last executing test programs:

5m29.477368629s ago: executing program 0 (id=997):
syz_read_part_table(0x5e4, &(0x7f0000000000)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x77359400}, 0x0)

5m29.318331141s ago: executing program 0 (id=999):
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x7f, 0x129002)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0)

5m29.257994217s ago: executing program 0 (id=1002):
syz_open_dev$ttys(0xc, 0x2, 0x1)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000))

5m29.198186391s ago: executing program 0 (id=1003):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)

5m28.866813107s ago: executing program 0 (id=1006):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

5m28.078394768s ago: executing program 0 (id=1015):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000009400128009000100766c616e00000000840002800c00020008000000000000004c0004800c00010084000000030000000c00010000000000ffffffff0c0001000500000006000000a0fd010085ffffff080000000c00010002000000ff0f00000c000100ff030000ff0f00000400038006f00400810000001c0003806700010002100000060000000c0001000c0000000700000014000300766c616e30"], 0xc8}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e9782bbd7000ffdbdf250a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f000006000300010000005e5214d7fdbf019bd315e7ee93b1d78a56dbdb3c1ce925ba09f28c58aceea9b78f408cb4195e6724e7f4b358becdcd6b943c0fd74bfefe2f6361aa39362f3f8898379046eb1aedc174fe1ab9df11e38b17a696b4cc3558acadf263df8860bd436b1c3ee6c365b9e8d899f9332ca0dbb33e22850d68528b2c3a59c6d40ce6aefb4eda9e"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0)

5m28.031618035s ago: executing program 32 (id=1015):
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000009400128009000100766c616e00000000840002800c00020008000000000000004c0004800c00010084000000030000000c00010000000000ffffffff0c0001000500000006000000a0fd010085ffffff080000000c00010002000000ff0f00000c000100ff030000ff0f00000400038006f00400810000001c0003806700010002100000060000000c0001000c0000000700000014000300766c616e30"], 0xc8}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e9782bbd7000ffdbdf250a0000000000000008000500", @ANYRES32=r3], 0x20}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f000006000300010000005e5214d7fdbf019bd315e7ee93b1d78a56dbdb3c1ce925ba09f28c58aceea9b78f408cb4195e6724e7f4b358becdcd6b943c0fd74bfefe2f6361aa39362f3f8898379046eb1aedc174fe1ab9df11e38b17a696b4cc3558acadf263df8860bd436b1c3ee6c365b9e8d899f9332ca0dbb33e22850d68528b2c3a59c6d40ce6aefb4eda9e"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0)

5m13.645370619s ago: executing program 2 (id=1219):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000800)={0x2, 0x0, '\x00', {0x0, @bt={0x76, 0x8, 0x0, 0x0, 0x4, 0x6, 0x5, 0x8, 0x5, 0x52, 0x8, 0x7d679199, 0xc510000, 0xfffffff8, 0x80ab4abb2f8ee666, 0x8, {0x2, 0x5fdf}, 0x40, 0x10}}})

5m13.578605412s ago: executing program 2 (id=1220):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x4, 0x4, 0xe}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m13.522298191s ago: executing program 2 (id=1221):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0)

5m13.448215355s ago: executing program 2 (id=1222):
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00')

5m13.367283224s ago: executing program 2 (id=1223):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x54}, 0x1, 0xba01, 0x0, 0x20000000}, 0x8014)

5m12.999340616s ago: executing program 2 (id=1225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

5m12.98796289s ago: executing program 33 (id=1225):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1m42.161072356s ago: executing program 3 (id=3914):
socket$kcm(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba", 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000680)=""/211, 0xd0}}, 0x10)
r1 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0})
io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1)

1m41.051311007s ago: executing program 3 (id=3921):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xc, 0xeb, &(0x7f0000000140)=""/235, 0x41100, 0x10}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x0, 0x0, 0x0, 0xffffbfdb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)

1m41.05092095s ago: executing program 3 (id=3922):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

1m39.247523946s ago: executing program 3 (id=3934):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x19, 0x5, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]})
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0)

1m38.980625218s ago: executing program 3 (id=3935):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
lseek(r0, 0x20b, 0x0)

1m38.662216255s ago: executing program 3 (id=3938):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

1m38.492436144s ago: executing program 34 (id=3938):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

53.497629445s ago: executing program 4 (id=4478):
capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x9, 0x3ff, 0x962, 0x80000000, 0x4, 0x8})
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x60, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xe, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x7, 0x0, 0x1, 0x7e}}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x68e1d6c7f82a01b7, 0x3}}}]}, 0x60}}, 0x20000000)

53.393903122s ago: executing program 4 (id=4479):
r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96/\\/\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0)

53.334285268s ago: executing program 4 (id=4480):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x0, 0x6366, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0]})

53.334060392s ago: executing program 4 (id=4481):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x300800c, &(0x7f0000000100)=ANY=[], 0x1, 0x259, &(0x7f0000000580)="$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")
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

53.213946963s ago: executing program 4 (id=4483):
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x40f, &(0x7f0000000000))

52.940833787s ago: executing program 4 (id=4487):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000110000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000200000025000000080026008009000008002700020000000800a0007609"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)

52.70801537s ago: executing program 35 (id=4487):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000110000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000200000025000000080026008009000008002700020000000800a0007609"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)

20.137917797s ago: executing program 6 (id=4829):
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)

20.043469125s ago: executing program 6 (id=4830):
syz_mount_image$minix(&(0x7f0000000080), &(0x7f00000001c0)='./file1\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="0049cef4df796851925f86c004000000e4cf62dc777d55387afc4a70d087ede499a199c4d7e87a07cdb3e45fc513a1f97b0b9047144790d8f3affa2044cbd987208cf1dcd4ec17f5138b1f4efbdc2a7be39782db000000000000002c2e5cf00c404f4a3246fb740282b4265c2c2c686173682c00181f302d7cd22530b02054463a3dd16b847ce0f9c3bd119a1498eb8cc1ae04dee8bfa77d492c96fd54cb0abb83366c6b4d4785b8103b6ea5ce14afc0ebaae0f62832e93c0cd17b2130111d313bea3d9ab4738453538e448d770b602e104974e6cd92f7d589103fde2331f870b425e8776f9e2152dec6551ec1f61ced64b19c9e56"], 0x8, 0x18e, &(0x7f0000002780)="$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")
lsetxattr$security_capability(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000540), 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)

19.950503096s ago: executing program 6 (id=4833):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4)

19.838528969s ago: executing program 6 (id=4835):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

19.773040269s ago: executing program 6 (id=4837):
pipe2(&(0x7f0000000100)={<r0=>0xffffffffffffffff}, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))

19.484403754s ago: executing program 6 (id=4840):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)

19.316387602s ago: executing program 36 (id=4840):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7fffffff}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)

5.832788407s ago: executing program 1 (id=4984):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x108, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

5.719248544s ago: executing program 1 (id=4985):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/207, 0xcf}], 0x2}, 0x7fffffff}], 0x1, 0x2022, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0)

5.684179804s ago: executing program 1 (id=4986):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0})
recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0)
sendmmsg$unix(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

5.536851453s ago: executing program 1 (id=4989):
mkdir(&(0x7f00000001c0)='./file0\x00', 0x124)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

5.535767915s ago: executing program 1 (id=4990):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2008800, &(0x7f0000000300)={[{@journal_dev={'journal_dev', 0x3d, 0x6}}, {@max_batch_time={'max_batch_time', 0x3d, 0xe4a}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1}}]}, 0x1, 0x79a, &(0x7f0000000800)="$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")

5.31951483s ago: executing program 1 (id=4992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0009042abd7000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="ef"], 0x1c}, 0x1, 0x0, 0x0, 0x4048913}, 0x8010)

5.309153398s ago: executing program 37 (id=4992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0009042abd7000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="ef"], 0x1c}, 0x1, 0x0, 0x0, 0x4048913}, 0x8010)

2.571618949s ago: executing program 8 (id=4997):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)

2.448038607s ago: executing program 8 (id=5028):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2})
syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011001000000406d04900940000102030109028e000301ffc010080b0002010130070904000000010130000a2401102a0007000000132403ffe20506060203"], 0x0)

1.919782906s ago: executing program 5 (id=5029):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd28, 0x255fdbfd, {0x0, 0x0, 0x0, r1, {0xfff2, 0x2}, {0x0, 0xfff3}, {0xfff1, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xffe0}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x0, 0x7, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045005}, 0x0)

1.82947656s ago: executing program 5 (id=5031):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000091000005"], 0xfd2)

1.571580765s ago: executing program 5 (id=5032):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683b, 0x1820, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x30, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x30}}, 0x40000)
r8 = socket(0x11, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r9=>0x0})
bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890)

1.222032188s ago: executing program 5 (id=5034):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x4)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)

936.838113ms ago: executing program 8 (id=5036):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$eJzs3M9rI+UbAPAn7XZ/f/dbRNDbDixCC5uw6XYXvVXdxR/Ypfjj4EnTZBqym2RKk6a1Jw8exYP/iSh48ujf4MGzt8WD4k1QMjPRrSgITRu7/Xxg8sz75s0zz5tD4ZkpCeDMWkx++akS1+JSRMxHxNWI/LxSHrm1IjwfEdcjYu6Jo1LO/zFxPiIuR8S1cfIiZ6V86/Oboxt3fnzz52++u3Duyhdffz+7XQOz9kJE9LaL871eEbN2ER+W841RJ4+91VEZizd6j8pxVsS9dDPPsNeYrGvk8Xa7WJ9t7w7GcavbaI5ju7OVz2/3iwsORu1JnvwDDxs7+biVbuaxM8jy2D4o6to/KP62HQyGRZ5Wme+jPH0Mh5NYzKf7abGf7Ud5bPaH5XyRN2ul++M4KmN5uWhm3VZex+ZRvun/trc6/d39ZJTuDDpZP7lTq79Yq9+t1neyVjpMV6uNXuvuarLU7o6XVYdpo7fWzrJ2N601s95ystRuNqv1erJ0L93sNPpJvV67XbtVvbNcnt1MXnvwXtJtJUvj+EqnvzvsdAfJVraTFJ9YTlZqt19aTm7Uk3fWN5KNt+/fX99494N77z94ef2NV8tFh8t6nK4mSyu3Vlaq9VvVlfryGdr/J2XRU9w/HEll1gUAnD76f2AWTnv/H/r/qThV/e+krLPa/x/D/uFI9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfWDwtfvp6fLBbjK+X8/8qpZ8pxJSLmIuK3vzEf5w/lnC/zLPzD+oW/1PBtJfIM42tcKI/LEbFWHr/+/7i/BQAAAHh6ffXx9c+Kbr14WZx1QZyk4qbN3NUPp5SvEhELi4+nlG1u/PLslJLFcxFxLvanlC2/gXVxSsmKW27nppXtX5k/FC4+ESpFmDvRcgAAgBNxuBM42S4EAACAk/TprAtgNioxeZQ5eRac/+f9nw8ELx0aAQAAAKdQZdYFAAAAAMcu7//9/h8AAAA83Yrf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5n535yUoeiOACfFvoe74+RGOduxRkswyU4dGhYgJtgCbgFN8AacOYSDBjaEq3BxKS3bSTfl7SX25Afp4TJuZcUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuvRcrOaP91cPbXO2u3bS3A0AAABwzKZYzcsX02r+r75+Vl+6qOdZROQRcax3H8WvRuaozim+eH/xqYaniDJh/xm/6+NvRFzXx+t5198CAAAAnK71YjmruvXqNB26IPpULdrk/28S5WURUUxfEqXl+9NlorDy9z2Ou0Rp5QLWJFFYteQ2TpX2LaPGMPkwZNWQ91oOAADQi2Yn0G8XAgAAQJ9uhy6AYWRx2Mo87AWX/7x/3xD805gBAAAAP1A2dAEAAABA58r+3/P/AAAA4LRVz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS5tiNV8vlrO2OdtdO2nuBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Y3/eUSAEwiAM9q7vTOb+h5UGTU1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODN7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhfvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnft5jaOKAwD+ZmZna6viGmUPEVHwoBe73dbWXj0owYN/ghDSbY1u/dHmYEsRcvEmOfciehQRlHjr/9BzC73UWw57iCAeI/MrmfwAt4TMbJLPB9687w6bed83CSHfeS8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZfLATJ9mhV8Rxee7R5r2lrH+8p888WHsyn7UsjppM+nh4vf4i6reXCAAAAKdHUtX3IYSn6fpC1se9vP5Pq/dkNf9PLxZxVc/vrfurvqr9s/bnHxuvbg/UK8bJLnp9eTy6sD+VztHNckb8u1XYc/ql//3CTn7n82cvSf4NiT9efWWS5vcz+uHhww+7eXjmqBIHAA7rfNWXQfX3UNYP20wMgFOjUyu8q/o/6bWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATJqvh+SqOQgjznZ0483jz3tJB/YO1J/NVu3L//lr9mtkl0hDC9eXx6EKDc5l1t+/c/WJxPB7daj54I4TQ3uhl8OkU7wmhzQwFhw3i8md9VvI5HkHLv5gAADhx0rJldf3TdH0hOxfNhbD18+76/+1aHKas/zc+u/KoPla9/h82NsPZN1i5+fXg9p277y7fXLwxujH68r2Lw/eHl65evnx1kD8rGXhiAgAAwOF0y1av/+O5/ev/52pxmLL+/+bH4Xf1sRL1/4F2Fv3azgQAAOB0e/nNf/6ODjgfdbvh28WVlVvD4rj9+mJxbCHVZ3ambPX6P5lrOysAAACgCZPVaNf6/7VaHKZc/3/hl9d+q18zCSGcLdf/zy99Nb7W3HRmWhP/Ttz2HAEAAGjX2bLV1//TfP9/vL3lIQ4hvPNWEZcfAzhV/Z989P2v9bHq+/8vNTfFmRT3i/uR9/0QOv22MwIAAOAke65sWbH/V7q+8Pnv5z7p2v8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LT/AgAA//8Yl0ni")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

710.595611ms ago: executing program 7 (id=5039):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000f3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ac6000/0x1000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f000009f000/0x2000)=nil, 0x0, 0x1003c}, 0x68)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9315, 0x1f480, 0x0, 0xad})
set_mempolicy(0x3, &(0x7f0000000000)=0x800000ffe, 0x5)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

559.491698ms ago: executing program 7 (id=5040):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0x40, 0x7, 0x2, 0x10000007, 0x7, 0x8002, 0x7fff, 0x7, 0xffffffff, 0x1ff, 0x7, 0x3, 0xa, 0x29, 0x72ef, 0x101, 0x5, 0xffffffff, 0xfffffffa, 0x4, 0x6, 0xa2d8, 0x5, 0x1000, 0x8, 0x471, 0x7, 0x384, 0x8001, 0x4]})

558.303546ms ago: executing program 8 (id=5041):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/power/mem_sleep', 0x101a82, 0x100)
copy_file_range(r0, &(0x7f0000000000)=0x7, r0, 0x0, 0x7, 0x0)

472.305699ms ago: executing program 7 (id=5042):
r0 = socket$inet6(0xa, 0x2, 0x3a)
getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000280))

472.079599ms ago: executing program 7 (id=5043):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160)
r1 = dup(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000280))

369.766738ms ago: executing program 5 (id=5044):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)

369.492742ms ago: executing program 7 (id=5045):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
poll(&(0x7f0000000180)=[{r0, 0xa086}], 0x1, 0x9)

182.554902ms ago: executing program 5 (id=5046):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000000c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

182.415576ms ago: executing program 8 (id=5047):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
unshare(0x6020400)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
read(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240))

181.169326ms ago: executing program 8 (id=5048):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000500)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x101042, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

0s ago: executing program 7 (id=5049):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@getchain={0x34, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xfff3}, {0x8}}, [{0x8, 0xb, 0x10000}, {0x8, 0xb, 0xbc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)
bind$packet(r0, &(0x7f0000000300)={0x11, 0x9, r1, 0x1, 0x4, 0x6, @multicast}, 0x14)

kernel console output (not intermixed with test programs):

e.
[  409.332016][T17220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.342982][   T24] m920x_read = error: -19
[  409.363584][   T24] dvb-usb: error while querying for an remote control event.
[  409.482376][   T24] m920x_read = error: -19
[  409.484261][   T24] dvb-usb: error while querying for an remote control event.
[  409.593626][   T24] m920x_read = error: -19
[  409.595341][T17484] loop6: detected capacity change from 0 to 128
[  409.595868][   T24] dvb-usb: error while querying for an remote control event.
[  409.628380][T17484] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  409.644853][T17484] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  409.712681][   T24] m920x_read = error: -19
[  409.724587][   T24] dvb-usb: error while querying for an remote control event.
[  409.810891][T17220] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  409.842327][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.855101][   T31] m920x_read = error: -19
[  409.860418][   T31] dvb-usb: error while querying for an remote control event.
[  409.974272][   T31] m920x_read = error: -19
[  409.976364][   T31] dvb-usb: error while querying for an remote control event.
[  410.093237][   T31] m920x_read = error: -19
[  410.096144][   T31] dvb-usb: error while querying for an remote control event.
[  410.103750][T17506] batadv_slave_1: entered promiscuous mode
[  410.107233][T17504] batadv_slave_1: left promiscuous mode
[  410.122020][T17505] loop1: detected capacity change from 0 to 4096
[  410.147775][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4580'.
[  410.156311][T17511] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  410.213987][   T31] m920x_read = error: -19
[  410.215852][   T31] dvb-usb: error while querying for an remote control event.
[  410.240721][T17515] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT'
[  410.322357][   T31] m920x_read = error: -19
[  410.326366][   T31] dvb-usb: error while querying for an remote control event.
[  410.372799][ T5580] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  410.432936][   T31] m920x_read = error: -19
[  410.434574][   T31] dvb-usb: error while querying for an remote control event.
[  410.542835][   T31] m920x_read = error: -19
[  410.549063][   T31] dvb-usb: error while querying for an remote control event.
[  410.549315][ T5580] usb 6-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[  410.577876][ T5580] usb 6-1: config 1 interface 0 altsetting 108 bulk endpoint 0x82 has invalid maxpacket 1023
[  410.590076][ T5580] usb 6-1: config 1 interface 0 altsetting 108 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  410.607953][ T5580] usb 6-1: config 1 interface 0 has no altsetting 0
[  410.614146][T17527] netlink: 'syz.1.4587': attribute type 1 has an invalid length.
[  410.624924][ T5580] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  410.628548][ T5580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.636711][ T5580] usb 6-1: Product: syz
[  410.638100][ T5580] usb 6-1: Manufacturer: syz
[  410.641563][ T5580] usb 6-1: SerialNumber: syz
[  410.650159][T17508] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  410.657599][T17508] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  410.662251][   T31] m920x_read = error: -19
[  410.664444][T17508] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  410.669629][   T31] dvb-usb: error while querying for an remote control event.
[  410.784125][   T31] m920x_read = error: -19
[  410.790181][   T31] dvb-usb: error while querying for an remote control event.
[  410.813892][T17533] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4590'.
[  410.873873][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.894196][ T5580] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  410.902332][   T31] m920x_read = error: -19
[  410.906892][   T31] dvb-usb: error while querying for an remote control event.
[  410.911768][ T5580] usb 6-1: USB disconnect, device number 11
[  411.022126][   T31] m920x_read = error: -19
[  411.024983][   T31] dvb-usb: error while querying for an remote control event.
[  411.132142][   T31] m920x_read = error: -19
[  411.135159][   T31] dvb-usb: error while querying for an remote control event.
[  411.163652][T17537] loop1: detected capacity change from 0 to 32768
[  411.171489][T17537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4592 (17537)
[  411.199563][T17537] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  411.217335][T17537] BTRFS info (device loop1): using sha256 checksum algorithm
[  411.246531][   T31] m920x_read = error: -19
[  411.248091][   T31] dvb-usb: error while querying for an remote control event.
[  411.285197][T17537] BTRFS info (device loop1): enabling ssd optimizations
[  411.292947][T17537] BTRFS info (device loop1): turning on async discard
[  411.301647][T17537] BTRFS info (device loop1): enabling free space tree
[  411.316987][T17554] loop6: detected capacity change from 0 to 128
[  411.353021][   T31] m920x_read = error: -19
[  411.355160][   T31] dvb-usb: error while querying for an remote control event.
[  411.364159][ T5610] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  411.506800][   T31] m920x_read = error: -19
[  411.508767][   T31] dvb-usb: error while querying for an remote control event.
[  411.767122][   T31] m920x_read = error: -19
[  411.782786][   T31] dvb-usb: error while querying for an remote control event.
[  411.915751][   T31] m920x_read = error: -19
[  411.920244][   T31] dvb-usb: error while querying for an remote control event.
[  411.923679][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.002595][ T5580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.005538][ T5579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.035608][   T24] m920x_read = error: -19
[  412.038128][   T24] dvb-usb: error while querying for an remote control event.
[  412.153068][   T24] m920x_read = error: -19
[  412.166757][   T24] dvb-usb: error while querying for an remote control event.
[  412.330432][   T24] m920x_read = error: -19
[  412.331705][ T5579] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  412.333914][   T24] dvb-usb: error while querying for an remote control event.
[  412.346162][ T5579] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  412.393540][ T5579] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  412.397762][ T5579] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  412.400725][ T5579] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  412.403517][ T5579] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  412.406301][ T5579] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  412.414373][ T5579] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  412.416969][ T5579] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  412.419598][ T5579] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0
[  412.430390][ T5579] hid-generic 0006:0004:0009.0014: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  412.452537][   T24] m920x_read = error: -19
[  412.454406][   T24] dvb-usb: error while querying for an remote control event.
[  412.572160][   T24] m920x_read = error: -19
[  412.572174][   T24] dvb-usb: error while querying for an remote control event.
[  412.588888][T17607] netlink: 'syz.5.4613': attribute type 22 has an invalid length.
[  412.605971][T17607] netlink: 'syz.5.4613': attribute type 22 has an invalid length.
[  412.605987][T17607] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4613'.
[  412.682184][   T24] m920x_read = error: -19
[  412.689002][   T24] dvb-usb: error while querying for an remote control event.
[  412.746222][T17613] loop5: detected capacity change from 0 to 1024
[  412.760727][T17613] hfsplus: failed to load extents file
[  412.803169][   T24] m920x_read = error: -19
[  412.806684][   T24] dvb-usb: error while querying for an remote control event.
[  412.813550][T17619] netlink: 'syz.6.4619': attribute type 4 has an invalid length.
[  412.822055][T17619] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4619'.
[  412.922923][   T31] m920x_read = error: -19
[  412.927073][   T31] dvb-usb: error while querying for an remote control event.
[  412.957851][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  413.042111][   T31] m920x_read = error: -19
[  413.048830][   T31] dvb-usb: error while querying for an remote control event.
[  413.122213][   T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  413.162138][   T31] m920x_read = error: -19
[  413.163726][   T31] dvb-usb: error while querying for an remote control event.
[  413.272188][   T31] m920x_read = error: -19
[  413.273995][   T31] dvb-usb: error while querying for an remote control event.
[  413.277668][   T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  413.281289][   T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 55951, setting to 1024
[  413.285412][   T24] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  413.288771][   T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  413.291691][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.296615][T17625] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  413.300822][   T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  413.303774][   T24] usb 7-1: invalid MIDI in EP 0
[  413.382784][T17447] m920x_read = error: -19
[  413.384246][T17447] dvb-usb: error while querying for an remote control event.
[  413.391364][   T24] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22
[  413.492649][T17447] m920x_read = error: -19
[  413.494654][T17447] dvb-usb: error while querying for an remote control event.
[  413.505107][T17447] usb 7-1: USB disconnect, device number 2
[  413.602060][   T24] m920x_read = error: -19
[  413.603978][   T24] dvb-usb: error while querying for an remote control event.
[  413.712037][T17447] m920x_read = error: -19
[  413.714071][T17447] dvb-usb: error while querying for an remote control event.
[  413.822159][T17447] m920x_read = error: -19
[  413.824348][T17447] dvb-usb: error while querying for an remote control event.
[  413.932255][T17447] m920x_read = error: -19
[  413.935436][T17447] dvb-usb: error while querying for an remote control event.
[  413.994871][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.049405][T17447] m920x_read = error: -19
[  414.057446][T17447] dvb-usb: error while querying for an remote control event.
[  414.172778][T17447] m920x_read = error: -19
[  414.179181][T17447] dvb-usb: error while querying for an remote control event.
[  414.294439][T17447] m920x_read = error: -19
[  414.301646][T17447] dvb-usb: error while querying for an remote control event.
[  414.356148][T17679] sctp: [Deprecated]: syz.1.4644 (pid 17679) Use of struct sctp_assoc_value in delayed_ack socket option.
[  414.356148][T17679] Use struct sctp_sack_info instead
[  414.407747][T17682] loop5: detected capacity change from 0 to 512
[  414.412063][   T24] m920x_read = error: -19
[  414.415285][   T24] dvb-usb: error while querying for an remote control event.
[  414.434907][T17682] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  414.440089][T17682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  414.445346][T17682] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  414.479299][T15756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.532063][T17447] m920x_read = error: -19
[  414.533621][T17447] dvb-usb: error while querying for an remote control event.
[  414.539838][T17688] loop5: detected capacity change from 0 to 2048
[  414.646207][   T31] m920x_read = error: -19
[  414.648148][   T31] dvb-usb: error while querying for an remote control event.
[  414.677546][T17688] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1377)
[  414.762999][   T31] m920x_read = error: -19
[  414.777078][   T31] dvb-usb: error while querying for an remote control event.
[  414.913326][   T31] m920x_read = error: -19
[  414.922307][   T31] dvb-usb: error while querying for an remote control event.
[  415.032975][ T5580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.375750][T17702] program syz.1.4653 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  415.396491][T17694] loop5: detected capacity change from 0 to 131072
[  415.399929][T17694] F2FS-fs (loop5): invalid crc value
[  415.402376][T17447] m920x_read = error: -19
[  415.403877][T17447] dvb-usb: error while querying for an remote control event.
[  415.406848][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  415.496549][T17694] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  415.504709][T17694] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  415.512041][T17447] m920x_read = error: -19
[  415.516170][T17447] dvb-usb: error while querying for an remote control event.
[  415.587068][T17712] loop1: detected capacity change from 0 to 128
[  415.609754][T17712] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  415.622994][T17447] m920x_read = error: -19
[  415.624803][T17447] dvb-usb: error while querying for an remote control event.
[  415.628282][T17712] ext4 filesystem being mounted at /1560/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  415.719206][T17720] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  415.724194][T17720] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  415.849437][T17447] m920x_read = error: -19
[  415.854180][T17447] dvb-usb: error while querying for an remote control event.
[  415.956939][T17728] comedi comedi3: pcl724: I/O base address or length out of range
[  415.964945][T17447] m920x_read = error: -19
[  415.966359][T17447] dvb-usb: error while querying for an remote control event.
[  415.984858][ T5610] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  416.082203][T17447] m920x_read = error: -19
[  416.086469][T17447] dvb-usb: error while querying for an remote control event.
[  416.201903][T17447] m920x_read = error: -19
[  416.203840][T17447] dvb-usb: error while querying for an remote control event.
[  416.321929][T17447] m920x_read = error: -19
[  416.323527][T17447] dvb-usb: error while querying for an remote control event.
[  416.432079][T17447] m920x_read = error: -19
[  416.434142][T17447] dvb-usb: error while querying for an remote control event.
[  416.474946][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  416.551916][T17447] m920x_read = error: -19
[  416.554657][T17447] dvb-usb: error while querying for an remote control event.
[  416.681852][   T24] m920x_read = error: -19
[  416.683333][   T24] dvb-usb: error while querying for an remote control event.
[  416.797128][   T24] m920x_read = error: -19
[  416.800431][   T24] dvb-usb: error while querying for an remote control event.
[  416.837001][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.902358][ T5579] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  416.924000][   T24] m920x_read = error: -19
[  416.927804][   T24] dvb-usb: error while querying for an remote control event.
[  416.930041][T15605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  416.947507][T15605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  416.960502][T15605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  416.963999][T15605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  416.971669][T15605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  416.973267][T17771] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  417.032208][   T24] m920x_read = error: -19
[  417.035407][   T24] dvb-usb: error while querying for an remote control event.
[  417.099757][ T5579] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  417.115779][ T5579] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  417.133223][ T5579] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  417.142420][T17447] m920x_read = error: -19
[  417.144051][ T5579] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.144065][ T5579] usb 2-1: Product: syz
[  417.144072][ T5579] usb 2-1: Manufacturer: syz
[  417.144078][ T5579] usb 2-1: SerialNumber: syz
[  417.151542][ T5579] usbtmc 2-1:1.0: bulk endpoints not found
[  417.158628][T17447] dvb-usb: error while querying for an remote control event.
[  417.170974][ T5579] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input25
[  417.220175][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.282250][T17447] m920x_read = error: -19
[  417.283805][T17447] dvb-usb: error while querying for an remote control event.
[  417.377587][   T31] usb 2-1: USB disconnect, device number 52
[  417.391934][ T5668] m920x_read = error: -19
[  417.393538][ T5668] dvb-usb: error while querying for an remote control event.
[  417.409109][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.450812][T17784] loop5: detected capacity change from 0 to 32768
[  417.455208][T17784] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4682 (17784)
[  417.465325][T17784] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  417.473284][T17784] BTRFS info (device loop5): using sha256 checksum algorithm
[  417.504162][ T5668] m920x_read = error: -19
[  417.513015][ T5668] dvb-usb: error while querying for an remote control event.
[  417.519529][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.622136][ T5668] m920x_read = error: -19
[  417.622192][T17784] BTRFS info (device loop5): enabling ssd optimizations
[  417.626720][ T5668] dvb-usb: error while querying for an remote control event.
[  417.631837][T17784] BTRFS info (device loop5): turning on async discard
[  417.634744][T17784] BTRFS info (device loop5): enabling free space tree
[  417.651881][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.678694][T15756] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  417.743915][T17768] lo speed is unknown, defaulting to 1000
[  417.745839][ T5668] m920x_read = error: -19
[  417.749171][ T5668] dvb-usb: error while querying for an remote control event.
[  417.758804][ T5579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  417.861869][ T5668] m920x_read = error: -19
[  417.863522][ T5668] dvb-usb: error while querying for an remote control event.
[  417.981880][   T31] m920x_read = error: -19
[  417.983688][   T31] dvb-usb: error while querying for an remote control event.
[  418.066118][T17824] loop5: detected capacity change from 0 to 1024
[  418.078240][ T5579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.111831][   T31] m920x_read = error: -19
[  418.115826][   T31] dvb-usb: error while querying for an remote control event.
[  418.149419][T17824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  418.159575][T17824] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.207217][T17831] netlink: 'syz.1.4688': attribute type 1 has an invalid length.
[  418.233230][   T31] m920x_read = error: -19
[  418.235112][   T31] dvb-usb: error while querying for an remote control event.
[  418.246503][ T1116] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 3: comm kworker/u10:8: lblock 3 mapped to illegal pblock 3 (length 3)
[  418.263803][ T1116] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  418.268217][ T1116] EXT4-fs (loop5): This should not happen!! Data will be lost
[  418.268217][ T1116] 
[  418.279436][ T1116] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u10:8: lblock 8 mapped to illegal pblock 8 (length 8)
[  418.284520][ T1116] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  418.290402][T17831] 8021q: adding VLAN 0 to HW filter on device bond1
[  418.304582][ T1116] EXT4-fs (loop5): This should not happen!! Data will be lost
[  418.304582][ T1116] 
[  418.308684][T15756] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  418.313793][T15756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  418.345838][   T31] m920x_read = error: -19
[  418.349460][   T31] dvb-usb: error while querying for an remote control event.
[  418.379788][T17835] loop5: detected capacity change from 0 to 8
[  418.389204][T17835] SQUASHFS error: xz decompression failed, data probably corrupt
[  418.392949][T17832] bond1: (slave veth5): Enslaving as an active interface with a down link
[  418.396502][T17835] SQUASHFS error: Failed to read block 0x108: -5
[  418.399071][T17835] SQUASHFS error: Unable to read metadata cache entry [106]
[  418.411373][T17835] SQUASHFS error: Unable to read inode 0x11f
[  418.423794][T17831] dummy0: left promiscuous mode
[  418.459821][T17831] bond1: (slave dummy0): making interface the new active one
[  418.461831][   T31] m920x_read = error: -19
[  418.467209][   T31] dvb-usb: error while querying for an remote control event.
[  418.476853][T17831] dummy0: entered promiscuous mode
[  418.488292][T17831] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  418.549562][T17840] loop1: detected capacity change from 0 to 256
[  418.554277][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  418.558065][T17840] exfat: Deprecated parameter 'namecase'
[  418.565568][T17840] exfat: Deprecated parameter 'namecase'
[  418.565712][   T13] bridge_slave_1: left allmulticast mode
[  418.567810][T17840] exfat: Deprecated parameter 'utf8'
[  418.569957][   T13] bridge_slave_1: left promiscuous mode
[  418.572192][T17840] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  418.574376][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.578333][T17840] exFAT-fs (loop1): error, invalid access to FAT (entry 0x00000005) bogus content (0x02ffffff)
[  418.583611][   T31] m920x_read = error: -19
[  418.586217][   T31] dvb-usb: error while querying for an remote control event.
[  418.589320][T17840] exFAT-fs (loop1): Filesystem has been set read-only
[  418.590074][   T13] bridge_slave_0: left allmulticast mode
[  418.592638][T17840] exFAT-fs (loop1): failed to count the number of clusters in root
[  418.595720][   T13] bridge_slave_0: left promiscuous mode
[  418.598079][T17840] exFAT-fs (loop1): failed to recognize exfat type
[  418.600163][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.692684][   T31] m920x_read = error: -19
[  418.701463][   T31] dvb-usb: error while querying for an remote control event.
[  418.812909][   T31] m920x_read = error: -19
[  418.815325][   T31] dvb-usb: error while querying for an remote control event.
[  418.830759][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  418.837641][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  418.841980][   T13] bond0 (unregistering): Released all slaves
[  418.848847][T17844] loop1: detected capacity change from 0 to 8192
[  418.933219][   T31] m920x_read = error: -19
[  418.941109][   T31] dvb-usb: error while querying for an remote control event.
[  418.973848][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  418.973859][   T33] audit: type=1326 audit(1785256037.777:7235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17846 comm="syz.5.4694" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff6cff9de99 code=0x0
[  419.033635][ T5612] Bluetooth: hci1: command tx timeout
[  419.052164][   T31] m920x_read = error: -19
[  419.060197][   T31] dvb-usb: error while querying for an remote control event.
[  419.172011][T17768] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.173752][ T5668] m920x_read = error: -19
[  419.174469][T17768] bridge0: port 1(bridge_slave_0) entered disabled state
[  419.178201][ T5668] dvb-usb: error while querying for an remote control event.
[  419.178285][T17768] bridge_slave_0: entered allmulticast mode
[  419.184286][T17768] bridge_slave_0: entered promiscuous mode
[  419.219462][T17768] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.222497][T17768] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.225952][T17768] bridge_slave_1: entered allmulticast mode
[  419.229243][T17768] bridge_slave_1: entered promiscuous mode
[  419.259242][ T5356] 8021q: adding VLAN 0 to HW filter on device eth17
[  419.287629][T17768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  419.292830][ T5668] m920x_read = error: -19
[  419.294756][ T5668] dvb-usb: error while querying for an remote control event.
[  419.295384][T17768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  419.372350][   T31] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  419.404135][ T5668] m920x_read = error: -19
[  419.408892][ T5668] dvb-usb: error while querying for an remote control event.
[  419.428209][T17768] team0: Port device team_slave_0 added
[  419.433473][T17768] team0: Port device team_slave_1 added
[  419.465834][   T13] hsr_slave_0: left promiscuous mode
[  419.468704][   T13] hsr_slave_1: left promiscuous mode
[  419.471254][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  419.474382][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  419.478121][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  419.481269][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  419.496025][   T13] veth1_macvtap: left promiscuous mode
[  419.498383][   T13] veth0_macvtap: left promiscuous mode
[  419.500721][   T13] veth1_vlan: left promiscuous mode
[  419.504286][   T13] veth0_vlan: left promiscuous mode
[  419.531820][ T5668] m920x_read = error: -19
[  419.535780][   T31] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  419.539039][   T31] usb 2-1: config 0 has no interface number 0
[  419.541725][   T31] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  419.546087][ T5668] dvb-usb: error while querying for an remote control event.
[  419.551135][   T31] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  419.556438][   T31] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  419.559873][   T31] usb 2-1: Manufacturer: syz
[  419.562295][   T31] usb 2-1: SerialNumber: syz
[  419.567215][   T31] usb 2-1: config 0 descriptor??
[  419.592662][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  419.652897][   T31] m920x_read = error: -19
[  419.655042][   T31] dvb-usb: error while querying for an remote control event.
[  419.761848][   T31] m920x_read = error: -19
[  419.763735][   T31] dvb-usb: error while querying for an remote control event.
[  419.767353][   T13] team0 (unregistering): Port device team_slave_1 removed
[  419.779645][   T13] team0 (unregistering): Port device team_slave_0 removed
[  419.794073][ T5580] usb 2-1: USB disconnect, device number 53
[  419.871758][   T31] m920x_read = error: -19
[  419.873596][   T31] dvb-usb: error while querying for an remote control event.
[  419.907033][T17768] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.909465][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.926293][T17768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.937994][T17768] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.944459][T17768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  419.954598][T17768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.982200][ T5668] m920x_read = error: -19
[  419.991097][ T5668] dvb-usb: error while querying for an remote control event.
[  420.084775][T17768] hsr_slave_0: entered promiscuous mode
[  420.087800][T17768] hsr_slave_1: entered promiscuous mode
[  420.133851][ T5668] m920x_read = error: -19
[  420.156168][ T5668] dvb-usb: error while querying for an remote control event.
[  420.267626][T17875] loop5: detected capacity change from 0 to 2048
[  420.301752][ T5668] m920x_read = error: -19
[  420.303511][ T5668] dvb-usb: error while querying for an remote control event.
[  420.311059][T17878] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  420.411729][ T5668] m920x_read = error: -19
[  420.413342][ T5668] dvb-usb: error while querying for an remote control event.
[  420.504428][ T5356] 8021q: adding VLAN 0 to HW filter on device eth18
[  420.524805][   T31] m920x_read = error: -19
[  420.527663][   T31] dvb-usb: error while querying for an remote control event.
[  420.632248][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.641659][ T2285] m920x_read = error: -19
[  420.643535][ T2285] dvb-usb: error while querying for an remote control event.
[  420.752621][   T31] m920x_read = error: -19
[  420.754555][   T31] dvb-usb: error while querying for an remote control event.
[  420.861696][   T31] m920x_read = error: -19
[  420.865115][   T31] dvb-usb: error while querying for an remote control event.
[  420.917721][T17893] loop1: detected capacity change from 0 to 32768
[  420.921058][T17893] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4708 (17893)
[  420.961760][T17893] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  420.965253][T17893] BTRFS info (device loop1): using blake2b checksum algorithm
[  420.968192][ T5356] 8021q: adding VLAN 0 to HW filter on device eth19
[  420.985882][   T31] m920x_read = error: -19
[  420.987667][   T31] dvb-usb: error while querying for an remote control event.
[  421.042463][T17910] loop5: detected capacity change from 0 to 164
[  421.052521][T17893] BTRFS info (device loop1): enabling ssd optimizations
[  421.057816][T17893] BTRFS info (device loop1): turning on async discard
[  421.067105][T17893] BTRFS info (device loop1): enabling free space tree
[  421.084559][   T33] audit: type=1800 audit(1785256039.907:7236): pid=17893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4708" name="file1" dev="loop1" ino=260 res=0 errno=0
[  421.112206][ T5612] Bluetooth: hci1: command tx timeout
[  421.115675][   T31] m920x_read = error: -19
[  421.119075][   T31] dvb-usb: error while querying for an remote control event.
[  421.131425][ T5610] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  421.135352][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.150022][T17920] sock: sock_timestamping_bind_phc: sock not bind to device
[  421.234866][   T31] m920x_read = error: -19
[  421.236475][   T31] dvb-usb: error while querying for an remote control event.
[  421.276758][T17920] zram0: detected capacity change from 0 to 8
[  421.341894][   T31] m920x_read = error: -19
[  421.347570][   T31] dvb-usb: error while querying for an remote control event.
[  421.452524][   T31] m920x_read = error: -19
[  421.461717][   T31] dvb-usb: error while querying for an remote control event.
[  421.571625][   T31] m920x_read = error: -19
[  421.573195][   T31] dvb-usb: error while querying for an remote control event.
[  421.672479][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  421.681597][   T31] m920x_read = error: -19
[  421.683720][   T31] dvb-usb: error while querying for an remote control event.
[  421.803145][ T2285] m920x_read = error: -19
[  421.805064][ T2285] dvb-usb: error while querying for an remote control event.
[  421.822225][T17931] loop5: detected capacity change from 0 to 32768
[  421.857668][T17931] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  421.899386][T17931] XFS (loop5): Ending clean mount
[  421.913231][ T2285] m920x_read = error: -19
[  421.915119][ T2285] dvb-usb: error while querying for an remote control event.
[  421.978434][T17931] XFS (loop5): Quotacheck needed: Please wait.
[  422.003185][   T31] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  422.040989][ T5668] m920x_read = error: -19
[  422.043027][ T5668] dvb-usb: error while querying for an remote control event.
[  422.153916][ T2285] m920x_read = error: -19
[  422.157393][ T2285] dvb-usb: error while querying for an remote control event.
[  422.162071][   T31] usb 2-1: Using ep0 maxpacket: 16
[  422.195438][   T31] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  422.199821][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[  422.203581][   T31] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  422.204307][T17931] XFS (loop5): Quotacheck: Done.
[  422.207675][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.232696][ T5580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.242621][   T31] usb 2-1: config 0 descriptor??
[  422.272417][ T2285] m920x_read = error: -19
[  422.280629][ T2285] dvb-usb: error while querying for an remote control event.
[  422.315367][T17768] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  422.321260][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  422.332257][T17768] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  422.345600][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  422.350268][T17768] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  422.363473][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  422.366380][T17768] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  422.370561][T17768] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  422.390797][T15756] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  422.402074][ T5668] m920x_read = error: -19
[  422.408646][ T5668] dvb-usb: error while querying for an remote control event.
[  422.444361][T17768] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.456819][T17768] 8021q: adding VLAN 0 to HW filter on device team0
[  422.503110][T14856] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.505470][T14856] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.510003][T14856] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.512464][T14856] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.538849][ T5668] m920x_read = error: -19
[  422.555821][ T5668] dvb-usb: error while querying for an remote control event.
[  422.666216][ T2285] m920x_read = error: -19
[  422.680633][ T2285] dvb-usb: error while querying for an remote control event.
[  422.688162][   T31] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0
[  422.743636][ T2285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  422.817537][ T2285] m920x_read = error: -19
[  422.820550][ T2285] dvb-usb: error while querying for an remote control event.
[  422.933069][   T31] m920x_read = error: -19
[  422.935984][   T31] dvb-usb: error while querying for an remote control event.
[  423.054550][T17768] 8021q: adding VLAN 0 to HW filter on device batadv0
[  423.055688][   T31] m920x_read = error: -19
[  423.064451][   T31] dvb-usb: error while querying for an remote control event.
[  423.097204][    T9] usb 2-1: USB disconnect, device number 54
[  423.182788][   T31] m920x_read = error: -19
[  423.190576][   T31] dvb-usb: error while querying for an remote control event.
[  423.196861][ T5612] Bluetooth: hci1: command tx timeout
[  423.298710][T17768] veth0_vlan: entered promiscuous mode
[  423.311603][   T31] m920x_read = error: -19
[  423.313462][   T31] dvb-usb: error while querying for an remote control event.
[  423.313476][T17768] veth1_vlan: entered promiscuous mode
[  423.340618][T17768] veth0_macvtap: entered promiscuous mode
[  423.346940][T17768] veth1_macvtap: entered promiscuous mode
[  423.356826][T17768] batman_adv: batadv0: Interface activated: batadv_slave_0
[  423.366325][T17768] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.373465][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.376834][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.383432][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.386394][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.422464][   T31] m920x_read = error: -19
[  423.424000][   T31] dvb-usb: error while querying for an remote control event.
[  423.497123][ T6716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.505490][ T6716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.533613][ T2285] m920x_read = error: -19
[  423.535162][ T2285] dvb-usb: error while querying for an remote control event.
[  423.538762][ T6716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  423.542576][ T5580] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  423.549121][ T6716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  423.642787][ T2285] m920x_read = error: -19
[  423.645635][ T2285] dvb-usb: error while querying for an remote control event.
[  423.678631][T18004] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4723'.
[  423.724555][ T5580] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  423.734389][ T5580] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  423.744782][ T5580] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.750514][ T5580] usb 6-1: Product: syz
[  423.753372][ T2285] m920x_read = error: -19
[  423.755248][ T5580] usb 6-1: Manufacturer: syz
[  423.755293][ T5580] usb 6-1: SerialNumber: syz
[  423.764129][ T2285] dvb-usb: error while querying for an remote control event.
[  423.767377][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  423.817045][T18011] tmpfs: Bad value for 'mpol'
[  423.861108][T18013] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4727'.
[  423.871543][ T2285] m920x_read = error: -19
[  423.873561][ T2285] dvb-usb: error while querying for an remote control event.
[  423.967419][ T5580] usb 6-1: probing VID:PID(0424:012C)   
[  423.971272][ T5580] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs
[  423.977052][ T5580] vub300 6-1:2.0: probe with driver vub300 failed with error -22
[  423.982356][ T5580] usb 6-1: USB disconnect, device number 12
[  423.982448][ T2285] m920x_read = error: -19
[  423.992015][ T2285] dvb-usb: error while querying for an remote control event.
[  423.997998][ T6000] udevd[6000]: setting owner of /dev/bus/usb/006/012 to uid=0, gid=0 failed: No such file or directory
[  424.101580][ T2285] m920x_read = error: -19
[  424.103633][ T2285] dvb-usb: error while querying for an remote control event.
[  424.151770][ T6589] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  424.211524][T17447] m920x_read = error: -19
[  424.214752][T17447] dvb-usb: error while querying for an remote control event.
[  424.302205][ T6589] usb 2-1: Using ep0 maxpacket: 32
[  424.306580][ T6589] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.311051][ T6589] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  424.317834][ T6589] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  424.321546][T17447] m920x_read = error: -19
[  424.321563][T17447] dvb-usb: error while querying for an remote control event.
[  424.326796][ T6589] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  424.330365][ T6589] usb 2-1: Product: syz
[  424.334284][ T6589] usb 2-1: Manufacturer: syz
[  424.342497][ T6589] hub 2-1:4.0: USB hub found
[  424.431640][T17447] m920x_read = error: -19
[  424.433435][T17447] dvb-usb: error while querying for an remote control event.
[  424.541586][T17447] m920x_read = error: -19
[  424.545140][T17447] dvb-usb: error while querying for an remote control event.
[  424.551007][ T6589] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[  424.582414][ T6589] usb 2-1: USB disconnect, device number 55
[  424.661403][T17447] m920x_read = error: -19
[  424.663332][T17447] dvb-usb: error while querying for an remote control event.
[  424.781767][ T2285] m920x_read = error: -19
[  424.787077][ T2285] dvb-usb: error while querying for an remote control event.
[  424.798280][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.902188][   T31] m920x_read = error: -19
[  424.905161][   T31] dvb-usb: error while querying for an remote control event.
[  424.925007][T18034] loop5: detected capacity change from 0 to 16384
[  424.965948][T18039] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  425.013057][   T31] m920x_read = error: -19
[  425.016576][   T31] dvb-usb: error while querying for an remote control event.
[  425.040019][T18041] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4739'.
[  425.043695][T18041] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4739'.
[  425.132012][   T31] m920x_read = error: -19
[  425.135285][   T31] dvb-usb: error while querying for an remote control event.
[  425.261920][   T31] m920x_read = error: -19
[  425.263327][   T31] dvb-usb: error while querying for an remote control event.
[  425.279943][ T5612] Bluetooth: hci1: command tx timeout
[  425.284012][ T5580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.373756][T17447] m920x_read = error: -19
[  425.384580][T17447] dvb-usb: error while querying for an remote control event.
[  425.431794][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.458760][T18063] syz_tun: entered allmulticast mode
[  425.491469][   T31] m920x_read = error: -19
[  425.493011][   T31] dvb-usb: error while querying for an remote control event.
[  425.496255][T18063] syz_tun (unregistering): left allmulticast mode
[  425.603729][T17447] m920x_read = error: -19
[  425.607689][T17447] dvb-usb: error while querying for an remote control event.
[  425.684340][T18073] loop1: detected capacity change from 0 to 512
[  425.707467][T18067] loop6: detected capacity change from 0 to 32768
[  425.708666][T18073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  425.710322][T18067] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4749 (18067)
[  425.713740][T17447] m920x_read = error: -19
[  425.720270][T18067] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  425.725339][T18067] BTRFS info (device loop6): using blake2b checksum algorithm
[  425.729140][T17447] dvb-usb: error while querying for an remote control event.
[  425.746171][T18067] BTRFS info (device loop6): enabling ssd optimizations
[  425.748935][T18067] BTRFS info (device loop6): turning on async discard
[  425.751191][T18067] BTRFS info (device loop6): enabling free space tree
[  425.756591][T18067] BTRFS info (device loop6): use zstd compression, level 3
[  425.785518][   T33] audit: type=1800 audit(1785256044.617:7237): pid=18067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4749" name="bus" dev="loop6" ino=263 res=0 errno=0
[  425.793879][   T33] audit: type=1800 audit(1785256044.617:7238): pid=18067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4749" name="bus" dev="loop6" ino=263 res=0 errno=0
[  425.838597][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.851947][   T31] m920x_read = error: -19
[  425.855199][   T31] dvb-usb: error while querying for an remote control event.
[  425.971403][   T31] m920x_read = error: -19
[  425.973284][   T31] dvb-usb: error while querying for an remote control event.
[  426.081939][   T31] m920x_read = error: -19
[  426.085128][   T31] dvb-usb: error while querying for an remote control event.
[  426.201450][   T31] m920x_read = error: -19
[  426.208501][   T31] dvb-usb: error while querying for an remote control event.
[  426.270271][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.332893][   T31] m920x_read = error: -19
[  426.338147][   T31] dvb-usb: error while querying for an remote control event.
[  426.340713][T18075] loop5: detected capacity change from 0 to 40427
[  426.349140][T18075] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64)
[  426.359371][T18075] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  426.375472][T18075] F2FS-fs (loop5): Image doesn't support compression
[  426.387388][T18075] F2FS-fs (loop5): invalid crc value
[  426.452066][   T31] m920x_read = error: -19
[  426.453937][   T31] dvb-usb: error while querying for an remote control event.
[  426.543505][T18075] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  426.566794][   T31] m920x_read = error: -19
[  426.569746][   T31] dvb-usb: error while querying for an remote control event.
[  426.646938][T18075] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0
[  426.649691][T18075] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  426.653784][T18075] F2FS-fs (loop5): Start checkpoint disabled!
[  426.692435][   T31] m920x_read = error: -19
[  426.695075][   T31] dvb-usb: error while querying for an remote control event.
[  426.767366][T18075] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0
[  426.774066][T17768] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  426.779435][T18075] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  426.782742][T18075] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  426.802146][T17447] m920x_read = error: -19
[  426.804323][T17447] dvb-usb: error while querying for an remote control event.
[  426.877567][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.887309][ T6730] kworker/u10:38: attempt to access beyond end of device
[  426.887309][ T6730] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  426.914801][ T5668] m920x_read = error: -19
[  426.951408][ T5668] dvb-usb: error while querying for an remote control event.
[  426.981120][ T6730] CPU: 1 UID: 0 PID: 6730 Comm: kworker/u10:38 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  426.981143][ T6730] Tainted: [L]=SOFTLOCKUP
[  426.981149][ T6730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  426.981180][ T6730] Workqueue: writeback wb_workfn (flush-7:5)
[  426.981233][ T6730] Call Trace:
[  426.981240][ T6730]  <TASK>
[  426.981247][ T6730]  dump_stack_lvl+0xe8/0x150
[  426.981270][ T6730]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  426.981291][ T6730]  f2fs_write_end_io+0x124b/0x1710
[  426.981323][ T6730]  __submit_merged_bio+0x258/0x6a0
[  426.981340][ T6730]  ? rcu_is_watching+0x15/0xb0
[  426.981357][ T6730]  __submit_merged_write_cond+0x3c9/0x4e0
[  426.981379][ T6730]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  426.981411][ T6730]  f2fs_write_data_pages+0x2a27/0x36f0
[  426.981454][ T6730]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  426.981480][ T6730]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  426.981514][ T6730]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  426.981543][ T6730]  ? __lock_acquire+0x683/0x2cf0
[  426.981572][ T6730]  ? set_shrinker_bit+0x7c/0x350
[  426.981602][ T6730]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  426.981621][ T6730]  do_writepages+0x338/0x560
[  426.981646][ T6730]  ? reacquire_held_locks+0x104/0x190
[  426.981658][ T6730]  ? writeback_sb_inodes+0x450/0x1b00
[  426.981679][ T6730]  __writeback_single_inode+0x12e/0xf90
[  426.981702][ T6730]  writeback_sb_inodes+0x9de/0x1b00
[  426.981718][ T6730]  ? __lock_acquire+0x683/0x2cf0
[  426.981752][ T6730]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  426.981798][ T6730]  ? rcu_is_watching+0x15/0xb0
[  426.981810][ T6730]  ? queue_io+0x2d3/0x470
[  426.981829][ T6730]  wb_writeback+0x41c/0xad0
[  426.981847][ T6730]  ? queue_io+0x211/0x470
[  426.981868][ T6730]  ? __pfx_wb_writeback+0x10/0x10
[  426.981882][ T6730]  ? do_raw_spin_lock+0x12b/0x2f0
[  426.981908][ T6730]  wb_workfn+0x431/0x10f0
[  426.981935][ T6730]  ? __pfx_wb_workfn+0x10/0x10
[  426.981947][ T6730]  ? rcu_is_watching+0x15/0xb0
[  426.981959][ T6730]  ? trace_hrtimer_start+0x82/0x200
[  426.981979][ T6730]  ? do_raw_spin_lock+0x12b/0x2f0
[  426.981994][ T6730]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  426.982009][ T6730]  ? process_scheduled_works+0xa20/0x14e0
[  426.982024][ T6730]  ? process_scheduled_works+0xa20/0x14e0
[  426.982042][ T6730]  ? rcu_is_watching+0x15/0xb0
[  426.982055][ T6730]  ? process_scheduled_works+0xa20/0x14e0
[  426.982069][ T6730]  process_scheduled_works+0xa8e/0x14e0
[  426.982100][ T6730]  ? __pfx_process_scheduled_works+0x10/0x10
[  426.982118][ T6730]  ? assign_work+0x3cf/0x5d0
[  426.982135][ T6730]  worker_thread+0xa47/0xfb0
[  426.982168][ T6730]  kthread+0x388/0x470
[  426.982184][ T6730]  ? __pfx_worker_thread+0x10/0x10
[  426.982196][ T6730]  ? __pfx_kthread+0x10/0x10
[  426.982245][ T6730]  ret_from_fork+0x514/0xb70
[  426.982264][ T6730]  ? __pfx_ret_from_fork+0x10/0x10
[  426.982281][ T6730]  ? __switch_to+0xc89/0x1420
[  426.982299][ T6730]  ? __pfx_kthread+0x10/0x10
[  426.982317][ T6730]  ret_from_fork_asm+0x1a/0x30
[  426.982341][ T6730]  </TASK>
[  427.172758][ T5668] m920x_read = error: -19
[  427.174626][ T5668] dvb-usb: error while querying for an remote control event.
[  427.222127][ T6730] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  427.281615][ T5668] m920x_read = error: -19
[  427.283482][ T5668] dvb-usb: error while querying for an remote control event.
[  427.364917][ T5579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.391375][ T5668] m920x_read = error: -19
[  427.392869][ T5668] dvb-usb: error while querying for an remote control event.
[  427.403440][T18124] sg_write: data in/out 484352/136 bytes for SCSI command 0x0-- guessing data in;
[  427.403440][T18124]    program syz.1.4766 not setting count and/or reply_len properly
[  427.473236][T18117] could not allocate digest TFM handle xxhash64
[  427.511772][ T5668] m920x_read = error: -19
[  427.514644][ T5668] dvb-usb: error while querying for an remote control event.
[  427.633677][ T5668] m920x_read = error: -19
[  427.637181][ T5668] dvb-usb: error while querying for an remote control event.
[  427.751325][ T5668] m920x_read = error: -19
[  427.753296][ T5668] dvb-usb: error while querying for an remote control event.
[  427.861596][T17447] m920x_read = error: -19
[  427.864323][T17447] dvb-usb: error while querying for an remote control event.
[  427.913395][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.981322][ T5668] m920x_read = error: -19
[  427.983445][ T5668] dvb-usb: error while querying for an remote control event.
[  428.091475][ T5668] m920x_read = error: -19
[  428.093540][ T5668] dvb-usb: error while querying for an remote control event.
[  428.201372][ T5668] m920x_read = error: -19
[  428.203429][ T5668] dvb-usb: error while querying for an remote control event.
[  428.207044][T17447] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  428.315400][ T5580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.321312][ T5668] m920x_read = error: -19
[  428.325977][ T5668] dvb-usb: error while querying for an remote control event.
[  428.367157][T17447] usb 7-1: unable to get BOS descriptor or descriptor too short
[  428.380226][T17447] usb 7-1: not running at top speed; connect to a high speed hub
[  428.393207][T17447] usb 7-1: config 9 has an invalid interface number: 124 but max is 0
[  428.407352][T17447] usb 7-1: config 9 has no interface number 0
[  428.421906][T17447] usb 7-1: config 9 interface 124 altsetting 195 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  428.438363][T17447] usb 7-1: config 9 interface 124 altsetting 195 endpoint 0xB has an invalid bInterval 0, changing to 4
[  428.443223][ T5668] m920x_read = error: -19
[  428.445390][T17447] usb 7-1: config 9 interface 124 altsetting 195 endpoint 0xB has invalid wMaxPacketSize 0
[  428.451367][ T5668] dvb-usb: error while querying for an remote control event.
[  428.456311][T17447] usb 7-1: config 9 interface 124 has no altsetting 0
[  428.463888][T17447] usb 7-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=42.b4
[  428.472353][T17447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.478583][T17447] usb 7-1: Product: syz
[  428.479937][T17447] usb 7-1: Manufacturer: syz
[  428.481681][T17447] usb 7-1: SerialNumber: syz
[  428.562051][ T5668] m920x_read = error: -19
[  428.563997][ T5668] dvb-usb: error while querying for an remote control event.
[  428.632037][ T5580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.647323][T18151] pim6reg: entered allmulticast mode
[  428.654352][T18151] pim6reg: left allmulticast mode
[  428.681273][   T31] m920x_read = error: -19
[  428.683002][   T31] dvb-usb: error while querying for an remote control event.
[  428.722501][T17447] usbtest 7-1:9.124: couldn't get endpoints, -71
[  428.726025][T17447] usbtest 7-1:9.124: probe with driver usbtest failed with error -71
[  428.735569][T17447] usb 7-1: USB disconnect, device number 3
[  428.776489][T18153] loop1: detected capacity change from 0 to 512
[  428.785990][T18153] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  428.793166][   T31] m920x_read = error: -19
[  428.795506][T18153] EXT4-fs (loop1): 1 truncate cleaned up
[  428.795747][   T31] dvb-usb: error while querying for an remote control event.
[  428.805871][T18153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  428.860717][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.912012][T17447] m920x_read = error: -19
[  428.917538][T17447] dvb-usb: error while querying for an remote control event.
[  428.952275][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  429.031271][T17447] m920x_read = error: -19
[  429.035284][T17447] dvb-usb: error while querying for an remote control event.
[  429.059332][T18159] loop5: detected capacity change from 0 to 512
[  429.088284][T18159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.106469][T18159] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  429.138714][T15756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.152372][T17447] m920x_read = error: -19
[  429.169410][T17447] dvb-usb: error while querying for an remote control event.
[  429.284289][T17447] m920x_read = error: -19
[  429.289235][T18175] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4786'.
[  429.290254][T17447] dvb-usb: error while querying for an remote control event.
[  429.348215][T18179] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  429.378928][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4789'.
[  429.386381][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4789'.
[  429.411414][T17447] m920x_read = error: -19
[  429.413114][T17447] dvb-usb: error while querying for an remote control event.
[  429.531204][T17447] m920x_read = error: -19
[  429.533014][T17447] dvb-usb: error while querying for an remote control event.
[  429.640255][T18190] input: syz1 as /devices/virtual/input/input27
[  429.642293][T18185] loop5: detected capacity change from 0 to 40427
[  429.644814][T17447] m920x_read = error: -19
[  429.647127][T18185] F2FS-fs (loop5): invalid crc value
[  429.654838][T17447] dvb-usb: error while querying for an remote control event.
[  429.712647][T18195] loop6: detected capacity change from 0 to 256
[  429.752528][T18185] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  429.781719][T17447] m920x_read = error: -19
[  429.789139][T17447] dvb-usb: error while querying for an remote control event.
[  429.805533][T18185] F2FS-fs (loop5): f2fs_disable_checkpoint starts, unusable: 0
[  429.814762][T18185] F2FS-fs (loop5): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  429.826692][T18185] F2FS-fs (loop5): Start checkpoint disabled!
[  429.901737][T17447] m920x_read = error: -19
[  429.903303][T17447] dvb-usb: error while querying for an remote control event.
[  429.916768][   T12] dummy0: left promiscuous mode
[  429.940720][T18185] F2FS-fs (loop5): f2fs_disable_checkpoint finishes, err:0
[  429.943486][T18185] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  429.991926][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  430.012230][ T5668] m920x_read = error: -19
[  430.016952][ T5668] dvb-usb: error while querying for an remote control event.
[  430.141321][ T5668] m920x_read = error: -19
[  430.146802][ T5668] dvb-usb: error while querying for an remote control event.
[  430.261299][ T5668] m920x_read = error: -19
[  430.263214][ T5668] dvb-usb: error while querying for an remote control event.
[  430.381204][T17447] m920x_read = error: -19
[  430.382733][T17447] dvb-usb: error while querying for an remote control event.
[  430.405523][T18228] loop1: detected capacity change from 0 to 4096
[  430.412387][T18228] ntfs3(loop1): ino=0, mi_enum_attr
[  430.433739][T18228] ntfs3(loop1): ino=0, mi_enum_attr
[  430.435928][T18228] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  430.439472][T18228] ntfs3(loop1): ino=0, mi_enum_attr
[  430.491092][ T5668] m920x_read = error: -19
[  430.493681][ T5668] dvb-usb: error while querying for an remote control event.
[  430.611172][ T5668] m920x_read = error: -19
[  430.612639][ T5668] dvb-usb: error while querying for an remote control event.
[  430.632284][T18230] loop5: detected capacity change from 0 to 32768
[  430.645415][T17447] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  430.731172][ T2285] m920x_read = error: -19
[  430.732747][ T2285] dvb-usb: error while querying for an remote control event.
[  430.803167][T17447] usb 7-1: config 150 has an invalid interface number: 204 but max is 2
[  430.810829][T17447] usb 7-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  430.825791][T17447] usb 7-1: config 150 has no interface number 0
[  430.832854][T17447] usb 7-1: config 150 interface 204 has no altsetting 0
[  430.841299][ T2285] m920x_read = error: -19
[  430.844468][T17447] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  430.848119][ T2285] dvb-usb: error while querying for an remote control event.
[  430.850667][T17447] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.857242][T17447] usb 7-1: Product: syz
[  430.860197][T17447] usb 7-1: Manufacturer: syz
[  430.863408][T17447] usb 7-1: SerialNumber: syz
[  430.911668][T18253] loop5: detected capacity change from 0 to 16
[  430.924762][T18253] erofs (device loop5): mounted with root inode @ nid 36.
[  430.961522][ T2285] m920x_read = error: -19
[  430.963072][ T2285] dvb-usb: error while querying for an remote control event.
[  431.032191][ T2285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.076108][T17447] xr_serial 7-1:150.204: skipping garbage
[  431.082092][T17447] xr_serial 7-1:150.204: xr_serial converter detected
[  431.086712][ T2285] m920x_read = error: -19
[  431.093865][ T2285] dvb-usb: error while querying for an remote control event.
[  431.201385][ T2285] m920x_read = error: -19
[  431.203441][ T2285] dvb-usb: error while querying for an remote control event.
[  431.260209][T18259] loop1: detected capacity change from 0 to 32768
[  431.264882][T18259] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4824 (18259)
[  431.279912][T18259] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  431.283470][T18259] BTRFS info (device loop1): using blake2b checksum algorithm
[  431.311101][ T2285] m920x_read = error: -19
[  431.313032][ T2285] dvb-usb: error while querying for an remote control event.
[  431.342498][T18259] BTRFS info (device loop1): enabling ssd optimizations
[  431.349792][T18259] BTRFS info (device loop1): turning on async discard
[  431.355025][T18259] BTRFS info (device loop1): enabling free space tree
[  431.357304][ T5579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  431.360008][T18259] BTRFS info (device loop1): use zstd compression, level 3
[  431.389339][   T33] audit: type=1800 audit(1785256050.207:7239): pid=18259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4824" name="bus" dev="loop1" ino=263 res=0 errno=0
[  431.396482][   T33] audit: type=1800 audit(1785256050.217:7240): pid=18259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4824" name="bus" dev="loop1" ino=263 res=0 errno=0
[  431.421090][ T2285] m920x_read = error: -19
[  431.424224][ T2285] dvb-usb: error while querying for an remote control event.
[  431.533250][ T2285] m920x_read = error: -19
[  431.537103][ T2285] dvb-usb: error while querying for an remote control event.
[  431.652074][ T2285] m920x_read = error: -19
[  431.659792][ T2285] dvb-usb: error while querying for an remote control event.
[  431.773379][ T2285] m920x_read = error: -19
[  431.786878][ T2285] dvb-usb: error while querying for an remote control event.
[  431.901077][ T2285] m920x_read = error: -19
[  431.903363][ T2285] dvb-usb: error while querying for an remote control event.
[  432.021080][ T2285] m920x_read = error: -19
[  432.022531][ T2285] dvb-usb: error while querying for an remote control event.
[  432.131441][ T2285] m920x_read = error: -19
[  432.133111][ T2285] dvb-usb: error while querying for an remote control event.
[  432.201793][T17447] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  432.218294][T17447] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  432.235918][T17447] usb 7-1: USB disconnect, device number 4
[  432.275331][T17447] xr_serial 7-1:150.204: device disconnected
[  432.284652][ T2285] m920x_read = error: -19
[  432.286080][ T2285] dvb-usb: error while querying for an remote control event.
[  432.352945][ T5610] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  432.364378][T18278] loop5: detected capacity change from 0 to 131072
[  432.394640][T18278] F2FS-fs (loop5): invalid crc value
[  432.395904][ T2285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.411578][ T2285] m920x_read = error: -19
[  432.412981][ T2285] dvb-usb: error while querying for an remote control event.
[  432.512391][T18278] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  432.523405][T17447] m920x_read = error: -19
[  432.527108][T17447] dvb-usb: error while querying for an remote control event.
[  432.533774][T18278] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  432.533966][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  432.648615][T17447] m920x_read = error: -19
[  432.655229][T17447] dvb-usb: error while querying for an remote control event.
[  432.745710][T18286] team0: Caught tx_queue_len zero misconfig
[  432.764255][T17447] m920x_read = error: -19
[  432.767392][T17447] dvb-usb: error while querying for an remote control event.
[  432.867062][T18290] loop6: detected capacity change from 0 to 64
[  432.881104][T17447] m920x_read = error: -19
[  432.882782][T17447] dvb-usb: error while querying for an remote control event.
[  432.983430][T18297] sctp: [Deprecated]: syz.6.4833 (pid 18297) Use of int in maxseg socket option.
[  432.983430][T18297] Use struct sctp_assoc_value instead
[  432.994940][T17447] m920x_read = error: -19
[  433.000804][T17447] dvb-usb: error while querying for an remote control event.
[  433.131341][ T2285] m920x_read = error: -19
[  433.133039][ T2285] dvb-usb: error while querying for an remote control event.
[  433.229523][T18305] loop1: detected capacity change from 0 to 256
[  433.232398][T18305] exfat: Deprecated parameter 'namecase'
[  433.241483][ T2285] m920x_read = error: -19
[  433.242963][ T2285] dvb-usb: error while querying for an remote control event.
[  433.294236][T18305] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  433.315541][T18305] exFAT-fs (loop1): IO charset cp95ime_offset=0x0000000000000009 not found
[  433.359055][ T2285] m920x_read = error: -19
[  433.366054][ T2285] dvb-usb: error while querying for an remote control event.
[  433.433636][ T2285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  433.454253][T18310] loop1: detected capacity change from 0 to 4096
[  433.457513][T18310] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  433.483775][ T2285] m920x_read = error: -19
[  433.487215][ T2285] dvb-usb: error while querying for an remote control event.
[  433.493968][T18310] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  433.500226][T18310] ntfs3(loop1): Failed to load $Extend (-22).
[  433.509579][T18310] ntfs3(loop1): Failed to initialize $Extend.
[  433.516903][T18310] ntfs3(loop1): ino=5, mi_enum_attr
[  433.602975][ T2285] m920x_read = error: -19
[  433.605864][ T2285] dvb-usb: error while querying for an remote control event.
[  433.708270][T15605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  433.724277][T15605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  433.729921][ T2285] m920x_read = error: -19
[  433.738244][T15605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  433.740775][ T2285] dvb-usb: error while querying for an remote control event.
[  433.744889][T15605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  433.759863][T15605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  433.851900][ T2285] m920x_read = error: -19
[  433.853833][ T2285] dvb-usb: error while querying for an remote control event.
[  433.958404][T18317] lo speed is unknown, defaulting to 1000
[  433.960988][ T2285] m920x_read = error: -19
[  433.962627][ T2285] dvb-usb: error while querying for an remote control event.
[  434.073352][ T2285] m920x_read = error: -19
[  434.076017][ T2285] dvb-usb: error while querying for an remote control event.
[  434.109124][T18317] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.111766][T18317] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.114237][T18317] bridge_slave_0: entered allmulticast mode
[  434.117228][T18317] bridge_slave_0: entered promiscuous mode
[  434.121131][T18317] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.123590][T18317] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.126047][T18317] bridge_slave_1: entered allmulticast mode
[  434.128905][T18317] bridge_slave_1: entered promiscuous mode
[  434.153636][T18317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  434.159233][T18317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  434.178712][T18317] team0: Port device team_slave_0 added
[  434.181000][ T2285] m920x_read = error: -19
[  434.182970][ T2285] dvb-usb: error while querying for an remote control event.
[  434.183722][T18317] team0: Port device team_slave_1 added
[  434.201871][T18317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.204184][T18317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  434.213200][T18317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  434.219375][T18317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  434.221855][T18317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  434.230016][T18317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  434.290263][T18317] hsr_slave_0: entered promiscuous mode
[  434.291199][ T2285] m920x_read = error: -19
[  434.293190][T18317] hsr_slave_1: entered promiscuous mode
[  434.296514][ T2285] dvb-usb: error while querying for an remote control event.
[  434.297250][T18317] debugfs: 'hsr0' already exists in 'hsr'
[  434.301704][T18317] Cannot create hsr debugfs directory
[  434.401015][ T2285] m920x_read = error: -19
[  434.403320][ T2285] dvb-usb: error while querying for an remote control event.
[  434.589150][   T31] m920x_read = error: -19
[  434.591381][   T31] dvb-usb: error while querying for an remote control event.
[  434.594487][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.652233][T18317] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  434.658699][T18317] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  434.663277][T18317] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  434.674233][T18317] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  434.680731][T18317] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  434.700923][T17447] m920x_read = error: -19
[  434.701034][T18317] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  434.704189][T17447] dvb-usb: error while querying for an remote control event.
[  434.708685][T18317] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  434.715223][T18317] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  434.821068][T17447] m920x_read = error: -19
[  434.826630][T17447] dvb-usb: error while querying for an remote control event.
[  434.850371][T18317] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.870017][T18317] 8021q: adding VLAN 0 to HW filter on device team0
[  434.877855][T14859] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.880322][T14859] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.891975][T14859] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.894679][T14859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.941031][T17447] m920x_read = error: -19
[  434.943735][T17447] dvb-usb: error while querying for an remote control event.
[  434.968969][T18317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  434.979338][T18370] loop1: detected capacity change from 0 to 128
[  434.985120][T18370] FAT-fs (loop1): bogus sectors per cluster 0
[  434.990369][T18370] FAT-fs (loop1): Can't find a valid FAT filesystem
[  435.052011][   T31] m920x_read = error: -19
[  435.054417][   T31] dvb-usb: error while querying for an remote control event.
[  435.170914][   T31] m920x_read = error: -19
[  435.174224][   T31] dvb-usb: error while querying for an remote control event.
[  435.178402][T18317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.231164][T17447] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  435.288226][   T31] m920x_read = error: -19
[  435.290152][   T31] dvb-usb: error while querying for an remote control event.
[  435.390850][T17447] usb 2-1: Using ep0 maxpacket: 8
[  435.392268][T18317] veth0_vlan: entered promiscuous mode
[  435.398197][T17447] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  435.406324][T17447] usb 2-1: config 179 has no interface number 0
[  435.414885][T17447] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  435.417594][T18317] veth1_vlan: entered promiscuous mode
[  435.423827][T17447] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  435.434436][T17447] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  435.444557][T18317] veth0_macvtap: entered promiscuous mode
[  435.447528][T17447] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  435.453664][   T31] m920x_read = error: -19
[  435.453775][T18317] veth1_macvtap: entered promiscuous mode
[  435.456730][   T31] dvb-usb: error while querying for an remote control event.
[  435.463815][T17447] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  435.475469][T18317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.477930][T17447] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  435.482573][T17447] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.486838][T18317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.491146][T18370] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  435.503411][T18390] loop5: detected capacity change from 0 to 4096
[  435.524085][ T5667] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  435.529479][T18390] ntfs3(loop5): Failed to load $Extend (-22).
[  435.531873][ T5667] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  435.533780][T18390] ntfs3(loop5): Failed to initialize $Extend.
[  435.547755][ T5667] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  435.569359][ T5667] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  435.574511][   T31] m920x_read = error: -19
[  435.582111][   T31] dvb-usb: error while querying for an remote control event.
[  435.601544][ T5580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.674910][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  435.707726][T17447] m920x_read = error: -19
[  435.709172][T17447] dvb-usb: error while querying for an remote control event.
[  435.779824][T14859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.796124][T14859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.826252][   T31] m920x_read = error: -19
[  435.827745][   T31] dvb-usb: error while querying for an remote control event.
[  435.834883][ T5612] Bluetooth: hci1: command tx timeout
[  435.867571][T14859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  435.871285][T14859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  435.952109][T17447] m920x_read = error: -19
[  435.959493][T17447] dvb-usb: error while querying for an remote control event.
[  435.974236][T17447] usb 2-1: USB disconnect, device number 56
[  435.976161][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  435.976184][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  436.071007][   T31] m920x_read = error: -19
[  436.072431][   T31] dvb-usb: error while querying for an remote control event.
[  436.139276][T18407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.148668][T18407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.151832][T18407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.154792][T18407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.157589][T18407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.171333][T18406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.181785][   T31] m920x_read = error: -19
[  436.183562][   T31] dvb-usb: error while querying for an remote control event.
[  436.270864][ T5668] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  436.291503][   T31] m920x_read = error: -19
[  436.293354][   T31] dvb-usb: error while querying for an remote control event.
[  436.400966][T17447] m920x_read = error: -19
[  436.403707][T17447] dvb-usb: error while querying for an remote control event.
[  436.420934][ T5668] usb 8-1: Using ep0 maxpacket: 16
[  436.433513][ T5668] usb 8-1: config 254 has an invalid interface number: 235 but max is 0
[  436.437043][ T5668] usb 8-1: config 254 has no interface number 0
[  436.439628][ T5668] usb 8-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  436.445996][ T5668] usb 8-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  436.451133][ T5668] usb 8-1: config 254 interface 235 altsetting 2 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  436.457796][ T5668] usb 8-1: config 254 interface 235 altsetting 2 endpoint 0x8F has invalid wMaxPacketSize 0
[  436.463279][ T5668] usb 8-1: config 254 interface 235 has no altsetting 0
[  436.469307][ T5668] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  436.473001][ T5668] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.475489][ T5668] usb 8-1: Product: syz
[  436.477141][ T5668] usb 8-1: Manufacturer: syz
[  436.478812][ T5668] usb 8-1: SerialNumber: syz
[  436.482542][T18405] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  436.510812][T17447] m920x_read = error: -19
[  436.514618][T17447] dvb-usb: error while querying for an remote control event.
[  436.633277][ T2285] m920x_read = error: -19
[  436.636392][ T2285] dvb-usb: error while querying for an remote control event.
[  436.692389][T18405] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  436.695672][ T5668] usbtest 8-1:254.235: Linux gadget zero
[  436.697433][ T5668] usbtest 8-1:254.235: high-speed {control in/out bulk-out iso-in} tests (+alt)
[  436.711386][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.741121][ T5668] m920x_read = error: -19
[  436.742766][ T5668] dvb-usb: error while querying for an remote control event.
[  436.770963][T17447] usb 2-1: new full-speed USB device number 57 using dummy_hcd
[  436.831312][   T31] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  436.850873][ T5668] m920x_read = error: -19
[  436.852505][ T5668] dvb-usb: error while querying for an remote control event.
[  436.899317][ T6589] usb 8-1: USB disconnect, device number 2
[  436.922655][T17447] usb 2-1: unable to get BOS descriptor or descriptor too short
[  436.925668][T17447] usb 2-1: not running at top speed; connect to a high speed hub
[  436.929188][T17447] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4
[  436.934805][T17447] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  436.937597][T17447] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.940069][T17447] usb 2-1: Product: syz
[  436.941662][T17447] usb 2-1: Manufacturer: syz
[  436.943253][T17447] usb 2-1: SerialNumber: syz
[  436.961429][ T5668] m920x_read = error: -19
[  436.963063][ T5668] dvb-usb: error while querying for an remote control event.
[  436.981436][   T31] usb 6-1: Using ep0 maxpacket: 8
[  436.985411][   T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  436.988889][   T31] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  436.993685][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  436.997151][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  437.001217][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  437.004813][   T31] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  437.013590][   T31] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  437.017094][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.020147][   T31] usb 6-1: Product: syz
[  437.022036][   T31] usb 6-1: Manufacturer: syz
[  437.023629][   T31] usb 6-1: SerialNumber: syz
[  437.026996][   T31] usb 6-1: config 0 descriptor??
[  437.033771][T18429] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  437.070887][ T5668] m920x_read = error: -19
[  437.072497][ T5668] dvb-usb: error while querying for an remote control event.
[  437.152349][T17447] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  437.154979][T17447] usb 2-1: found format II with max.bitrate = 0, frame size=7
[  437.157512][T17447] usb 2-1: found format II with max.bitrate = 0, frame size=7
[  437.191610][ T5668] m920x_read = error: -19
[  437.193128][ T5668] dvb-usb: error while querying for an remote control event.
[  437.213299][T17447] usb 2-1: USB disconnect, device number 57
[  437.236594][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  437.311359][ T2285] m920x_read = error: -19
[  437.312942][ T2285] dvb-usb: error while querying for an remote control event.
[  437.420852][ T2285] m920x_read = error: -19
[  437.426638][ T2285] dvb-usb: error while querying for an remote control event.
[  437.496153][T18435] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4878'.
[  437.500423][T18435] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4878'.
[  437.530777][T17447] m920x_read = error: -19
[  437.533478][T17447] dvb-usb: error while querying for an remote control event.
[  437.643325][T18439] futex_wake_op: syz.7.4879 tries to shift op by 144; fix this program
[  437.674341][T18439] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4879'.
[  437.690144][T17447] m920x_read = error: -19
[  437.692437][T17447] dvb-usb: error while querying for an remote control event.
[  437.802300][T17447] m920x_read = error: -19
[  437.808807][T17447] dvb-usb: error while querying for an remote control event.
[  437.910728][ T5612] Bluetooth: hci1: command tx timeout
[  437.931369][T17447] m920x_read = error: -19
[  437.940870][T17447] dvb-usb: error while querying for an remote control event.
[  437.947975][T18441] loop1: detected capacity change from 0 to 2048
[  437.969922][T18441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  437.989059][T18441] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  438.024282][T18441] EXT4-fs (loop1): Remounting filesystem read-only
[  438.077156][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  438.118778][T17447] m920x_read = error: -19
[  438.143675][T17447] dvb-usb: error while querying for an remote control event.
[  438.276258][T18455] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  438.283910][T18455] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  438.306198][T17447] m920x_read = error: -19
[  438.373641][T18455] loop5: detected capacity change from 0 to 1024
[  438.418234][T17447] dvb-usb: error while querying for an remote control event.
[  438.444675][T18459] input: syz1 as /devices/virtual/input/input30
[  438.485376][T18462] loop7: detected capacity change from 0 to 256
[  438.493079][   T31] rc_core: IR keymap rc-snapstream-firefly not found
[  438.496668][   T31] Registered IR keymap rc-empty
[  438.529347][   T31] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  438.532691][ T5668] m920x_read = error: -19
[  438.534153][ T5668] dvb-usb: error while querying for an remote control event.
[  438.546351][   T31] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input29
[  438.569371][   T31] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input31
[  438.588127][   T31] usb 6-1: USB disconnect, device number 13
[  438.590104][    C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  438.653692][ T5668] m920x_read = error: -19
[  438.658269][ T5668] dvb-usb: error while querying for an remote control event.
[  438.770709][ T5668] m920x_read = error: -19
[  438.772173][ T5668] dvb-usb: error while querying for an remote control event.
[  438.829216][T18464] loop1: detected capacity change from 0 to 40427
[  438.832542][T18468] loop7: detected capacity change from 0 to 32768
[  438.834439][T18464] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  438.836799][T18468] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4890 (18468)
[  438.843598][T18468] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  438.845055][T18464] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  438.846868][T18468] BTRFS info (device loop7): using sha256 checksum algorithm
[  438.880830][   T31] m920x_read = error: -19
[  438.882488][   T31] dvb-usb: error while querying for an remote control event.
[  438.911090][T18468] BTRFS info (device loop7): enabling ssd optimizations
[  438.913386][T18468] BTRFS info (device loop7): turning on async discard
[  438.915621][T18468] BTRFS info (device loop7): enabling free space tree
[  438.992182][   T31] m920x_read = error: -19
[  438.993806][   T31] dvb-usb: error while querying for an remote control event.
[  439.002072][   T33] audit: type=1326 audit(1785256057.818:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.5.4891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cff9de99 code=0x7ffc0000
[  439.024490][T18317] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  439.031844][   T33] audit: type=1326 audit(1785256057.818:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.5.4891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cff9de99 code=0x7ffc0000
[  439.056778][   T33] audit: type=1326 audit(1785256057.818:7243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.5.4891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cff9de99 code=0x7ffc0000
[  439.102210][ T5668] m920x_read = error: -19
[  439.106082][ T5668] dvb-usb: error while querying for an remote control event.
[  439.117659][   T33] audit: type=1326 audit(1785256057.818:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.5.4891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cff9de99 code=0x7ffc0000
[  439.127263][T18464] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  439.136218][   T33] audit: type=1326 audit(1785256057.818:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.5.4891" exe="/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ff6cff9de99 code=0x7ffc0000
[  439.163398][   T33] audit: type=1326 audit(1785256057.818:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.5.4891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cff9de99 code=0x7ffc0000
[  439.182244][   T33] audit: type=1326 audit(1785256057.818:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.5.4891" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cff9de99 code=0x7ffc0000
[  439.196628][   T33] audit: type=1326 audit(1785256057.828:7248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.5.4891" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff6cff9de99 code=0x7ffc0000
[  439.204494][T18464] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  439.207069][T18464] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  439.213176][   T33] audit: type=1326 audit(1785256057.838:7249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.5.4891" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff6cff9de99 code=0x7ffc0000
[  439.222614][ T5668] m920x_read = error: -19
[  439.225925][ T5668] dvb-usb: error while querying for an remote control event.
[  439.333776][   T31] m920x_read = error: -19
[  439.337814][   T31] dvb-usb: error while querying for an remote control event.
[  439.464145][T17447] m920x_read = error: -19
[  439.466024][T17447] dvb-usb: error while querying for an remote control event.
[  439.474798][   T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  439.582965][T17447] m920x_read = error: -19
[  439.585192][T17447] dvb-usb: error while querying for an remote control event.
[  439.649248][   T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  439.657609][   T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  439.682170][   T31] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[  439.689238][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.696643][   T31] usb 6-1: Product: syz
[  439.699759][   T31] usb 6-1: Manufacturer: syz
[  439.701977][T17447] m920x_read = error: -19
[  439.703933][T17447] dvb-usb: error while querying for an remote control event.
[  439.707721][   T31] usb 6-1: SerialNumber: syz
[  439.722494][   T31] usb 6-1: 0:1 : does not exist
[  439.811289][T17447] m920x_read = error: -19
[  439.820861][T17447] dvb-usb: error while querying for an remote control event.
[  439.931275][ T5668] m920x_read = error: -19
[  439.933045][ T5668] dvb-usb: error while querying for an remote control event.
[  439.991149][ T2285] net_ratelimit: 5 callbacks suppressed
[  439.991161][ T2285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  439.995353][ T5612] Bluetooth: hci1: command tx timeout
[  440.040617][ T2285] m920x_read = error: -19
[  440.042075][ T2285] dvb-usb: error while querying for an remote control event.
[  440.100718][T17447] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  440.124621][   T31] usb 6-1: unit 0 not found!
[  440.147778][   T31] usb 6-1: USB disconnect, device number 14
[  440.152690][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  440.155344][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  440.155554][ T5668] m920x_read = error: -19
[  440.166399][ T1382] aoe: packet could not be sent on lowpan0.  consider increasing tx_queue_len
[  440.168177][ T5668] dvb-usb: error while querying for an remote control event.
[  440.188022][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  440.250799][T17447] usb 8-1: Using ep0 maxpacket: 8
[  440.260830][T17447] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.272656][T17447] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 146, using maximum allowed: 30
[  440.276265][T17447] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 146
[  440.281462][ T2285] m920x_read = error: -19
[  440.283186][ T2285] dvb-usb: error while querying for an remote control event.
[  440.293602][T17447] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  440.302827][T17447] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.315846][T17447] usb 8-1: config 0 descriptor??
[  440.319608][T17447] rndis_host 8-1:0.0: invalid descriptor buffer length
[  440.322050][T17447] rndis_host 8-1:0.0: rndis: master #0/ffff8881b9008000 slave #1/0000000000000000
[  440.362028][T18524] netlink: 'syz.1.4907': attribute type 1 has an invalid length.
[  440.392143][   T31] m920x_read = error: -19
[  440.393672][   T31] dvb-usb: error while querying for an remote control event.
[  440.501460][T17447] m920x_read = error: -19
[  440.503237][T17447] dvb-usb: error while querying for an remote control event.
[  440.549529][    T9] usb 8-1: USB disconnect, device number 3
[  440.610414][T17447] m920x_read = error: -19
[  440.612255][T17447] dvb-usb: error while querying for an remote control event.
[  440.721636][T17447] m920x_read = error: -19
[  440.729932][T17447] dvb-usb: error while querying for an remote control event.
[  440.843657][   T31] m920x_read = error: -19
[  440.847274][   T31] dvb-usb: error while querying for an remote control event.
[  440.970707][T17447] m920x_read = error: -19
[  440.977665][T17447] dvb-usb: error while querying for an remote control event.
[  441.100501][T17447] m920x_read = error: -19
[  441.104150][T17447] dvb-usb: error while querying for an remote control event.
[  441.222466][T17447] m920x_read = error: -19
[  441.232505][T17447] dvb-usb: error while querying for an remote control event.
[  441.359081][T18533] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  441.370793][T17447] m920x_read = error: -19
[  441.378630][T17447] dvb-usb: error while querying for an remote control event.
[  441.403432][ T2285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.429564][T18546] netlink: 'syz.5.4917': attribute type 23 has an invalid length.
[  441.520814][   T31] m920x_read = error: -19
[  441.533354][   T31] dvb-usb: error while querying for an remote control event.
[  441.650360][ T2285] m920x_read = error: -19
[  441.652830][ T2285] dvb-usb: error while querying for an remote control event.
[  441.671511][ T5580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  441.769896][T17447] m920x_read = error: -19
[  441.772403][T17447] dvb-usb: error while querying for an remote control event.
[  441.829811][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  441.889926][T17447] m920x_read = error: -19
[  441.896467][T17447] dvb-usb: error while querying for an remote control event.
[  441.989662][    T9] usb 8-1: Using ep0 maxpacket: 8
[  442.006070][    T9] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  442.010238][T17447] m920x_read = error: -19
[  442.011763][T17447] dvb-usb: error while querying for an remote control event.
[  442.014607][    T9] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  442.020597][    T9] usb 8-1: Product: syz
[  442.022177][    T9] usb 8-1: Manufacturer: syz
[  442.024022][    T9] usb 8-1: SerialNumber: syz
[  442.028671][    T9] usb 8-1: config 0 descriptor??
[  442.057007][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  442.079744][ T5612] Bluetooth: hci1: command tx timeout
[  442.120588][T17447] m920x_read = error: -19
[  442.122141][T17447] dvb-usb: error while querying for an remote control event.
[  442.229784][T17447] m920x_read = error: -19
[  442.231507][T17447] dvb-usb: error while querying for an remote control event.
[  442.339743][T17447] m920x_read = error: -19
[  442.343509][T17447] dvb-usb: error while querying for an remote control event.
[  442.500928][T17447] m920x_read = error: -19
[  442.505253][T17447] dvb-usb: error while querying for an remote control event.
[  442.509609][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  442.610301][T17447] m920x_read = error: -19
[  442.612300][T17447] dvb-usb: error while querying for an remote control event.
[  442.639579][ T2285] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  442.684668][    T9] gspca_zc3xx: reg_w_i err -71
[  442.688382][    T9] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  442.700307][    T9] usb 8-1: USB disconnect, device number 4
[  442.723421][T17447] m920x_read = error: -19
[  442.725218][T17447] dvb-usb: error while querying for an remote control event.
[  442.792148][ T2285] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  442.795737][ T2285] usb 6-1: config 0 has no interface number 0
[  442.798239][ T2285] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  442.804921][ T2285] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  442.817411][ T2285] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  442.828264][ T2285] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  442.835028][T17447] m920x_read = error: -19
[  442.835183][T18566] loop1: detected capacity change from 0 to 1024
[  442.840350][T17447] dvb-usb: error while querying for an remote control event.
[  442.845115][ T2285] usb 6-1: Manufacturer: syz
[  442.851439][ T2285] usb 6-1: SerialNumber: syz
[  442.866527][ T2285] usb 6-1: config 0 descriptor??
[  442.936596][T18570] loop1: detected capacity change from 0 to 164
[  442.942326][T18570] isofs: isofs_export_get_parent(): child directory not normalized!
[  442.959869][T17447] m920x_read = error: -19
[  442.965428][T17447] dvb-usb: error while querying for an remote control event.
[  443.036923][T18572] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.039629][T18572] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.079169][T17447] m920x_read = error: -19
[  443.086594][T17447] dvb-usb: error while querying for an remote control event.
[  443.175288][T18572] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  443.186426][T18572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  443.209345][T17447] m920x_read = error: -19
[  443.216429][T17447] dvb-usb: error while querying for an remote control event.
[  443.320290][T18572] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  443.337835][T18594] m920x_read = error: -19
[  443.345549][T18594] dvb-usb: error while querying for an remote control event.
[  443.454642][T18599] loop7: detected capacity change from 0 to 256
[  443.468837][T18593] m920x_read = error: -19
[  443.470557][T18593] dvb-usb: error while querying for an remote control event.
[  443.518803][ T2285] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71
[  443.537324][ T2285] usb 6-1: USB disconnect, device number 15
[  443.596229][T18587] m920x_read = error: -19
[  443.599676][T18587] dvb-usb: error while querying for an remote control event.
[  443.606093][T18587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  443.649310][T18572] bridge5: left promiscuous mode
[  443.678462][ T5667] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  443.682884][ T5667] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.697208][ T5667] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  443.707471][ T5667] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.713357][T18586] m920x_read = error: -19
[  443.720568][T18586] dvb-usb: error while querying for an remote control event.
[  443.731866][ T5667] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  443.737869][    T9] lo speed is unknown, defaulting to 1000
[  443.748039][ T5667] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.759569][    T9] syz0: Port: 1 Link DOWN
[  443.767142][ T5667] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  443.777221][ T5667] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.841753][T18586] m920x_read = error: -19
[  443.846056][T18608] loop1: detected capacity change from 0 to 128
[  443.848893][T18586] dvb-usb: error while querying for an remote control event.
[  443.857762][T18608] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  443.872431][T18608] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  443.959578][T18586] m920x_read = error: -19
[  443.961725][T18586] dvb-usb: error while querying for an remote control event.
[  444.078667][T18586] m920x_read = error: -19
[  444.084479][T18586] dvb-usb: error while querying for an remote control event.
[  444.129731][T18623] loop7: detected capacity change from 0 to 4096
[  444.133009][T18623] EXT4-fs: inline encryption not supported
[  444.136275][T18623] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  444.139906][T18623] EXT4-fs (loop7): Test dummy encryption mode enabled
[  444.144017][T18623] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  444.146860][T18623] System zones: 0-5
[  444.158641][T18623] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.199459][T18586] m920x_read = error: -19
[  444.202624][T18586] dvb-usb: error while querying for an remote control event.
[  444.257686][T18618] loop1: detected capacity change from 0 to 32768
[  444.305799][T18618]  loop1: p1 p3 < >
[  444.319070][T18586] m920x_read = error: -19
[  444.320731][T18586] dvb-usb: error while querying for an remote control event.
[  444.392788][T18317] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.430581][T18586] m920x_read = error: -19
[  444.436690][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4948'.
[  444.437135][T18586] dvb-usb: error while querying for an remote control event.
[  444.463075][T18637] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4947'.
[  444.527470][T18640] loop5: detected capacity change from 0 to 128
[  444.533209][T18640] ubifs: Unknown parameter 'no_chk_'
[  444.568373][T18586] m920x_read = error: -19
[  444.578601][T18586] dvb-usb: error while querying for an remote control event.
[  444.624057][T18647] loop5: detected capacity change from 0 to 512
[  444.630011][T18586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.632115][T18647] EXT4-fs: Ignoring removed i_version option
[  444.646604][T18647] EXT4-fs: Ignoring removed oldalloc option
[  444.652209][T18647] EXT4-fs (loop5): Test dummy encryption mode enabled
[  444.660113][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4954'.
[  444.663721][T18647] EXT4-fs (loop5): 1 truncate cleaned up
[  444.667062][T18647] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.698227][T18586] m920x_read = error: -19
[  444.699819][T18586] dvb-usb: error while querying for an remote control event.
[  444.708401][ T5579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.730554][T15756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.808068][T18586] m920x_read = error: -19
[  444.809489][T18586] dvb-usb: error while querying for an remote control event.
[  444.890379][T18666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4962'.
[  444.918220][T18586] m920x_read = error: -19
[  444.922233][T18586] dvb-usb: error while querying for an remote control event.
[  445.001701][T18672] loop1: detected capacity change from 0 to 8192
[  445.023142][   T33] audit: type=1804 audit(1785256063.848:7250): pid=18672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4965" name="/newroot/1678/file2/bus" dev="loop1" ino=1048767 res=1 errno=0
[  445.029507][T18586] m920x_read = error: -19
[  445.031521][   T33] audit: type=1800 audit(1785256063.858:7251): pid=18672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4965" name="bus" dev="loop1" ino=1048767 res=0 errno=0
[  445.038670][T18586] dvb-usb: error while querying for an remote control event.
[  445.089181][T18675] binder: 18673:18675 ioctl 4018620d 0 returned -22
[  445.096226][T18675] binder: 18673:18675 ioctl c0306201 0 returned -14
[  445.108197][ T5579] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  445.158210][T18586] m920x_read = error: -19
[  445.160033][T18586] dvb-usb: error while querying for an remote control event.
[  445.169466][T18680] loop7: detected capacity change from 0 to 1024
[  445.268448][T18586] m920x_read = error: -19
[  445.270028][T18586] dvb-usb: error while querying for an remote control event.
[  445.273796][ T5579] usb 6-1: Using ep0 maxpacket: 32
[  445.280066][ T5579] usb 6-1: config 9 has an invalid interface number: 88 but max is 0
[  445.286326][ T5579] usb 6-1: config 9 has no interface number 0
[  445.289944][ T5579] usb 6-1: config 9 interface 88 has no altsetting 0
[  445.297508][ T5579] usb 6-1: New USB device found, idVendor=3275, idProduct=0080, bcdDevice=9c.00
[  445.308286][ T5579] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.312674][ T5579] usb 6-1: Product: syz
[  445.314075][ T5579] usb 6-1: Manufacturer: syz
[  445.318712][ T5579] usb 6-1: SerialNumber: syz
[  445.350481][T18000] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  445.377856][T18586] m920x_read = error: -19
[  445.379355][T18586] dvb-usb: error while querying for an remote control event.
[  445.395425][T18688] input: syz0 as /devices/virtual/input/input33
[  445.488124][T18586] m920x_read = error: -19
[  445.490024][T18586] dvb-usb: error while querying for an remote control event.
[  445.517756][T18000] usb 2-1: Using ep0 maxpacket: 32
[  445.530438][T18000] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  445.536724][ T5579] smsusb:smsusb_probe: board id=18, interface number 88
[  445.545365][T18000] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  445.550981][T18000] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  445.554660][ T5579] usb 6-1: USB disconnect, device number 16
[  445.557417][T18000] usb 2-1: config 1 has no interface number 0
[  445.565011][T18000] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  445.574769][T18000] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  445.578874][T18690] loop7: detected capacity change from 0 to 4096
[  445.589895][T18000] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  445.596860][T18000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.598607][T18586] m920x_read = error: -19
[  445.602472][T18690] EXT4-fs (loop7): can't read group descriptor 0
[  445.605655][T18586] dvb-usb: error while querying for an remote control event.
[  445.610473][T18000] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  445.668464][T18586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.717894][T18586] m920x_read = error: -19
[  445.721114][T18586] dvb-usb: error while querying for an remote control event.
[  445.819108][T18000] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  445.827606][T18586] m920x_read = error: -19
[  445.830589][T18586] dvb-usb: error while querying for an remote control event.
[  445.933580][T18699] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  445.945838][T18699] Set syz0 is full, maxelem 0 reached
[  445.947624][T18586] m920x_read = error: -19
[  445.950206][T18586] dvb-usb: error while querying for an remote control event.
[  446.057602][T18586] m920x_read = error: -19
[  446.059634][T18586] dvb-usb: error while querying for an remote control event.
[  446.167366][ T2285] m920x_read = error: -19
[  446.169319][ T2285] dvb-usb: error while querying for an remote control event.
[  446.245391][ T5579] usb 2-1: USB disconnect, device number 58
[  446.251037][ T5579] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  446.277301][ T2285] m920x_read = error: -19
[  446.278881][ T2285] dvb-usb: error while querying for an remote control event.
[  446.347289][T18586] usb 6-1: new low-speed USB device number 17 using dummy_hcd
[  446.387387][ T2285] m920x_read = error: -19
[  446.389219][ T2285] dvb-usb: error while querying for an remote control event.
[  446.497223][ T2285] m920x_read = error: -19
[  446.499204][ T2285] dvb-usb: error while querying for an remote control event.
[  446.503929][T18586] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  446.508136][T18586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  446.512422][T18586] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  446.518288][T18586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  446.522756][T18586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  446.528737][T18586] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  446.532986][T18586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  446.537554][T18586] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  446.542579][T18586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  446.547544][T18586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  446.553326][T18586] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  446.556498][T18586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  446.563027][T18586] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  446.569847][T18586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  446.574106][T18586] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  446.582669][T18586] usb 6-1: string descriptor 0 read error: -22
[  446.584786][T18586] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  446.588135][T18586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.598120][T18586] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  446.607273][T18586] m920x_read = error: -19
[  446.609568][T18586] dvb-usb: error while querying for an remote control event.
[  446.709071][T18586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  446.717350][T18586] m920x_read = error: -19
[  446.719199][T18586] dvb-usb: error while querying for an remote control event.
[  446.829150][T18586] m920x_read = error: -19
[  446.831100][T18586] dvb-usb: error while querying for an remote control event.
[  446.948294][T18586] m920x_read = error: -19
[  446.950427][T18586] dvb-usb: error while querying for an remote control event.
[  447.066938][T18591] m920x_read = error: -19
[  447.068331][T18591] dvb-usb: error while querying for an remote control event.
[  447.179196][T18586] m920x_read = error: -19
[  447.180849][T18586] dvb-usb: error while querying for an remote control event.
[  447.296812][T18586] m920x_read = error: -19
[  447.299671][T18586] dvb-usb: error while querying for an remote control event.
[  447.434906][T18586] m920x_read = error: -19
[  447.436352][T18586] dvb-usb: error while querying for an remote control event.
[  447.548392][T18586] m920x_read = error: -19
[  447.550333][T18586] dvb-usb: error while querying for an remote control event.
[  447.666683][T18586] m920x_read = error: -19
[  447.672091][T18586] dvb-usb: error while querying for an remote control event.
[  447.714030][T15605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  447.731412][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  447.741112][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  447.754692][T18586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.763411][T18000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.763621][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  447.773146][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  447.788939][T18586] m920x_read = error: -19
[  447.823516][T18586] dvb-usb: error while querying for an remote control event.
[  447.926437][T18586] m920x_read = error: -19
[  447.929784][T18586] dvb-usb: error while querying for an remote control event.
[  448.036411][T18586] m920x_read = error: -19
[  448.037815][T18586] dvb-usb: error while querying for an remote control event.
[  448.054667][T18735] lo speed is unknown, defaulting to 1000
[  448.156390][T18586] m920x_read = error: -19
[  448.158773][T18586] dvb-usb: error while querying for an remote control event.
[  448.320211][T18735] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.322548][T18735] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.324960][T18735] bridge_slave_0: entered allmulticast mode
[  448.328240][T18735] bridge_slave_0: entered promiscuous mode
[  448.331696][T18735] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.334094][T18735] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.336761][T18735] bridge_slave_1: entered allmulticast mode
[  448.339622][T18735] bridge_slave_1: entered promiscuous mode
[  448.371466][T18735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.383487][T18735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  448.416350][T18735] team0: Port device team_slave_0 added
[  448.420448][T18735] team0: Port device team_slave_1 added
[  448.436151][T18735] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.438612][T18735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.449184][T18735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.453673][T18735] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.456244][T18735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  448.464227][T18735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  448.497895][T18735] hsr_slave_0: entered promiscuous mode
[  448.500493][T18735] hsr_slave_1: entered promiscuous mode
[  448.502712][T18735] debugfs: 'hsr0' already exists in 'hsr'
[  448.504837][T18735] Cannot create hsr debugfs directory
[  448.527807][T18586] m920x_read = error: -19
[  448.690028][T18735] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  448.694464][T18735] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  448.698917][T18735] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  448.703100][T18735] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  448.706334][T18735] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  448.710376][T18735] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  448.713308][T18735] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  448.719553][T18735] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  448.771025][T18735] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.783340][T18735] 8021q: adding VLAN 0 to HW filter on device team0
[  448.792154][T14859] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.794621][T14859] bridge0: port 1(bridge_slave_0) entered forwarding state
[  448.805079][T14859] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.807749][T14859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  448.868551][T18586] dvb-usb: error while querying for an remote control event.
[  448.949568][T18000] usb 6-1: USB disconnect, device number 17
[  449.032745][T18791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.039019][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.121699][T18735] 8021q: adding VLAN 0 to HW filter on device batadv0
[  449.225776][T18591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.262410][T18000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.338060][T18591] m920x_read = error: -19
[  449.341161][T18591] dvb-usb: error while querying for an remote control event.
[  449.344784][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5010'.
[  449.361749][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5011'.
[  449.366652][T18806] netlink: 65011 bytes leftover after parsing attributes in process `syz.5.5011'.
[  449.427008][T18812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.430673][T18813] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5014'.
[  449.452685][T18813] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5014'.
[  449.465659][T18591] m920x_read = error: -19
[  449.467331][T18591] dvb-usb: error while querying for an remote control event.
[  449.479378][T18735] veth0_vlan: entered promiscuous mode
[  449.501595][T18815] loop5: detected capacity change from 0 to 256
[  449.501930][T18735] veth1_vlan: entered promiscuous mode
[  449.512945][T18815] exfat: Deprecated parameter 'utf8'
[  449.533722][T18735] veth0_macvtap: entered promiscuous mode
[  449.538498][T18815] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d)
[  449.552509][T18735] veth1_macvtap: entered promiscuous mode
[  449.568186][T18735] batman_adv: batadv0: Interface activated: batadv_slave_0
[  449.575939][T18591] m920x_read = error: -19
[  449.578214][T18591] dvb-usb: error while querying for an remote control event.
[  449.580492][T18735] batman_adv: batadv0: Interface activated: batadv_slave_1
[  449.605554][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.643634][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.648727][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.680832][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.696703][T18591] m920x_read = error: -19
[  449.698134][T18591] dvb-usb: error while querying for an remote control event.
[  449.818736][T18591] m920x_read = error: -19
[  449.833881][T18591] dvb-usb: error while querying for an remote control event.
[  449.847259][T18827] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5021'.
[  449.850733][ T5621] Bluetooth: hci0: command tx timeout
[  449.894799][ T6716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  449.897676][ T6716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  449.975984][T18592] m920x_read = error: -19
[  449.977513][T18592] dvb-usb: error while querying for an remote control event.
[  450.013221][ T6708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.085203][T18591] m920x_read = error: -19
[  450.101254][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5025'.
[  450.108097][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5025'.
[  450.146537][ T6708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.174378][T18838] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5026'.
[  450.332986][T18591] dvb-usb: error while querying for an remote control event.
[  450.553710][T18840] loop7: detected capacity change from 0 to 32768
[  450.558580][T18840] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5027 (18840)
[  450.694962][T18576] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  450.785045][T18000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.823122][T18591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.834026][T18840] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  450.850032][T18840] BTRFS info (device loop7): using blake2b checksum algorithm
[  450.861453][T18576] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  450.872621][T18576] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  450.892955][T18576] usb 9-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[  450.901638][T18576] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.910624][T18576] usb 9-1: Product: syz
[  450.912046][T18576] usb 9-1: Manufacturer: syz
[  450.921044][T18576] usb 9-1: SerialNumber: syz
[  450.924757][T18591] m920x_read = error: -19
[  450.926183][T18591] dvb-usb: error while querying for an remote control event.
[  450.971629][T18840] BTRFS info (device loop7): enabling ssd optimizations
[  450.973929][T18840] BTRFS info (device loop7): turning on async discard
[  450.976085][T18840] BTRFS info (device loop7): enabling free space tree
[  450.978197][T18840] BTRFS info (device loop7): use zstd compression, level 3
[  451.036954][T18591] m920x_read = error: -19
[  451.038364][T18591] dvb-usb: error while querying for an remote control event.
[  451.046561][T18591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.134179][T18317] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  451.165129][T18591] m920x_read = error: -19
[  451.166977][T18591] dvb-usb: error while querying for an remote control event.
[  451.190855][T18576] usb 9-1: 0:1 : does not exist
[  451.194918][T18576] usb 9-1: unit 6 not found!
[  451.196834][T18576] usb 9-1: unit 2 not found!
[  451.236643][T18576] usb 9-1: USB disconnect, device number 2
[  451.278644][T18591] m920x_read = error: -19
[  451.282068][T18591] dvb-usb: error while querying for an remote control event.
[  451.405610][T18591] m920x_read = error: -19
[  451.407131][T18591] dvb-usb: error while querying for an remote control event.
[  451.524834][T18591] m920x_read = error: -19
[  451.526708][T18591] dvb-usb: error while querying for an remote control event.
[  451.697557][T18591] m920x_read = error: -19
[  451.699471][T18591] dvb-usb: error while querying for an remote control event.
[  451.747370][T18880] loop7: detected capacity change from 0 to 2048
[  451.943362][ T5621] Bluetooth: hci0: command tx timeout
[  451.945424][   T33] audit: type=1800 audit(1785256070.682:7252): pid=18881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5034" name="file0" dev="overlay" ino=1916 res=0 errno=0
[  451.959402][T18591] m920x_read = error: -19
[  451.961718][T18591] dvb-usb: error while querying for an remote control event.
[  451.975091][T18591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.980409][T18882] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  452.062753][T18886] tipc: Started in network mode
[  452.070246][T18886] tipc: Node identity 785634120000000021436587, cluster identity 4711
[  452.075563][T18886] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  452.094272][T18586] m920x_read = error: -19
[  452.096187][T18586] dvb-usb: error while querying for an remote control event.
[  452.204329][T18586] m920x_read = error: -19
[  452.206303][T18586] dvb-usb: error while querying for an remote control event.
[  452.210392][T18884] loop8: detected capacity change from 0 to 40427
[  452.285066][T18884] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  452.314220][T18591] m920x_read = error: -19
[  452.316096][T18591] dvb-usb: error while querying for an remote control event.
[  452.326119][T18884] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  452.433935][T18591] m920x_read = error: -19
[  452.437619][T18591] dvb-usb: error while querying for an remote control event.
[  452.564505][T18591] m920x_read = error: -19
[  452.567493][T18591] dvb-usb: error while querying for an remote control event.
[  452.588727][T18904] pim6reg1: entered promiscuous mode
[  452.591408][T18904] pim6reg1: entered allmulticast mode
[  452.673910][T18591] m920x_read = error: -19
[  452.675509][T18591] dvb-usb: error while querying for an remote control event.
[  452.779875][T18913] loop8: detected capacity change from 0 to 2048
[  452.810422][T18591] m920x_read = error: -19
[  452.812858][T18591] dvb-usb: error while querying for an remote control event.
[  452.851705][T18913] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.870198][   T33] audit: type=1800 audit(1785256071.702:7253): pid=18913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5048" name="file1" dev="loop8" ino=15 res=0 errno=0
[  452.871561][T18919] hsr0: entered promiscuous mode
[  452.917405][T18919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5049'.
[  452.926351][T18591] m920x_read = error: -19
[  452.933837][T18591] dvb-usb: error while querying for an remote control event.
[  453.123894][T18919] hsr_slave_0: left promiscuous mode
[  453.124756][T18591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.129862][T18919] hsr_slave_1: left promiscuous mode
[  453.133189][T18912] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  453.153283][T18919] hsr0 (unregistering): left promiscuous mode
[  453.153914][T18913] ------------[ cut here ]------------
[  453.158247][T18913] kernel BUG at fs/ext4/inline.c:240!
[  453.160483][T18913] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  453.162825][T18913] CPU: 0 UID: 0 PID: 18913 Comm: syz.8.5048 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  453.167081][T18913] Tainted: [L]=SOFTLOCKUP
[  453.168598][T18913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  453.172492][T18913] RIP: 0010:ext4_write_inline_data+0x429/0x430
[  453.174739][T18913] Code: c1 38 c1 0f 8c 1b ff ff ff 48 89 df 49 89 d4 e8 fd 4b aa ff 4c 89 e2 e9 08 ff ff ff e8 00 ba 3c ff 90 0f 0b e8 f8 b9 3c ff 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  453.180975][T18913] RSP: 0018:ffffc90007387388 EFLAGS: 00010283
[  453.183218][T18913] RAX: ffffffff828a4788 RBX: 0000000000001000 RCX: 0000000000080000
[  453.186075][T18913] RDX: ffffc90020da1000 RSI: 0000000000000b9c RDI: 0000000000000b9d
[  453.188871][T18913] RBP: ffff888111e3112a R08: ffff888113c1240f R09: 1ffff11022782481
[  453.191453][T18913] R10: dffffc0000000000 R11: ffffed1022782482 R12: 000000000000003c
[  453.193895][T18913] R13: ffffc90007387460 R14: 0000000000000000 R15: ffff888111e30ba0
[  453.196448][T18913] FS:  00007f57e23986c0(0000) GS:ffff88818d951000(0000) knlGS:0000000000000000
[  453.199417][T18913] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  453.201519][T18913] CR2: 00007f85cf5eb580 CR3: 000000011c97a000 CR4: 00000000000006f0
[  453.204284][T18913] Call Trace:
[  453.205380][T18913]  <TASK>
[  453.206368][T18913]  ? ext4_get_inode_loc+0xc5/0xf0
[  453.208038][T18913]  ext4_write_inline_data_end+0x33e/0xac0
[  453.210042][T18913]  ? __pfx_ext4_write_inline_data_end+0x10/0x10
[  453.212235][T18913]  generic_perform_write+0x612/0x8f0
[  453.214309][T18913]  ? __pfx_generic_perform_write+0x10/0x10
[  453.216676][T18913]  ext4_buffered_write_iter+0xcb/0x370
[  453.218881][T18913]  ext4_file_write_iter+0x947/0x1c70
[  453.220897][T18913]  ? trace_kmalloc+0x2a/0xf0
[  453.222831][T18913]  ? __pfx_ext4_file_write_iter+0x10/0x10
[  453.225145][T18913]  ? __asan_memset+0x22/0x50
[  453.226954][T18913]  iter_file_splice_write+0xa31/0x1240
[  453.229043][T18913]  ? __pfx_iter_file_splice_write+0x10/0x10
[  453.231398][T18913]  ? __pfx_iter_file_splice_write+0x10/0x10
[  453.233814][T18913]  direct_splice_actor+0x101/0x160
[  453.235929][T18913]  splice_direct_to_actor+0x57b/0xcb0
[  453.238121][T18913]  ? __pfx_direct_splice_actor+0x10/0x10
[  453.240391][T18913]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  453.242733][T18913]  do_splice_direct+0x195/0x290
[  453.244731][T18913]  ? __pfx_do_splice_direct+0x10/0x10
[  453.246947][T18913]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  453.249279][T18913]  ? rw_verify_area+0x203/0x4c0
[  453.251204][T18913]  do_sendfile+0x52e/0x7c0
[  453.253024][T18913]  ? __pfx_do_sendfile+0x10/0x10
[  453.255056][T18913]  ? __se_sys_futex+0x3a8/0x450
[  453.257015][T18913]  __se_sys_sendfile64+0x144/0x1a0
[  453.259097][T18913]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  453.261355][T18913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.263668][T18591] m920x_read = error: -19
[  453.263753][T18913]  do_syscall_64+0x174/0x580
[  453.265815][T18591] dvb-usb: error while querying for an remote control event.
[  453.267329][T18913]  ? trace_irq_disable+0x3b/0x140
[  453.267351][T18913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.267362][T18913] RIP: 0033:0x7f57e159de99
[  453.267373][T18913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.267384][T18913] RSP: 002b:00007f57e2398028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  453.286435][T18913] RAX: ffffffffffffffda RBX: 00007f57e1825fa0 RCX: 00007f57e159de99
[  453.289089][T18913] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  453.291773][T18913] RBP: 00007f57e1633eaf R08: 0000000000000000 R09: 0000000000000000
[  453.294548][T18913] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
[  453.297475][T18913] R13: 00007f57e1826038 R14: 00007f57e1825fa0 R15: 00007fff75c60358
[  453.300421][T18913]  </TASK>
[  453.301696][T18913] Modules linked in:
[  453.305067][T18913] ---[ end trace 0000000000000000 ]---
[  453.308869][T18913] RIP: 0010:ext4_write_inline_data+0x429/0x430
[  453.311484][T18913] Code: c1 38 c1 0f 8c 1b ff ff ff 48 89 df 49 89 d4 e8 fd 4b aa ff 4c 89 e2 e9 08 ff ff ff e8 00 ba 3c ff 90 0f 0b e8 f8 b9 3c ff 90 <0f> 0b 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  453.322094][T18913] RSP: 0018:ffffc90007387388 EFLAGS: 00010283
[  453.327538][T18913] RAX: ffffffff828a4788 RBX: 0000000000001000 RCX: 0000000000080000
[  453.333728][T18913] RDX: ffffc90020da1000 RSI: 0000000000000b9c RDI: 0000000000000b9d
[  453.342672][T18913] RBP: ffff888111e3112a R08: ffff888113c1240f R09: 1ffff11022782481
[  453.351076][T18913] R10: dffffc0000000000 R11: ffffed1022782482 R12: 000000000000003c
[  453.354124][T18913] R13: ffffc90007387460 R14: 0000000000000000 R15: ffff888111e30ba0
[  453.356853][T18913] FS:  00007f57e23986c0(0000) GS:ffff8882a8f51000(0000) knlGS:0000000000000000
[  453.359768][T18913] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  453.362132][T18913] CR2: 00007f02d8d57e20 CR3: 000000011c97a000 CR4: 00000000000006f0
[  453.364989][T18913] Kernel panic - not syncing: Fatal exception
[  453.367772][T18913] Kernel Offset: disabled
[  453.369108][T18913] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:40:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000006fde RDI=0000000000006fdf RBP=00000000000003f8 RSP=ffffc90007386bd0
R8 =ffff88816a560237 R9 =1ffff1102d4ac046 R10=dffffc0000000000 R11=ffffffff856697e0
R12=dffffc0000000000 R13=ffffffff9aada0a0 R14=ffffffff9aada0e0 R15=0000000000000000
RIP=ffffffff8566985c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f57e23986c0 ffffffff 00c00000
GS =0000 ffff88818d951000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f85cf5eb580 CR3=000000011c97a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff816c0edb ffffffff816c0edb
XMM02=ffffffff816c0edb ffffffff816c0edb XMM03=ffffffff816c0edb ffffffff816c0edb
XMM04=ffffffff816c0edb ffffffff816c0edb XMM05=ffffffff816c0edb ffffffff816c0edb
XMM06=ffffffff816c0edb ffffffff816c0edb XMM07=ffffffff816c0edb ffffffff816c0edb
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff8882a8f51000 RBX=ffffffff819b4450 RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8c4bda60 RDI=ffffffff819b4450 RBP=ffffc90000197f10 RSP=ffffc90000197e40
R8 =ffff88823c6338db R9 =1ffff110478c671b R10=dffffc0000000000 R11=ffffed10478c671c
R12=0000000000000000 R13=1ffff1102c09d000 R14=1ffff92000032fd0 R15=dffffc0000000000
RIP=ffffffff8bd0512f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a8f51000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f57e15eb580 CR3=0000000171adc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 ffffffff816c0edb
XMM02=00007ff6d01f05e8 00007ff6d01f0618 XMM03=00007ff6d01f0600 00007ff6d01f05e0
XMM04=00007ff6d0d5d020 00007ff6d01f05c0 XMM05=00007ff6d01f05d0 00007ff6d01f0610
XMM06=00007ff6d01f05f8 00007ff6d01f05c8 XMM07=00007ff6d01f0600 00007ff6d01f05e0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
