last executing test programs:

8m38.956713708s ago: executing program 32 (id=825):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
read$alg(r1, &(0x7f0000000080)=""/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x54, 0x1, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4841}, 0x8000)
read$alg(r1, &(0x7f0000000300)=""/99, 0x63)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000280), r2)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x0, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

5m49.473026957s ago: executing program 1 (id=1686):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x1000000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffff748, 0x2, 0x8, 0x8, 0x3, 0x37b88e9f, 0x1})

5m47.914710783s ago: executing program 1 (id=1691):
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x4, 0x205, 0xffff9bf2})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="5b0f01c2c29c028ed0660f388236af0083ee2c0f20c06635000004200f22c0643e1f0fb7c2", 0x25}], 0x1, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
connect$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5m46.732892154s ago: executing program 1 (id=1696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
pwritev(r0, &(0x7f0000001180)=[{&(0x7f0000000040)="8105ce5d", 0x4}, {&(0x7f0000000080)="31083344bd889380a76e10e99cf709c9723406565fd848929975491887659eebec9a020609a032517eef1651", 0x2c}], 0x2, 0x8, 0x7f)

5m45.707316238s ago: executing program 1 (id=1698):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000001040)=[@in6={0xa, 0x4e20, 0x9, @local, 0x1}]}, &(0x7f0000000180)=0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x8000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x54}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10, @ANYBLOB="01"], 0x20}}, 0x0)

5m45.32743381s ago: executing program 2 (id=1701):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x1000000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffff748, 0x2, 0x8, 0x8, 0x3, 0x37b88e9f, 0x1})

5m44.179207097s ago: executing program 1 (id=1703):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m43.777190718s ago: executing program 2 (id=1706):
syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x1208004, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0xa8, &(0x7f0000000380)="$eJzszjFqAkEYBeC3G0g2zV4gRW6QMySHSJlqyxS5wEK8kFfxCLZWFrY2I+oWsqCwIKLwffDD/PMY5i2287e0SflPSimzJE85HMtLkt/nnHcp4zHUSZph3tvjvv5KPpNUQ77c9N1+/n76bvT8u5n6YXW97gAAwDR1Psb7ycXq9faNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO7LLgAA//9tCxas")

5m42.915452093s ago: executing program 2 (id=1710):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x800000, &(0x7f0000000280)=ANY=[@ANYBLOB="62747265655f6e6f64655f70726566657463682c6469726563745f696f2c6e6f7265636f766572792c7374725f686173683d6372633332632c6a6f75726e616c5f666c7573685f64697361626c65642c726f7265636f766572792c6a6f752d69675fdafdcb726e616c5f7472616e73616374696f6e5f6e616d65732c7265636f6e7374727563745f616c6c6f632c6572726f72733d636f6e74696e75652c00"], 0x1, 0x5903, &(0x7f0000010b40)="$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")
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x149240, 0x0)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, 0x0)

5m42.683488787s ago: executing program 1 (id=1711):
chdir(&(0x7f0000000240)='./file0\x00')
pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0xc, 0x400, 0x11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = io_uring_setup(0x662, &(0x7f0000000000))
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
close_range(r2, 0xffffffffffffffff, 0x0)

5m38.908516311s ago: executing program 2 (id=1716):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x1000000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffff748, 0x2, 0x8, 0x8, 0x3, 0x37b88e9f, 0x1})

5m37.299448261s ago: executing program 2 (id=1720):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000001f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80481e, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp861'}}, {@uid}, {@part={'part', 0x3d, 0x2}}, {@part={'part', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x21, 0x305, &(0x7f0000000240)="$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")
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

5m34.330009299s ago: executing program 2 (id=1724):
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f000000ac80)={{}, "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"})
r0 = socket$inet(0x2, 0x3, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETLED(r2, 0x4b45, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r5 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x0)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0)
ioctl$VIDIOC_G_STD(r5, 0x80085617, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x20000800, 0x0, 0x0, 0x20000830, 0x20000860], 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, 0x1f0)
socket$packet(0x11, 0x2, 0x300)
mkdir(0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

5m25.874139836s ago: executing program 33 (id=1711):
chdir(&(0x7f0000000240)='./file0\x00')
pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0xc, 0x400, 0x11)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = io_uring_setup(0x662, &(0x7f0000000000))
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
close_range(r2, 0xffffffffffffffff, 0x0)

5m18.57737999s ago: executing program 34 (id=1724):
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f000000ac80)={{}, "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"})
r0 = socket$inet(0x2, 0x3, 0xa)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETLED(r2, 0x4b45, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r5 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0x0)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0)
ioctl$VIDIOC_G_STD(r5, 0x80085617, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x20000800, 0x0, 0x0, 0x20000830, 0x20000860], 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, 0x1f0)
socket$packet(0x11, 0x2, 0x300)
mkdir(0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)

5m9.12727869s ago: executing program 3 (id=1769):
socket$inet(0x2, 0x802, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1e, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x3, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e008000000008", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

5m8.044250441s ago: executing program 3 (id=1773):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r1, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x82, 0x0, 0x0)
r3 = socket(0x2b, 0x1, 0x1)
sendmmsg$sock(r3, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001)
connect$netlink(r3, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x3, 0x73)
r5 = socket$netlink(0x10, 0x3, 0x14)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r3, @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r1], 0x48)
socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000000314010000000000000099aa0900020073797a31000000000800410072786500140033007465616d5f736c6176655f3000000000ee778762cbdfc1ccfccce522b07aef09e7d02475b261f73306b2b749d113f70a8816993e80"], 0x38}}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000080), 0x4)
sendmsg$kcm(r4, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000005c0)="bb31389c501cac6f", 0x8}], 0x1)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r8, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8)
bind$inet6(r7, &(0x7f0000001140)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x1c)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0x3, 0x3, 0x22170, r1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5, 0x7, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000000000000000000006624dedf1590ed7d00"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r9], 0x0, 0x10, 0x0, @void, @value}, 0x90)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00f4a3e9545618e49499000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e004a0010", 0x2e}], 0x1}, 0x0)
syz_emit_ethernet(0xb3, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa88a82900810002dd4e000004aaaa8143aa5888f5c1e0946269c8c7d9a12e8d3830c36373af41ab26c2a6d584de4317779e7d5c5262ba9fd10b3d5e41d929fcd45b154c89eed793a6d65ee0983a420f2f6ed7a6a100f48534bb9be87d6e1dfcd200031cbcc7b78517f934493fdf565f2ab9ddffcce012b39344c5ce63f2da90671933e8be49bc5059cedd1f804bf5e3b33a80c867b565dc503362fdc55646b4ee0b2870cd91117c"], &(0x7f0000000200)={0x1, 0x3, [0x5b2, 0x6ec, 0x674, 0x873]})

5m2.828376453s ago: executing program 3 (id=1777):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xff, 0x11, 0x0, @empty, @multicast1}, {0x18, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x5}}}}}}}, 0x0)

5m1.797691067s ago: executing program 3 (id=1779):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x23, 0x5, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)

4m59.875827728s ago: executing program 3 (id=1781):
socket$inet(0x2, 0x802, 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000006"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1e, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$kcm(0xa, 0x3, 0x73)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

4m57.682602652s ago: executing program 3 (id=1783):
syz_open_dev$loop(0x0, 0x75f, 0x103382)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000004)

4m42.073306875s ago: executing program 35 (id=1783):
syz_open_dev$loop(0x0, 0x75f, 0x103382)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000004)

4m38.01723593s ago: executing program 4 (id=1802):
r0 = syz_io_uring_setup(0x111, &(0x7f00000004c0)={0x0, 0x0, 0x1800, 0xfffffffa, 0x87}, &(0x7f0000000480), &(0x7f0000000440))
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x21, &(0x7f0000000000), 0x1)

4m37.365955062s ago: executing program 4 (id=1803):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000300))

4m36.856273928s ago: executing program 4 (id=1805):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000380)='./file0/file0\x00', 0x1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

4m32.976728267s ago: executing program 4 (id=1808):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"})
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)

4m27.636609679s ago: executing program 4 (id=1812):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x3)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000300))

4m26.68511662s ago: executing program 4 (id=1814):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='qgroup_meta_convert\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xd8, &(0x7f0000000500)='cgrnu\x98\x00k\xa8I\x99p\xaa\x98\xd7\x88]\x04\xcc\xa3\xf2\xf0\x13H\x9d30/\xd7\x85\xbc\xb1\a`\x01\xbem\x05\x0f\xcfk\xb7\xc4\xbb\xb0!_qg\xb3\xcfY\xf7^\x98@\xc6\xcc#k;\xe6\xc3\xea\x98\x15z#\x1d\xf3\xd5\xe2\xad;\xea\x1a\x03\xc1v?\xc8.\xd3\xd7+\xb4\xd7N\xd1\xc3y\xac\xf2\xcf\xdd\xfb\xa4\xe6{\f\xc8y\xfe-\xdf\xd1\xff\xe9\x8a\xfeV\x89|y\xe9>v\xaf D\x17u\xbf\xa9P\xf83mB\x15\bK\xb5\x80\x8bc\xdc\x1fo\xf1\xfck\xccO\x04K@\xd4\\\xae\xa8z\x03m\x9a@\a\x8aU\xd2\xa4\x93\xfeq\xc1\xd4\xb2eA\xcf\xb9L^E\xc3\x8a\xa95\x8f\x1a\x90\x80B\x12\x82\xf7Q\xde\xb0\x16\xa5\x8b\xe7\xef\x96x\x8fZ~\f\xa3\x1f\xb7g\xe3]JV#:\x96\xd0c\xe4\xd4\x19'}, 0x30)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
clock_gettime(0x3, &(0x7f00000000c0))

4m10.922364978s ago: executing program 36 (id=1814):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='qgroup_meta_convert\x00', r0}, 0x18)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xd8, &(0x7f0000000500)='cgrnu\x98\x00k\xa8I\x99p\xaa\x98\xd7\x88]\x04\xcc\xa3\xf2\xf0\x13H\x9d30/\xd7\x85\xbc\xb1\a`\x01\xbem\x05\x0f\xcfk\xb7\xc4\xbb\xb0!_qg\xb3\xcfY\xf7^\x98@\xc6\xcc#k;\xe6\xc3\xea\x98\x15z#\x1d\xf3\xd5\xe2\xad;\xea\x1a\x03\xc1v?\xc8.\xd3\xd7+\xb4\xd7N\xd1\xc3y\xac\xf2\xcf\xdd\xfb\xa4\xe6{\f\xc8y\xfe-\xdf\xd1\xff\xe9\x8a\xfeV\x89|y\xe9>v\xaf D\x17u\xbf\xa9P\xf83mB\x15\bK\xb5\x80\x8bc\xdc\x1fo\xf1\xfck\xccO\x04K@\xd4\\\xae\xa8z\x03m\x9a@\a\x8aU\xd2\xa4\x93\xfeq\xc1\xd4\xb2eA\xcf\xb9L^E\xc3\x8a\xa95\x8f\x1a\x90\x80B\x12\x82\xf7Q\xde\xb0\x16\xa5\x8b\xe7\xef\x96x\x8fZ~\f\xa3\x1f\xb7g\xe3]JV#:\x96\xd0c\xe4\xd4\x19'}, 0x30)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
clock_gettime(0x3, &(0x7f00000000c0))

2m12.01700803s ago: executing program 5 (id=2033):
prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)

2m11.162657762s ago: executing program 5 (id=2036):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"})
chdir(&(0x7f0000000540)='./file0\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

2m9.728147563s ago: executing program 5 (id=2041):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x55}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xf9, 0x1, 0x40}}]}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x201, 0x4, 0xb, 0x9, 0x20, 0xa}, 0x70, &(0x7f0000001200)={0x5, 0xf, 0x70, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "fe159762db656f9144c0ca1793bc90b3"}, @ssp_cap={0x10, 0x10, 0xa, 0x63, 0x1, 0xf4e, 0x0, 0x5d, [0xff0000]}, @ssp_cap={0x10, 0x10, 0xa, 0xb8, 0x1, 0x81, 0xf000, 0x1, [0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6ad6cae9c66af0f8a6a70918227dbdea"}, @ssp_cap={0x18, 0x10, 0xa, 0xd, 0x3, 0x40, 0xf00, 0x7, [0xff3f0f, 0xff0000, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x26, 0xff, 0x0, 0x4, 0x8}]}, 0x1, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x42b}}]})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'})
sendfile(r1, r1, &(0x7f0000001140)=0x80000001, 0x4)
fsopen(&(0x7f00000000c0)='fusectl\x00', 0x1)

2m4.319518507s ago: executing program 5 (id=2056):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"})
lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

2m2.042240468s ago: executing program 5 (id=2062):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r1, 0x0, 0x0, 0x20001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x2, 0x18, 0x7, 0xc})

2m0.663951533s ago: executing program 5 (id=2067):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="b2030ec763b0d4a83a4584020000000400010008", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x8000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x54}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r11, @ANYBLOB="01"], 0x20}}, 0x0)

1m59.138319831s ago: executing program 37 (id=2067):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="b2030ec763b0d4a83a4584020000000400010008", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x4, {{0xa, 0x0, 0x8000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x54}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r11, @ANYBLOB="01"], 0x20}}, 0x0)

1m0.788432813s ago: executing program 0 (id=2190):
syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e000500"], 0x17)

1m0.021644576s ago: executing program 0 (id=2194):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10)
r1 = dup(0xffffffffffffffff)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)

59.309155724s ago: executing program 0 (id=2199):
r0 = syz_io_uring_setup(0x5169, &(0x7f0000000340)={0x0, 0x6f38, 0x10100}, &(0x7f0000000040), 0x0)
syz_io_uring_setup(0x5e1, &(0x7f0000000600)={0x0, 0x1, 0x0, 0xfffffffc, 0xfffffffe}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f00000000c0))
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0xc, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x1910c1, 0x40, 0x2}, &(0x7f0000000400)='./file1\x00', 0x21, 0x0, 0x12345})
io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0)

58.492836723s ago: executing program 0 (id=2202):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000010080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff)
add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000300), 0x0, r0)

57.846703246s ago: executing program 0 (id=2203):
fsopen(0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x264, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xd}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

56.445687759s ago: executing program 0 (id=2208):
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="02020000e70300000000000020000000000000000000000000000000000000000000000000b46b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r1, 0xae9a)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
close(0x3)

39.225561782s ago: executing program 38 (id=2208):
prlimit64(0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="02020000e70300000000000020000000000000000000000000000000000000000000000000b46b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r1, 0xae9a)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
close(0x3)

38.596001852s ago: executing program 6 (id=2247):
syz_emit_ethernet(0x1e, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000025c7f70d0ddc9000cc8"], 0x0)

37.674247625s ago: executing program 6 (id=2249):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xe2e1d000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f00000001c0))
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
listen(0xffffffffffffffff, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

35.408104001s ago: executing program 6 (id=2253):
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window], 0x1)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000001300)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x28, 0x8, 0x0, 0x5, 0x0, 0x3e, 0xf, 0x20b, 0x40, 0x343, 0x2, 0x2, 0x38, 0x1, 0x1, 0x8, 0x2}, [{0x0, 0x5, 0xffffffffffffffff, 0x9, 0x1, 0xd329686, 0xfffffffffffffffa, 0x8}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c)

34.264976402s ago: executing program 6 (id=2255):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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")
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000500)={0x2, 0x0, [{0x4, 0xcf, &(0x7f0000000140)=""/207}, {0x2, 0xd6, &(0x7f0000000340)=""/214}]})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000280)=0xc3)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20, @remote}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00040000041200"/20, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20)
sendto$inet(r3, &(0x7f00000000c0)='+', 0x1, 0x7448, 0x0, 0x0)
r5 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8)
r6 = socket$inet(0x2, 0x1, 0x100)
listen(r6, 0x0)
getsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, &(0x7f0000000040)=0xfffffffffffffd85)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')

30.392475937s ago: executing program 6 (id=2262):
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1)
sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r2, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

29.350388725s ago: executing program 6 (id=2264):
syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$eJzs3U9sHFcdB/Dfm3jtdRonmzR1CwR1paoqCiKKHdomNhKYGFeIqLFwHBFOmHgTlvpPZCfIqQD1BgckxIEDBySEhBSBQIgj4kBPcEDcgXt74OIDEhIHhGZ21ruxt8Sqs3Fdfz5SvLNvfvPmzRwifffNvg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOLzX5g6P5b2exQAAABAP70+9+Xz4/I/AAAAfKhdM/8PAAAAAAAAAAddiiy+Fym+NLmZjhXvW6pXmiv3NuanZ3ofNpyKI48U9fm/6tj4hU+//MqrF9uv///4x+0jcXXu2lT98urynbXG+npjsT6/0ry5utjYdQ97PX67s8UNqC+/cW/x1q31+vi5Cw/t3qi9M/TUaG3y4sSNWrt2fnpmZq6rZqDyvs++gyc8AAAADrfByOL1SPH2n3+TRiIii71n4Ud8dtBvw1HL83dxEfPTM8WFLDUXVu7mO2fbQbhWXmtpsJ2Rn0AW35OfRZzKxzoo0QMAALB7lSIFp3jtd5vpeEQcaefgTxYLA773gfUnOMge8nGeiYgX4gBkdgAAANhnQ5HFTyPF8olqnMgz834PCAAAAHjsBiKLVyPFvyY3U614HiAizs5Pz9SvXK9/ceXWalftbCpn1A/69wOeJM8mAAAA8AFQjSxGiif+N9PJ/R4MAAAA0BfDkcVfI8XHnv9Wsa5cFOvSn5i8NDg+1r3C3LOP6CevPRcRz+zyO/mVcq3B2TSbUvb4rwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDDZShl8d9I8Z3r9U5jLUUWkdpvq/mf2fS54/szRAAAAAAAAADgUVIWP44UP6lspiwiNmrvDD01Wpu8OHGjdiSOFA8BpO76q3PXpuqXV5fvrDXW1xuL9fmV5s3VxcZuT1e90ly5tzE/PdOXi3mk4T6Pf7h6efXO/bXm7W/c7bn/aHXq6+t31xZu9t4dw1GPONLdcrYY8Pz0TDHopebCSnHobNrtiAEAACCikrL4T6R4sf4gbeXO1vP/A603nTT6i89E3l6obs+fxecGx4vPDVrbJyYvVcZf6t7uGVnPFoE6D7gzc13NA5Wdpfk5U8piKlK8O/FcMbIUR2NHZo5W3Uik+OFXz5R12WDUItrd1lo93mouNc7ntT+KFKdvtGujqK2WtU93asfy2qG832sP1w6Xtac7teN57Uyk+MdrvWuf6dReyGs3IsWDB/V27dG8dqSsHe3Unru5urTY61YCAAAAAAAAcHhVUha/ihR//EM9tefGB1rzzzvn/7/d+S7AW9s7eo85/73O/9e62t4q5/V/kI/im88Vc/nF/H+t9/z/VKT4y9UzZV1r7n2w3H+y+NuZ/78eKd5efbh2qKw91akd2/WNBQAAgA+QPP+fiRTf/9PvB9rZuMz/ZQLvnf8/OrCtoz7l/5Ndbfk51++/+cbC0lJjzYYNGza2Nvb+fyEAAHzY5fm/ESl+/re/b813l/n/WOtdJ///+7ud/D+xvaM+5f9TXW0T5VqElYGI6t3lO5XRiOr6/Tc/1VxeuN243VgZu/TK+MXx82MvVwbbc/udrT3fKgAAADiw8vw/Fyl+/c9fbq13t5v5/6PbO+pT/n+6qy0/Z2fSb8+XDgAAAIdGnv8vRYqvPP/brXXpH87/ndSe5//2+v+feKH12vnNgP7k/9NdbbXyvDs+ewAAAAAAAAAAAAAAAAAAAIADrpKyeClSvPjuQBop23az/t/i9o769P3/0a62xXgyv/+355sKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcSllk0YwUH392M302b/haxLHuVwAAAODA+18AAAD//0qnGWg=")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0)
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
rename(0x0, 0x0)
pwrite64(r0, &(0x7f0000000300)='_', 0x10000000, 0x10000000005)

19.316375888s ago: executing program 7 (id=2279):
socket$nl_xfrm(0x10, 0x3, 0x6)
set_tid_address(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
write$binfmt_aout(r3, 0x0, 0xfdef)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000005"], 0x14}], 0x1}, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, 0x0, 0x0)
truncate(0x0, 0xffffffff)
syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$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")
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001840), 0x0, 0x0)

10.858811524s ago: executing program 39 (id=2264):
syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="005bdefa8134"], 0x1, 0x5bd, &(0x7f0000000680)="$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")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x62142, 0x0)
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
rename(0x0, 0x0)
pwrite64(r0, &(0x7f0000000300)='_', 0x10000000, 0x10000000005)

10.710930139s ago: executing program 7 (id=2284):
r0 = syz_io_uring_setup(0x5169, &(0x7f0000000340)={0x0, 0x6f38, 0x10100}, &(0x7f0000000040), &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_setup(0x5e1, &(0x7f0000000600)={0x0, 0x1, 0x0, 0xfffffffc, 0xfffffffe}, 0x0, &(0x7f00000000c0))
syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0xc, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x1910c1, 0x40, 0x2}, &(0x7f0000000400)='./file1\x00', 0x21, 0x0, 0x12345})
io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0)

9.909169472s ago: executing program 7 (id=2287):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f0000000280))

9.905698558s ago: executing program 8 (id=2288):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x64, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xd}, {[@timestamp_prespec={0x44, 0xc, 0x2, 0x3, 0x8, [{@local, 0x80}]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

9.093150229s ago: executing program 7 (id=2289):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c240200000003000000000009240600060100000009", @ANYRESHEX], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0))
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FICLONE(r1, 0x40049409, r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)={0x18c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff1}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x795}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x95}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1f4}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4}, 0xcf3f657bc2dcb1a9)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000010300)=ANY=[])
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0xfff)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)

8.620102132s ago: executing program 8 (id=2291):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200010000000009"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x55}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xf9, 0x1, 0x40}}]}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x201, 0x4, 0xb, 0x9, 0x20, 0xa}, 0x70, &(0x7f0000001200)={0x5, 0xf, 0x70, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "fe159762db656f9144c0ca1793bc90b3"}, @ssp_cap={0x10, 0x10, 0xa, 0x63, 0x1, 0xf4e, 0x0, 0x5d, [0xff0000]}, @ssp_cap={0x10, 0x10, 0xa, 0xb8, 0x1, 0x81, 0xf000, 0x1, [0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6ad6cae9c66af0f8a6a70918227dbdea"}, @ssp_cap={0x18, 0x10, 0xa, 0xd, 0x3, 0x40, 0xf00, 0x7, [0xff3f0f, 0xff0000, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x26, 0xff, 0x0, 0x4, 0x8}]}, 0x1, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x42b}}]})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'})
sendfile(r1, r1, &(0x7f0000001140)=0x80000001, 0x4)
fsopen(&(0x7f00000000c0)='fusectl\x00', 0x1)

8.156606966s ago: executing program 9 (id=2292):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, 0x22, 0xa01}, 0x14}}, 0x0)

7.34707359s ago: executing program 9 (id=2293):
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x201, &(0x7f0000000140)=<r1=>0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080))
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x8, 0x0, r0, 0x0}])

6.340657324s ago: executing program 9 (id=2294):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149083, 0x0)
r1 = dup(r0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

5.768523047s ago: executing program 8 (id=2295):
r0 = syz_io_uring_setup(0x5169, &(0x7f0000000340)={0x0, 0x6f38, 0x10100}, &(0x7f0000000040), &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_setup(0x5e1, &(0x7f0000000600)={0x0, 0x1, 0x0, 0xfffffffc, 0xfffffffe}, &(0x7f00000002c0)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0xc, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x1910c1, 0x40, 0x2}, &(0x7f0000000400)='./file1\x00', 0x21, 0x0, 0x12345})
io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0)

5.503968891s ago: executing program 9 (id=2296):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0xa09, &(0x7f0000001540)="$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")

5.253610491s ago: executing program 7 (id=2297):
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@largeio}, {@prjquota}]}, 0x1, 0xb8e1, &(0x7f0000003ec0)="$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")
mkdir(&(0x7f0000000640)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xa880, 0x0)
mkdirat(r0, &(0x7f0000000200)='./bus/file0\x00', 0x0)

4.640598828s ago: executing program 8 (id=2298):
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.428500399s ago: executing program 9 (id=2299):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="05003300020000000800"], 0x2c}}, 0x0)
socket$kcm(0x10, 0x3, 0x10)

2.74587732s ago: executing program 8 (id=2300):
r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, 0x0)

709.456511ms ago: executing program 9 (id=2301):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6, 0x64, 0x47, 0x8, 0x458, 0x701f, 0xaafc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x22, 0xb3, 0xe3}}]}}]}}, 0x0)

104.385309ms ago: executing program 8 (id=2302):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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")
r0 = creat(0x0, 0x0)
io_setup(0x201, &(0x7f0000000140)=<r1=>0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080))
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x8, 0x0, r0, 0x0}])

0s ago: executing program 7 (id=2303):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200010000000009"], 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0x1)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0x55}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xf9, 0x1, 0x40}}]}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x201, 0x4, 0xb, 0x9, 0x20, 0xa}, 0x70, &(0x7f0000001200)={0x5, 0xf, 0x70, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "fe159762db656f9144c0ca1793bc90b3"}, @ssp_cap={0x10, 0x10, 0xa, 0x63, 0x1, 0xf4e, 0x0, 0x5d, [0xff0000]}, @ssp_cap={0x10, 0x10, 0xa, 0xb8, 0x1, 0x81, 0xf000, 0x1, [0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6ad6cae9c66af0f8a6a70918227dbdea"}, @ssp_cap={0x18, 0x10, 0xa, 0xd, 0x3, 0x40, 0xf00, 0x7, [0xff3f0f, 0xff0000, 0x0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x26, 0xff, 0x0, 0x4, 0x8}]}, 0x1, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x42b}}]})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'})
sendfile(r1, r1, &(0x7f0000001140)=0x80000001, 0x4)
fsopen(&(0x7f00000000c0)='fusectl\x00', 0x1)

kernel console output (not intermixed with test programs):

Maybe the USB cable is bad?
[  676.405373][T10880] usb 6-1-port1: attempt power cycle
[  676.423938][ T5803] Bluetooth: hci0: command tx timeout
[  676.457509][T11111] hsr_slave_0: entered promiscuous mode
[  676.481472][T11111] hsr_slave_1: entered promiscuous mode
[  676.596542][ T4515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.966463][ T4515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.059360][T10993] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  677.068813][T10993] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  677.078114][T10993] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  677.091391][T10993] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  677.169350][T11159] bridge0: port 1(bridge_slave_0) entered blocking state
[  677.179044][T11159] bridge0: port 1(bridge_slave_0) entered disabled state
[  677.194601][T11159] bridge_slave_0: entered allmulticast mode
[  677.203773][T11159] bridge_slave_0: entered promiscuous mode
[  677.259709][ T4515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.454940][T11159] bridge0: port 2(bridge_slave_1) entered blocking state
[  677.463162][T11159] bridge0: port 2(bridge_slave_1) entered disabled state
[  677.471063][T11159] bridge_slave_1: entered allmulticast mode
[  677.480394][T11159] bridge_slave_1: entered promiscuous mode
[  677.835288][ T5803] Bluetooth: hci1: command tx timeout
[  677.965638][T11159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  678.205608][T11159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  678.323338][ T4515] bridge_slave_1: left allmulticast mode
[  678.329249][ T4515] bridge_slave_1: left promiscuous mode
[  678.336720][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.435496][ T4515] bridge_slave_0: left allmulticast mode
[  678.441421][ T4515] bridge_slave_0: left promiscuous mode
[  678.449016][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state
[  678.487750][ T4515] bridge_slave_1: left allmulticast mode
[  678.498051][ T4515] bridge_slave_1: left promiscuous mode
[  678.506457][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.528512][ T4515] bridge_slave_0: left allmulticast mode
[  678.536325][ T4515] bridge_slave_0: left promiscuous mode
[  678.545366][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.320147][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  679.362660][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  679.381394][ T4515] bond0 (unregistering): Released all slaves
[  679.408910][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  679.487620][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  679.517031][ T4515] bond0 (unregistering): (slave team0): Releasing backup interface
[  679.553911][ T4515] bond0 (unregistering): Released all slaves
[  679.570465][ T4515] bond1 (unregistering): Released all slaves
[  679.587474][ T4515] bond2 (unregistering): Released all slaves
[  679.606226][ T4515] bond3 (unregistering): Released all slaves
[  679.624376][ T4515] bond4 (unregistering): Released all slaves
[  679.663332][ T4515] bond5 (unregistering): Released all slaves
[  679.879127][ T5803] Bluetooth: hci1: command tx timeout
[  680.282268][T11159] team0: Port device team_slave_0 added
[  680.496136][T11159] team0: Port device team_slave_1 added
[  681.022447][T11159] batman_adv: batadv0: Adding interface: batadv_slave_0
[  681.029634][T11159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.058757][T11159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  681.198832][T11159] batman_adv: batadv0: Adding interface: batadv_slave_1
[  681.206476][T11159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  681.235772][T11159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  681.416329][T11181] chnl_net:caif_netlink_parms(): no params data found
[  682.004022][ T5803] Bluetooth: hci1: command tx timeout
[  682.194252][T11111] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  683.265428][T11159] hsr_slave_0: entered promiscuous mode
[  683.364802][T11159] hsr_slave_1: entered promiscuous mode
[  683.421405][T11159] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  683.429443][T11159] Cannot create hsr debugfs directory
[  683.599678][T11111] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  683.699310][ T4515] hsr_slave_0: left promiscuous mode
[  683.744291][ T4515] hsr_slave_1: left promiscuous mode
[  683.763362][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  683.771208][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0
[  683.819618][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  683.827735][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1
[  683.884420][ T4515] hsr_slave_0: left promiscuous mode
[  683.938514][ T4515] hsr_slave_1: left promiscuous mode
[  683.950539][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  683.961346][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0
[  683.997520][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  684.005656][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1
[  684.092371][ T4515] veth1_macvtap: left promiscuous mode
[  684.098162][ T4515] veth0_macvtap: left promiscuous mode
[  684.106911][ T4515] veth1_vlan: left promiscuous mode
[  684.112574][ T4515] veth0_vlan: left promiscuous mode
[  684.136104][ T4515] veth1_macvtap: left promiscuous mode
[  684.145029][ T4515] veth0_macvtap: left promiscuous mode
[  684.152934][ T4515] veth1_vlan: left promiscuous mode
[  684.158510][ T4515] veth0_vlan: left promiscuous mode
[  685.400437][ T4515] team0 (unregistering): Port device team_slave_1 removed
[  685.435452][ T4515] team0 (unregistering): Port device team_slave_0 removed
[  686.258542][ T4515] team0 (unregistering): Port device team_slave_1 removed
[  686.377119][ T4515] team0 (unregistering): Port device team_slave_0 removed
[  686.898559][T11111] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  687.214573][T11111] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  689.147486][T11247] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.437052][T11247] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.836966][T11247] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  689.972371][T11181] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.980210][T11181] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.990480][T11181] bridge_slave_0: entered allmulticast mode
[  689.999679][T11181] bridge_slave_0: entered promiscuous mode
[  690.296933][T11247] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.413216][T11159] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  690.451196][T11181] bridge0: port 2(bridge_slave_1) entered blocking state
[  690.459357][T11181] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.468317][T11181] bridge_slave_1: entered allmulticast mode
[  690.479194][T11181] bridge_slave_1: entered promiscuous mode
[  690.571267][T11159] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  691.066096][T11159] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  691.095213][T11159] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  691.146926][T11181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  691.254018][ T1870] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  691.339345][T11111] 8021q: adding VLAN 0 to HW filter on device bond0
[  691.396617][T11181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  691.439019][ T1870] usb 6-1: Using ep0 maxpacket: 16
[  691.480899][ T1870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.492599][ T1870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  691.502897][ T1870] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  691.516237][ T1870] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  691.527267][ T1870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.613422][T11247] bridge_slave_1: left allmulticast mode
[  691.619335][T11247] bridge_slave_1: left promiscuous mode
[  691.628632][T11247] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.649879][ T1870] usb 6-1: config 0 descriptor??
[  691.692630][T11247] bridge_slave_0: left allmulticast mode
[  691.698757][T11247] bridge_slave_0: left promiscuous mode
[  691.706056][T11247] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.031209][T11247] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  692.132003][T11247] dvmrp5 (unregistering): left allmulticast mode
[  692.224034][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.232448][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.243156][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.251155][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.260353][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.270173][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.279487][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.287695][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.295939][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.313180][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.321213][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.329486][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.337643][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.348472][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.357601][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.365793][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.374095][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.382217][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.390231][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.398394][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.407485][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.415634][ T1870] hid-multitouch 0003:0457:07DA.0015: unknown main item tag 0x0
[  692.449701][ T1870] hid-multitouch 0003:0457:07DA.0015: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0
[  692.508271][ T1870] usb 6-1: USB disconnect, device number 16
[  692.594440][T11247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  692.597115][T11251] udevd[11251]: setting owner of /dev/bus/usb/006/016 to uid=0, gid=0 failed: No such file or directory
[  692.632115][T11247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  692.663764][T11247] bond0 (unregistering): (slave team0): Releasing backup interface
[  692.693633][T11247] bond0 (unregistering): Released all slaves
[  692.716311][T11247] bond1 (unregistering): Released all slaves
[  692.739574][T11247] bond2 (unregistering): Released all slaves
[  692.795728][T11247] bond3 (unregistering): Released all slaves
[  692.818923][T11247] bond4 (unregistering): Released all slaves
[  692.881404][T11247] bond5 (unregistering): Released all slaves
[  692.903229][T11247] bond6 (unregistering): Released all slaves
[  692.923207][T11247] bond7 (unregistering): Released all slaves
[  692.945537][T11247] bond8 (unregistering): Released all slaves
[  693.025118][T11247] bond9 (unregistering): Released all slaves
[  693.204700][T11181] team0: Port device team_slave_0 added
[  693.344470][T11181] team0: Port device team_slave_1 added
[  693.586151][T11111] 8021q: adding VLAN 0 to HW filter on device team0
[  693.998489][T10673] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.006278][T10673] bridge0: port 1(bridge_slave_0) entered forwarding state
[  694.127899][T11181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  694.135381][T11181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  694.161779][T11181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  694.549512][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.557284][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  695.168307][T11181] batman_adv: batadv0: Adding interface: batadv_slave_1
[  695.175695][T11181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  695.202761][T11181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  695.617195][T11111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  695.759237][T11247] hsr_slave_0: left promiscuous mode
[  696.397353][T11278] Invalid ELF header magic: != ELF
[  696.405744][T11247] hsr_slave_1: left promiscuous mode
[  696.541523][T11247] batman_adv: batadv0: Interface deactivated: dummy0
[  696.549097][T11247] batman_adv: batadv0: Removing interface: dummy0
[  696.695704][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  696.703662][T11247] batman_adv: batadv0: Removing interface: batadv_slave_0
[  696.763950][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  696.772416][T11247] batman_adv: batadv0: Removing interface: batadv_slave_1
[  696.899803][T11247] veth1_macvtap: left promiscuous mode
[  696.905886][T11247] veth0_macvtap: left promiscuous mode
[  696.911797][T11247] veth1_vlan: left promiscuous mode
[  696.917587][T11247] veth0_vlan: left promiscuous mode
[  697.490184][T11247] team0 (unregistering): Port device team_slave_1 removed
[  697.598649][T11247] team0 (unregistering): Port device team_slave_0 removed
[  697.979587][ T4515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  697.988177][ T4515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  698.300655][T10892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  698.309248][T10892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  698.363600][T11181] hsr_slave_0: entered promiscuous mode
[  698.425669][T11181] hsr_slave_1: entered promiscuous mode
[  698.457377][T11181] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  698.465796][T11181] Cannot create hsr debugfs directory
[  698.710190][T11159] 8021q: adding VLAN 0 to HW filter on device bond0
[  699.231235][T11159] 8021q: adding VLAN 0 to HW filter on device team0
[  699.361081][T11111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  699.456638][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.464490][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  699.620698][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.628665][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  699.950502][T11159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  700.231241][T11181] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  700.321131][T11181] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  700.453867][T11181] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  700.585283][T11181] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  702.004727][T11159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  702.227884][T11181] 8021q: adding VLAN 0 to HW filter on device bond0
[  702.587665][T11181] 8021q: adding VLAN 0 to HW filter on device team0
[  702.734278][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  702.742131][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  702.806633][T11111] veth0_vlan: entered promiscuous mode
[  703.021393][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.029239][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  703.150479][T11111] veth1_vlan: entered promiscuous mode
[  703.577205][   T29] audit: type=1326 audit(1732184230.667:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11326 comm="syz.8.1840" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535e17e819 code=0x0
[  703.771424][T11111] veth0_macvtap: entered promiscuous mode
[  703.866873][T11111] veth1_macvtap: entered promiscuous mode
[  704.112604][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  704.126840][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  704.137752][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  704.148663][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  704.163813][T11111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  704.376374][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  704.387393][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  704.397900][T11111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  704.408852][T11111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  704.426586][T11111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  704.602437][T11111] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  704.611621][T11111] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  704.622298][T11111] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  704.633495][T11111] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  704.665614][T11338] loop5: detected capacity change from 0 to 128
[  704.764588][T11338] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  704.866276][T11338] ext4 filesystem being mounted at /192/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  705.404335][T11191] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  705.612414][T11191] usb 6-1: Using ep0 maxpacket: 16
[  705.658058][T11181] 8021q: adding VLAN 0 to HW filter on device batadv0
[  705.686108][T11191] usb 6-1: config 1 interface 0 has no altsetting 0
[  705.745102][T11191] usb 6-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.40
[  705.756287][T11191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.766037][T11191] usb 6-1: Product: syz
[  705.770452][T11191] usb 6-1: Manufacturer: syz
[  705.775449][T11191] usb 6-1: SerialNumber: syz
[  706.130042][T11159] veth0_vlan: entered promiscuous mode
[  706.264386][T11191] usbhid 6-1:1.0: can't add hid device: -71
[  706.273377][T11191] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  706.290154][T11159] veth1_vlan: entered promiscuous mode
[  706.353558][T11191] usb 6-1: USB disconnect, device number 17
[  706.683188][T11159] veth0_macvtap: entered promiscuous mode
[  706.806258][T11159] veth1_macvtap: entered promiscuous mode
[  706.958769][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.969714][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.980071][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.992945][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.003787][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  707.015469][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.030687][T11159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  707.090720][ T8326] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  707.102389][ T5883] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  707.251404][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.262972][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.273264][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.284158][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.296208][T11159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.302555][ T5883] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  707.307575][T11159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.315974][ T5883] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.330903][T11159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  707.334447][ T5883] usb 9-1: Product: syz
[  707.347146][ T5883] usb 9-1: Manufacturer: syz
[  707.353043][ T5883] usb 9-1: SerialNumber: syz
[  707.579508][ T5883] usb 9-1: config 0 descriptor??
[  707.593184][T11159] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.604518][T11159] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.614345][T11159] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.624382][T11159] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  707.870218][T11361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  707.880569][T11361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.988038][T11235] usb 9-1: USB disconnect, device number 2
[  708.423864][T11256] udevd[11256]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  708.969806][T11181] veth0_vlan: entered promiscuous mode
[  709.146118][T11181] veth1_vlan: entered promiscuous mode
[  709.435358][   T44] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  709.499203][T11181] veth0_macvtap: entered promiscuous mode
[  709.596474][T11181] veth1_macvtap: entered promiscuous mode
[  709.662816][   T44] usb 9-1: Using ep0 maxpacket: 16
[  709.696947][   T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  709.767184][   T44] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  709.777076][   T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.785611][   T44] usb 9-1: Product: syz
[  709.790044][   T44] usb 9-1: Manufacturer: syz
[  709.794973][   T44] usb 9-1: SerialNumber: syz
[  709.821201][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  709.832110][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  709.842547][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  709.855423][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  709.866788][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  709.878128][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  709.888278][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  709.899121][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  709.914481][T11181] batman_adv: batadv0: Interface activated: batadv_slave_0
[  709.959688][   T44] usb 9-1: config 0 descriptor??
[  709.981963][   T44] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  709.991554][   T44] em28xx 9-1:0.0: DVB interface 0 found: bulk
[  710.111543][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.125761][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.137970][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.148884][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.162051][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.173692][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.184071][T11181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  710.194965][T11181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  710.211622][T11181] batman_adv: batadv0: Interface activated: batadv_slave_1
[  710.454761][T11181] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  710.466134][T11181] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  710.476094][T11181] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  710.485613][T11181] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  710.637264][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  710.644639][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  710.736397][   T44] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[  711.453428][   T44] em28xx 9-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  711.464751][   T44] em28xx 9-1:0.0: board has no eeprom
[  711.634334][   T44] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  711.642563][   T44] em28xx 9-1:0.0: dvb set to bulk mode.
[  711.650004][T11235] em28xx 9-1:0.0: Binding DVB extension
[  711.783647][   T44] usb 9-1: USB disconnect, device number 3
[  711.791064][   T44] em28xx 9-1:0.0: Disconnecting em28xx
[  712.094962][T11235] em28xx 9-1:0.0: Registering input extension
[  712.113307][   T44] em28xx 9-1:0.0: Closing input extension
[  712.184217][   T44] em28xx 9-1:0.0: Freeing device
[  713.828767][T11415] loop8: detected capacity change from 0 to 32768
[  713.902849][T11415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1848 (11415)
[  713.939857][T11415] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  713.951912][T11415] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm
[  713.961304][T11415] BTRFS info (device loop8): using free-space-tree
[  714.514501][T10993] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  714.570827][T10688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.579023][T10688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.696089][   T29] audit: type=1326 audit(1732184241.757:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11438 comm="syz.5.1849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7daed7e819 code=0x0
[  714.716661][ T4515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  714.727722][ T4515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  714.825682][T11442] bridge0: entered promiscuous mode
[  714.831156][T11442] bridge0: entered allmulticast mode
[  715.636736][T11453] netlink: 'syz.6.1740': attribute type 1 has an invalid length.
[  716.361282][T11463] loop5: detected capacity change from 0 to 1024
[  716.475973][T11463] EXT4-fs: Ignoring removed nobh option
[  716.648624][T11463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  716.854528][   T44] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  717.599589][   T29] audit: type=1800 audit(1732184244.687:34): pid=11479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1852" name="bus" dev="loop5" ino=18 res=0 errno=0
[  717.955260][   T44] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  717.964828][   T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.973186][   T44] usb 7-1: Product: syz
[  717.977482][   T44] usb 7-1: Manufacturer: syz
[  717.982738][   T44] usb 7-1: SerialNumber: syz
[  718.018367][ T5803] Bluetooth: hci2: unexpected cc 0x042e length: 1 < 7
[  718.046474][   T44] usb 7-1: config 0 descriptor??
[  718.543526][ T8326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  718.563581][T11468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.573694][T11468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.649579][   T44] usb 7-1: USB disconnect, device number 2
[  718.986304][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  718.994511][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  719.073529][T11256] udevd[11256]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  719.322293][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  719.330544][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  719.663938][T11191] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  719.892289][T11191] usb 6-1: Using ep0 maxpacket: 16
[  719.950505][T11191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  720.042087][T11191] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  720.051482][T11191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.060098][T11191] usb 6-1: Product: syz
[  720.064706][T11191] usb 6-1: Manufacturer: syz
[  720.069584][T11191] usb 6-1: SerialNumber: syz
[  721.075721][T11191] usb 6-1: config 0 descriptor??
[  721.096044][T11191] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  721.105822][T11191] em28xx 6-1:0.0: DVB interface 0 found: bulk
[  721.409172][T11492] loop8: detected capacity change from 0 to 32768
[  721.503066][T11492] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1857 (11492)
[  721.546635][T11492] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  721.558430][T11492] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm
[  721.568125][T11492] BTRFS info (device loop8): using free-space-tree
[  721.974859][T11191] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  722.152516][T10993] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  722.469375][T11191] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  722.477885][T11191] em28xx 6-1:0.0: board has no eeprom
[  722.566766][   T29] audit: type=1326 audit(1732184249.657:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11518 comm="syz.7.1860" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f79d7e819 code=0x0
[  722.653070][T11191] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  722.661415][T11191] em28xx 6-1:0.0: dvb set to bulk mode.
[  722.672612][ T5861] em28xx 6-1:0.0: Binding DVB extension
[  722.748549][T11524] bridge0: entered promiscuous mode
[  722.757538][T11524] bridge0: entered allmulticast mode
[  722.820018][T11191] usb 6-1: USB disconnect, device number 18
[  722.827762][T11191] em28xx 6-1:0.0: Disconnecting em28xx
[  722.848062][T11526] netlink: 'syz.6.1861': attribute type 1 has an invalid length.
[  723.242149][ T5861] em28xx 6-1:0.0: Registering input extension
[  723.292426][T11191] em28xx 6-1:0.0: Closing input extension
[  723.447370][T11191] em28xx 6-1:0.0: Freeing device
[  724.119893][   T44] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  724.122844][ T5081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.136063][ T5081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.383718][   T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  724.513026][   T44] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  724.522594][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.530957][   T44] usb 6-1: Product: syz
[  724.535703][   T44] usb 6-1: Manufacturer: syz
[  724.540549][   T44] usb 6-1: SerialNumber: syz
[  724.611998][T10506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.620181][T10506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.693207][   T44] usb 6-1: config 0 descriptor??
[  724.754092][   T44] ums-alauda 6-1:0.0: USB Mass Storage device detected
[  724.772935][T11235] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  725.032850][T11235] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  725.043372][T11235] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.051646][T11235] usb 9-1: Product: syz
[  725.056835][T11235] usb 9-1: Manufacturer: syz
[  725.061681][T11235] usb 9-1: SerialNumber: syz
[  725.134919][   T44] usb 6-1: USB disconnect, device number 19
[  725.264802][T11235] usb 9-1: config 0 descriptor??
[  725.559050][T11547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  725.568940][T11547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  725.710493][T11235] usb 9-1: USB disconnect, device number 4
[  725.910224][T11560] loop9: detected capacity change from 0 to 1024
[  726.204048][T11560] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  726.655461][T11376] udevd[11376]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  726.843705][T11181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  728.825024][   T29] audit: type=1326 audit(1732184255.867:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.7.1874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f79d7e819 code=0x0
[  729.361413][T11587] netlink: 'syz.9.1873': attribute type 1 has an invalid length.
[  729.439447][T11589] loop8: detected capacity change from 0 to 64
[  730.425582][T11601] loop7: detected capacity change from 0 to 512
[  730.564446][ T5861] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  730.593248][T11191] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  730.722810][T11601] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  730.736495][T11601] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  730.915587][ T5861] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  730.927800][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  730.939399][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  730.955002][ T5861] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  730.968630][ T5861] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  730.978322][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.009261][T11612] netlink: 'syz.5.1883': attribute type 10 has an invalid length.
[  731.037771][T11191] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  731.051093][T11191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.060596][T11191] usb 10-1: Product: syz
[  731.064657][T11614] syz1: rxe_newlink: already configured on team_slave_0
[  731.083840][T11191] usb 10-1: Manufacturer: syz
[  731.083964][T11191] usb 10-1: SerialNumber: syz
[  731.200822][T11191] usb 10-1: config 0 descriptor??
[  731.213395][T11612] Bluetooth: MGMT ver 1.23
[  731.390097][ T5861] usb 7-1: config 0 descriptor??
[  731.586307][T11159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  731.673094][T11191] usb 10-1: Firmware version (0.0) predates our first public release.
[  731.682056][T11191] usb 10-1: Please update to version 0.2 or newer
[  731.733506][T11191] usb 10-1: Firmware: build 
[  731.931709][T11602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.941760][T11602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  732.003274][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.011369][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.019589][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.029250][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.037588][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.045710][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.053786][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.061768][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.075256][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.084647][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.092762][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.100754][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.108935][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.117059][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.125233][ T5861] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0
[  732.302892][T11191] usb 10-1: USB disconnect, device number 2
[  732.617392][ T5861] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[  732.713610][ T5861] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  732.905496][ T5861] usb 7-1: USB disconnect, device number 3
[  733.331703][T11634] loop5: detected capacity change from 0 to 128
[  733.468411][T11634] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  733.567675][T11634] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  733.648774][   T29] audit: type=1804 audit(1732184260.727:37): pid=11634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1887" name="/newroot/204/file0/file0" dev="loop5" ino=12 res=1 errno=0
[  733.853161][   T29] audit: type=1326 audit(1732184260.917:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.8.1890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535e17e819 code=0x0
[  734.011395][T11644] bridge0: entered promiscuous mode
[  734.024874][T11644] bridge0: entered allmulticast mode
[  734.056577][ T8326] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  734.128681][T11647] netlink: 'syz.6.1891': attribute type 1 has an invalid length.
[  735.481477][T11663] loop8: detected capacity change from 0 to 512
[  735.742072][T11663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  735.755395][T11663] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  735.804324][T11671] netlink: 'syz.5.1896': attribute type 10 has an invalid length.
[  735.823870][T11670] syz1: rxe_newlink: already configured on team_slave_0
[  736.517027][T10993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  737.933720][T11682] loop7: detected capacity change from 0 to 32768
[  738.020277][T11682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1899 (11682)
[  738.047008][T11682] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  738.057466][T11682] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm
[  738.066835][T11682] BTRFS info (device loop7): using free-space-tree
[  738.185807][T11690] kernel profiling enabled (shift: 6)
[  738.435912][T11690] binder: BINDER_SET_CONTEXT_MGR already set
[  738.442412][T11690] binder: 11689:11690 ioctl 40046207 0 returned -16
[  738.547454][T11682] BTRFS info (device loop7): balance: start -s
[  738.554257][T11682] BTRFS info (device loop7): left=0, need=98304, flags=2
[  738.561462][T11682] BTRFS info (device loop7): space_info SYSTEM has 0 free, is not full
[  738.570003][T11682] BTRFS info (device loop7): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0
[  738.583877][T11682] BTRFS info (device loop7): global_block_rsv: size 1441792 reserved 1441792
[  738.592912][T11682] BTRFS info (device loop7): trans_block_rsv: size 0 reserved 0
[  738.600708][T11682] BTRFS info (device loop7): chunk_block_rsv: size 0 reserved 0
[  738.608607][T11682] BTRFS info (device loop7): delayed_block_rsv: size 0 reserved 0
[  738.616644][T11682] BTRFS info (device loop7): delayed_refs_rsv: size 0 reserved 0
[  738.635341][T11682] BTRFS info (device loop7): relocating block group 1048576 flags system
[  738.767554][T11682] BTRFS info (device loop7): balance: ended with status: 0
[  738.963018][T11159] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  739.078573][T11708] 9pnet_fd: Insufficient options for proto=fd
[  739.080804][T11705] loop8: detected capacity change from 0 to 1024
[  739.170292][T11705] EXT4-fs: Ignoring removed nobh option
[  739.299074][T11705] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  739.372759][   T29] audit: type=1326 audit(1732184266.417:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11710 comm="syz.6.1905" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0b1f7e819 code=0x0
[  739.506027][T11715] bridge0: entered promiscuous mode
[  739.511516][T11715] bridge0: entered allmulticast mode
[  741.452617][   T29] audit: type=1800 audit(1732184267.477:40): pid=11722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1900" name="bus" dev="loop8" ino=18 res=0 errno=0
[  743.339104][T10993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  743.812355][T11731] loop9: detected capacity change from 0 to 512
[  743.987583][T11731] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  744.001156][T11731] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  744.399813][T11741] netlink: 'syz.7.1904': attribute type 1 has an invalid length.
[  745.137670][T11181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  745.224078][T11756] netlink: 'syz.8.1912': attribute type 10 has an invalid length.
[  745.292793][T11756] 8021q: adding VLAN 0 to HW filter on device team0
[  745.307450][T11756] bond0: (slave team0): Enslaving as an active interface with an up link
[  745.331150][T11760] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  745.748192][T11765] 9pnet_fd: Insufficient options for proto=fd
[  745.962396][T11235] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  746.207780][T11235] usb 10-1: Using ep0 maxpacket: 16
[  746.234982][T11235] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  746.281545][T11235] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  746.291218][T11235] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  746.299841][T11235] usb 10-1: Product: syz
[  746.309281][T11235] usb 10-1: Manufacturer: syz
[  746.315779][T11235] usb 10-1: SerialNumber: syz
[  746.404497][   T29] audit: type=1326 audit(1732184273.487:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.6.1918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0b1f7e819 code=0x0
[  746.423105][T11235] usb 10-1: config 0 descriptor??
[  746.496778][T11235] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  746.507434][T11235] em28xx 10-1:0.0: DVB interface 0 found: bulk
[  747.084721][T11235] em28xx 10-1:0.0: unknown em28xx chip ID (0)
[  748.767104][T11235] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  748.778179][T11235] em28xx 10-1:0.0: board has no eeprom
[  749.033815][T11235] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  749.042339][T11235] em28xx 10-1:0.0: dvb set to bulk mode.
[  749.050700][   T44] em28xx 10-1:0.0: Binding DVB extension
[  749.415344][T11235] usb 10-1: USB disconnect, device number 3
[  749.423357][T11235] em28xx 10-1:0.0: Disconnecting em28xx
[  749.821127][T11794] loop8: detected capacity change from 0 to 512
[  750.288722][   T44] em28xx 10-1:0.0: Registering input extension
[  750.294206][T11794] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  750.313388][T11794] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  750.364042][T11235] em28xx 10-1:0.0: Closing input extension
[  750.462609][T11799] netlink: 'syz.7.1925': attribute type 1 has an invalid length.
[  750.481180][T11235] em28xx 10-1:0.0: Freeing device
[  751.355715][T10993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  751.453097][T11810] loop9: detected capacity change from 0 to 1024
[  751.491253][T11810] EXT4-fs: Ignoring removed nomblk_io_submit option
[  751.505016][T11812] netlink: 'syz.5.1929': attribute type 10 has an invalid length.
[  751.554721][T11812] syz1: rxe_newlink: already configured on team_slave_0
[  751.659105][T11810] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  752.299844][T11181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  752.326077][   T29] audit: type=1326 audit(1732184279.387:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11827 comm="syz.6.1933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0b1f7e819 code=0x0
[  753.803895][T11834] loop5: detected capacity change from 0 to 4096
[  753.853348][T11834] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  754.107317][T10506] wlan1: Trigger new scan to find an IBSS to join
[  755.354977][T11851] netlink: 'syz.5.1940': attribute type 1 has an invalid length.
[  755.428534][T11852] loop7: detected capacity change from 0 to 512
[  755.491520][T11855] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1942'.
[  755.501106][T11855] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1942'.
[  755.511130][T11855] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1942'.
[  755.524629][T11855] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1942'.
[  755.671145][T11852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  755.685038][T11852] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  756.509904][T11159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  756.537312][T11872] netlink: 'syz.5.1945': attribute type 10 has an invalid length.
[  756.577486][T11872] syz1: rxe_newlink: already configured on team_slave_0
[  757.045032][   T29] audit: type=1326 audit(1732184284.127:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.7.1947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f79d7e819 code=0x0
[  758.302165][ T5883] usb 6-1: new low-speed USB device number 20 using dummy_hcd
[  759.577043][T10892] wlan1: Trigger new scan to find an IBSS to join
[  760.405269][ T5883] usb 6-1: Invalid ep0 maxpacket: 64
[  761.129638][ T5883] usb 6-1: new low-speed USB device number 21 using dummy_hcd
[  761.404701][ T5883] usb 6-1: Invalid ep0 maxpacket: 64
[  761.457315][ T5883] usb usb6-port1: attempt power cycle
[  762.527739][T11906] loop9: detected capacity change from 0 to 1024
[  762.645225][ T5803] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3
[  762.992668][ T5883] usb 6-1: new low-speed USB device number 22 using dummy_hcd
[  763.254111][T10673] wlan1: Creating new IBSS network, BSSID 6a:9c:6c:92:50:41
[  763.499799][T11910] netlink: 'syz.8.1955': attribute type 1 has an invalid length.
[  764.465728][T11906] fscrypt: Error allocating hmac(sha512): -2
[  764.681024][T11112] Bluetooth: hci1: command tx timeout
[  765.282926][ T5883] usb 6-1: device descriptor read/8, error -71
[  765.849289][T11930] loop9: detected capacity change from 0 to 512
[  766.209484][T11930] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  766.222878][T11930] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  766.706795][T11943] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  766.739642][T11941] netlink: 'syz.6.1961': attribute type 10 has an invalid length.
[  766.750055][ T5803] Bluetooth: hci1: command 0x0406 tx timeout
[  766.944677][T11941] 8021q: adding VLAN 0 to HW filter on device team0
[  766.959691][T11941] bond0: (slave team0): Enslaving as an active interface with an up link
[  767.775349][T11181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.250467][   T29] audit: type=1326 audit(1732184295.257:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.7.1964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f79d7e819 code=0x0
[  768.911303][T11960] tmpfs: Bad value for 'mpol'
[  768.956576][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1966'.
[  768.979550][T11961] ip6gretap0: entered promiscuous mode
[  769.022537][T11961] ip6gretap0: left promiscuous mode
[  769.067262][ T5803] Bluetooth: hci2: command 0x0406 tx timeout
[  769.085443][T11967] siw: device registration error -23
[  770.090177][T11976] netlink: 'syz.9.1970': attribute type 1 has an invalid length.
[  771.226919][T11990] loop9: detected capacity change from 0 to 512
[  771.345845][T11990] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  771.359256][T11990] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  771.563741][T12004] netlink: 'syz.5.1976': attribute type 10 has an invalid length.
[  771.619523][T12007] syz1: rxe_newlink: already configured on team_slave_0
[  771.963404][T11181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.055105][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  772.061992][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  772.223970][   T29] audit: type=1326 audit(1732184299.297:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.6.1979" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0b1f7e819 code=0x0
[  772.912550][T12019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1982'.
[  772.968722][T12019] ip6gretap0: entered promiscuous mode
[  773.063062][T12019] ip6gretap0: left promiscuous mode
[  773.788670][T12027] netlink: 'syz.7.1985': attribute type 1 has an invalid length.
[  773.907659][ T5803] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  774.032811][ T5883] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  774.282928][ T5883] usb 7-1: Using ep0 maxpacket: 16
[  774.371595][ T5883] usb 7-1: New USB device found, idVendor=0fde, idProduct=ca05, bcdDevice=b5.f3
[  774.381760][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.390250][ T5883] usb 7-1: Product: syz
[  774.394891][ T5883] usb 7-1: Manufacturer: syz
[  774.399851][ T5883] usb 7-1: SerialNumber: syz
[  774.595288][ T5883] usb 7-1: config 0 descriptor??
[  774.636390][ T5883] cp210x 7-1:0.0: cp210x converter detected
[  774.868766][T12044] loop7: detected capacity change from 0 to 512
[  775.373780][ T5883] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71
[  775.382146][ T5883] cp210x 7-1:0.0: GPIO initialisation failed: -71
[  775.544086][T12044] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  775.557697][T12044] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  775.618297][ T5883] usb 7-1: cp210x converter now attached to ttyUSB0
[  776.934576][T12054] netlink: 'syz.8.1992': attribute type 10 has an invalid length.
[  777.013996][T12057] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  777.596884][ T5883] usb 7-1: USB disconnect, device number 4
[  777.609446][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  777.620227][ T5883] cp210x 7-1:0.0: device disconnected
[  777.996943][T11159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  778.306826][T12065] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1993'.
[  779.429261][T12078] loop5: detected capacity change from 0 to 1024
[  779.440633][T10975] IPVS: starting estimator thread 0...
[  779.544435][T12081] IPVS: using max 240 ests per chain, 12000 per kthread
[  779.612173][T10975] usb 10-1: new low-speed USB device number 4 using dummy_hcd
[  779.797982][T12084] netlink: 'syz.8.2000': attribute type 1 has an invalid length.
[  779.813661][T10975] usb 10-1: Invalid ep0 maxpacket: 64
[  779.961494][T12070] loop7: detected capacity change from 0 to 4096
[  779.983688][T10975] usb 10-1: new low-speed USB device number 5 using dummy_hcd
[  780.203969][T10975] usb 10-1: Invalid ep0 maxpacket: 64
[  780.242510][T10975] usb usb10-port1: attempt power cycle
[  780.532706][T12078] EXT4-fs: Ignoring removed orlov option
[  780.547179][T12078] EXT4-fs (loop5): Test dummy encryption mode enabled
[  780.561385][T12078] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  780.629963][T12078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  780.650114][T10975] usb 10-1: new low-speed USB device number 6 using dummy_hcd
[  780.820941][T10975] usb 10-1: Invalid ep0 maxpacket: 64
[  780.823478][ T8326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  781.009497][T10975] usb 10-1: new low-speed USB device number 7 using dummy_hcd
[  781.134544][T10975] usb 10-1: Invalid ep0 maxpacket: 64
[  781.173185][T10975] usb usb10-port1: unable to enumerate USB device
[  781.396631][T12106] loop5: detected capacity change from 0 to 64
[  781.512005][T12108] loop7: detected capacity change from 0 to 512
[  781.683795][T12108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  781.697134][T12108] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  782.281081][T12117] netlink: 'syz.5.2007': attribute type 10 has an invalid length.
[  782.319544][T12117] syz1: rxe_newlink: already configured on team_slave_0
[  782.443176][T11159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  782.706541][T12100] loop8: detected capacity change from 0 to 4096
[  783.613610][T12114] loop6: detected capacity change from 0 to 4096
[  783.687076][T12114] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  784.233001][T12130] loop5: detected capacity change from 0 to 256
[  784.342292][T11947] Bluetooth: hci6: command 0x0406 tx timeout
[  784.342435][T12130] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  784.528248][T12130] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  784.585764][T12133] netlink: 'syz.8.2012': attribute type 1 has an invalid length.
[  784.785709][   T29] audit: type=1804 audit(1732184311.857:46): pid=12130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2013" name="/newroot/233/file0/bus" dev="loop5" ino=1048623 res=1 errno=0
[  785.479729][T12143] input: syz1 as /devices/virtual/input/input16
[  786.382299][T10975] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  786.504544][T12156] loop8: detected capacity change from 0 to 512
[  786.605816][T10975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  786.617356][T10975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  786.627693][T10975] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  786.637367][T10975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.690423][T10975] usb 7-1: config 0 descriptor??
[  786.733425][T12156] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  786.746926][T12156] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  786.944832][T12142] loop5: detected capacity change from 0 to 4096
[  787.283732][T10975] usbhid 7-1:0.0: can't add hid device: -71
[  787.290378][T10975] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  787.353261][T10975] usb 7-1: USB disconnect, device number 5
[  787.665652][T10993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  788.382932][T12175] netlink: 'syz.8.2021': attribute type 10 has an invalid length.
[  788.432463][T12176] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  789.473373][   T29] audit: type=1326 audit(1732184316.547:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12189 comm="syz.8.2026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f535e17e819 code=0x0
[  790.093510][T12185] loop9: detected capacity change from 0 to 4096
[  790.139488][T12185] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  790.899391][T11235] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  790.933749][T12205] loop7: detected capacity change from 0 to 512
[  791.115247][T11235] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  791.125951][T11235] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  791.226446][T12205] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  791.239700][T12205] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  791.354731][T11235] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  791.368008][T11235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  791.377694][T11235] usb 7-1: SerialNumber: syz
[  791.737807][T11235] usb 7-1: 0:2 : does not exist
[  791.743241][T11235] usb 7-1: unit 255 not found!
[  791.984738][T11235] usb 7-1: USB disconnect, device number 6
[  792.148522][T11159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  792.250634][T12221] loop5: detected capacity change from 0 to 512
[  792.342559][T12221] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  792.356302][T12221] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  792.521491][T12221] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  792.619643][T12221] EXT4-fs (loop5): 1 truncate cleaned up
[  792.627421][T12221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  792.819172][T11549] udevd[11549]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  793.124986][T12218] loop9: detected capacity change from 0 to 4096
[  793.156382][T12232] netlink: 'syz.8.2040': attribute type 1 has an invalid length.
[  793.213870][T12226] loop7: detected capacity change from 0 to 2048
[  793.314418][ T3001] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  793.329872][T12226] EXT4-fs error (device loop7): __ext4_fill_super:5505: inode #2: comm syz.7.2038: casefold flag without casefold feature
[  793.366697][T12232] 8021q: adding VLAN 0 to HW filter on device bond4
[  793.419169][T12226] EXT4-fs (loop7): get root inode failed
[  793.425275][T12226] EXT4-fs (loop7): mount failed
[  793.475942][ T8326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  794.613385][T11947] Bluetooth: hci0: command 0x0406 tx timeout
[  795.932800][T10975] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  796.194466][T10975] usb 6-1: device descriptor read/64, error -71
[  796.485290][T10975] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  796.666938][T10975] usb 6-1: device descriptor read/64, error -71
[  796.794344][T10975] usb usb6-port1: attempt power cycle
[  797.190297][T10975] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  797.257258][T10975] usb 6-1: device descriptor read/8, error -71
[  797.522279][T10975] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  797.596108][T10975] usb 6-1: device descriptor read/8, error -71
[  797.723707][T10975] usb usb6-port1: unable to enumerate USB device
[  797.729951][T11235] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  797.968758][T11235] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  797.979510][T11235] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  798.081099][T11235] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  798.090866][T11235] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  798.099298][T11235] usb 9-1: SerialNumber: syz
[  798.154966][T12273] netlink: 'syz.9.2053': attribute type 1 has an invalid length.
[  798.291691][T12276] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  798.319543][T12273] 8021q: adding VLAN 0 to HW filter on device bond1
[  798.348833][T10673] net_ratelimit: 10 callbacks suppressed
[  798.348913][T10673] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  798.414966][T11235] usb 9-1: 0:2 : does not exist
[  798.420183][T11235] usb 9-1: unit 255 not found!
[  798.573068][T10673] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  798.615857][T11235] usb 9-1: USB disconnect, device number 5
[  799.066366][T12283] loop5: detected capacity change from 0 to 512
[  799.169287][T11549] udevd[11549]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  799.397577][T12283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  799.411122][T12283] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  799.704915][T11947] Bluetooth: hci1: command 0x0406 tx timeout
[  799.873122][T12283] loop5: detected capacity change from 512 to 0
[  799.882612][T12294] syz.5.2056: attempt to access beyond end of device
[  799.882612][T12294] loop5: rw=12288, sector=76, nr_sectors = 4 limit=0
[  799.896543][T12294] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  799.905137][T12294] EXT4-fs error (device loop5): ext4_write_dquot:6918: comm syz.5.2056: Failed to commit dquot type 1
[  799.916658][T12294] syz.5.2056: attempt to access beyond end of device
[  799.916658][T12294] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0
[  799.930662][T12294] Buffer I/O error on dev loop5, logical block 0, lost sync page write
[  799.939512][T12294] EXT4-fs (loop5): I/O error while writing superblock
[  799.946794][T12294] syz.5.2056: attempt to access beyond end of device
[  799.946794][T12294] loop5: rw=12288, sector=76, nr_sectors = 4 limit=0
[  799.960453][T12294] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  799.973542][T12294] EXT4-fs error (device loop5): ext4_write_dquot:6918: comm syz.5.2056: Failed to commit dquot type 1
[  799.986285][T12294] syz.5.2056: attempt to access beyond end of device
[  799.986285][T12294] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0
[  799.999994][T12294] Buffer I/O error on dev loop5, logical block 0, lost sync page write
[  800.008602][T12294] EXT4-fs (loop5): I/O error while writing superblock
[  800.076975][ T4515] kworker/u8:21: attempt to access beyond end of device
[  800.076975][ T4515] loop5: rw=12288, sector=64, nr_sectors = 4 limit=0
[  800.092089][ T4515] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  800.100826][ T4515] EXT4-fs error (device loop5): ext4_release_dquot:6961: comm kworker/u8:21: Failed to release dquot type 1
[  800.113326][ T4515] kworker/u8:21: attempt to access beyond end of device
[  800.113326][ T4515] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0
[  800.127361][ T4515] Buffer I/O error on dev loop5, logical block 0, lost sync page write
[  800.136098][ T4515] EXT4-fs (loop5): I/O error while writing superblock
[  800.288283][T12281] loop7: detected capacity change from 0 to 4096
[  800.960928][ T8326] syz-executor: attempt to access beyond end of device
[  800.960928][ T8326] loop5: rw=12288, sector=12, nr_sectors = 4 limit=0
[  801.269959][T12295] loop8: detected capacity change from 0 to 4096
[  801.324274][ T5081] kworker/u8:27: attempt to access beyond end of device
[  801.324274][ T5081] loop5: rw=524288, sector=140, nr_sectors = 4 limit=0
[  801.338517][ T5081] kworker/u8:27: attempt to access beyond end of device
[  801.338517][ T5081] loop5: rw=524288, sector=144, nr_sectors = 4 limit=0
[  801.352963][ T5081] kworker/u8:27: attempt to access beyond end of device
[  801.352963][ T5081] loop5: rw=12288, sector=136, nr_sectors = 4 limit=0
[  801.368299][ T5081] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4558: inode #4: block 34: comm kworker/u8:27: unable to read itable block
[  801.383475][ T5081] Buffer I/O error on dev loop5, logical block 0, lost sync page write
[  801.392918][ T5081] EXT4-fs (loop5): I/O error while writing superblock
[  801.616714][ T5081] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4558: inode #12: block 34: comm kworker/u8:27: unable to read itable block
[  801.631558][ T5081] Buffer I/O error on dev loop5, logical block 0, lost sync page write
[  801.640365][ T5081] EXT4-fs (loop5): I/O error while writing superblock
[  801.762808][ T8326] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  801.974738][ T8326] Buffer I/O error on dev loop5, logical block 0, lost sync page write
[  801.983620][ T8326] EXT4-fs (loop5): I/O error while writing superblock
[  802.093186][T12286] Buffer I/O error on dev loop5, logical block 12, lost sync page write
[  802.424571][   T44] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  802.605943][   T44] usb 10-1: device descriptor read/64, error -71
[  802.883208][   T44] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  803.070755][   T44] usb 10-1: device descriptor read/64, error -71
[  803.193786][   T44] usb usb10-port1: attempt power cycle
[  803.567182][   T44] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  803.620938][   T44] usb 10-1: device descriptor read/8, error -71
[  803.865685][   T44] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  803.895821][   T44] usb 10-1: device descriptor read/8, error -71
[  804.013154][   T44] usb usb10-port1: unable to enumerate USB device
[  804.960370][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  804.970595][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  804.989205][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  805.030003][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  805.055027][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  805.070224][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  806.820773][T12342] loop8: detected capacity change from 0 to 4096
[  807.142495][T11947] Bluetooth: hci3: command tx timeout
[  807.647295][T12353] loop9: detected capacity change from 0 to 4096
[  808.331629][T12337] chnl_net:caif_netlink_parms(): no params data found
[  808.793674][T10975] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  809.797839][T11947] Bluetooth: hci3: command tx timeout
[  810.020919][T12375] loop8: detected capacity change from 0 to 32768
[  810.031188][T10975] usb 7-1: device descriptor read/64, error -71
[  810.105114][T12375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2083 (12375)
[  810.128280][T12375] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  810.138864][T12375] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm
[  810.148408][T12375] BTRFS info (device loop8): using free-space-tree
[  810.302436][T10975] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  810.471262][T10993] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  810.493017][T10975] usb 7-1: device descriptor read/64, error -71
[  810.617337][T10975] usb usb7-port1: attempt power cycle
[  811.002205][T10975] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  811.117149][T10975] usb 7-1: device descriptor read/8, error -71
[  811.393139][T10975] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  811.791337][T12337] bridge0: port 1(bridge_slave_0) entered blocking state
[  811.799814][T12337] bridge0: port 1(bridge_slave_0) entered disabled state
[  811.808369][T12337] bridge_slave_0: entered allmulticast mode
[  811.818012][T12337] bridge_slave_0: entered promiscuous mode
[  811.852362][T10975] usb 7-1: device descriptor read/8, error -71
[  811.859438][T12408] loop7: detected capacity change from 0 to 512
[  811.970624][T10975] usb usb7-port1: unable to enumerate USB device
[  811.977914][T12408] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  812.014525][T12337] bridge0: port 2(bridge_slave_1) entered blocking state
[  812.022547][T12337] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.030411][T12337] bridge_slave_1: entered allmulticast mode
[  812.039925][T12337] bridge_slave_1: entered promiscuous mode
[  812.113492][T11947] Bluetooth: hci3: command tx timeout
[  812.154953][T12408] EXT4-fs (loop7): 1 truncate cleaned up
[  812.162881][T12408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  812.656417][T12337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  812.800113][T12337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  812.911597][T11159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  812.919283][T12423] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  813.363994][T12337] team0: Port device team_slave_0 added
[  813.460389][T12337] team0: Port device team_slave_1 added
[  814.072391][T12337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  814.079587][T12337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  814.110502][T12337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  814.212234][T11947] Bluetooth: hci3: command tx timeout
[  814.354823][T12337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  814.362374][T12337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  814.389039][T12337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  814.614016][T12418] loop6: detected capacity change from 0 to 4096
[  814.786769][T10975] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  814.954720][T12337] hsr_slave_0: entered promiscuous mode
[  814.983263][T10975] usb 9-1: Using ep0 maxpacket: 16
[  815.021637][T10975] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  815.032377][T10975] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  815.043748][T10975] usb 9-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  815.054633][T10975] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  815.093679][T12337] hsr_slave_1: entered promiscuous mode
[  815.135553][T12337] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  815.143550][T12337] Cannot create hsr debugfs directory
[  815.336237][T10975] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  815.345808][T10975] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  815.354098][T10975] usb 9-1: Manufacturer: syz
[  815.468023][T10975] usb 9-1: config 0 descriptor??
[  815.646366][T12418] ntfs3(loop6): Failed to read $UpCase (-4).
[  815.932430][T10975] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  816.182508][T10975] usb 10-1: device descriptor read/64, error -71
[  816.466343][T10975] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  816.744056][T10975] usb 10-1: device descriptor read/64, error -71
[  816.874642][T10975] usb usb10-port1: attempt power cycle
[  816.893147][T10880] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  817.120336][T10880] usb 7-1: Using ep0 maxpacket: 32
[  817.151989][T10880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  817.165032][T10880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  817.179720][T10880] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  817.194912][T10880] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  817.204857][T10880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.227110][T10880] usb 7-1: config 0 descriptor??
[  817.382329][T10975] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  817.455611][T10975] usb 10-1: device descriptor read/8, error -71
[  817.742331][T10975] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  817.786631][T12442] usb 9-1: USB disconnect, device number 6
[  817.854443][T10975] usb 10-1: device descriptor read/8, error -71
[  818.004189][T10975] usb usb10-port1: unable to enumerate USB device
[  818.069373][T12337] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  818.085005][T10880] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0017/input/input17
[  818.126611][T12337] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  819.049973][T12337] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  819.069179][T10880] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.0017/input/input18
[  819.105445][T10880] kye 0003:0458:5011.0017: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0
[  819.194053][T12441] raw-gadget.2 gadget.6: fail, usb_ep_queue returned -108
[  819.353948][T12442] usb 7-1: reset high-speed USB device number 11 using dummy_hcd
[  819.472531][T12337] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  820.296851][T10880] usb 7-1: USB disconnect, device number 11
[  820.490065][T12455] loop8: detected capacity change from 0 to 512
[  820.615342][T12455] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  820.692396][ T5862] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  820.844857][T12455] EXT4-fs (loop8): 1 truncate cleaned up
[  820.910592][T12455] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  821.021574][ T5862] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  821.031560][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.040226][ T5862] usb 10-1: Product: syz
[  821.045578][ T5862] usb 10-1: Manufacturer: syz
[  821.050521][ T5862] usb 10-1: SerialNumber: syz
[  821.375108][ T5862] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  821.691438][T10993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  821.771154][   T25] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  822.203308][T12442] usb 10-1: USB disconnect, device number 16
[  822.227932][T12337] 8021q: adding VLAN 0 to HW filter on device bond0
[  822.243170][    C1] dummy_hcd dummy_hcd.9: timer fired with no URBs pending?
[  822.371616][T12337] 8021q: adding VLAN 0 to HW filter on device team0
[  822.512593][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state
[  822.520434][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state
[  822.674283][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state
[  822.682231][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state
[  822.831181][   T25] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[  822.839619][   T25] ath9k_htc: Failed to initialize the device
[  822.998043][T12442] usb 10-1: ath9k_htc: USB layer deinitialized
[  823.394815][ T5862] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  823.602766][ T5862] usb 7-1: Using ep0 maxpacket: 16
[  823.658741][ T5862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  823.669520][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  823.680922][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  823.691980][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  823.940550][ T5862] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  823.950893][ T5862] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  823.959482][ T5862] usb 7-1: Manufacturer: syz
[  824.095279][ T5862] usb 7-1: config 0 descriptor??
[  824.384916][T12471] loop8: detected capacity change from 0 to 4096
[  824.872864][ T5862] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  825.056815][T11247] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  825.104140][ T5862] usb 10-1: device descriptor read/64, error -71
[  825.383469][ T5862] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  825.542352][ T5862] usb 10-1: device descriptor read/64, error -71
[  825.657989][ T5862] usb usb10-port1: attempt power cycle
[  825.680324][T12337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  826.082405][ T5862] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  826.157817][ T5862] usb 10-1: device descriptor read/8, error -71
[  826.188116][T12337] veth0_vlan: entered promiscuous mode
[  826.209214][   T25] kernel write not supported for file /input/event0 (pid: 25 comm: kworker/1:0)
[  826.268117][   T25] usb 7-1: USB disconnect, device number 12
[  826.394236][T12337] veth1_vlan: entered promiscuous mode
[  826.462231][ T5862] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  826.558269][ T5862] usb 10-1: device descriptor read/8, error -71
[  826.714283][ T5862] usb usb10-port1: unable to enumerate USB device
[  826.956049][T12337] veth0_macvtap: entered promiscuous mode
[  827.072607][T12337] veth1_macvtap: entered promiscuous mode
[  827.194550][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  827.211232][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.223161][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  827.235987][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.246684][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  827.257440][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.267613][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  827.278474][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.288648][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  827.299746][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.323227][T12337] batman_adv: batadv0: Interface activated: batadv_slave_0
[  827.487695][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  827.499311][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.513514][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  827.525727][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.536023][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  827.547681][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.558434][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  827.569366][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.579688][T12337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  827.590519][T12337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  827.605725][T12337] batman_adv: batadv0: Interface activated: batadv_slave_1
[  827.778428][T12500] loop6: detected capacity change from 0 to 512
[  827.957029][T12500] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  828.034210][T12337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  828.043697][T12337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  828.052911][T12337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  828.062151][T12337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  828.541034][T12500] EXT4-fs (loop6): 1 truncate cleaned up
[  828.548704][T12500] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  829.280592][T11111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  829.493301][T12442] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[  829.797613][T12442] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  829.808221][T12442] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.817019][T12442] usb 10-1: Product: syz
[  829.821529][T12442] usb 10-1: Manufacturer: syz
[  829.826743][T12442] usb 10-1: SerialNumber: syz
[  830.014766][T12442] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  830.142751][ T5862] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  830.153871][ T5883] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  830.436241][ T5862] usb 7-1: Using ep0 maxpacket: 16
[  830.498673][ T5862] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  830.498882][T12442] usb 10-1: USB disconnect, device number 21
[  830.509492][ T5862] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  830.509681][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  830.509829][ T5862] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  830.630226][ T5862] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  830.639966][ T5862] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  830.648468][ T5862] usb 7-1: Manufacturer: syz
[  830.758744][T12522] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  830.779062][T12522] batadv_slave_0: entered promiscuous mode
[  830.818596][ T5862] usb 7-1: config 0 descriptor??
[  831.213476][T12515] loop7: detected capacity change from 0 to 4096
[  831.262879][ T5883] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[  831.270650][ T5883] ath9k_htc: Failed to initialize the device
[  831.383060][T12442] usb 10-1: ath9k_htc: USB layer deinitialized
[  834.136221][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  834.143055][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  835.800791][ T5883] usb 7-1: USB disconnect, device number 13
[  837.362179][ T5862] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  837.600309][ T5862] usb 7-1: no configurations
[  837.606327][ T5862] usb 7-1: can't read configurations, error -22
[  837.799360][   T29] audit: type=1326 audit(1732184364.877:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f79d7e819 code=0x7ffc0000
[  837.822527][   T29] audit: type=1326 audit(1732184364.877:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f79d7e819 code=0x7ffc0000
[  837.845442][   T29] audit: type=1326 audit(1732184364.887:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f79d7e819 code=0x7ffc0000
[  837.892139][ T5862] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  837.955555][   T29] audit: type=1326 audit(1732184365.007:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f79d7e819 code=0x7ffc0000
[  837.980110][   T29] audit: type=1326 audit(1732184365.007:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f79d7e819 code=0x7ffc0000
[  838.003818][   T29] audit: type=1326 audit(1732184365.027:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f79d7e819 code=0x7ffc0000
[  838.026900][   T29] audit: type=1326 audit(1732184365.027:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f79d7e819 code=0x7ffc0000
[  838.049836][   T29] audit: type=1326 audit(1732184365.027:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f79d7e819 code=0x7ffc0000
[  838.076865][   T29] audit: type=1326 audit(1732184365.047:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f5f79d7e819 code=0x7ffc0000
[  838.101107][   T29] audit: type=1326 audit(1732184365.047:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12557 comm="syz.7.2134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f79d7e819 code=0x7ffc0000
[  838.170587][T12565] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  838.254484][ T5862] usb 7-1: no configurations
[  838.264096][ T5862] usb 7-1: can't read configurations, error -22
[  838.293944][ T5862] usb usb7-port1: attempt power cycle
[  838.663434][ T5862] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  838.731608][ T5862] usb 7-1: no configurations
[  838.736836][ T5862] usb 7-1: can't read configurations, error -22
[  838.932341][ T5862] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  839.022931][ T5862] usb 7-1: no configurations
[  839.027799][ T5862] usb 7-1: can't read configurations, error -22
[  839.083776][ T5862] usb usb7-port1: unable to enumerate USB device
[  841.046952][ T5883] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  841.092192][T10688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.100290][T10688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.236899][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  841.245602][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  841.262717][ T5883] usb 9-1: Using ep0 maxpacket: 16
[  841.282819][ T5883] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  841.293444][ T5883] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  841.304809][ T5883] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  841.314825][ T5883] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  841.324996][ T5883] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  841.545421][ T5883] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  841.555126][ T5883] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  841.563627][ T5883] usb 9-1: Manufacturer: syz
[  841.652385][ T5883] usb 9-1: config 0 descriptor??
[  841.943346][T12585] loop6: detected capacity change from 0 to 4096
[  842.482900][T12442] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  842.750107][T12442] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  842.762035][T12442] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  842.875389][T12442] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  842.876487][ T5862] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[  842.885048][T12442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  842.885191][T12442] usb 1-1: SerialNumber: syz
[  843.171488][T12442] usb 1-1: 0:2 : does not exist
[  843.181780][T12442] usb 1-1: unit 255 not found!
[  843.262188][ T5862] usb 10-1: Using ep0 maxpacket: 16
[  843.340850][ T5862] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  843.345553][T12442] usb 1-1: USB disconnect, device number 4
[  843.351590][ T5862] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  843.366999][ T5862] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  843.376552][ T5862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.678636][ T5862] usb 10-1: config 0 descriptor??
[  844.146419][T11251] udevd[11251]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  844.692428][ T5883] rc_core: IR keymap rc-hauppauge not found
[  844.698597][ T5883] Registered IR keymap rc-empty
[  844.704466][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  844.803166][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  844.829088][T12620] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  844.854196][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  844.869680][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input19
[  845.095956][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  845.137658][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  845.194539][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  845.226674][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  845.276778][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  845.316510][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  845.383586][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  845.447087][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  845.492762][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  845.534266][ T5883] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  845.568856][ T5883] mceusb 9-1:0.0: Registered  with mce emulator interface version 1
[  845.577326][ T5883] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  845.738854][ T5883] usb 9-1: USB disconnect, device number 7
[  845.910455][ T5862] usb 10-1: USB disconnect, device number 22
[  846.204394][T12632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  846.262703][T12632] batadv_slave_0: entered promiscuous mode
[  846.432469][ T5883] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  846.707640][ T5883] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  846.717296][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.726658][ T5883] usb 1-1: Product: syz
[  846.731066][ T5883] usb 1-1: Manufacturer: syz
[  846.736153][ T5883] usb 1-1: SerialNumber: syz
[  846.932520][ T5883] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  847.042398][T12442] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  847.343224][ T5862] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  847.597723][ T5862] usb 9-1: Using ep0 maxpacket: 16
[  847.774727][ T5862] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  847.791665][ T5862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  847.805243][ T5862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  847.815320][ T5862] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  847.825489][ T5862] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  848.462779][ T5862] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  848.472563][ T5862] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  848.480838][ T5862] usb 9-1: Manufacturer: syz
[  848.785460][ T5862] usb 9-1: config 0 descriptor??
[  849.802616][T10880] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[  850.191660][T10880] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  850.203099][T10880] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  850.654411][T12442] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  850.681457][T12442] ath9k_htc: Failed to initialize the device
[  850.702939][ T5883] usb 1-1: USB disconnect, device number 5
[  850.736553][T10880] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  850.749188][T10880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  850.763580][T10880] usb 10-1: SerialNumber: syz
[  850.852040][ T5883] usb 1-1: ath9k_htc: USB layer deinitialized
[  851.294035][T10880] usb 10-1: 0:2 : does not exist
[  851.299364][T10880] usb 10-1: unit 255 not found!
[  851.580987][T10880] usb 10-1: USB disconnect, device number 23
[  851.835136][ T5862] rc_core: IR keymap rc-hauppauge not found
[  851.841427][ T5862] Registered IR keymap rc-empty
[  851.847518][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  851.931970][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  852.009974][ T5862] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  852.030473][ T5862] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input20
[  852.213116][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  852.272397][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  852.333973][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  852.362760][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  852.413298][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  852.452561][T10880] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  852.463104][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  852.491567][T12668] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  852.532497][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  852.565020][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  852.585624][T12668] batadv_slave_0: entered promiscuous mode
[  852.627937][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  852.649041][T10880] usb 1-1: Using ep0 maxpacket: 16
[  852.676604][ T5862] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  852.696914][T10880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  852.716791][T10880] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  852.726418][T10880] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  852.735890][T10880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.766307][ T5862] mceusb 9-1:0.0: Registered  with mce emulator interface version 1
[  852.774838][ T5862] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  852.887258][T11251] udevd[11251]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  852.912925][ T5862] usb 9-1: USB disconnect, device number 8
[  852.944817][T10880] usb 1-1: config 0 descriptor??
[  853.466387][ T5862] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  853.702641][ T5862] usb 9-1: Using ep0 maxpacket: 16
[  853.766509][ T5862] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  853.777425][ T5862] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  853.898736][ T5862] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  853.908479][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.917111][ T5862] usb 9-1: Product: syz
[  853.921521][ T5862] usb 9-1: Manufacturer: syz
[  853.932863][ T5862] usb 9-1: SerialNumber: syz
[  854.908614][ T5862] usb 9-1: 0:2 : does not exist
[  855.084429][ T5862] usb 9-1: USB disconnect, device number 9
[  855.343163][T12442] usb 1-1: USB disconnect, device number 6
[  856.112181][ T3527] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  856.425818][T11549] udevd[11549]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  857.097205][T12694] loop9: detected capacity change from 0 to 4096
[  859.402538][T12442] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  859.610628][T12442] usb 9-1: Using ep0 maxpacket: 16
[  859.638575][T12442] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  859.649786][T12442] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  859.659351][T12442] usb 9-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  859.671772][T12442] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.830259][T12442] usb 9-1: config 0 descriptor??
[  859.883639][ T5862] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  860.078141][ T5862] usb 1-1: Using ep0 maxpacket: 16
[  860.120483][ T5862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  860.131488][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  860.294257][ T5862] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  860.303831][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.312304][ T5862] usb 1-1: Product: syz
[  860.316719][ T5862] usb 1-1: Manufacturer: syz
[  860.321559][ T5862] usb 1-1: SerialNumber: syz
[  861.051973][    C1] hrtimer: interrupt took 160644 ns
[  861.123663][T10880] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  861.246403][ T5862] usb 1-1: 0:2 : does not exist
[  861.366531][T10880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  861.377475][T10880] usb 7-1: config 0 has no interfaces?
[  861.389906][ T5862] usb 1-1: USB disconnect, device number 7
[  861.427034][T10880] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  861.437488][T10880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.446848][T10880] usb 7-1: Product: syz
[  861.451254][T10880] usb 7-1: Manufacturer: syz
[  861.456306][T10880] usb 7-1: SerialNumber: syz
[  861.615111][T10880] usb 7-1: config 0 descriptor??
[  861.733890][T11549] udevd[11549]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  861.885981][T12741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  861.896242][T12741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  862.069877][T10880] usb 7-1: USB disconnect, device number 18
[  862.415746][T10880] usb 9-1: USB disconnect, device number 10
[  864.495283][T12758] loop8: detected capacity change from 0 to 4096
[  867.630492][T12803] loop8: detected capacity change from 0 to 4096
[  871.456326][T12830] loop9: detected capacity change from 0 to 4096
[  872.629370][T12849] loop8: detected capacity change from 0 to 2048
[  872.802411][T12849] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  873.457222][T12861] loop6: detected capacity change from 0 to 64
[  873.638309][T10993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  873.781011][T10880] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[  873.983336][T10880] usb 10-1: Using ep0 maxpacket: 16
[  874.037334][T10880] usb 10-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  874.048623][T10880] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  874.194909][T10880] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  874.210824][T10880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.221385][T10880] usb 10-1: Product: syz
[  874.226043][T10880] usb 10-1: Manufacturer: syz
[  874.230971][T10880] usb 10-1: SerialNumber: syz
[  874.455609][T12870] loop6: detected capacity change from 0 to 512
[  874.670427][T12870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  874.684275][T12870] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  875.523753][T11111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  875.679793][T10880] usb 10-1: 0:2 : does not exist
[  875.813254][T10880] usb 10-1: USB disconnect, device number 24
[  876.274093][T11549] udevd[11549]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  876.942310][T12886] 9pnet_fd: Insufficient options for proto=fd
[  878.612328][T12904] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  878.785544][T12890] loop7: detected capacity change from 0 to 4096
[  880.325020][T12913] netlink: 'syz.6.2238': attribute type 3 has an invalid length.
[  880.333184][T12913] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.2238'.
[  880.942363][T12442] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  881.173160][T12442] usb 9-1: Using ep0 maxpacket: 16
[  881.235380][T12442] usb 9-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  881.247277][T12442] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  881.487174][T12442] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  881.496844][T12442] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.505703][T12442] usb 9-1: Product: syz
[  881.510112][T12442] usb 9-1: Manufacturer: syz
[  881.515045][T12442] usb 9-1: SerialNumber: syz
[  884.514082][T12442] usb 9-1: 0:2 : does not exist
[  884.582287][T12936] binder: 12934:12936 ioctl c0306201 0 returned -14
[  884.692018][T12442] usb 9-1: USB disconnect, device number 11
[  885.110909][T11549] udevd[11549]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  885.747076][T12949] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  886.196502][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  886.208611][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  886.224469][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  886.257052][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  886.316422][ T5803] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  886.332894][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  887.330178][T10892] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  887.995722][T12953] loop8: detected capacity change from 0 to 4096
[  888.422974][ T5803] Bluetooth: hci4: command tx timeout
[  888.823181][T12955] chnl_net:caif_netlink_parms(): no params data found
[  890.337316][T12982] loop9: detected capacity change from 0 to 2048
[  890.503543][ T5803] Bluetooth: hci4: command tx timeout
[  890.743405][T12982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  891.101240][T12982] EXT4-fs (loop9): shut down requested (0)
[  891.588121][T12955] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.595854][T12955] bridge0: port 1(bridge_slave_0) entered disabled state
[  891.603891][T12955] bridge_slave_0: entered allmulticast mode
[  891.618341][T12955] bridge_slave_0: entered promiscuous mode
[  891.774610][T11181] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  891.784447][T12955] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.792643][T12955] bridge0: port 2(bridge_slave_1) entered disabled state
[  891.800646][T12955] bridge_slave_1: entered allmulticast mode
[  891.810060][T12955] bridge_slave_1: entered promiscuous mode
[  892.197657][T12955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  892.314595][T12955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  892.405650][T13000] loop8: detected capacity change from 0 to 2048
[  892.569817][T13003] rdma_rxe: rxe_newlink: failed to add team_slave_0
[  892.588151][ T5803] Bluetooth: hci4: command tx timeout
[  892.714862][T13000] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  892.836653][T12955] team0: Port device team_slave_0 added
[  892.897647][T13000] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  892.983365][T12955] team0: Port device team_slave_1 added
[  893.098038][T13000] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28
[  893.110918][T13000] EXT4-fs (loop8): This should not happen!! Data will be lost
[  893.110918][T13000] 
[  893.121118][T13000] EXT4-fs (loop8): Total free blocks count 0
[  893.127584][T13000] EXT4-fs (loop8): Free/Dirty block details
[  893.134057][T13000] EXT4-fs (loop8): free_blocks=2415919104
[  893.140032][T13000] EXT4-fs (loop8): dirty_blocks=16
[  893.152992][T13000] EXT4-fs (loop8): Block reservation details
[  893.159229][T13000] EXT4-fs (loop8): i_reserved_data_blocks=1
[  893.280004][T12955] batman_adv: batadv0: Adding interface: batadv_slave_0
[  893.287481][T12955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  893.314034][T12955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  893.510851][T10993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  893.538516][T12955] batman_adv: batadv0: Adding interface: batadv_slave_1
[  893.546936][T12955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  893.581353][T12955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  894.120192][T13016] loop6: detected capacity change from 0 to 512
[  894.168501][T12955] hsr_slave_0: entered promiscuous mode
[  894.249767][T13016] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  894.257518][T13016] UDF-fs: Scanning with blocksize 512 failed
[  894.298848][T12955] hsr_slave_1: entered promiscuous mode
[  894.398226][T12955] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  894.406450][T12955] Cannot create hsr debugfs directory
[  894.476010][T13016] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  894.493317][T13016] UDF-fs: Scanning with blocksize 1024 failed
[  894.669581][ T5803] Bluetooth: hci4: command tx timeout
[  894.698915][T13016] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  894.706800][T13016] UDF-fs: Scanning with blocksize 2048 failed
[  894.862819][T13016] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  894.925123][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  894.931972][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  895.130684][T13016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  895.233329][T11247] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.467054][T11247] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.751110][T11247] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  895.978102][T11247] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.763254][T13022] loop9: detected capacity change from 0 to 4096
[  897.007997][T11247] bridge_slave_1: left allmulticast mode
[  897.014456][T11247] bridge_slave_1: left promiscuous mode
[  897.020748][T11247] bridge0: port 2(bridge_slave_1) entered disabled state
[  897.190072][T11247] bridge_slave_0: left allmulticast mode
[  897.196286][T11247] bridge_slave_0: left promiscuous mode
[  897.203275][T11247] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.052224][T13035] loop8: detected capacity change from 0 to 2048
[  898.089705][T11247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  898.152853][T13035] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  898.219020][T11247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  898.310815][T11247] bond0 (unregistering): Released all slaves
[  899.194887][T10880] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  899.423894][T10880] usb 10-1: Using ep0 maxpacket: 32
[  899.469308][T10880] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  899.544038][T13049] loop8: detected capacity change from 0 to 1024
[  899.564748][T10880] usb 10-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  899.574990][T10880] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.584301][T10880] usb 10-1: Product: syz
[  899.588818][T10880] usb 10-1: Manufacturer: syz
[  899.594556][T10880] usb 10-1: SerialNumber: syz
[  899.643441][T13049] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  899.655137][T13049] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  899.665417][T13049] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  899.789906][T13049] EXT4-fs (loop8): invalid journal inode
[  899.796958][T13049] EXT4-fs (loop8): can't get journal size
[  899.810672][T10880] usb 10-1: config 0 descriptor??
[  899.897028][T10880] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  899.920424][T13049] EXT4-fs error (device loop8): ext4_protect_reserved_inode:182: inode #3: comm syz.8.2273: blocks 2-2 from inode overlap system zone
[  899.985182][T13049] EXT4-fs (loop8): failed to initialize system zone (-117)
[  899.993572][T13049] EXT4-fs (loop8): mount failed
[  901.045041][T11247] hsr_slave_0: left promiscuous mode
[  901.113736][T11247] hsr_slave_1: left promiscuous mode
[  901.179088][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  901.188713][T11247] batman_adv: batadv0: Removing interface: batadv_slave_0
[  901.270816][T11247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  901.278953][T11247] batman_adv: batadv0: Removing interface: batadv_slave_1
[  901.459116][T11247] veth1_macvtap: left promiscuous mode
[  901.465342][T11247] veth0_macvtap: left promiscuous mode
[  901.471367][T11247] veth1_vlan: left promiscuous mode
[  901.477159][T11247] veth0_vlan: left promiscuous mode
[  901.877919][T10975] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  902.182409][T10975] usb 9-1: Using ep0 maxpacket: 16
[  902.214160][T10975] usb 9-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  902.225222][T10975] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  902.227688][T10880] gspca_sunplus: reg_r err -71
[  902.240065][T10880] sunplus 10-1:0.0: probe with driver sunplus failed with error -71
[  902.294917][T10975] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  902.304750][T10975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.313517][T10975] usb 9-1: Product: syz
[  902.317975][T10975] usb 9-1: Manufacturer: syz
[  902.323217][T10975] usb 9-1: SerialNumber: syz
[  902.360179][T10880] usb 10-1: USB disconnect, device number 25
[  903.066888][T11247] team0 (unregistering): Port device team_slave_1 removed
[  903.206180][T11247] team0 (unregistering): Port device team_slave_0 removed
[  903.666904][T10975] usb 9-1: 0:2 : does not exist
[  903.874659][T10975] usb 9-1: USB disconnect, device number 12
[  904.062189][T10880] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  904.648617][T13073] loop7: detected capacity change from 0 to 512
[  904.784119][T13073] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  904.791781][T13073] UDF-fs: Scanning with blocksize 512 failed
[  904.846862][T13073] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  904.855514][T13073] UDF-fs: Scanning with blocksize 1024 failed
[  905.103595][T13073] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  905.111365][T13073] UDF-fs: Scanning with blocksize 2048 failed
[  905.205844][T13073] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  905.275857][T13073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  905.516529][T11549] udevd[11549]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  906.248967][T12955] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  906.583339][T12955] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  906.800965][T12955] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  907.049584][T12955] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  907.508915][T10880] usb 10-1: device descriptor read/all, error -71
[  913.094803][T12955] 8021q: adding VLAN 0 to HW filter on device bond0
[  913.401132][T12955] 8021q: adding VLAN 0 to HW filter on device team0
[  913.578324][T10673] bridge0: port 1(bridge_slave_0) entered blocking state
[  913.586111][T10673] bridge0: port 1(bridge_slave_0) entered forwarding state
[  913.724033][T10673] bridge0: port 2(bridge_slave_1) entered blocking state
[  913.731743][T10673] bridge0: port 2(bridge_slave_1) entered forwarding state
[  914.080314][T11947] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  914.091034][T11947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  914.115128][T11947] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  914.177225][T11947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  914.192805][T11947] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  914.213999][T11947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  915.172430][T10975] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  915.429286][T10975] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  915.553223][T10975] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  915.563458][T10975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.574768][T10975] usb 9-1: Product: syz
[  915.579131][T10975] usb 9-1: Manufacturer: syz
[  915.584810][T10975] usb 9-1: SerialNumber: syz
[  915.793351][T10975] usb 9-1: config 0 descriptor??
[  916.134315][T13120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  916.144252][T13120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  916.342993][T11947] Bluetooth: hci3: command tx timeout
[  916.357916][T12442] usb 9-1: USB disconnect, device number 13
[  916.631595][T13110] chnl_net:caif_netlink_parms(): no params data found
[  917.187056][T12955] 8021q: adding VLAN 0 to HW filter on device batadv0
[  918.055668][T12955] veth0_vlan: entered promiscuous mode
[  918.273695][T12955] veth1_vlan: entered promiscuous mode
[  918.428485][T11947] Bluetooth: hci3: command tx timeout
[  918.429246][T13144] loop9: detected capacity change from 0 to 2048
[  918.497692][T10673] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  918.591264][T13144] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  918.602140][T13144] NILFS (loop9): mounting unchecked fs
[  918.699561][T13144] NILFS (loop9): invalid segment: Checksum error in segment payload
[  918.708088][T13144] NILFS (loop9): unable to fall back to spare super block
[  918.715527][T13144] NILFS (loop9): error -22 while searching super root
[  919.000620][T13110] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.008533][T13110] bridge0: port 1(bridge_slave_0) entered disabled state
[  919.016714][T13110] bridge_slave_0: entered allmulticast mode
[  919.026044][T13110] bridge_slave_0: entered promiscuous mode
[  919.184228][T12955] veth0_macvtap: entered promiscuous mode
[  919.238579][T13110] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.246494][T13110] bridge0: port 2(bridge_slave_1) entered disabled state
[  919.255521][T13110] bridge_slave_1: entered allmulticast mode
[  919.267404][T13110] bridge_slave_1: entered promiscuous mode
[  919.326032][T12955] veth1_macvtap: entered promiscuous mode
[  919.852444][T12955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  919.865346][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  919.879863][T12955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  919.891367][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  919.905298][T12955] batman_adv: batadv0: Interface activated: batadv_slave_0
[  919.933711][T13110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  920.158594][T13110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  920.554317][T11947] Bluetooth: hci3: command tx timeout
[  920.585730][T12955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  920.600595][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.612098][T12955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  920.623057][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.633367][T12955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  920.644301][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.654943][T12955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  920.665722][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.675779][T12955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  920.686596][T12955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  920.706486][T12955] batman_adv: batadv0: Interface activated: batadv_slave_1
[  922.380707][T13110] team0: Port device team_slave_0 added
[  922.427586][T12955] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  922.442892][T12955] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  922.452678][T12955] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  922.462182][T12955] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  922.501511][T13110] team0: Port device team_slave_1 added
[  922.599731][T11947] Bluetooth: hci3: command tx timeout
[  922.832556][T13110] batman_adv: batadv0: Adding interface: batadv_slave_0
[  922.841217][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  922.874136][T13110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  923.086968][T13110] batman_adv: batadv0: Adding interface: batadv_slave_1
[  923.094691][T13110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  923.121317][T13110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  923.123323][ T5883] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  923.383705][ T5883] usb 10-1: Using ep0 maxpacket: 8
[  923.425669][ T5883] usb 10-1: New USB device found, idVendor=0458, idProduct=701f, bcdDevice=aa.fc
[  923.436619][ T5883] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  923.564212][ T5883] usb 10-1: config 0 descriptor??
[  923.640407][ T5883] dvb-usb: found a 'VideoWalker DVB-T USB' in warm state.
[  923.648385][ T5883] dvb-usb: bulk message failed: -22 (3/0)
[  923.734486][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  923.838274][ T5883] dvbdev: DVB: registering new adapter (VideoWalker DVB-T USB)
[  923.846391][ T5883] usb 10-1: media controller created
[  923.875832][T13110] hsr_slave_0: entered promiscuous mode
[  923.916470][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  923.929597][T13110] hsr_slave_1: entered promiscuous mode
[  923.963102][T13110] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  923.975207][T13110] Cannot create hsr debugfs directory
[  924.019566][T13173] loop8: detected capacity change from 0 to 2048
[  924.146567][ T5883] dvb-usb: bulk message failed: -22 (6/0)
[  924.154164][ T5883] =====================================================
[  924.161309][ T5883] BUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0
[  924.169954][ T5883]  dib3000mb_attach+0x2d8/0x3c0
[  924.178954][ T5883]  dibusb_dib3000mb_frontend_attach+0x155/0x2f0
[  924.186280][ T5883]  dvb_usb_adapter_frontend_init+0xed/0x9a0
[  924.192451][ T5883]  dvb_usb_device_init+0x25a8/0x3760
[  924.197930][ T5883]  dibusb_probe+0x46/0x250
[  924.202636][ T5883]  usb_probe_interface+0xd6f/0x1350
[  924.207934][ T5883]  really_probe+0x4db/0xd90
[  924.212886][ T5883]  __driver_probe_device+0x2ab/0x5d0
[  924.218278][ T5883]  driver_probe_device+0x72/0x890
[  924.223536][ T5883]  __device_attach_driver+0x568/0x9e0
[  924.229012][ T5883]  bus_for_each_drv+0x403/0x620
[  924.234076][ T5883]  __device_attach+0x3c1/0x650
[  924.238939][ T5883]  device_initial_probe+0x32/0x40
[  924.244268][ T5883]  bus_probe_device+0x3dc/0x5c0
[  924.249337][ T5883]  device_add+0x13aa/0x1ba0
[  924.254218][ T5883]  usb_set_configuration+0x31c9/0x38d0
[  924.259854][ T5883]  usb_generic_driver_probe+0x109/0x2a0
[  924.267703][ T5883]  usb_probe_device+0x3a7/0x690
[  924.272861][ T5883]  really_probe+0x4db/0xd90
[  924.281218][ T5883]  __driver_probe_device+0x2ab/0x5d0
[  924.287767][ T5883]  driver_probe_device+0x72/0x890
[  924.293009][ T5883]  __device_attach_driver+0x568/0x9e0
[  924.298504][ T5883]  bus_for_each_drv+0x403/0x620
[  924.303578][ T5883]  __device_attach+0x3c1/0x650
[  924.308437][ T5883]  device_initial_probe+0x32/0x40
[  924.313695][ T5883]  bus_probe_device+0x3dc/0x5c0
[  924.318691][ T5883]  device_add+0x13aa/0x1ba0
[  924.323422][ T5883]  usb_new_device+0x15f4/0x2470
[  924.328389][ T5883]  hub_event+0x4ffb/0x72d0
[  924.333055][ T5883]  process_scheduled_works+0xae0/0x1c40
[  924.338824][ T5883]  worker_thread+0xea7/0x14f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  924.344713][ T5883]  kthread+0x3e2/0x540
[  924.348943][ T5883]  ret_from_fork+0x6d/0x90
[  924.354253][ T5883]  ret_from_fork_asm+0x1a/0x30
[  924.359241][ T5883] 
[  924.361665][ T5883] Local variable rb created at:
[  924.366726][ T5883]  dib3000_read_reg+0x86/0x4e0
[  924.371624][ T5883]  dib3000mb_attach+0x123/0x3c0
[  924.376882][ T5883] 
[  924.383963][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: kworker/0:5 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0
[  924.395419][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  924.405714][ T5883] Workqueue: usb_hub_wq hub_event
[  924.410844][ T5883] =====================================================
[  924.417926][ T5883] Disabling lock debugging due to kernel taint
[  924.426890][ T5883] Kernel panic - not syncing: kmsan.panic set ...
[  924.433567][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: kworker/0:5 Tainted: G    B              6.12.0-syzkaller-03657-g43fb83c17ba2 #0
[  924.445689][ T5883] Tainted: [B]=BAD_PAGE
[  924.449962][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  924.460191][ T5883] Workqueue: usb_hub_wq hub_event
[  924.465408][ T5883] Call Trace:
[  924.468754][ T5883]  <TASK>
[  924.471747][ T5883]  dump_stack_lvl+0x216/0x2d0
[  924.476560][ T5883]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  924.482517][ T5883]  dump_stack+0x1e/0x30
[  924.486908][ T5883]  panic+0x4e2/0xcf0
[  924.490945][ T5883]  ? kmsan_get_metadata+0xc1/0x1c0
[  924.496196][ T5883]  kmsan_report+0x2c7/0x2d0
[  924.500815][ T5883]  ? dibusb_i2c_xfer+0xe29/0xf30
[  924.505875][ T5883]  ? kmsan_report+0x260/0x2d0
[  924.510683][ T5883]  ? __msan_warning+0x95/0x120
[  924.515550][ T5883]  ? dib3000mb_attach+0x2d8/0x3c0
[  924.520697][ T5883]  ? dibusb_dib3000mb_frontend_attach+0x155/0x2f0
[  924.527265][ T5883]  ? dvb_usb_adapter_frontend_init+0xed/0x9a0
[  924.533565][ T5883]  ? dvb_usb_device_init+0x25a8/0x3760
[  924.539163][ T5883]  ? dibusb_probe+0x46/0x250
[  924.543870][ T5883]  ? usb_probe_interface+0xd6f/0x1350
[  924.549347][ T5883]  ? really_probe+0x4db/0xd90
[  924.554142][ T5883]  ? __driver_probe_device+0x2ab/0x5d0
[  924.559737][ T5883]  ? driver_probe_device+0x72/0x890
[  924.565042][ T5883]  ? __device_attach_driver+0x568/0x9e0
[  924.570706][ T5883]  ? bus_for_each_drv+0x403/0x620
[  924.575862][ T5883]  ? __device_attach+0x3c1/0x650
[  924.580899][ T5883]  ? device_initial_probe+0x32/0x40
[  924.586208][ T5883]  ? bus_probe_device+0x3dc/0x5c0
[  924.591368][ T5883]  ? device_add+0x13aa/0x1ba0
[  924.596411][ T5883]  ? usb_set_configuration+0x31c9/0x38d0
[  924.602144][ T5883]  ? usb_generic_driver_probe+0x109/0x2a0
[  924.608170][ T5883]  ? usb_probe_device+0x3a7/0x690
[  924.613290][ T5883]  ? really_probe+0x4db/0xd90
[  924.618071][ T5883]  ? __driver_probe_device+0x2ab/0x5d0
[  924.623639][ T5883]  ? driver_probe_device+0x72/0x890
[  924.628944][ T5883]  ? __device_attach_driver+0x568/0x9e0
[  924.634619][ T5883]  ? bus_for_each_drv+0x403/0x620
[  924.639867][ T5883]  ? __device_attach+0x3c1/0x650
[  924.644940][ T5883]  ? device_initial_probe+0x32/0x40
[  924.650257][ T5883]  ? bus_probe_device+0x3dc/0x5c0
[  924.655412][ T5883]  ? device_add+0x13aa/0x1ba0
[  924.660205][ T5883]  ? usb_new_device+0x15f4/0x2470
[  924.665367][ T5883]  ? hub_event+0x4ffb/0x72d0
[  924.670040][ T5883]  ? process_scheduled_works+0xae0/0x1c40
[  924.675900][ T5883]  ? worker_thread+0xea7/0x14f0
[  924.680876][ T5883]  ? kthread+0x3e2/0x540
[  924.685238][ T5883]  ? ret_from_fork+0x6d/0x90
[  924.689991][ T5883]  ? ret_from_fork_asm+0x1a/0x30
[  924.695067][ T5883]  ? rt_mutex_unlock+0x2a/0x50
[  924.699941][ T5883]  ? kmsan_get_metadata+0x13e/0x1c0
[  924.705267][ T5883]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  924.711209][ T5883]  ? dib3000_read_reg+0x32b/0x4e0
[  924.716389][ T5883]  ? kmsan_get_metadata+0x13e/0x1c0
[  924.721725][ T5883]  __msan_warning+0x95/0x120
[  924.726477][ T5883]  dib3000mb_attach+0x2d8/0x3c0
[  924.731462][ T5883]  ? __pfx_dib3000mb_attach+0x10/0x10
[  924.737141][ T5883]  dibusb_dib3000mb_frontend_attach+0x155/0x2f0
[  924.743555][ T5883]  ? __pfx_dibusb_dib3000mb_frontend_attach+0x10/0x10
[  924.750452][ T5883]  dvb_usb_adapter_frontend_init+0xed/0x9a0
[  924.756492][ T5883]  dvb_usb_device_init+0x25a8/0x3760
[  924.761946][ T5883]  ? __pfx_dibusb_probe+0x10/0x10
[  924.767093][ T5883]  dibusb_probe+0x46/0x250
[  924.771647][ T5883]  ? __pfx_dibusb_probe+0x10/0x10
[  924.776810][ T5883]  usb_probe_interface+0xd6f/0x1350
[  924.782165][ T5883]  ? __pfx_usb_probe_interface+0x10/0x10
[  924.787988][ T5883]  really_probe+0x4db/0xd90
[  924.792672][ T5883]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  924.798609][ T5883]  __driver_probe_device+0x2ab/0x5d0
[  924.804047][ T5883]  driver_probe_device+0x72/0x890
[  924.809235][ T5883]  ? kmsan_get_metadata+0x13e/0x1c0
[  924.814718][ T5883]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  924.820646][ T5883]  __device_attach_driver+0x568/0x9e0
[  924.826139][ T5883]  bus_for_each_drv+0x403/0x620
[  924.831171][ T5883]  ? __pfx___device_attach_driver+0x10/0x10
[  924.837219][ T5883]  __device_attach+0x3c1/0x650
[  924.842111][ T5883]  device_initial_probe+0x32/0x40
[  924.847250][ T5883]  bus_probe_device+0x3dc/0x5c0
[  924.852855][ T5883]  device_add+0x13aa/0x1ba0
[  924.857469][ T5883]  usb_set_configuration+0x31c9/0x38d0
[  924.863035][ T5883]  ? usb_set_configuration+0x881/0x38d0
[  924.868715][ T5883]  usb_generic_driver_probe+0x109/0x2a0
[  924.874400][ T5883]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  924.880334][ T5883]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  924.886567][ T5883]  usb_probe_device+0x3a7/0x690
[  924.891565][ T5883]  ? __pfx_usb_probe_device+0x10/0x10
[  924.897121][ T5883]  really_probe+0x4db/0xd90
[  924.901740][ T5883]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  924.907712][ T5883]  __driver_probe_device+0x2ab/0x5d0
[  924.913132][ T5883]  driver_probe_device+0x72/0x890
[  924.918316][ T5883]  ? kmsan_get_metadata+0x13e/0x1c0
[  924.923636][ T5883]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  924.929670][ T5883]  __device_attach_driver+0x568/0x9e0
[  924.935181][ T5883]  bus_for_each_drv+0x403/0x620
[  924.940179][ T5883]  ? __pfx___device_attach_driver+0x10/0x10
[  924.946236][ T5883]  __device_attach+0x3c1/0x650
[  924.951122][ T5883]  device_initial_probe+0x32/0x40
[  924.956248][ T5883]  bus_probe_device+0x3dc/0x5c0
[  924.961234][ T5883]  device_add+0x13aa/0x1ba0
[  924.965847][ T5883]  usb_new_device+0x15f4/0x2470
[  924.970850][ T5883]  hub_event+0x4ffb/0x72d0
[  924.975403][ T5883]  ? __pfx_hub_event+0x10/0x10
[  924.980261][ T5883]  process_scheduled_works+0xae0/0x1c40
[  924.985961][ T5883]  worker_thread+0xea7/0x14f0
[  924.990783][ T5883]  kthread+0x3e2/0x540
[  924.994973][ T5883]  ? __pfx_worker_thread+0x10/0x10
[  925.000297][ T5883]  ? __pfx_kthread+0x10/0x10
[  925.004981][ T5883]  ret_from_fork+0x6d/0x90
[  925.009496][ T5883]  ? __pfx_kthread+0x10/0x10
[  925.014180][ T5883]  ret_from_fork_asm+0x1a/0x30
[  925.019075][ T5883]  </TASK>
[  925.022441][ T5883] Kernel Offset: disabled
[  925.026835][ T5883] Rebooting in 86400 seconds..