuous mode
[  148.334143][   T35] hsr_slave_1: left promiscuous mode
[  148.340865][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.420653][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.506780][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.559759][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.718530][   T35] veth1_macvtap: left promiscuous mode
[  148.732057][ T6830] loop5: detected capacity change from 0 to 65536
[  148.785105][   T35] veth0_macvtap: left promiscuous mode
[  148.822850][ T6830] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  148.833623][   T35] veth1_vlan: left promiscuous mode
[  148.839340][   T35] veth0_vlan: left promiscuous mode
[  148.861658][ T6830] XFS (loop5): Ending clean mount
[  148.888085][ T6830] XFS (loop5): Quotacheck needed: Please wait.
[  148.985211][ T6830] XFS (loop5): Quotacheck: Done.
[  149.074378][ T5844] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  149.313552][ T5847] Bluetooth: hci2: command tx timeout
[  149.756685][ T6832] loop1: detected capacity change from 0 to 32768
[  149.891250][ T6832] JBD2: Ignoring recovery information on journal
[  149.985744][ T6832] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  150.025385][ T6836] loop3: detected capacity change from 0 to 40427
[  150.046271][ T6836] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  150.062094][ T6836] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  150.081442][ T6836] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x1fffff
[  150.109453][ T6836] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8
[  150.132072][ T6832] OCFS2: ERROR (device loop1): ocfs2_validate_inode_block: Invalid dinode #74: signature = 
[  150.144114][ T6832] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  150.183344][ T6836] F2FS-fs (loop3): invalid crc value
[  150.194784][ T6832] OCFS2: File system is now read-only.
[  150.201234][ T6832] (syz.1.327,6832,0):ocfs2_assign_bh:2417 ERROR: status = -30
[  150.231231][ T6832] (syz.1.327,6832,0):ocfs2_inode_lock_full_nested:2512 ERROR: status = -30
[  150.234776][ T6836] F2FS-fs (loop3): Found nat_bits in checkpoint
[  150.293239][ T6832] (syz.1.327,6832,0):ocfs2_reserve_suballoc_bits:793 ERROR: status = -30
[  150.312892][ T6832] (syz.1.327,6832,0):ocfs2_reserve_new_inode:1095 ERROR: status = -30
[  150.321131][ T6832] (syz.1.327,6832,0):ocfs2_reserve_new_inode:1118 ERROR: status = -30
[  150.364292][ T6832] (syz.1.327,6832,0):ocfs2_mknod:306 ERROR: status = -30
[  150.388284][ T6832] (syz.1.327,6832,0):ocfs2_mknod:502 ERROR: status = -30
[  150.402076][ T6832] (syz.1.327,6832,0):ocfs2_create:675 ERROR: status = -30
[  150.423206][ T6836] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  150.437350][ T6836] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  150.552274][ T5834] ocfs2: Unmounting device (7,1) on (node local)
[  150.623536][ T5831] syz-executor: attempt to access beyond end of device
[  150.623536][ T5831] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  150.687950][ T5831] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  151.007157][ T6851] loop5: detected capacity change from 0 to 32768
[  151.021576][   T35] team0 (unregistering): Port device team_slave_1 removed
[  151.104601][ T6851] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  151.120959][ T6851] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  151.161869][   T35] team0 (unregistering): Port device team_slave_0 removed
[  151.305971][ T6851] XFS (loop5): Ending clean mount
[  151.338744][ T6851] XFS (loop5): Quotacheck needed: Please wait.
[  151.392756][ T5847] Bluetooth: hci2: command tx timeout
[  151.457633][ T6851] XFS (loop5): Quotacheck: Done.
[  151.672756][ T5844] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  151.812031][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  151.961998][ T5896] usb 4-1: Using ep0 maxpacket: 32
[  151.984658][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.002329][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  152.067431][ T5896] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  152.076786][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.134087][ T5896] usb 4-1: Product: syz
[  152.138335][ T5896] usb 4-1: Manufacturer: syz
[  152.161191][ T5896] usb 4-1: SerialNumber: syz
[  152.213660][ T5896] usb 4-1: config 0 descriptor??
[  152.245407][ T5896] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  152.340525][ T5896] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[  152.373793][ T6877] use of bytesused == 0 is deprecated and will be removed in the future,
[  152.431224][ T6877] use the actual size instead.
[  152.456933][ T5901] usb 4-1: USB disconnect, device number 5
[  152.653144][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  152.763378][ T6762] chnl_net:caif_netlink_parms(): no params data found
[  153.184662][ T6896] loop1: detected capacity change from 0 to 64
[  153.473700][ T5847] Bluetooth: hci2: command tx timeout
[  153.607595][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.643814][ T5834] VFS: Lookup of '.¨' in minix loop1 would have caused loop
[  153.654443][ T6762] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.661699][ T6762] bridge_slave_0: entered allmulticast mode
[  153.674130][ T5834] VFS: Lookup of '.¨' in minix loop1 would have caused loop
[  153.687323][ T6913] loop2: detected capacity change from 0 to 64
[  153.697835][ T6762] bridge_slave_0: entered promiscuous mode
[  153.770542][ T6916] loop5: detected capacity change from 0 to 16
[  153.779397][ T6762] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.821451][ T6916] erofs (device loop5): mounted with root inode @ nid 36.
[  153.832353][ T6762] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.873520][ T6762] bridge_slave_1: entered allmulticast mode
[  153.912124][ T6762] bridge_slave_1: entered promiscuous mode
[  154.494023][ T6762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.516420][ T6762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.573567][ T5896] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  154.699667][ T6931] loop5: detected capacity change from 0 to 64
[  154.712264][ T5904] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  154.738648][ T6762] team0: Port device team_slave_0 added
[  154.769792][ T5896] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  154.788098][ T6762] team0: Port device team_slave_1 added
[  154.796881][ T5896] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.834721][ T5896] usb 3-1: config 0 has no interface number 0
[  154.858349][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  154.892105][ T5904] usb 4-1: Using ep0 maxpacket: 16
[  154.898171][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.910201][ T5904] usb 4-1: config index 0 descriptor too short (expected 69, got 36)
[  154.922016][ T5896] usb 3-1: Product: syz
[  154.926219][ T5896] usb 3-1: Manufacturer: syz
[  154.932941][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.939960][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.950177][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.978062][ T5896] usb 3-1: SerialNumber: syz
[  155.004522][ T5896] usb 3-1: config 0 descriptor??
[  155.061294][ T6762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.064909][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  155.152207][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  155.201953][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  155.211796][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.259784][ T5904] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  155.299788][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.302789][ T6762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.333214][ T5904] usb 4-1: Product: syz
[  155.337442][ T5904] usb 4-1: Manufacturer: syz
[  155.360077][ T5904] usb 4-1: SerialNumber: syz
[  155.362726][ T6762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.390624][    C0] vkms_vblank_simulate: vblank timer overrun
[  155.401579][ T5904] usb 4-1: config 0 descriptor??
[  155.425938][ T5904] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  155.448873][ T5896] usb 3-1: Found UVC 0.00 device syz (046d:0823)
[  155.470622][ T5896] usb 3-1: No valid video chain found.
[  155.498676][ T5896] usb 3-1: USB disconnect, device number 6
[  155.532004][ T6762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.720975][ T6762] hsr_slave_0: entered promiscuous mode
[  155.743352][ T6762] hsr_slave_1: entered promiscuous mode
[  155.882100][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  155.899901][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.012292][ T6944] loop0: detected capacity change from 0 to 2048
[  156.062003][    T9] usb 6-1: Using ep0 maxpacket: 16
[  156.064006][ T6944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.116452][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  156.132088][    T9] usb 6-1: config 0 has no interface number 0
[  156.154622][    T9] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  156.171759][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.203672][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.211730][    T9] usb 6-1: Product: syz
[  156.251751][    T9] usb 6-1: Manufacturer: syz
[  156.259771][ T5904] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12
[  156.290197][    T9] usb 6-1: SerialNumber: syz
[  156.306748][    T9] usb 6-1: config 0 descriptor??
[  156.344159][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  156.354019][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  156.362110][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  156.373194][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  156.381005][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  156.388631][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  156.398628][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  156.509433][ T5904] usb 4-1: USB disconnect, device number 6
[  156.657857][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.984128][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.339847][    T9] gspca_spca1528: reg_w err -71
[  157.344964][    T9] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71
[  157.364115][    T9] usb 6-1: USB disconnect, device number 5
[  157.437275][ T6971] loop3: detected capacity change from 0 to 256
[  157.501020][   T35] bridge_slave_1: left allmulticast mode
[  157.527116][   T35] bridge_slave_1: left promiscuous mode
[  157.538989][ T6971] support for the xor transformation has been removed.
[  157.560331][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.587456][   T35] bridge_slave_0: left allmulticast mode
[  157.608565][   T35] bridge_slave_0: left promiscuous mode
[  157.618302][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.713733][   T47] kernel write not supported for file [eventfd] (pid: 47 comm: kworker/1:1)
[  158.209040][ T6997] loop0: detected capacity change from 0 to 512
[  158.224147][ T6997] EXT4-fs: Ignoring removed nobh option
[  158.297974][ T6997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.331728][ T6997] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.415764][ T6997] EXT4-fs (loop0): shut down requested (1)
[  158.432543][ T5840] Bluetooth: hci3: command tx timeout
[  158.587526][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.796681][ T7016] loop0: detected capacity change from 0 to 128
[  158.832568][ T7016] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  158.848010][ T7016] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  158.910451][ T7016] syz.0.376 (pid 7016) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  158.910886][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.934897][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.947079][   T35] bond0 (unregistering): Released all slaves
[  159.195542][ T5833] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  159.259491][ T6762] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  159.328890][ T6762] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  159.456809][ T7025] loop0: detected capacity change from 0 to 256
[  159.567173][ T6762] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  159.582005][ T7025] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  159.853058][ T6762] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  159.873576][ T7034] loop3: detected capacity change from 0 to 1024
[  159.950781][    T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  159.974234][ T6951] chnl_net:caif_netlink_parms(): no params data found
[  160.132117][    T8] usb 6-1: Using ep0 maxpacket: 16
[  160.162069][ T5896] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  160.172898][    T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.219777][    T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.244434][    T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  160.278051][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.291799][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.312109][    T8] usb 6-1: Product: syz
[  160.316355][    T8] usb 6-1: Manufacturer: syz
[  160.327629][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.348272][    T8] usb 6-1: SerialNumber: syz
[  160.364510][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.378590][ T5896] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  160.388232][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.415568][ T5896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.458608][ T5896] usb 4-1: config 0 has no interface number 0
[  160.502094][   T35] veth1_macvtap: left promiscuous mode
[  160.519264][   T35] veth0_macvtap: left promiscuous mode
[  160.533310][   T35] veth1_vlan: left promiscuous mode
[  160.546632][   T35] veth0_vlan: left promiscuous mode
[  160.553090][ T5840] Bluetooth: hci3: command tx timeout
[  161.148106][ T7049] loop2: detected capacity change from 0 to 65536
[  161.155766][ T7049] XFS: noikeep mount option is deprecated.
[  161.172176][ T5896] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  161.173058][    T8] usb 6-1: 0:2 : does not exist
[  161.189882][ T5896] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  161.202131][ T5896] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.245115][ T7049] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  161.255245][ T5896] usb 4-1: config 0 interface 52 has no altsetting 0
[  161.284926][ T5896] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  161.295952][ T5896] usb 4-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  161.305107][ T5896] usb 4-1: Product: syz
[  161.309713][ T5896] usb 4-1: Manufacturer: syz
[  161.315859][ T5896] usb 4-1: SerialNumber: syz
[  161.340290][ T5896] usb 4-1: config 0 descriptor??
[  161.372964][ T7049] XFS (loop2): Ending clean mount
[  161.393368][ T7049] XFS (loop2): Quotacheck needed: Please wait.
[  161.480312][ T7049] XFS (loop2): Quotacheck: Done.
[  161.567240][ T5896] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  161.578395][ T5896] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5
[  161.603447][ T5836] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  161.674587][ T5897] usb 6-1: USB disconnect, device number 6
[  161.772499][ T5896] usb 4-1: USB disconnect, device number 7
[  161.983246][   T35] team0 (unregistering): Port device team_slave_1 removed
[  162.089120][   T35] team0 (unregistering): Port device team_slave_0 removed
[  162.410089][ T1045] hfsplus: b-tree write err: -5, ino 4
[  162.592118][ T5840] Bluetooth: hci3: command tx timeout
[  163.249819][ T7082] loop3: detected capacity change from 0 to 1024
[  163.271316][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.302569][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.342271][ T6951] bridge_slave_0: entered allmulticast mode
[  163.356348][ T6951] bridge_slave_0: entered promiscuous mode
[  163.460909][   T29] audit: type=1326 audit(1739775696.875:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bed8cde9 code=0x7ffc0000
[  163.493046][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.501820][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.521154][ T6951] bridge_slave_1: entered allmulticast mode
[  163.529999][   T29] audit: type=1326 audit(1739775696.875:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd5bed8cde9 code=0x7ffc0000
[  163.563596][ T6951] bridge_slave_1: entered promiscuous mode
[  163.625401][   T29] audit: type=1326 audit(1739775696.875:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bed8cde9 code=0x7ffc0000
[  163.642075][ T7082] hfsplus: b-tree write err: -5, ino 3
[  163.722198][   T29] audit: type=1326 audit(1739775696.875:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bed8cde9 code=0x7ffc0000
[  163.811589][   T29] audit: type=1326 audit(1739775696.915:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd5bed8cde9 code=0x7ffc0000
[  163.860689][   T29] audit: type=1326 audit(1739775696.915:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bed8cde9 code=0x7ffc0000
[  163.950453][ T6951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.995767][   T29] audit: type=1326 audit(1739775696.915:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bed8cde9 code=0x7ffc0000
[  164.057908][   T29] audit: type=1326 audit(1739775696.915:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd5bed8cde9 code=0x7ffc0000
[  164.135332][ T6951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.222094][   T29] audit: type=1326 audit(1739775696.935:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5bed8cde9 code=0x7ffc0000
[  164.318836][   T29] audit: type=1326 audit(1739775696.955:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.5.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd5bed8cde9 code=0x7ffc0000
[  164.507558][ T6951] team0: Port device team_slave_0 added
[  164.651088][ T6951] team0: Port device team_slave_1 added
[  164.672987][ T5840] Bluetooth: hci3: command tx timeout
[  164.817098][ T6762] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.956441][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_0
[  164.977029][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.016623][ T6951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.204957][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.221536][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.292300][ T6951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.338963][ T6762] 8021q: adding VLAN 0 to HW filter on device team0
[  165.349616][ T7100] loop0: detected capacity change from 0 to 32768
[  165.400016][ T7100] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.400 (7100)
[  165.501965][ T7100] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  165.562070][ T7100] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  165.571587][ T7100] BTRFS info (device loop0): using free-space-tree
[  165.583819][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.590979][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.707143][ T6951] hsr_slave_0: entered promiscuous mode
[  165.725670][ T6951] hsr_slave_1: entered promiscuous mode
[  165.731831][ T6951] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.791257][ T6951] Cannot create hsr debugfs directory
[  165.822918][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.830071][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.917758][ T7146] netlink: 76 bytes leftover after parsing attributes in process `syz.3.413'.
[  165.986786][ T7146] Zero length message leads to an empty skb
[  166.179713][ T5833] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  166.262595][ T7165] netlink: 18 bytes leftover after parsing attributes in process `syz.3.415'.
[  166.302278][ T7165] netlink: 36 bytes leftover after parsing attributes in process `syz.3.415'.
[  166.666059][ T6762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.027714][ T6951] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  167.155184][ T6951] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  167.248182][ T6951] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  167.329622][ T6951] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  167.512397][ T6762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.793985][ T7200] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  167.964477][ T6951] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.041181][ T6951] 8021q: adding VLAN 0 to HW filter on device team0
[  168.122706][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.129856][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.166360][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.173667][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.537872][ T7180] loop3: detected capacity change from 0 to 32768
[  168.647225][ T6762] veth0_vlan: entered promiscuous mode
[  168.682092][    T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  168.746147][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  168.746172][   T29] audit: type=1800 audit(1739775702.165:22): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.421" name="file1" dev="loop3" ino=4 res=0 errno=0
[  168.769021][ T6762] veth1_vlan: entered promiscuous mode
[  168.807235][ T7184] loop5: detected capacity change from 0 to 32768
[  168.865812][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.882004][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.915632][ T6762] veth0_macvtap: entered promiscuous mode
[  168.925568][   T29] audit: type=1800 audit(1739775702.345:23): pid=7184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.422" name="file1" dev="loop5" ino=4 res=0 errno=0
[  168.956196][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  169.000113][ T6762] veth1_macvtap: entered promiscuous mode
[  169.023989][    T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  169.052673][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.099846][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.104518][    T8] usb 1-1: config 0 descriptor??
[  169.129620][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.149333][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.162382][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.182699][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.199549][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.221960][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.243175][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.311465][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.382351][ T6951] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.409654][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.452290][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.492078][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.541958][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.551826][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.589054][    T8] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  169.597008][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.597031][ T6762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.683873][    T8] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  169.711021][ T6762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.763409][ T6762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.780454][ T7238] loop2: detected capacity change from 0 to 764
[  169.806418][ T6762] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.855500][ T6762] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.867489][ T7238] iso9660: Unknown parameter './bus'
[  169.893131][ T6762] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.935734][ T6762] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.362844][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.401144][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.417241][ T7256] loop3: detected capacity change from 0 to 512
[  170.491099][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.511084][ T7256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.532548][ T7256] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.572142][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.625301][ T6951] veth0_vlan: entered promiscuous mode
[  170.667265][ T7256] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes
[  170.717914][ T6951] veth1_vlan: entered promiscuous mode
[  170.780030][ T6951] veth0_macvtap: entered promiscuous mode
[  170.839079][ T6951] veth1_macvtap: entered promiscuous mode
[  170.916874][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.077675][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.101371][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.123946][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.152325][ T7270] ALSA: mixer_oss: invalid OSS volume 'Qÿ}'
[  171.170204][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.192063][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.212043][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.231465][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.260513][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.270892][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.316968][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.338759][ T6951] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.368370][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.412746][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.451509][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.483020][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.509628][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.549923][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.579309][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.608572][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.626467][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.662135][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.683455][ T6951] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.736687][ T5896] usb 1-1: USB disconnect, device number 10
[  171.761145][ T7283] netlink: 604 bytes leftover after parsing attributes in process `syz.0.442'.
[  171.809929][ T7281] netlink: 'syz.0.442': attribute type 29 has an invalid length.
[  171.853783][ T7282] netlink: 'syz.0.442': attribute type 29 has an invalid length.
[  171.876484][ T6951] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.892277][ T2146] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  171.912064][ T6951] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.941271][ T6951] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.993225][ T6951] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.063115][ T2146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  172.085049][ T2146] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  172.126925][ T2146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  172.172037][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  172.173086][ T2146] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  172.202095][ T2146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.219872][ T2146] usb 3-1: Product: syz
[  172.227698][ T2146] usb 3-1: Manufacturer: syz
[  172.234970][ T2146] usb 3-1: SerialNumber: syz
[  172.250276][ T2146] usb 3-1: config 0 descriptor??
[  172.263413][ T7280] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  172.313514][ T7280] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  172.335335][ T2146] usb 3-1: ucan: probing device on interface #0
[  172.401340][    T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  172.428556][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.457967][    T9] usb 4-1: Product: syz
[  172.482036][    T9] usb 4-1: Manufacturer: syz
[  172.486784][    T9] usb 4-1: SerialNumber: syz
[  172.508375][    T9] usb 4-1: config 0 descriptor??
[  172.662065][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.781144][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.909260][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.923746][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.007215][ T2146] ucan 3-1:0.0 can0: registered device
[  173.012644][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.027442][ T2146] ucan 3-1:0.0 can0: firmware string: unknown
[  173.055501][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.121095][    T9] usb 4-1: Firmware: major: 0, minor: 255, hardware type: ATUSB (0)
[  173.186997][ T2146] usb 3-1: USB disconnect, device number 7
[  173.234153][ T7276] netlink: 'syz.6.297': attribute type 13 has an invalid length.
[  173.333819][    T9] usb 4-1: failed to fetch extended address, random address set
[  173.352588][ T7276] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  173.395077][ T7316] ------------[ cut here ]------------
[  173.400861][ T7316] kernel BUG at mm/hugetlb.c:2333!
[  173.406010][ T7316] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  173.413148][ T7316] CPU: 1 UID: 0 PID: 7316 Comm: syz.5.450 Not tainted 6.14.0-rc3-syzkaller #0
[  173.422027][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  173.432109][ T7316] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0
[  173.438579][ T7316] Code: a3 d0 00 00 00 e8 44 1c a3 ff 48 c7 c7 40 56 e1 8d e8 98 ca 40 09 48 89 e8 5b 5d 41 5c 41 5d e9 95 86 f9 fe e8 25 1c a3 ff 90 <0f> 0b e8 2d 5c 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90
[  173.458227][ T7316] RSP: 0018:ffffc90003def900 EFLAGS: 00010083
[  173.464490][ T7316] RAX: 00000000000007d0 RBX: ffffffff9a8d4758 RCX: ffffc9000d31c000
[  173.472564][ T7316] RDX: 0000000000080000 RSI: ffffffff8216ba7b RDI: 0000000000000007
[  173.480550][ T7316] RBP: ffffea0001f60000 R08: 0000000000000007 R09: 0000000000000000
[  173.488535][ T7316] R10: 0000000000000000 R11: 0000000000000066 R12: 0000000000000000
[  173.496527][ T7316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015
[  173.504521][ T7316] FS:  00007fd5bfcd66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  173.513467][ T7316] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.520065][ T7316] CR2: 000000110c25915d CR3: 000000001256e000 CR4: 0000000000350ef0
[  173.528064][ T7316] Call Trace:
[  173.531353][ T7316]  <TASK>
[  173.534466][ T7316]  ? die+0x31/0x80
[  173.538222][ T7316]  ? do_trap+0x232/0x430
[  173.542490][ T7316]  ? alloc_hugetlb_folio_reserve+0xac/0xc0
[  173.548325][ T7316]  ? alloc_hugetlb_folio_reserve+0xac/0xc0
[  173.554242][ T7316]  ? do_error_trap+0xf4/0x230
[  173.558962][ T7316]  ? alloc_hugetlb_folio_reserve+0xac/0xc0
[  173.564820][ T7316]  ? handle_invalid_op+0x34/0x40
[  173.569791][ T7316]  ? alloc_hugetlb_folio_reserve+0xac/0xc0
[  173.575714][ T7316]  ? exc_invalid_op+0x2e/0x50
[  173.580421][ T7316]  ? asm_exc_invalid_op+0x1a/0x20
[  173.585489][ T7316]  ? alloc_hugetlb_folio_reserve+0xab/0xc0
[  173.591321][ T7316]  ? alloc_hugetlb_folio_reserve+0xac/0xc0
[  173.597153][ T7316]  memfd_alloc_folio+0x16c/0x3b0
[  173.602121][ T7316]  memfd_pin_folios+0xe8c/0x1150
[  173.607101][ T7316]  ? __pfx_memfd_pin_folios+0x10/0x10
[  173.612509][ T7316]  ? __pfx___lock_acquire+0x10/0x10
[  173.617741][ T7316]  ? srso_alias_return_thunk+0x5/0xfbef5
[  173.623430][ T7316]  ? __pfx_down_read+0x10/0x10
[  173.628224][ T7316]  ? srso_alias_return_thunk+0x5/0xfbef5
[  173.633895][ T7316]  ? __fget_files+0x206/0x3a0
[  173.638610][ T7316]  udmabuf_create+0x641/0x11e0
[  173.643487][ T7316]  ? srso_alias_return_thunk+0x5/0xfbef5
[  173.649160][ T7316]  ? __pfx_udmabuf_create+0x10/0x10
[  173.654382][ T7316]  ? srso_alias_return_thunk+0x5/0xfbef5
[  173.660054][ T7316]  ? lock_acquire+0x2f/0xb0
[  173.664594][ T7316]  ? __might_fault+0xe3/0x190
[  173.669306][ T7316]  ? __might_fault+0xe3/0x190
[  173.674005][ T7316]  udmabuf_ioctl+0x193/0x310
[  173.678614][ T7316]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  173.683780][ T7316]  ? srso_alias_return_thunk+0x5/0xfbef5
[  173.689451][ T7316]  ? __fget_files+0x206/0x3a0
[  173.694263][ T7316]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  173.699401][ T7316]  __x64_sys_ioctl+0x193/0x200
[  173.704194][ T7316]  do_syscall_64+0xcd/0x250
[  173.708724][ T7316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.714646][ T7316] RIP: 0033:0x7fd5bed8cde9
[  173.719073][ T7316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.738813][ T7316] RSP: 002b:00007fd5bfcd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.747247][ T7316] RAX: ffffffffffffffda RBX: 00007fd5befa5fa0 RCX: 00007fd5bed8cde9
[  173.755232][ T7316] RDX: 0000400000000040 RSI: 0000000040187542 RDI: 0000000000000004
[  173.763297][ T7316] RBP: 00007fd5bee0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  173.771276][ T7316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.779348][ T7316] R13: 0000000000000000 R14: 00007fd5befa5fa0 R15: 00007ffc49862048
[  173.787431][ T7316]  </TASK>
[  173.790450][ T7316] Modules linked in:
[  173.794358][ T7316] ---[ end trace 0000000000000000 ]---
[  173.799810][ T7316] RIP: 0010:alloc_hugetlb_folio_reserve+0xac/0xc0
[  173.806259][ T7316] Code: a3 d0 00 00 00 e8 44 1c a3 ff 48 c7 c7 40 56 e1 8d e8 98 ca 40 09 48 89 e8 5b 5d 41 5c 41 5d e9 95 86 f9 fe e8 25 1c a3 ff 90 <0f> 0b e8 2d 5c 05 00 eb ac 66 66 2e 0f 1f 84 00 00 00 00 00 90 90
[  173.825938][ T7316] RSP: 0018:ffffc90003def900 EFLAGS: 00010083
[  173.832028][ T7316] RAX: 00000000000007d0 RBX: ffffffff9a8d4758 RCX: ffffc9000d31c000
[  173.840011][ T7316] RDX: 0000000000080000 RSI: ffffffff8216ba7b RDI: 0000000000000007
[  173.848020][ T7316] RBP: ffffea0001f60000 R08: 0000000000000007 R09: 0000000000000000
[  173.856005][ T7316] R10: 0000000000000000 R11: 0000000000000066 R12: 0000000000000000
[  173.864072][ T7316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000015
[  173.872062][ T7316] FS:  00007fd5bfcd66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  173.881093][ T7316] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.887692][ T7316] CR2: 000000110c25915d CR3: 000000001256e000 CR4: 0000000000350ef0
[  173.895677][ T7316] Kernel panic - not syncing: Fatal exception
[  173.901972][ T7316] Kernel Offset: disabled
[  173.906304][ T7316] Rebooting in 86400 seconds..