last executing test programs:

6m13.412228208s ago: executing program 3 (id=216):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x11a)
setuid(0xee00)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0)

6m13.26418138s ago: executing program 3 (id=218):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20)
fadvise64(r1, 0xfcff, 0x20000, 0x3)

6m12.509154471s ago: executing program 3 (id=223):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a000000880932f9fc56e235eb1964a1600866e9"], 0x48)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0x80d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x7}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1, 0xfffffffe, 0x2)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7b, 0x0, 0x0)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
semget$private(0x0, 0x4000000009, 0x208)
sendto$netrom(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
unshare(0x62040200)
close(r0)

6m10.134020952s ago: executing program 3 (id=225):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000004700)=""/4091, 0xffb}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f0000000140)=""/179, 0xb3}, {&(0x7f0000000540)=""/197, 0xc5}], 0x7}, 0x0)

6m8.489167535s ago: executing program 3 (id=230):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000024c0)=ANY=[@ANYBLOB="1c00cd", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250200000008000800ac1414"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000140)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
fchown(0xffffffffffffffff, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x188)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00')
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r4, 0x400, 0x1)
r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
getdents(0xffffffffffffffff, 0x0, 0x0)

6m8.324825838s ago: executing program 3 (id=232):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

5m52.636510981s ago: executing program 32 (id=232):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4)

5m4.389270277s ago: executing program 1 (id=340):
socket$nl_route(0x10, 0x3, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000080)={[{@compress_force}, {@clear_cache}, {@nobarrier}, {@ref_verify}, {@acl}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040))

5m1.965204781s ago: executing program 1 (id=346):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01009300"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sched_yield()
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r4, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004440)={0x2020}, 0x2020)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)

5m0.12536777s ago: executing program 1 (id=347):
r0 = getpgid(0x0)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x80011, 0x0, 0x4)

4m59.725222902s ago: executing program 1 (id=349):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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")
open(0x0, 0x14927e, 0xc0)
truncate(0x0, 0x800)
syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0)

4m58.841327433s ago: executing program 1 (id=352):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffff9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(r0, &(0x7f0000000380)='net/if_inet6\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r4 = creat(0x0, 0xecf86c37d53049cc)
write$binfmt_format(r4, 0x0, 0x0)
write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='yeah\x00', 0x5)
close(0xffffffffffffffff)
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)

4m58.13719252s ago: executing program 1 (id=355):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2, r0})
sendmmsg$inet(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

4m56.460363935s ago: executing program 33 (id=355):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r2, r0})
sendmmsg$inet(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

4m37.297827944s ago: executing program 4 (id=386):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000024c0)=ANY=[@ANYBLOB="1c00cd", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250200000008000800ac1414"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000140)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000004340)=""/102376, 0x18fe8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
fchown(0xffffffffffffffff, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
removexattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00')
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r3)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r5, 0x400, 0x1)
r6 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
getdents(0xffffffffffffffff, 0x0, 0x0)

4m29.680330856s ago: executing program 4 (id=397):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2)
preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)

4m29.372851341s ago: executing program 4 (id=398):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0a000000880932f9fc56e235eb1964a1600866e9"], 0x48)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0x80d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x7}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/158, 0x9e}], 0x1, 0xfffffffe, 0x2)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7b, 0x0, 0x0)
connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r8 = semget$private(0x0, 0x4000000009, 0x208)
semop(r8, &(0x7f0000000140)=[{0x0, 0x7, 0x1800}, {0x3, 0x400, 0x1000}], 0x2)
sendto$netrom(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
unshare(0x62040200)
close(r0)

4m28.215405954s ago: executing program 4 (id=400):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x25, 0x358, &(0x7f0000000480)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getrlimit(0x1, &(0x7f0000000340))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x49c, 0x8}}}}, 0x15)

4m27.241965823s ago: executing program 4 (id=403):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r0, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x3fb, &(0x7f0000000c40)="$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")
setpgid(0x0, r0)
openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x10300, 0x1a)

4m25.724625365s ago: executing program 4 (id=407):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2)
preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)

4m10.080849504s ago: executing program 34 (id=407):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2)
preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0)

3m24.532418402s ago: executing program 6 (id=528):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@space_cache_v1}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@space_cache_v1}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000bc0)={0x2, 0x3, {0x0, @struct={0x10000001, 0x7}, 0x0, 0x8, 0xb54, 0xfffffffffffffffe, 0xffffffff, 0x7fffffffffffffff, 0x1, @struct={0x401, 0x6}, 0x4, 0x1, [0x5, 0x1, 0x80000001, 0x3ff, 0x5, 0x5bc7]}, {0x200, @usage=0x4f4d, 0x0, 0x10, 0x3, 0xc, 0x44a, 0x9, 0x12, @struct={0x8, 0x8de}, 0xc9d, 0x4, [0xfffffffffffffffa, 0x9ce, 0x8, 0x3, 0x3, 0x6]}, {0xf, @struct={0x9, 0x3}, 0x0, 0x91, 0x0, 0x0, 0x6, 0x1, 0xa, @usage, 0xcbf, 0x80, [0xae, 0x7f, 0xd6e2, 0x8, 0xb, 0xffffffff]}, {0xfffffffffffffff7, 0x100000001, 0x7}})
unlinkat(0xffffffffffffff9c, 0x0, 0x0)

3m20.889191445s ago: executing program 6 (id=535):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffff9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(r0, &(0x7f0000000380)='net/if_inet6\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
chdir(&(0x7f0000000100)='./file0\x00')
r4 = creat(0x0, 0xecf86c37d53049cc)
write$binfmt_format(r4, 0x0, 0x0)
write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='yeah\x00', 0x5)
close(0xffffffffffffffff)
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)

3m14.666335077s ago: executing program 6 (id=541):
epoll_create1(0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet_sctp(0x2, 0x5, 0x84)
socket(0x10, 0x803, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0)
r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b})
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

3m14.510935449s ago: executing program 6 (id=542):
openat$dir(0xffffffffffffff9c, 0x0, 0x20041, 0x100)
socket$qrtr(0x2a, 0x2, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6e6f757365725f78617474722c636f686572656e63793d66756c6c2c646174613d77726974656261636b2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030312c61636c2c6e6f61636c2c6c6f63616c616c6c6f633d30303030303030303030303030303030303030302c00a89f6b8d5800aa954e6c8735dcd52921ce08462fb4ce7c1600883251443ac332f4d17b77d29867e4321610936dbc5963e9fb59a032c92e32ebffc3b739951e866d52bff6bd63136a656222062a8eea0cf97480bc8ac6c0e8a2aa38ffa8fa758cd54b9ef39a7f536d7b85173a83c34d78e210ecf4d040817bbe989e9eb015acb84bb90577b8b405a48292eeca69f5275cb7b7027d4bf643bd69b034c0221a30"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffa)
sendfile(r0, r0, 0x0, 0x800000009)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
ftruncate(r2, 0x2007ffb)
sendfile(r1, r2, 0x0, 0x1000000201005)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
open(&(0x7f0000000900)='./file1\x00', 0x84200, 0x104)

3m11.880905751s ago: executing program 6 (id=553):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x10, 0x803, 0x0)
semctl$GETZCNT(0x0, 0x1, 0xf, 0x0)
openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0x6, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f00000003c0)=@v2={0x6, 0x2, 0x7, 0xffff, 0x2e, "70f62f52aa92536602c8ce765cd5c6d9f59407254c81247c96c27a45f4bb057f05556326957c12700e67591711a2"}, 0x37, 0x1)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="041706004f00000001ca3c1bdd785630277068d487c54be1aa5429015449e856e51f69b4cd946872f98e9f17079f5045cff33862c2813c70385ff8e19fa83a90acd90ab4c4eab4cdf6050296de962acd"], 0x9)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, 0x0)
r3 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_INPUT(r3, &(0x7f0000002140)={0xc, {"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", 0x1000}}, 0x1006)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180))
write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

3m10.692096366s ago: executing program 6 (id=560):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000004700)=""/4091, 0xffb}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000300)=""/192, 0xc0}, {0x0}, {&(0x7f0000000140)=""/179, 0xb3}, {&(0x7f0000000540)=""/197, 0xc5}], 0x7}, 0x0)

3m10.124601832s ago: executing program 35 (id=560):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000004700)=""/4091, 0xffb}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000300)=""/192, 0xc0}, {0x0}, {&(0x7f0000000140)=""/179, 0xb3}, {&(0x7f0000000540)=""/197, 0xc5}], 0x7}, 0x0)

7.33021373s ago: executing program 0 (id=1036):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680))
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x800002, 0x10, 0xffffffffffffffff, 0x61083000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
eventfd(0x1a52)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x200000)

7.162323763s ago: executing program 0 (id=1037):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20042, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x1, 0x0, 0x0)
pipe(0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

7.025165924s ago: executing program 5 (id=1038):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x10, 0x803, 0x0)
semctl$GETZCNT(0x0, 0x1, 0xf, 0x0)
openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0x6, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x20c00, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f00000003c0)=@v2={0x6, 0x2, 0x7, 0xffff, 0x2e, "70f62f52aa92536602c8ce765cd5c6d9f59407254c81247c96c27a45f4bb057f05556326957c12700e67591711a2"}, 0x37, 0x1)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="041706004f00000001ca3c1bdd785630277068d487c54be1aa5429015449e856e51f69b4cd946872f98e9f17079f5045cff33862c2813c70385ff8e19fa83a90acd90ab4c4eab4cdf6050296de962acd"], 0x9)
r2 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_INPUT(r2, 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180))
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

6.896271495s ago: executing program 2 (id=1039):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socket$kcm(0x1e, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r9, 0xa}, 0x8)
write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r10 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)
close(r10)

6.759189536s ago: executing program 0 (id=1040):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})

6.134402816s ago: executing program 0 (id=1042):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40203, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

6.001065186s ago: executing program 5 (id=1043):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socket$kcm(0x1e, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r9, 0xa}, 0x8)
write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r10 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)
close(r10)

5.95289963s ago: executing program 2 (id=1044):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socket$kcm(0x1e, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r9, 0xa}, 0x8)
write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r10 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0)
close(r5)
close(r10)

5.521672205s ago: executing program 0 (id=1045):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socket$kcm(0x1e, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r9, 0xa}, 0x8)
write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r10 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)
close(r5)
close(r10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

5.46670798s ago: executing program 7 (id=1046):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680))
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x800002, 0x10, 0xffffffffffffffff, 0x61083000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
eventfd(0x1a52)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendfile(r2, r2, 0x0, 0x200000)

5.365522248s ago: executing program 7 (id=1047):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)
prlimit64(0x0, 0x15, &(0x7f0000000140)={0xfffffffffffffff7, 0x2}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @empty, 0x18000}, {0xa, 0x0, 0xfffffffd, @dev, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)

4.329720441s ago: executing program 0 (id=1048):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x3d, &(0x7f0000001180)=ANY=[@ANYBLOB]})
mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = syz_open_procfs(0x0, &(0x7f0000000340)='uid_map\x00')
read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020)
r5 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef)
close(r5)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003a80)=""/4101, 0x1005}], 0x1}, 0x2101)

4.329299471s ago: executing program 5 (id=1049):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x800)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
socket$kcm(0x1e, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r3, 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r9, 0xa}, 0x8)
write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r10 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)
close(r5)
close(r10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800000004060104000000000000000007000005050001000f000000050001000700000005000100070000000900020073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc)

4.329132671s ago: executing program 2 (id=1050):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0x7a, 0x0, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3.766463586s ago: executing program 7 (id=1051):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(0x0, 0x7)
syz_open_dev$cec(0x0, 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="34a7bf6a5102ae", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/21], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000)
ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, 0x0)
syz_io_uring_setup(0x497, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006800e978feffffffffdbdf250a0000000000000008000500", @ANYRES32=r7, @ANYBLOB="dec43c3f5bf547e73965fcb3291c9cd0cbe524b24d139c47c40ab04771664e69f845a63b838bb1b2a968987f666a53119e96f9e9eb757f9d26db3e44934b75c2ae6ea62b884de5c65b107d30ce6981c2489860f1dc"], 0x20}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0)

3.511779977s ago: executing program 2 (id=1052):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0x7a, 0x0, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3.412559065s ago: executing program 5 (id=1053):
r0 = socket(0x22, 0xa, 0x4000000)
getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="02010000000000142bbd70000200000005000a004e221c244cf400dbd78b03600000000000000000010400000000000000030006000400000100000000e000000100080000eae8d288eccd9ea0e9da5be0a1c290bcf87d37220959b3429247ee4ad8943b41d81f7ffe7cd1105d5e4196e473c0dc6a4088e68042c192e44b0de353bd72fe9fdd02607aff42451e281969db9cabc6d3778364e1598afd841db7ec8e9c9af8c5ad08e70caa932807c3dda36823355d553e39e00cdc617aac7c95114edf593cef2e6fb77652c85ec0e0782897426c8c0d665e8131"], 0x50}}, 0x0)
r2 = getpid()
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f0000000180), 0x4001)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg$inet(r3, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004000)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)
syz_usb_connect(0x2, 0x9a2, 0x0, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000080)=""/166, 0xa6}], 0x1, 0x6, 0x4)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, r0)
sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x1)
close(r3)

2.828537292s ago: executing program 7 (id=1054):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40203, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x40, 0x572, 0xcb01, 0x2665, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xaa, 0x75, 0xb7}}]}}]}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0)

2.706481671s ago: executing program 5 (id=1055):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
listen(r1, 0x5)
r2 = accept4(r1, &(0x7f0000000240)=@x25, 0x0, 0x80800)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x38, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.626891938s ago: executing program 2 (id=1056):
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$kcm(0x22, 0x2, 0x21)
recvmsg(r1, 0x0, 0x40)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(0xffffffffffffffff, 0x48e9, 0x5150, 0x7, 0x0, 0xffffffffffffff6d)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\x1a\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r4=>0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)})
r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x18)
symlinkat(&(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00')
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "c4ba"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40041}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)

1.703171703s ago: executing program 2 (id=1057):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0xc02, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
listen(r1, 0x5)
r2 = accept4(r1, &(0x7f0000000240)=@x25, 0x0, 0x80800)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x38, 0x0, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.646667867s ago: executing program 7 (id=1058):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680))
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x800002, 0x10, 0xffffffffffffffff, 0x61083000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
eventfd(0x1a52)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0))
sendfile(r2, r2, 0x0, 0x200000)

1.400836937s ago: executing program 5 (id=1059):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x88002)
ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000040)={0x6, 0x7, 0x0, 0x2, "7f0e279d2e5cf55a61e2c40d6e76943e0347c74d3000002a0fc535970be7f3f3"})
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r4 = socket$inet6(0xa, 0x3, 0x5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r5}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r5}, 0x38)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x541b, 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
close(r9)

0s ago: executing program 7 (id=1060):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680))
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x800002, 0x10, 0xffffffffffffffff, 0x61083000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0)
write$binfmt_aout(r0, 0x0, 0xff2e)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
eventfd(0x1a52)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0))
sendfile(r2, r2, 0x0, 0x200000)

kernel console output (not intermixed with test programs):

bogus lookback distance 1388 @ lcn 42 of nid 36
[  281.062930][ T8016] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  281.091678][ T8016] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  281.144878][ T8016] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  281.184722][ T8016] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  281.207480][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 42 @ nid 36
[  281.386635][ T8016] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  281.398789][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 41 @ nid 36
[  281.415980][ T8016] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  281.433461][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36
[  281.443765][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36
[  281.453585][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36
[  281.463200][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36
[  281.472837][ T8016] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36
[  281.485660][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 31 @ nid 36
[  281.495148][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 25 @ nid 36
[  281.504848][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  281.514780][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36
[  281.529838][ T8016] syz.0.425: attempt to access beyond end of device
[  281.529838][ T8016] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16
[  281.548592][ T8016] syz.0.425: attempt to access beyond end of device
[  281.548592][ T8016] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  281.563810][ T8016] syz.0.425: attempt to access beyond end of device
[  281.563810][ T8016] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  281.582309][ T8016] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639]
[  281.622173][ T8016] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  281.633580][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 47 @ nid 36
[  281.644606][ T8016] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  281.665390][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 46 @ nid 36
[  281.685841][ T8016] erofs: (device loop0): z_erofs_readahead: readahead error at folio 45 @ nid 36
[  281.696280][ T8016] syz.0.425: attempt to access beyond end of device
[  281.696280][ T8016] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16
[  281.713182][ T8016] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537]
[  282.484592][ T7308] usb 3-1: USB disconnect, device number 16
[  283.113519][ T7308] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  283.985724][ T7308] usb 6-1: Using ep0 maxpacket: 16
[  284.008288][ T7308] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  284.025856][ T7308] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.045758][ T7308] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  284.058793][ T7308] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  284.068115][ T7308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.076534][ T7308] usb 6-1: Product: syz
[  284.080828][ T7308] usb 6-1: Manufacturer: syz
[  284.085454][ T7308] usb 6-1: SerialNumber: syz
[  284.249934][    T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  284.323337][ T7308] usb 6-1: 0:2 : does not exist
[  284.348342][ T7308] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[  284.371659][ T8042] loop2: detected capacity change from 0 to 40427
[  284.381158][ T8042] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  284.408457][ T7308] usb 6-1: USB disconnect, device number 6
[  284.414265][ T8042] F2FS-fs (loop2): invalid crc value
[  284.435707][    T8] usb 1-1: Using ep0 maxpacket: 16
[  284.451949][ T8042] F2FS-fs (loop2): Found nat_bits in checkpoint
[  284.453720][    T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  284.494251][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  284.496895][    T8] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  284.533177][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.550375][    T8] usb 1-1: Product: syz
[  284.554837][    T8] usb 1-1: Manufacturer: syz
[  284.560766][    T8] usb 1-1: SerialNumber: syz
[  284.586898][    T8] usb 1-1: config 0 descriptor??
[  284.607815][    T8] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  284.625738][ T8042] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  284.656053][    T8] usb 1-1: Detected FT232R
[  284.677404][   T28] audit: type=1800 audit(1756056749.694:31): pid=8042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.431" name="file1" dev="loop2" ino=10 res=0 errno=0
[  284.735076][ T5794] syz-executor: attempt to access beyond end of device
[  284.735076][ T5794] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  284.775900][ T5794] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  285.175839][    T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  285.194860][    T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  285.221314][    T8] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  285.240165][    T8] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  285.285840][    T8] usb 1-1: USB disconnect, device number 15
[  285.317600][    T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  285.322860][ T8059] loop5: detected capacity change from 0 to 16
[  285.348644][    T8] ftdi_sio 1-1:0.0: device disconnected
[  285.393724][ T8059] erofs: (device loop5): mounted with root inode @ nid 36.
[  285.472610][ T8059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  285.540365][ T8059] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  285.582937][ T8059] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  285.619381][ T8061] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  285.640854][ T8061] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  285.666861][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 42 @ nid 36
[  285.697801][ T8061] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  285.727262][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 41 @ nid 36
[  285.760306][ T8061] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  285.785902][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 40 @ nid 36
[  285.825920][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 39 @ nid 36
[  285.854534][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 38 @ nid 36
[  285.878883][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  285.888527][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 36 @ nid 36
[  285.901845][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  285.910891][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  285.922080][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  285.930511][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  285.933960][ T8061] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36
[  285.954537][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  285.961892][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 31 @ nid 36
[  285.973387][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 25 @ nid 36
[  285.984191][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  285.997522][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 19 @ nid 36
[  286.010285][ T8061] syz.5.436: attempt to access beyond end of device
[  286.010285][ T8061] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16
[  286.024446][ T8061] syz.5.436: attempt to access beyond end of device
[  286.024446][ T8061] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  286.039172][ T8061] syz.5.436: attempt to access beyond end of device
[  286.039172][ T8061] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  286.075307][ T8061] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639]
[  286.101472][ T8061] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  286.122098][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 47 @ nid 36
[  286.141780][ T8061] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  286.155124][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 46 @ nid 36
[  286.175011][ T8061] erofs: (device loop5): z_erofs_readahead: readahead error at folio 45 @ nid 36
[  286.188616][ T8061] syz.5.436: attempt to access beyond end of device
[  286.188616][ T8061] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16
[  286.210509][ T8061] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537]
[  286.309401][   T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.812408][   T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.950960][   T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.156609][   T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.293126][ T8081] loop0: detected capacity change from 0 to 2048
[  287.322455][ T8081] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  287.335129][ T8081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  287.897686][    T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  288.068215][ T8081] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  288.087683][ T5793] Bluetooth: hci3: command tx timeout
[  288.132937][    T8] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  288.133298][ T8063] chnl_net:caif_netlink_parms(): no params data found
[  288.186332][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.219364][    T8] usb 6-1: Product: syz
[  288.226584][    T8] usb 6-1: Manufacturer: syz
[  288.231345][    T8] usb 6-1: SerialNumber: syz
[  288.267147][    T8] usb 6-1: config 0 descriptor??
[  288.599848][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.440'.
[  288.620055][ T8083] vlan0: entered promiscuous mode
[  288.625355][ T8083] vlan0: entered allmulticast mode
[  288.631474][ T8083] veth0_vlan: entered allmulticast mode
[  288.720982][    T8] cx82310_eth: probe of 6-1:0.0 failed with error -22
[  288.793620][    T8] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  288.858005][    T8] usb 6-1: USB disconnect, device number 7
[  289.011131][ T8063] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.032806][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.056062][ T8063] bridge_slave_0: entered allmulticast mode
[  289.074793][ T8063] bridge_slave_0: entered promiscuous mode
[  289.182683][ T8063] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.207509][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.232164][ T8063] bridge_slave_1: entered allmulticast mode
[  289.247445][ T8063] bridge_slave_1: entered promiscuous mode
[  289.379483][ T8118] loop0: detected capacity change from 0 to 16
[  289.397335][ T8118] erofs: (device loop0): mounted with root inode @ nid 36.
[  289.429784][ T8118] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  289.440921][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 47 @ nid 36
[  289.451266][ T8118] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  289.462850][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 46 @ nid 36
[  289.472405][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 45 @ nid 36
[  289.482220][ T8118] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  289.492884][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 43 @ nid 36
[  289.503209][ T8118] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  289.513893][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 42 @ nid 36
[  289.523163][ T8118] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  289.533861][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 41 @ nid 36
[  289.543083][ T8118] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  289.553711][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36
[  289.562940][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36
[  289.573014][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36
[  289.582535][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36
[  289.591994][ T8118] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36
[  289.602752][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 31 @ nid 36
[  289.612168][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 25 @ nid 36
[  289.621449][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  289.630873][ T8118] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36
[  289.640559][ T8118] syz.0.446: attempt to access beyond end of device
[  289.640559][ T8118] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16
[  289.654508][ T8118] syz.0.446: attempt to access beyond end of device
[  289.654508][ T8118] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  289.669690][ T8118] syz.0.446: attempt to access beyond end of device
[  289.669690][ T8118] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  289.684290][ T8118] syz.0.446: attempt to access beyond end of device
[  289.684290][ T8118] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16
[  289.755437][ T8063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.792546][ T8101] loop2: detected capacity change from 0 to 40427
[  289.802344][ T8063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.814375][ T8101] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  289.816122][    T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  289.863257][ T8101] F2FS-fs (loop2): invalid crc value
[  289.965518][ T8101] F2FS-fs (loop2): Found nat_bits in checkpoint
[  290.055727][    T8] usb 6-1: Using ep0 maxpacket: 16
[  290.091856][    T8] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8
[  290.121701][    T8] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  290.153943][ T8101] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  290.154761][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.161617][ T5793] Bluetooth: hci3: command tx timeout
[  290.193907][    T8] usb 6-1: Product: syz
[  290.214221][    T8] usb 6-1: Manufacturer: syz
[  290.244771][    T8] usb 6-1: SerialNumber: syz
[  290.287731][    T8] usb 6-1: config 0 descriptor??
[  290.305216][   T28] audit: type=1800 audit(1756056755.314:32): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.442" name="file1" dev="loop2" ino=10 res=0 errno=0
[  290.340598][    T8] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  290.365464][    T8] usb 6-1: Detected FT232R
[  290.378616][ T5794] syz-executor: attempt to access beyond end of device
[  290.378616][ T5794] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  290.396646][ T8063] team0: Port device team_slave_0 added
[  290.413238][ T5794] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  290.477504][ T8063] team0: Port device team_slave_1 added
[  290.551839][   T58] hsr_slave_0: left promiscuous mode
[  290.569190][   T58] hsr_slave_1: left promiscuous mode
[  290.581689][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.599328][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.631593][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.657738][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.682498][   T58] bridge_slave_1: left allmulticast mode
[  290.704526][   T58] bridge_slave_1: left promiscuous mode
[  290.925336][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.983833][   T58] bridge_slave_0: left allmulticast mode
[  291.037493][   T58] bridge_slave_0: left promiscuous mode
[  291.076632][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.250687][    T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  291.260875][    T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  291.268367][    T8] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  291.280206][ T8139] loop0: detected capacity change from 0 to 2048
[  291.296140][    T8] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  291.319991][   T58] veth0_macvtap: left promiscuous mode
[  291.330812][   T58] veth1_vlan: left promiscuous mode
[  291.331164][    T8] usb 6-1: USB disconnect, device number 8
[  291.348969][ T8139] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  291.377776][   T58] veth0_vlan: left promiscuous mode
[  291.379725][    T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  291.422099][ T8139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.445193][    T8] ftdi_sio 6-1:0.0: device disconnected
[  291.958360][ T8139] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  292.243299][ T5793] Bluetooth: hci3: command tx timeout
[  292.702199][ T8166] loop5: detected capacity change from 0 to 16
[  292.730830][ T8166] erofs: (device loop5): mounted with root inode @ nid 36.
[  292.756516][ T8166] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  292.767248][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 47 @ nid 36
[  292.776403][ T8166] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  292.787097][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 46 @ nid 36
[  292.796575][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 45 @ nid 36
[  292.805839][ T8166] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  292.816496][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 43 @ nid 36
[  292.825676][ T8166] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  292.836358][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 42 @ nid 36
[  292.846018][ T8166] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  292.856702][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 41 @ nid 36
[  292.865871][ T8166] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  292.876478][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 40 @ nid 36
[  292.885709][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 39 @ nid 36
[  292.894868][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 38 @ nid 36
[  292.904230][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 36 @ nid 36
[  292.913556][ T8166] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36
[  292.924216][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 31 @ nid 36
[  292.933664][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 25 @ nid 36
[  292.942861][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  292.952681][ T8166] erofs: (device loop5): z_erofs_readahead: readahead error at folio 19 @ nid 36
[  292.962234][ T8166] syz.5.455: attempt to access beyond end of device
[  292.962234][ T8166] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16
[  292.976029][ T8166] syz.5.455: attempt to access beyond end of device
[  292.976029][ T8166] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  292.990384][ T8166] syz.5.455: attempt to access beyond end of device
[  292.990384][ T8166] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  293.004848][ T8166] syz.5.455: attempt to access beyond end of device
[  293.004848][ T8166] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16
[  293.299776][   T58] team0 (unregistering): Port device team_slave_1 removed
[  293.403114][   T58] team0 (unregistering): Port device team_slave_0 removed
[  293.504582][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.569118][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.687210][  T967] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  293.862139][ T8168] loop5: detected capacity change from 0 to 40427
[  293.881926][  T967] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  293.891500][ T8168] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff
[  293.893850][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.930711][  T967] usb 3-1: Product: syz
[  293.942239][  T967] usb 3-1: Manufacturer: syz
[  293.947487][  T967] usb 3-1: SerialNumber: syz
[  293.957795][ T8168] F2FS-fs (loop5): invalid crc value
[  293.969916][ T8168] F2FS-fs (loop5): Found nat_bits in checkpoint
[  293.980124][  T967] usb 3-1: config 0 descriptor??
[  294.095732][ T8168] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  294.148928][   T28] audit: type=1800 audit(1756056759.164:33): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.456" name="file1" dev="loop5" ino=10 res=0 errno=0
[  294.205741][ T7571] syz-executor: attempt to access beyond end of device
[  294.205741][ T7571] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  294.247458][ T7571] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  294.325805][ T5793] Bluetooth: hci3: command tx timeout
[  294.538227][   T58] bond0 (unregistering): Released all slaves
[  294.724242][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'.
[  294.779056][  T967] cx82310_eth: probe of 3-1:0.0 failed with error -22
[  294.829222][  T967] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  294.839824][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.866064][  T967] usb 3-1: USB disconnect, device number 17
[  294.872609][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.911690][ T8063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.929749][ T8063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.937211][ T8063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.965155][ T8063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.084092][ T8063] hsr_slave_0: entered promiscuous mode
[  295.143770][ T8063] hsr_slave_1: entered promiscuous mode
[  295.157230][ T8063] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.165061][ T8063] Cannot create hsr debugfs directory
[  295.847237][ T8191] loop2: detected capacity change from 0 to 2048
[  295.894946][ T8191] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  295.988730][ T8191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.801845][ T5848] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  296.860836][ T8191] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  296.888383][ T8191] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  296.907670][ T8191] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  296.945030][ T8191] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  296.953068][ T8191] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  296.985943][ T5848] usb 6-1: Using ep0 maxpacket: 16
[  297.015493][ T5848] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8
[  297.025874][ T8191] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  297.076071][ T5848] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  297.093219][ T8191] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  297.110663][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.121014][ T8191] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  297.132007][ T5848] usb 6-1: Product: syz
[  297.138036][ T8191] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  297.156076][ T5848] usb 6-1: Manufacturer: syz
[  297.166439][ T5848] usb 6-1: SerialNumber: syz
[  297.187414][ T5848] usb 6-1: config 0 descriptor??
[  297.211354][ T5848] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  297.257037][ T5848] usb 6-1: Detected FT232R
[  297.412971][ T8063] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  297.569438][ T8063] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  297.686703][ T8063] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  297.825430][ T8063] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  298.170042][ T8227] loop0: detected capacity change from 0 to 16
[  298.186111][ T5848] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  298.194129][ T5848] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  298.201590][ T5848] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  298.210385][ T5848] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  298.242091][ T5848] usb 6-1: USB disconnect, device number 9
[  298.276058][ T8227] erofs: (device loop0): mounted with root inode @ nid 36.
[  298.293582][ T5848] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  298.331064][ T5848] ftdi_sio 6-1:0.0: device disconnected
[  298.360626][ T8227] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  298.372117][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 47 @ nid 36
[  298.381410][ T8227] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  298.392095][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 46 @ nid 36
[  298.401560][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 45 @ nid 36
[  298.410889][ T8227] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  298.421576][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 43 @ nid 36
[  298.430936][ T8227] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  298.441664][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 42 @ nid 36
[  298.451041][ T8227] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  298.461651][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 41 @ nid 36
[  298.470853][ T8227] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  298.482122][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36
[  298.491407][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36
[  298.500683][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36
[  298.512372][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36
[  298.522679][ T8227] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36
[  298.533430][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 31 @ nid 36
[  298.542822][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 25 @ nid 36
[  298.552078][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  298.561495][ T8227] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36
[  298.571260][ T8227] syz.0.464: attempt to access beyond end of device
[  298.571260][ T8227] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16
[  298.585901][ T8227] syz.0.464: attempt to access beyond end of device
[  298.585901][ T8227] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  298.600307][ T8227] syz.0.464: attempt to access beyond end of device
[  298.600307][ T8227] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  298.614686][ T8227] syz.0.464: attempt to access beyond end of device
[  298.614686][ T8227] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16
[  298.959060][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout
[  298.965229][ T5792] Bluetooth: hci2: command 0x0406 tx timeout
[  299.186268][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout
[  299.220492][ T8063] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.354300][ T8063] 8021q: adding VLAN 0 to HW filter on device team0
[  299.373426][ T8229] loop2: detected capacity change from 0 to 40427
[  299.412218][ T8229] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  299.434536][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.438538][ T8229] F2FS-fs (loop2): invalid crc value
[  299.441817][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.484772][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.492060][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.510512][ T8229] F2FS-fs (loop2): Found nat_bits in checkpoint
[  299.666024][ T7759] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  299.710035][ T8229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  299.779821][   T28] audit: type=1800 audit(1756056764.794:34): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.465" name="file1" dev="loop2" ino=10 res=0 errno=0
[  299.867154][ T5794] syz-executor: attempt to access beyond end of device
[  299.867154][ T5794] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  299.897609][ T7759] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  299.917926][ T7759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.933555][ T5794] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  299.963412][ T7759] usb 1-1: Product: syz
[  299.999017][ T7759] usb 1-1: Manufacturer: syz
[  300.003675][ T7759] usb 1-1: SerialNumber: syz
[  300.050376][ T7759] usb 1-1: config 0 descriptor??
[  300.300374][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'.
[  300.352838][ T7759] cx82310_eth: probe of 1-1:0.0 failed with error -22
[  300.421234][ T7759] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  300.447435][ T7759] usb 1-1: USB disconnect, device number 16
[  300.470719][ T8063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.924696][ T8267] loop2: detected capacity change from 0 to 256
[  301.035834][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout
[  301.036003][ T5792] Bluetooth: hci2: command 0x0406 tx timeout
[  301.058248][ T8267] FAT-fs (loop2): Directory bread(block 64) failed
[  301.102061][ T8267] FAT-fs (loop2): Directory bread(block 65) failed
[  301.146061][ T8267] FAT-fs (loop2): Directory bread(block 66) failed
[  301.152668][ T8267] FAT-fs (loop2): Directory bread(block 67) failed
[  301.191075][ T8267] FAT-fs (loop2): Directory bread(block 68) failed
[  301.197861][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout
[  301.265899][ T8267] FAT-fs (loop2): Directory bread(block 69) failed
[  301.272633][ T8267] FAT-fs (loop2): Directory bread(block 70) failed
[  301.296169][ T8267] FAT-fs (loop2): Directory bread(block 71) failed
[  301.304600][ T8267] FAT-fs (loop2): Directory bread(block 72) failed
[  301.325736][ T8267] FAT-fs (loop2): Directory bread(block 73) failed
[  301.476618][ T8284] overlay: ./file0 is not a directory
[  301.496589][ T7759] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  301.749116][ T7759] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  301.790351][ T7759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.864534][ T5792] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  302.470590][ T7759] usb 1-1: Product: syz
[  302.487634][ T7759] usb 1-1: Manufacturer: syz
[  302.492581][ T7759] usb 1-1: SerialNumber: syz
[  302.546392][ T7759] usb 1-1: config 0 descriptor??
[  302.650117][ T8063] veth0_vlan: entered promiscuous mode
[  302.713149][ T8063] veth1_vlan: entered promiscuous mode
[  302.780507][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'.
[  302.835372][ T7759] cx82310_eth: probe of 1-1:0.0 failed with error -22
[  302.878209][ T7759] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  302.911165][ T7759] usb 1-1: USB disconnect, device number 17
[  302.925412][ T8063] veth0_macvtap: entered promiscuous mode
[  302.972811][ T8063] veth1_macvtap: entered promiscuous mode
[  303.052627][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.089791][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.115840][ T5792] Bluetooth: hci1: command 0x0c1a tx timeout
[  303.122080][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.140956][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.181052][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  303.195082][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.208029][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.261880][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.275869][ T5792] Bluetooth: hci3: command 0x0c1a tx timeout
[  303.296286][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.316921][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.350373][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.392277][ T8063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  303.442844][ T8063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  303.492694][ T8063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.596713][ T8063] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.632414][ T8063] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.645046][ T8063] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.663725][ T8063] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.970047][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.031063][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.039464][ T8293] loop2: detected capacity change from 0 to 32768
[  304.178472][ T8293] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  304.247283][ T8306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  304.254555][ T8306] IPv6: NLM_F_CREATE should be set when creating new route
[  304.261927][ T8306] IPv6: NLM_F_CREATE should be set when creating new route
[  304.269202][ T8306] IPv6: NLM_F_CREATE should be set when creating new route
[  304.278690][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.305774][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.353770][   T28] audit: type=1800 audit(1756056769.364:35): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.473" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  304.456970][ T8313] loop5: detected capacity change from 0 to 256
[  304.550616][   T28] audit: type=1804 audit(1756056769.564:36): pid=8315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.473" name="/newroot/118/file1/file1" dev="loop2" ino=17058 res=1 errno=0
[  304.581719][   T28] audit: type=1800 audit(1756056769.564:37): pid=8315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.473" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  304.665332][ T8313] FAT-fs (loop5): Directory bread(block 64) failed
[  304.688359][ T8313] FAT-fs (loop5): Directory bread(block 65) failed
[  304.705809][ T8313] FAT-fs (loop5): Directory bread(block 66) failed
[  304.750502][ T8313] FAT-fs (loop5): Directory bread(block 67) failed
[  304.776024][ T8313] FAT-fs (loop5): Directory bread(block 68) failed
[  304.807380][ T8313] FAT-fs (loop5): Directory bread(block 69) failed
[  304.848562][ T8313] FAT-fs (loop5): Directory bread(block 70) failed
[  304.855181][ T8313] FAT-fs (loop5): Directory bread(block 71) failed
[  304.915729][   T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  304.933889][ T8313] FAT-fs (loop5): Directory bread(block 72) failed
[  304.941822][ T8293] syz.2.473 (8293) used greatest stack depth: 18448 bytes left
[  304.969878][ T8313] FAT-fs (loop5): Directory bread(block 73) failed
[  305.146923][   T23] usb 1-1: Using ep0 maxpacket: 8
[  305.165521][   T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.590219][ T5794] ocfs2: Unmounting device (7,2) on (node local)
[  305.618705][   T23] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  305.740749][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.754010][   T23] usb 1-1: config 0 descriptor??
[  305.762848][   T23] gspca_main: vc032x-2.14.0 probing 046d:0892
[  305.786506][ T5792] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  306.246063][ T7759] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  306.539719][ T7759] usb 7-1: Using ep0 maxpacket: 16
[  306.722040][ T7759] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  306.842056][ T7759] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  306.913792][ T7759] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  306.948781][ T7759] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  306.976344][ T7759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.984454][ T7759] usb 7-1: Product: syz
[  307.024175][ T7759] usb 7-1: Manufacturer: syz
[  307.031946][ T7759] usb 7-1: SerialNumber: syz
[  307.271602][   T23] gspca_vc032x: reg_w err -71
[  307.287877][   T23] vc032x: probe of 1-1:0.0 failed with error -71
[  307.312858][   T23] usb 1-1: USB disconnect, device number 18
[  307.329129][ T7759] usb 7-1: 0:2 : does not exist
[  307.344642][ T7759] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1)
[  307.406014][ T7759] usb 7-1: USB disconnect, device number 2
[  307.442525][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  308.012602][ T8359] loop0: detected capacity change from 0 to 16
[  308.064238][ T8359] erofs: (device loop0): mounted with root inode @ nid 36.
[  308.124410][ T8359] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  308.138191][ T8359] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  308.149874][ T8359] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  308.345760][ T5848] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  308.464221][ T8371] overlay: ./file0 is not a directory
[  308.537000][ T5848] usb 7-1: Using ep0 maxpacket: 16
[  308.558505][ T5848] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8
[  308.583298][ T8354] loop2: detected capacity change from 0 to 32768
[  308.589218][ T5848] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  308.623045][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.635234][ T8354] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.480 (8354)
[  308.655778][ T5848] usb 7-1: Product: syz
[  308.668313][ T5848] usb 7-1: Manufacturer: syz
[  308.696954][ T5848] usb 7-1: SerialNumber: syz
[  308.717999][ T8354] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  308.755339][ T8354] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  308.765753][ T5848] usb 7-1: config 0 descriptor??
[  308.795022][ T8354] BTRFS info (device loop2): enabling disk space caching
[  308.812719][ T8354] BTRFS info (device loop2): enabling auto defrag
[  308.813843][ T5848] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[  308.857785][ T8354] BTRFS info (device loop2): doing ref verification
[  308.858751][ T5848] usb 7-1: Detected FT232R
[  308.871058][ T8354] BTRFS info (device loop2): use no compression
[  308.905793][ T8354] BTRFS info (device loop2): force clearing of disk cache
[  308.953711][ T8354] BTRFS info (device loop2): disabling disk space caching
[  309.531703][ T5848] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  309.540702][ T5848] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  309.548381][ T5848] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71
[  309.556939][ T5848] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  309.604881][ T5848] usb 7-1: USB disconnect, device number 3
[  309.654209][ T5848] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  309.678662][ T8354] BTRFS info (device loop2): enabling ssd optimizations
[  309.705858][ T8354] BTRFS info (device loop2): auto enabling async discard
[  309.721690][ T5848] ftdi_sio 7-1:0.0: device disconnected
[  309.770693][ T8354] BTRFS info (device loop2): rebuilding free space tree
[  309.844322][ T8354] BTRFS info (device loop2): disabling free space tree
[  309.868459][ T8354] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  309.913104][ T8354] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  310.273471][ T5794] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  310.295016][ T8365] loop5: detected capacity change from 0 to 40427
[  310.362402][ T8365] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff
[  310.410109][ T8365] F2FS-fs (loop5): invalid crc value
[  310.500185][ T8365] F2FS-fs (loop5): Found nat_bits in checkpoint
[  310.760585][ T8365] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  310.906492][   T28] audit: type=1800 audit(1756056775.904:38): pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.483" name="file1" dev="loop5" ino=10 res=0 errno=0
[  311.127496][ T7571] syz-executor: attempt to access beyond end of device
[  311.127496][ T7571] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  311.157111][ T7571] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  313.277777][ T8440] loop0: detected capacity change from 0 to 16
[  313.306377][ T5829] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  313.335766][ T8440] erofs: (device loop0): mounted with root inode @ nid 36.
[  313.396943][ T8440] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  313.417104][ T8440] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  313.429157][ T8440] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  313.527431][ T5829] usb 7-1: Using ep0 maxpacket: 16
[  313.584050][ T5829] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  313.602847][ T5829] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  313.636718][ T5829] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  313.658336][ T5829] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  313.670905][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.843418][ T5829] usb 7-1: Product: syz
[  313.847711][ T5829] usb 7-1: Manufacturer: syz
[  313.852447][ T5829] usb 7-1: SerialNumber: syz
[  313.975876][ T5875] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  314.108617][ T5829] usb 7-1: 0:2 : does not exist
[  314.128391][ T5829] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1)
[  314.171426][ T5875] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  314.187352][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.189025][ T5829] usb 7-1: USB disconnect, device number 4
[  314.223988][ T5875] usb 1-1: Product: syz
[  314.243474][ T5875] usb 1-1: Manufacturer: syz
[  314.257164][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  314.282053][ T5875] usb 1-1: SerialNumber: syz
[  314.305407][ T5875] usb 1-1: config 0 descriptor??
[  314.534368][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'.
[  314.642118][ T5875] cx82310_eth: probe of 1-1:0.0 failed with error -22
[  314.698142][ T5875] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  314.749285][ T5875] usb 1-1: USB disconnect, device number 19
[  315.186063][ T5829] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  315.398002][ T5829] usb 7-1: Using ep0 maxpacket: 16
[  315.442052][ T5829] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8
[  315.478456][ T5829] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  315.506698][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.525655][ T5829] usb 7-1: Product: syz
[  315.529905][ T5829] usb 7-1: Manufacturer: syz
[  315.544753][ T5829] usb 7-1: SerialNumber: syz
[  315.556905][ T5829] usb 7-1: config 0 descriptor??
[  315.578947][ T8462] loop5: detected capacity change from 0 to 32768
[  315.587634][ T5829] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[  315.626037][ T8462] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.494 (8462)
[  315.639623][ T5829] usb 7-1: Detected FT232R
[  315.674107][ T8462] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  315.705864][ T8462] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  315.714694][ T8462] BTRFS info (device loop5): enabling disk space caching
[  315.742611][ T8462] BTRFS info (device loop5): enabling auto defrag
[  315.755796][ T8462] BTRFS info (device loop5): doing ref verification
[  315.762563][ T8462] BTRFS info (device loop5): use no compression
[  315.783891][ T8462] BTRFS info (device loop5): force clearing of disk cache
[  315.801520][ T8462] BTRFS info (device loop5): disabling disk space caching
[  316.109625][ T5829] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  316.124490][ T5829] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  316.132042][ T5829] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71
[  316.147607][ T5829] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  316.161367][ T5829] usb 7-1: USB disconnect, device number 5
[  316.186758][ T5829] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  316.229839][ T8462] BTRFS info (device loop5): enabling ssd optimizations
[  316.233399][ T5829] ftdi_sio 7-1:0.0: device disconnected
[  316.251850][ T8462] BTRFS info (device loop5): auto enabling async discard
[  316.289723][ T8462] BTRFS info (device loop5): rebuilding free space tree
[  316.318688][ T8462] BTRFS info (device loop5): disabling free space tree
[  316.336093][ T8462] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  316.355768][ T8462] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  316.460143][ T8462] BTRFS info (device loop5): balance: start -susage=12884901897,drange=145..0
[  316.493222][ T8462] BTRFS info (device loop5): relocating block group 1048576 flags system
[  316.736604][ T8462] BTRFS info (device loop5): balance: ended with status: 0
[  316.877041][ T7571] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  316.915493][ T8469] loop0: detected capacity change from 0 to 40427
[  316.952891][ T8469] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff
[  317.011802][ T8469] F2FS-fs (loop0): invalid crc value
[  317.079895][ T8469] F2FS-fs (loop0): Found nat_bits in checkpoint
[  317.519209][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  318.509004][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  318.756800][ T8517] loop6: detected capacity change from 0 to 16
[  318.795222][ T8517] erofs: (device loop6): mounted with root inode @ nid 36.
[  318.861940][ T8517] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  318.873348][ T8517] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  318.884531][ T8517] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  319.261667][ T8527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  319.269008][ T8527] IPv6: NLM_F_CREATE should be set when creating new route
[  319.276369][ T8527] IPv6: NLM_F_CREATE should be set when creating new route
[  319.283616][ T8527] IPv6: NLM_F_CREATE should be set when creating new route
[  320.526019][  T967] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  320.745848][  T967] usb 3-1: Using ep0 maxpacket: 16
[  320.770092][  T967] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  320.812429][  T967] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  320.855642][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.883788][  T967] usb 3-1: Product: syz
[  320.904216][  T967] usb 3-1: Manufacturer: syz
[  320.928261][  T967] usb 3-1: SerialNumber: syz
[  320.955447][  T967] usb 3-1: config 0 descriptor??
[  320.993420][  T967] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  321.029532][  T967] usb 3-1: Detected FT232R
[  321.434433][  T967] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  321.510251][  T967] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  321.561983][  T967] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  321.582306][  T967] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  321.625874][  T967] usb 3-1: USB disconnect, device number 18
[  321.663737][  T967] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  321.705268][  T967] ftdi_sio 3-1:0.0: device disconnected
[  321.930849][ T8535] loop6: detected capacity change from 0 to 32768
[  323.236960][ T8564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  323.258554][ T8571] loop6: detected capacity change from 0 to 256
[  323.377612][ T8571] FAT-fs (loop6): Directory bread(block 64) failed
[  323.416902][ T8571] FAT-fs (loop6): Directory bread(block 65) failed
[  323.424400][ T8571] FAT-fs (loop6): Directory bread(block 66) failed
[  323.431219][ T8571] FAT-fs (loop6): Directory bread(block 67) failed
[  323.438337][ T8571] FAT-fs (loop6): Directory bread(block 68) failed
[  323.444914][ T8571] FAT-fs (loop6): Directory bread(block 69) failed
[  323.487940][ T8571] FAT-fs (loop6): Directory bread(block 70) failed
[  323.637238][ T8571] FAT-fs (loop6): Directory bread(block 71) failed
[  323.689688][ T8571] FAT-fs (loop6): Directory bread(block 72) failed
[  323.751955][ T8571] FAT-fs (loop6): Directory bread(block 73) failed
[  323.902856][ T5792] Bluetooth: hci2: unexpected event for opcode 0x0c03
[  324.396681][ T5792] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  324.925756][ T7308] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  325.475669][ T7308] usb 3-1: Using ep0 maxpacket: 16
[  325.509152][ T7308] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  325.596672][ T7308] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  325.652037][ T7308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.680513][ T7308] usb 3-1: Product: syz
[  325.715438][ T7308] usb 3-1: Manufacturer: syz
[  325.720860][ T7308] usb 3-1: SerialNumber: syz
[  325.761493][ T7308] usb 3-1: config 0 descriptor??
[  325.798659][ T7308] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  325.837135][ T7308] usb 3-1: Detected FT232R
[  326.275994][ T7308] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  326.456270][ T7308] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  326.471161][ T7308] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  327.777117][ T7308] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  327.798133][ T7308] usb 3-1: USB disconnect, device number 19
[  327.810131][ T7308] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  328.222217][ T7308] ftdi_sio 3-1:0.0: device disconnected
[  329.855858][ T8630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  330.181752][ T8622] loop5: detected capacity change from 0 to 32768
[  330.376052][ T8622] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  330.427075][   T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  330.518875][ T8622] OCFS2: ERROR (device loop5): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 17058 has bad extent record (0, 8, 0)
[  330.542189][ T8622] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  330.554906][ T8622] OCFS2: File system is now read-only.
[  330.565981][ T8622] (syz.5.520,8622,1):ocfs2_seek_data_hole_offset:902 ERROR: status = -30
[  330.672062][   T23] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  330.692942][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.724011][   T23] usb 3-1: Product: syz
[  330.733901][ T7571] ocfs2: Unmounting device (7,5) on (node local)
[  330.744432][   T23] usb 3-1: Manufacturer: syz
[  330.777087][   T23] usb 3-1: SerialNumber: syz
[  330.796960][   T23] usb 3-1: config 0 descriptor??
[  331.006189][ T5875] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  331.022694][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.525'.
[  331.048882][ T8642] loop6: detected capacity change from 0 to 32768
[  331.073124][   T23] cx82310_eth: probe of 3-1:0.0 failed with error -22
[  331.083323][ T8642] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.528 (8642)
[  331.104603][   T23] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  331.137841][   T23] usb 3-1: USB disconnect, device number 20
[  331.192788][ T8642] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  331.206088][ T5875] usb 1-1: Using ep0 maxpacket: 16
[  331.219360][ T5875] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  331.220791][ T8642] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  331.232589][ T5875] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  331.249521][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.263535][ T5875] usb 1-1: Product: syz
[  331.274158][ T8642] BTRFS info (device loop6): enabling disk space caching
[  331.301789][ T8642] BTRFS info (device loop6): enabling auto defrag
[  331.337756][ T8642] BTRFS info (device loop6): doing ref verification
[  331.383552][ T8642] BTRFS info (device loop6): use no compression
[  331.414074][ T8642] BTRFS info (device loop6): force clearing of disk cache
[  331.455811][ T8642] BTRFS info (device loop6): disabling disk space caching
[  331.484401][ T5875] usb 1-1: Manufacturer: syz
[  331.490185][ T5875] usb 1-1: SerialNumber: syz
[  331.509839][ T5875] usb 1-1: config 0 descriptor??
[  331.524064][ T5875] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  331.546967][ T5875] usb 1-1: Detected FT232R
[  332.553001][ T8642] BTRFS info (device loop6): enabling ssd optimizations
[  332.608229][ T8642] BTRFS info (device loop6): auto enabling async discard
[  332.688769][ T8642] BTRFS info (device loop6): rebuilding free space tree
[  332.801817][ T8642] BTRFS info (device loop6): disabling free space tree
[  332.841921][ T8642] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  332.909512][ T8642] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  333.704232][ T5875] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  333.733459][ T5875] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  333.741004][ T5875] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  333.751906][ T5875] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  333.763107][ T5875] usb 1-1: USB disconnect, device number 20
[  333.772262][ T5875] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  333.783137][ T5875] ftdi_sio 1-1:0.0: device disconnected
[  333.975821][ T8063] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  333.990666][ T8695] loop5: detected capacity change from 0 to 256
[  334.076969][ T8696] autofs4:pid:8696:autofs_fill_super: called with bogus options
[  334.267219][ T8695] FAT-fs (loop5): Directory bread(block 64) failed
[  334.273918][ T8695] FAT-fs (loop5): Directory bread(block 65) failed
[  334.334200][ T8695] FAT-fs (loop5): Directory bread(block 66) failed
[  334.366253][ T8695] FAT-fs (loop5): Directory bread(block 67) failed
[  334.372945][ T8695] FAT-fs (loop5): Directory bread(block 68) failed
[  334.410103][ T8702] loop2: detected capacity change from 0 to 256
[  334.430346][ T8695] FAT-fs (loop5): Directory bread(block 69) failed
[  334.454112][ T8695] FAT-fs (loop5): Directory bread(block 70) failed
[  334.482355][ T8695] FAT-fs (loop5): Directory bread(block 71) failed
[  334.518721][ T8695] FAT-fs (loop5): Directory bread(block 72) failed
[  334.542948][ T8695] FAT-fs (loop5): Directory bread(block 73) failed
[  334.594758][ T8702] FAT-fs (loop2): Directory bread(block 64) failed
[  334.624887][ T8702] FAT-fs (loop2): Directory bread(block 65) failed
[  334.666761][ T8702] FAT-fs (loop2): Directory bread(block 66) failed
[  334.673805][ T8702] FAT-fs (loop2): Directory bread(block 67) failed
[  334.725996][ T8702] FAT-fs (loop2): Directory bread(block 68) failed
[  334.732617][ T8702] FAT-fs (loop2): Directory bread(block 69) failed
[  334.738256][ T8701] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  334.775928][ T8702] FAT-fs (loop2): Directory bread(block 70) failed
[  334.782559][ T8702] FAT-fs (loop2): Directory bread(block 71) failed
[  334.856020][ T8702] FAT-fs (loop2): Directory bread(block 72) failed
[  334.862670][ T8702] FAT-fs (loop2): Directory bread(block 73) failed
[  335.278199][ T5792] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  335.340570][ T8704] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  335.806456][ T8704] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  335.812647][ T8704] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  335.915749][ T8704] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  337.735711][   T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  337.835716][ T5793] Bluetooth: hci1: command 0x0c1a tx timeout
[  337.841835][ T5793] Bluetooth: hci2: command 0x0406 tx timeout
[  337.916195][ T5793] Bluetooth: hci3: command 0x0c1a tx timeout
[  337.951766][   T23] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  337.969614][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.988097][   T23] usb 3-1: Product: syz
[  337.992334][   T23] usb 3-1: Manufacturer: syz
[  338.082824][   T23] usb 3-1: SerialNumber: syz
[  338.100242][   T23] usb 3-1: config 0 descriptor??
[  339.938682][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'.
[  340.036555][   T23] cx82310_eth: probe of 3-1:0.0 failed with error -22
[  340.086372][   T23] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  340.119065][   T23] usb 3-1: USB disconnect, device number 21
[  340.824051][ T8753] autofs4:pid:8753:autofs_fill_super: called with bogus options
[  341.160094][    T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  341.580223][    T8] usb 1-1: Using ep0 maxpacket: 16
[  341.598385][    T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  341.612578][    T8] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  341.622963][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.635721][    T8] usb 1-1: Product: syz
[  341.639935][    T8] usb 1-1: Manufacturer: syz
[  341.655179][    T8] usb 1-1: SerialNumber: syz
[  341.662912][    T8] usb 1-1: config 0 descriptor??
[  341.674418][ T8757] loop5: detected capacity change from 0 to 2048
[  341.693193][    T8] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  341.722034][    T8] usb 1-1: Detected FT232R
[  341.732829][ T8757] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  341.766302][ T8757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  341.789733][ T8745] loop6: detected capacity change from 0 to 32768
[  341.907565][ T8745] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  341.956540][   T28] audit: type=1800 audit(1756056806.964:39): pid=8745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.542" name="file1" dev="loop6" ino=17058 res=0 errno=0
[  341.987401][    T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  342.017289][    T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  342.024747][    T8] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  342.041073][    T8] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  342.063109][    T8] usb 1-1: USB disconnect, device number 21
[  342.076664][    T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  342.098075][    T8] ftdi_sio 1-1:0.0: device disconnected
[  342.178877][ T8770] loop6: detected capacity change from 32768 to 64
[  342.234156][ T8745] syz.6.542: attempt to access beyond end of device
[  342.234156][ T8745] loop6: rw=2049, sector=9618, nr_sectors = 1 limit=64
[  342.246947][ T8769] syz.6.542: attempt to access beyond end of device
[  342.246947][ T8769] loop6: rw=2049, sector=9641, nr_sectors = 1 limit=64
[  342.349043][ T8745] Buffer I/O error on dev loop6, logical block 9618, lost async page write
[  342.360172][   T28] audit: type=1804 audit(1756056807.364:40): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.542" name="/newroot/18/file1/file1" dev="loop6" ino=17058 res=1 errno=0
[  342.404289][ T8769] Buffer I/O error on dev loop6, logical block 9641, lost async page write
[  342.418311][ T8745] syz.6.542: attempt to access beyond end of device
[  342.418311][ T8745] loop6: rw=2049, sector=9619, nr_sectors = 1 limit=64
[  342.441944][   T28] audit: type=1800 audit(1756056807.364:41): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.542" name="file1" dev="loop6" ino=17058 res=0 errno=0
[  342.551801][ T8769] syz.6.542: attempt to access beyond end of device
[  342.551801][ T8769] loop6: rw=2049, sector=9642, nr_sectors = 1 limit=64
[  342.597838][ T8745] Buffer I/O error on dev loop6, logical block 9619, lost async page write
[  342.614362][ T8781] loop5: detected capacity change from 0 to 2048
[  342.638929][ T8781] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  342.649903][ T8745] syz.6.542: attempt to access beyond end of device
[  342.649903][ T8745] loop6: rw=2049, sector=9620, nr_sectors = 1 limit=64
[  342.664953][ T8769] Buffer I/O error on dev loop6, logical block 9642, lost async page write
[  342.675080][ T8781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  342.685209][ T8769] syz.6.542: attempt to access beyond end of device
[  342.685209][ T8769] loop6: rw=2049, sector=9643, nr_sectors = 1 limit=64
[  342.720259][ T8745] Buffer I/O error on dev loop6, logical block 9620, lost async page write
[  342.730260][ T8745] syz.6.542: attempt to access beyond end of device
[  342.730260][ T8745] loop6: rw=2049, sector=9621, nr_sectors = 1 limit=64
[  342.744450][ T8769] Buffer I/O error on dev loop6, logical block 9643, lost async page write
[  342.761424][ T8769] syz.6.542: attempt to access beyond end of device
[  342.761424][ T8769] loop6: rw=2049, sector=9644, nr_sectors = 1 limit=64
[  342.799227][ T8745] Buffer I/O error on dev loop6, logical block 9621, lost async page write
[  342.818386][ T8745] syz.6.542: attempt to access beyond end of device
[  342.818386][ T8745] loop6: rw=2049, sector=9622, nr_sectors = 1 limit=64
[  342.832376][ T8769] Buffer I/O error on dev loop6, logical block 9644, lost async page write
[  342.843711][ T8769] syz.6.542: attempt to access beyond end of device
[  342.843711][ T8769] loop6: rw=2049, sector=9645, nr_sectors = 1 limit=64
[  342.857589][ T8745] Buffer I/O error on dev loop6, logical block 9622, lost async page write
[  342.885681][ T8745] Buffer I/O error on dev loop6, logical block 9623, lost async page write
[  342.899240][ T8764] JBD2: I/O error when updating journal superblock for loop6-75.
[  342.921043][ T8764] Aborting journal on device loop6-75.
[  342.936416][ T8764] JBD2: I/O error when updating journal superblock for loop6-75.
[  342.944749][ T8764] journal_release_journal_head: freeing b_committed_data
[  342.961295][ T8063] (syz-executor,8063,1):ocfs2_read_locked_inode:521 ERROR: status = -5
[  342.974334][ T8063] (syz-executor,8063,1):ocfs2_read_locked_inode:521 ERROR: status = -5
[  343.509484][ T8789] autofs4:pid:8789:autofs_fill_super: called with bogus options
[  343.541738][ T7759] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  343.559997][ T8063] (syz-executor,8063,0):__ocfs2_flush_truncate_log:6034 ERROR: status = -5
[  343.585529][ T8063] (syz-executor,8063,0):ocfs2_sync_fs:404 ERROR: status = -5
[  343.626193][ T8063] (syz-executor,8063,1):__ocfs2_flush_truncate_log:6034 ERROR: status = -5
[  343.648142][ T8063] (syz-executor,8063,1):ocfs2_truncate_log_shutdown:6323 ERROR: status = -5
[  343.665808][ T8063] (syz-executor,8063,1):ocfs2_write_block:78 ERROR: status = -5
[  343.678140][ T8063] (syz-executor,8063,1):ocfs2_update_disk_slot:199 ERROR: status = -5
[  343.687072][ T8063] (syz-executor,8063,1):ocfs2_put_slot:517 ERROR: status = -5
[  343.695472][ T8063] (syz-executor,8063,1):ocfs2_journal_shutdown:1107 ERROR: status = -5
[  343.704773][ T8063] ocfs2: Unmounting device (7,6) on (node local)
[  343.786115][ T7759] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  343.795236][ T7759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.834539][ T7759] usb 3-1: Product: syz
[  343.849134][ T7759] usb 3-1: Manufacturer: syz
[  343.853810][ T7759] usb 3-1: SerialNumber: syz
[  343.898421][ T7759] usb 3-1: config 0 descriptor??
[  344.137982][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'.
[  344.269575][ T7759] cx82310_eth: probe of 3-1:0.0 failed with error -22
[  344.302402][ T7759] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  344.323619][ T7759] usb 3-1: USB disconnect, device number 22
[  344.536526][  T967] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  344.632998][   T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.717638][ T8794] loop5: detected capacity change from 0 to 32768
[  344.745042][ T8794] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.558 (8794)
[  344.765900][  T967] usb 1-1: Using ep0 maxpacket: 16
[  344.785356][  T967] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  344.804101][   T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  344.820328][  T967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  344.848153][ T8794] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  344.858622][  T967] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  344.874437][ T8794] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  344.905432][ T8794] BTRFS info (device loop5): setting nodatacow, compression disabled
[  344.916700][  T967] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  344.947055][  T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.955142][  T967] usb 1-1: Product: syz
[  344.965818][ T8794] BTRFS info (device loop5): max_inline at 0
[  344.971892][ T8794] BTRFS info (device loop5): enabling disk space caching
[  345.000854][  T967] usb 1-1: Manufacturer: syz
[  345.015868][ T8794] BTRFS info (device loop5): turning off barriers
[  345.015913][  T967] usb 1-1: SerialNumber: syz
[  345.022386][ T8794] BTRFS info (device loop5): turning on flush-on-commit
[  345.022415][ T8794] BTRFS info (device loop5): doing ref verification
[  345.022439][ T8794] BTRFS info (device loop5): force clearing of disk cache
[  345.055801][ T8794] BTRFS info (device loop5): max_inline at 4096
[  345.067114][ T8794] BTRFS info (device loop5): disk space caching is enabled
[  345.078350][   T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.111309][ T8816] loop2: detected capacity change from 0 to 2048
[  345.132109][ T8816] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  345.149571][ T8816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  345.307829][ T8794] BTRFS info (device loop5): enabling ssd optimizations
[  345.314907][ T8794] BTRFS info (device loop5): auto enabling async discard
[  345.324472][   T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.347768][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.355338][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.363164][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.370713][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.378822][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.386405][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.393787][  T967] usb 1-1: 0:2 : does not exist
[  345.399098][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.406909][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.414605][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.422192][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.432411][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.440029][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.447648][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.455131][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.462884][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.470634][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.478638][  T967] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1)
[  345.487478][    C1] raw-gadget.1 gadget.0: ignoring, device is not running
[  345.508910][ T8794] BTRFS info (device loop5): rebuilding free space tree
[  345.528313][  T967] usb 1-1: USB disconnect, device number 22
[  345.622955][ T8794] BTRFS info (device loop5): disabling free space tree
[  345.660270][ T8794] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  345.666562][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  345.734163][ T8794] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  346.101803][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  346.168048][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  346.182050][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  346.191156][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  346.200629][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  346.209997][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  346.476957][ T8850] autofs4:pid:8850:autofs_fill_super: called with bogus options
[  346.921703][ T8843] chnl_net:caif_netlink_parms(): no params data found
[  347.025933][   T27] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  347.119432][ T7571] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  347.256120][   T27] usb 1-1: Using ep0 maxpacket: 16
[  347.284234][   T27] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  347.355973][   T27] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  347.371124][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.380800][   T27] usb 1-1: Product: syz
[  347.385545][   T27] usb 1-1: Manufacturer: syz
[  347.391261][   T27] usb 1-1: SerialNumber: syz
[  347.399774][   T27] usb 1-1: config 0 descriptor??
[  347.427744][   T27] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  347.487695][   T27] usb 1-1: Detected FT232R
[  347.724688][   T27] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  347.746135][   T27] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  347.758941][   T27] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  347.776570][   T27] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  347.951881][ T8843] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.020457][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.113477][ T8843] bridge_slave_0: entered allmulticast mode
[  348.217097][ T8843] bridge_slave_0: entered promiscuous mode
[  348.293077][ T5793] Bluetooth: hci3: command tx timeout
[  348.358186][ T8843] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.403717][ T8881] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  348.425206][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.489040][ T8843] bridge_slave_1: entered allmulticast mode
[  348.600906][ T8843] bridge_slave_1: entered promiscuous mode
[  349.827141][   T27] usb 1-1: USB disconnect, device number 23
[  350.315797][ T5793] Bluetooth: hci3: command tx timeout
[  350.446102][ T5842] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  350.702885][ T8843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.720240][ T5842] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  350.733552][   T27] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  350.747507][   T27] ftdi_sio 1-1:0.0: device disconnected
[  350.760681][ T8843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.779325][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.951556][ T5842] usb 3-1: Product: syz
[  350.968141][ T5842] usb 3-1: Manufacturer: syz
[  350.972772][ T5842] usb 3-1: SerialNumber: syz
[  350.998225][ T5842] usb 3-1: config 0 descriptor??
[  351.404818][ T8907] autofs4:pid:8907:autofs_fill_super: called with bogus options
[  351.538548][ T8843] team0: Port device team_slave_0 added
[  351.559222][ T8843] team0: Port device team_slave_1 added
[  351.565960][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'.
[  351.610880][ T5842] cx82310_eth: probe of 3-1:0.0 failed with error -22
[  351.650388][ T5842] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  351.691246][ T5842] usb 3-1: USB disconnect, device number 23
[  351.763699][ T8911] autofs4:pid:8911:autofs_fill_super: called with bogus options
[  351.801503][ T8911] loop0: detected capacity change from 0 to 136
[  351.862147][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.884466][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.928587][ T8843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.062617][ T8843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.083276][ T8843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.132349][ T8843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.396555][ T5793] Bluetooth: hci3: command tx timeout
[  352.481662][   T58] hsr_slave_0: left promiscuous mode
[  352.513436][   T58] hsr_slave_1: left promiscuous mode
[  352.524923][ T8930] loop2: detected capacity change from 0 to 2048
[  352.546930][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  352.566180][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  352.588255][ T8930] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  352.609960][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  352.630184][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.638218][ T8930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  352.648935][   T58] bridge_slave_1: left allmulticast mode
[  352.654634][   T58] bridge_slave_1: left promiscuous mode
[  352.668462][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.699364][   T58] bridge_slave_0: left allmulticast mode
[  352.705065][   T58] bridge_slave_0: left promiscuous mode
[  352.726282][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.854416][   T58] veth1_macvtap: left promiscuous mode
[  352.864942][   T58] veth0_macvtap: left promiscuous mode
[  352.876356][   T58] veth1_vlan: left promiscuous mode
[  352.902104][   T58] veth0_vlan: left promiscuous mode
[  353.015182][ T8942] autofs4:pid:8942:autofs_fill_super: called with bogus options
[  353.165644][ T8923] loop5: detected capacity change from 0 to 32768
[  353.198371][ T8923] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.579 (8923)
[  353.253990][ T8923] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  353.301475][ T8923] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  353.330293][ T8923] BTRFS info (device loop5): using free space tree
[  353.515993][ T8923] BTRFS info (device loop5): enabling ssd optimizations
[  353.523131][ T8923] BTRFS info (device loop5): auto enabling async discard
[  353.578505][   T28] audit: type=1800 audit(1756056818.594:42): pid=8923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.579" name="file1" dev="loop5" ino=260 res=0 errno=0
[  353.775755][ T7308] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  353.844241][ T7571] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  353.985735][ T7308] usb 3-1: Using ep0 maxpacket: 16
[  353.993162][ T7308] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  354.029019][ T7308] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  354.040239][ T7308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  354.054946][ T7308] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  354.072329][ T7308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.081903][ T7308] usb 3-1: Product: syz
[  354.086467][ T7308] usb 3-1: Manufacturer: syz
[  354.091105][ T7308] usb 3-1: SerialNumber: syz
[  354.344578][ T7308] usb 3-1: 0:2 : does not exist
[  354.387817][ T7308] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1)
[  354.436319][ T7308] usb 3-1: USB disconnect, device number 24
[  354.478033][ T5793] Bluetooth: hci3: command tx timeout
[  354.479266][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  354.649409][   T58] team0 (unregistering): Port device team_slave_1 removed
[  354.714837][   T58] team0 (unregistering): Port device team_slave_0 removed
[  354.779414][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.814066][ T8969] loop5: detected capacity change from 0 to 32768
[  354.825803][ T8969] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.587 (8969)
[  354.854566][ T8969] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  354.871085][ T8969] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  354.881576][ T8969] BTRFS info (device loop5): setting nodatacow, compression disabled
[  354.899073][ T8969] BTRFS info (device loop5): max_inline at 0
[  354.921779][ T8969] BTRFS info (device loop5): enabling disk space caching
[  354.937559][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.947017][ T8969] BTRFS info (device loop5): turning off barriers
[  354.953505][ T8969] BTRFS info (device loop5): turning on flush-on-commit
[  354.987652][ T8969] BTRFS info (device loop5): doing ref verification
[  355.004700][ T8969] BTRFS info (device loop5): force clearing of disk cache
[  355.035680][ T8969] BTRFS info (device loop5): max_inline at 4096
[  355.042013][ T8969] BTRFS info (device loop5): disk space caching is enabled
[  355.184747][ T8969] BTRFS info (device loop5): enabling ssd optimizations
[  355.219552][ T8969] BTRFS info (device loop5): auto enabling async discard
[  355.272819][ T8969] BTRFS info (device loop5): rebuilding free space tree
[  355.336176][ T8969] BTRFS info (device loop5): disabling free space tree
[  355.343706][ T8969] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  355.364041][ T8969] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  355.499212][ T8969] overlayfs: failed to resolve './bus': -2
[  355.608778][ T7571] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  355.898606][ T8993] loop5: detected capacity change from 0 to 2048
[  355.939950][ T8993] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  355.962888][ T8993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  356.362486][   T58] bond0 (unregistering): Released all slaves
[  356.497827][    T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  356.509511][ T8843] hsr_slave_0: entered promiscuous mode
[  356.527117][ T8843] hsr_slave_1: entered promiscuous mode
[  356.534617][ T8843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  356.543018][ T8843] Cannot create hsr debugfs directory
[  356.698047][ T9001] autofs4:pid:9001:autofs_fill_super: called with bogus options
[  356.740040][    T8] usb 6-1: Using ep0 maxpacket: 32
[  356.775283][    T8] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  356.816528][    T8] usb 6-1: config 0 has no interface number 0
[  356.826971][    T8] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  356.866011][    T8] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  356.891980][    T8] usb 6-1: config 0 interface 85 has no altsetting 0
[  356.931075][    T8] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  356.953100][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.977387][    T8] usb 6-1: Product: syz
[  356.981615][    T8] usb 6-1: Manufacturer: syz
[  356.994282][    T8] usb 6-1: SerialNumber: syz
[  357.049503][    T8] usb 6-1: config 0 descriptor??
[  357.376343][    T8] appletouch 6-1:0.85: Failed to read mode from device.
[  357.398090][ T9013] overlayfs: failed to resolve './bus': -2
[  357.412345][    T8] appletouch: probe of 6-1:0.85 failed with error -5
[  357.459837][    T8] usb 6-1: USB disconnect, device number 10
[  357.613698][ T8843] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  357.635440][ T8843] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  357.681006][ T8843] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  357.717492][ T8843] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  358.315699][   T27] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  358.438638][ T8843] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.517300][   T27] usb 1-1: Using ep0 maxpacket: 16
[  358.530294][   T27] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  358.540171][   T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  358.541924][ T8843] 8021q: adding VLAN 0 to HW filter on device team0
[  358.560595][   T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  358.587582][   T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  358.610450][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.619994][   T27] usb 1-1: Product: syz
[  358.624365][   T27] usb 1-1: Manufacturer: syz
[  358.629714][   T27] usb 1-1: SerialNumber: syz
[  358.657369][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.664814][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.771101][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.778322][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.893771][   T27] usb 1-1: 0:2 : does not exist
[  358.951423][   T27] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1)
[  359.104496][   T27] usb 1-1: USB disconnect, device number 24
[  359.210905][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  359.482476][ T9043] loop5: detected capacity change from 0 to 2048
[  359.558316][ T9043] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  359.617155][ T9043] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  359.661551][ T9051] autofs4:pid:9051:autofs_fill_super: called with bogus options
[  359.672234][ T9049] loop2: detected capacity change from 0 to 2048
[  359.713877][ T9049] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  359.804296][ T9049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  359.915087][ T8843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.867331][ T8843] veth0_vlan: entered promiscuous mode
[  360.913934][ T8843] veth1_vlan: entered promiscuous mode
[  361.032364][ T8843] veth0_macvtap: entered promiscuous mode
[  361.068388][ T8843] veth1_macvtap: entered promiscuous mode
[  361.112296][ T8843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.130048][ T8843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.134644][ T9068] loop2: detected capacity change from 0 to 32768
[  361.146401][ T8843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.164781][ T8843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.181646][ T9068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.604 (9068)
[  361.200500][ T9068] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  361.206527][ T8843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.228465][ T8843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.242947][ T9068] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  361.273751][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  361.300643][ T9068] BTRFS info (device loop2): setting nodatacow, compression disabled
[  361.331809][ T9068] BTRFS info (device loop2): max_inline at 0
[  361.360792][ T9068] BTRFS info (device loop2): enabling disk space caching
[  361.373587][ T9068] BTRFS info (device loop2): turning off barriers
[  361.392804][ T8843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.398986][ T9068] BTRFS info (device loop2): turning on flush-on-commit
[  361.424675][ T9068] BTRFS info (device loop2): doing ref verification
[  361.446005][ T9068] BTRFS info (device loop2): force clearing of disk cache
[  361.454105][ T9068] BTRFS info (device loop2): max_inline at 4096
[  361.460656][ T8843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.484923][ T8843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.496745][ T9068] BTRFS info (device loop2): disk space caching is enabled
[  361.514411][ T8843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.541244][ T8843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  361.556205][ T8843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.570693][ T8843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.634854][ T8843] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.685656][ T8843] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.694457][ T8843] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.715719][ T9068] BTRFS info (device loop2): enabling ssd optimizations
[  361.723275][ T9068] BTRFS info (device loop2): auto enabling async discard
[  361.762600][ T8843] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.785708][ T9068] BTRFS info (device loop2): rebuilding free space tree
[  361.795792][   T27] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  361.876262][ T9068] BTRFS info (device loop2): disabling free space tree
[  361.883358][ T9068] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  361.915447][ T9068] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  361.995923][   T27] usb 6-1: Using ep0 maxpacket: 32
[  362.021513][   T27] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  362.043188][   T27] usb 6-1: config 0 has no interface number 0
[  362.064882][   T27] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  362.080926][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.105854][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.124255][   T27] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  362.153250][   T27] usb 6-1: config 0 interface 85 has no altsetting 0
[  362.185432][   T27] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  362.213951][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.234674][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.254259][   T27] usb 6-1: Product: syz
[  362.264947][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.273401][   T27] usb 6-1: Manufacturer: syz
[  362.295200][   T27] usb 6-1: SerialNumber: syz
[  362.355812][   T27] usb 6-1: config 0 descriptor??
[  362.556723][ T5794] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  362.612948][   T27] appletouch 6-1:0.85: Failed to read mode from device.
[  362.649654][   T27] appletouch: probe of 6-1:0.85 failed with error -5
[  362.675695][   T27] usb 6-1: USB disconnect, device number 11
[  362.802692][ T9120] loop0: detected capacity change from 0 to 136
[  362.922414][ T9128] loop7: detected capacity change from 0 to 2048
[  363.036062][ T9128] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  363.094094][ T9128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  363.521935][ T9137] overlay: ./file0 is not a directory
[  369.422054][ T9151] loop7: detected capacity change from 0 to 128
[  369.477123][ T9151] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  369.485777][ T7308] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  369.531052][ T9153] loop0: detected capacity change from 0 to 128
[  369.624735][ T9153] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  369.737965][ T7308] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  369.778333][ T7308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.821948][ T7308] usb 6-1: Product: syz
[  369.846373][ T7308] usb 6-1: Manufacturer: syz
[  369.852383][ T7308] usb 6-1: SerialNumber: syz
[  369.876393][ T7308] usb 6-1: config 0 descriptor??
[  370.025450][ T9161] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  370.072446][ T9158] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  370.117716][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.614'.
[  370.174509][ T7308] cx82310_eth: probe of 6-1:0.0 failed with error -22
[  370.203050][ T7308] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  370.218761][ T7308] usb 6-1: USB disconnect, device number 12
[  371.285487][ T9180] loop2: detected capacity change from 0 to 2048
[  371.320755][ T9180] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  371.370628][ T9184] loop7: detected capacity change from 0 to 128
[  371.388747][ T9180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  371.415857][ T9184] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  371.472926][ T9180] overlayfs: failed to resolve './file1': -2
[  371.776319][ T9190] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  371.842964][ T9192] loop2: detected capacity change from 0 to 128
[  371.875490][ T9192] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  371.962112][ T7308] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  372.125835][ T9176] loop5: detected capacity change from 0 to 32768
[  372.149454][ T9176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.619 (9176)
[  372.176657][ T7308] usb 1-1: Using ep0 maxpacket: 32
[  372.214809][ T7308] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  372.243666][ T7308] usb 1-1: config 0 has no interface number 0
[  372.263396][ T7308] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  372.309966][ T7308] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  372.333904][ T9176] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  372.359234][ T7308] usb 1-1: config 0 interface 85 has no altsetting 0
[  372.368387][ T9176] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  372.388902][ T7308] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  372.396479][ T9176] BTRFS info (device loop5): setting nodatacow, compression disabled
[  372.428815][ T7308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.431173][ T9176] BTRFS info (device loop5): max_inline at 0
[  372.457963][ T7308] usb 1-1: Product: syz
[  372.467864][ T7308] usb 1-1: Manufacturer: syz
[  372.468760][ T9176] BTRFS info (device loop5): enabling disk space caching
[  372.482734][ T7308] usb 1-1: SerialNumber: syz
[  372.504419][ T9176] BTRFS info (device loop5): turning off barriers
[  372.510188][ T7308] usb 1-1: config 0 descriptor??
[  372.531303][ T9176] BTRFS info (device loop5): turning on flush-on-commit
[  372.559307][ T9176] BTRFS info (device loop5): doing ref verification
[  372.583586][ T9176] BTRFS info (device loop5): force clearing of disk cache
[  372.611706][ T9176] BTRFS info (device loop5): max_inline at 4096
[  372.633158][ T9176] BTRFS info (device loop5): disk space caching is enabled
[  372.821637][ T7308] appletouch 1-1:0.85: Failed to read mode from device.
[  372.850684][ T7308] appletouch: probe of 1-1:0.85 failed with error -5
[  372.852674][ T9176] BTRFS info (device loop5): enabling ssd optimizations
[  372.864694][ T9176] BTRFS info (device loop5): auto enabling async discard
[  372.890804][ T9176] BTRFS info (device loop5): rebuilding free space tree
[  372.916115][ T7308] usb 1-1: USB disconnect, device number 25
[  372.976537][ T9176] BTRFS info (device loop5): disabling free space tree
[  372.983522][ T9176] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  373.027850][ T9176] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  373.163870][ T9225] loop7: detected capacity change from 0 to 2048
[  373.209197][ T9225] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  373.251559][ T9225] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  373.703750][ T9234] netlink: 100 bytes leftover after parsing attributes in process `syz.0.635'.
[  373.744418][ T9234] netlink: 100 bytes leftover after parsing attributes in process `syz.0.635'.
[  373.761533][ T7571] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  373.806126][ T9233] loop2: detected capacity change from 0 to 128
[  373.826740][ T9236] loop7: detected capacity change from 0 to 128
[  373.842860][ T9233] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  373.879185][ T9236] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  374.193795][ T9239] overlay: ./file0 is not a directory
[  374.227755][ T9246] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  374.680001][ T9253] loop5: detected capacity change from 0 to 128
[  374.760844][ T9253] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  375.244862][ T9263] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  375.408041][ T9268] loop2: detected capacity change from 0 to 2048
[  375.415944][ T5829] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  375.441275][ T9268] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  375.464695][ T9268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  375.499373][ T9268] overlayfs: failed to resolve './file1': -2
[  375.601974][ T5829] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  375.625673][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.643422][ T5829] usb 1-1: Product: syz
[  375.661854][ T5829] usb 1-1: Manufacturer: syz
[  375.673429][ T5829] usb 1-1: SerialNumber: syz
[  375.701331][ T5829] usb 1-1: config 0 descriptor??
[  375.900357][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.634'.
[  375.929025][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.629'.
[  375.952802][ T9260] bridge0: entered promiscuous mode
[  375.961891][ T9260] macvtap3: entered promiscuous mode
[  375.970388][ T9260] macvtap3: entered allmulticast mode
[  375.980002][ T9260] bridge0: entered allmulticast mode
[  375.998910][ T9281] bridge0: left allmulticast mode
[  376.004455][ T9281] bridge0: left promiscuous mode
[  376.049478][ T5829] cx82310_eth: probe of 1-1:0.0 failed with error -22
[  376.065934][    T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  376.078448][ T5829] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  376.102505][ T5829] usb 1-1: USB disconnect, device number 26
[  376.278296][    T9] usb 3-1: Using ep0 maxpacket: 16
[  376.303860][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  376.323553][    T9] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  376.334263][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.347158][    T9] usb 3-1: Product: syz
[  376.351381][    T9] usb 3-1: Manufacturer: syz
[  376.357153][    T9] usb 3-1: SerialNumber: syz
[  376.369086][    T9] usb 3-1: config 0 descriptor??
[  376.379483][    T9] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  376.391173][    T9] usb 3-1: Detected FT232R
[  376.565781][  T967] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  376.620897][ T9295] loop5: detected capacity change from 0 to 2048
[  376.640652][ T9295] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  376.700978][ T9295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  376.775664][  T967] usb 8-1: Using ep0 maxpacket: 32
[  376.841445][  T967] usb 8-1: config 0 has an invalid interface number: 85 but max is 0
[  376.893516][  T967] usb 8-1: config 0 has no interface number 0
[  376.935818][  T967] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  376.978073][  T967] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  377.014653][  T967] usb 8-1: config 0 interface 85 has no altsetting 0
[  377.034790][  T967] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  377.064819][  T967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.096623][  T967] usb 8-1: Product: syz
[  377.111555][  T967] usb 8-1: Manufacturer: syz
[  377.131790][  T967] usb 8-1: SerialNumber: syz
[  377.184574][  T967] usb 8-1: config 0 descriptor??
[  377.199875][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  377.243357][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  377.284528][    T9] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  377.313334][    T9] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  377.337185][ T9038] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  377.360481][    T9] usb 3-1: USB disconnect, device number 25
[  377.389953][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  377.427712][    T9] ftdi_sio 3-1:0.0: device disconnected
[  377.502480][  T967] appletouch 8-1:0.85: Failed to read mode from device.
[  377.524076][  T967] appletouch: probe of 8-1:0.85 failed with error -5
[  377.556056][ T9038] usb 1-1: Using ep0 maxpacket: 32
[  377.563057][  T967] usb 8-1: USB disconnect, device number 2
[  377.576894][ T9038] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  377.595437][ T9038] usb 1-1: config 0 has no interface number 0
[  377.652409][ T9038] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  377.677254][ T9038] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  377.693183][ T9038] usb 1-1: config 0 interface 85 has no altsetting 0
[  377.714356][ T9038] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  377.727721][ T9038] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.743205][ T9038] usb 1-1: Product: syz
[  377.750752][ T9038] usb 1-1: Manufacturer: syz
[  377.755454][ T9038] usb 1-1: SerialNumber: syz
[  377.784205][ T9038] usb 1-1: config 0 descriptor??
[  377.850765][ T9313] loop5: detected capacity change from 0 to 2048
[  377.894372][ T9313] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  377.945139][ T9313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  378.062169][ T9038] appletouch 1-1:0.85: Failed to read mode from device.
[  378.076730][ T9038] appletouch: probe of 1-1:0.85 failed with error -5
[  378.112264][ T9038] usb 1-1: USB disconnect, device number 27
[  378.574820][ T9327] loop7: detected capacity change from 0 to 128
[  378.581771][ T9325] loop5: detected capacity change from 0 to 2048
[  378.639514][ T9327] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  378.653806][ T9325] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  378.715505][ T9325] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  378.779480][ T9325] overlayfs: failed to resolve './file1': -2
[  378.962103][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  378.968649][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  379.021658][ T9334] UDF-fs: error (device loop7): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  379.911618][ T9350] loop7: detected capacity change from 0 to 256
[  379.973744][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.648'.
[  380.001690][ T9350] FAT-fs (loop7): Directory bread(block 64) failed
[  380.015691][ T5829] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  380.025683][ T9350] FAT-fs (loop7): Directory bread(block 65) failed
[  380.032376][ T9350] FAT-fs (loop7): Directory bread(block 66) failed
[  380.038838][ T9355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.648'.
[  380.053483][ T9350] FAT-fs (loop7): Directory bread(block 67) failed
[  380.087335][ T9350] FAT-fs (loop7): Directory bread(block 68) failed
[  380.093938][ T9350] FAT-fs (loop7): Directory bread(block 69) failed
[  380.121568][ T9350] FAT-fs (loop7): Directory bread(block 70) failed
[  380.133957][ T9350] FAT-fs (loop7): Directory bread(block 71) failed
[  380.141107][ T9350] FAT-fs (loop7): Directory bread(block 72) failed
[  380.148547][ T9350] FAT-fs (loop7): Directory bread(block 73) failed
[  380.215825][ T5829] usb 6-1: Using ep0 maxpacket: 16
[  380.232724][ T5829] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8
[  380.276705][ T5829] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  380.286093][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.315512][ T5829] usb 6-1: Product: syz
[  380.320534][ T5829] usb 6-1: Manufacturer: syz
[  380.325169][ T5829] usb 6-1: SerialNumber: syz
[  380.332354][ T9359] loop2: detected capacity change from 0 to 2048
[  380.372161][ T5829] usb 6-1: config 0 descriptor??
[  380.412029][ T9359] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  380.441913][ T7308] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  380.444402][ T5829] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  380.480774][ T9359] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  380.499826][ T5829] usb 6-1: Detected FT232R
[  380.846631][ T7308] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  381.129478][ T7308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.141743][ T9359] overlay: ./file1 is not a directory
[  381.171304][ T7308] usb 1-1: Product: syz
[  381.184311][ T7308] usb 1-1: Manufacturer: syz
[  381.212891][ T7308] usb 1-1: SerialNumber: syz
[  381.241682][ T7308] usb 1-1: config 0 descriptor??
[  381.342211][ T5829] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  381.404759][ T5829] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  381.431446][ T5829] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  381.466235][ T5829] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  381.496976][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'.
[  381.533500][ T5829] usb 6-1: USB disconnect, device number 13
[  381.557609][ T9353] bridge0: entered promiscuous mode
[  381.563079][ T9353] macvtap4: entered promiscuous mode
[  381.586710][ T5829] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  381.645819][ T5829] ftdi_sio 6-1:0.0: device disconnected
[  381.726066][ T9353] macvtap4: entered allmulticast mode
[  381.778157][ T9353] bridge0: entered allmulticast mode
[  381.933769][ T9372] bridge0: left allmulticast mode
[  381.963798][ T9372] bridge0: left promiscuous mode
[  382.699773][ T7308] cx82310_eth: probe of 1-1:0.0 failed with error -22
[  382.778299][ T7308] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  382.814561][ T7308] usb 1-1: USB disconnect, device number 28
[  384.205837][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.658'.
[  384.273987][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.658'.
[  385.457609][ T5829] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  385.706399][ T5829] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  385.715530][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.744186][ T5829] usb 3-1: Product: syz
[  385.792843][ T5829] usb 3-1: Manufacturer: syz
[  385.806734][ T5829] usb 3-1: SerialNumber: syz
[  385.862063][ T5829] usb 3-1: config 0 descriptor??
[  386.102193][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.664'.
[  386.204573][ T9427] bridge0: entered promiscuous mode
[  386.242604][ T9427] macvtap3: entered promiscuous mode
[  386.259658][ T9427] macvtap3: entered allmulticast mode
[  386.278283][ T9427] bridge0: entered allmulticast mode
[  386.340172][ T9452] bridge0: left allmulticast mode
[  386.368792][ T9452] bridge0: left promiscuous mode
[  386.385771][ T7759] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  386.466297][ T5829] cx82310_eth: probe of 3-1:0.0 failed with error -22
[  386.502943][ T5829] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  386.542762][ T5829] usb 3-1: USB disconnect, device number 26
[  386.615925][ T7759] usb 1-1: Using ep0 maxpacket: 16
[  386.645442][ T7759] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  386.700435][ T7759] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  386.720430][ T7759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.749040][ T7759] usb 1-1: Product: syz
[  386.753288][ T7759] usb 1-1: Manufacturer: syz
[  386.775988][ T7759] usb 1-1: SerialNumber: syz
[  386.796462][ T7759] usb 1-1: config 0 descriptor??
[  386.831183][ T7759] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  386.853827][ T7759] usb 1-1: Detected FT232R
[  387.644721][ T7759] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  387.678829][ T7759] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  387.700863][ T7759] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  387.744460][ T7759] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  387.798729][ T7759] usb 1-1: USB disconnect, device number 29
[  387.833989][ T7759] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  387.880981][ T7759] ftdi_sio 1-1:0.0: device disconnected
[  389.633021][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.681'.
[  390.896885][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.683'.
[  392.102259][ T9544] overlay: ./file0 is not a directory
[  392.184364][ T9542] loop0: detected capacity change from 0 to 2048
[  392.274752][ T9542] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  392.403940][ T9542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  394.353621][ T9557] netlink: 24 bytes leftover after parsing attributes in process `syz.5.693'.
[  394.846486][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.695'.
[  398.011434][ T9588] overlayfs: failed to resolve './file0': -2
[  398.589070][ T9603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.704'.
[  398.617048][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.7.705'.
[  398.823169][ T9609] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  398.867776][ T9610] overlay: ./file0 is not a directory
[  401.234808][ T9643] overlayfs: failed to resolve './file0': -2
[  401.961785][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.718'.
[  404.063404][ T9672] overlay: ./file0 is not a directory
[  404.908427][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'.
[  405.628610][ T9709] overlayfs: failed to resolve './file0': -2
[  405.928133][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.7.730'.
[  406.727111][ T9733] autofs4:pid:9733:autofs_fill_super: called with bogus options
[  407.157248][ T9741] overlay: ./file0 is not a directory
[  407.218329][ T9745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.738'.
[  407.272429][ T9747] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  407.287059][ T9745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.738'.
[  407.646366][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'.
[  408.251086][ T9765] overlayfs: failed to resolve './file0': -2
[  408.487251][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'.
[  409.772989][ T9787] autofs4:pid:9787:autofs_fill_super: called with bogus options
[  410.217035][ T9796] overlay: ./file0 is not a directory
[  412.397647][ T5793] Bluetooth: hci0: ACL packet for unknown connection handle 201
[  413.291930][ T9827] overlayfs: failed to resolve './file0': -2
[  413.339071][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'.
[  413.580607][ T9839] autofs4:pid:9839:autofs_fill_super: called with bogus options
[  413.823643][ T9848] overlay: ./file0 is not a directory
[  416.282728][ T9882] overlayfs: failed to resolve './file0': -2
[  417.433893][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.7.773'.
[  417.543495][ T9910] overlay: ./file0 is not a directory
[  419.553225][ T9939] overlayfs: failed to resolve './file0': -2
[  420.216805][ T5793] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  420.396144][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.784'.
[  420.800561][ T9963] overlay: ./file0 is not a directory
[  421.849782][ T9976] overlayfs: failed to resolve './file0': -2
[  424.006983][ T5793] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  424.696511][T10004] overlay: ./file0 is not a directory
[  430.629538][T10048] overlay: ./file0 is not a directory
[  430.636035][ T5793] Bluetooth: hci3: link tx timeout
[  430.641909][ T5793] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[  432.737913][ T5792] Bluetooth: hci3: command 0x0406 tx timeout
[  433.294022][T10082] sctp: [Deprecated]: syz.7.823 (pid 10082) Use of struct sctp_assoc_value in delayed_ack socket option.
[  433.294022][T10082] Use struct sctp_sack_info instead
[  439.569776][T10129] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  439.603867][T10129] batadv_slave_0: entered promiscuous mode
[  440.458568][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  440.465846][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  444.341567][T10169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.840'.
[  444.453521][T10170] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  447.065137][T10193] netlink: 20 bytes leftover after parsing attributes in process `syz.5.845'.
[  447.207529][T10197] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  449.348420][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.7.851'.
[  460.256725][T10303] overlay: ./file0 is not a directory
[  460.568660][T10309] netlink: 'syz.5.877': attribute type 7 has an invalid length.
[  460.602414][T10309] netlink: 'syz.5.877': attribute type 8 has an invalid length.
[  471.145909][   T28] audit: type=1326 audit(1756056936.154:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10390 comm="syz.7.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490dd8ebe9 code=0x7ffc0000
[  471.285751][   T28] audit: type=1326 audit(1756056936.164:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10390 comm="syz.7.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490dd8ebe9 code=0x7ffc0000
[  471.490153][   T28] audit: type=1326 audit(1756056936.164:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10390 comm="syz.7.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f490dd8ebe9 code=0x7ffc0000
[  471.582428][   T28] audit: type=1326 audit(1756056936.164:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10390 comm="syz.7.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490dd8ebe9 code=0x7ffc0000
[  471.712840][   T28] audit: type=1326 audit(1756056936.164:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10390 comm="syz.7.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f490dd8ebe9 code=0x7ffc0000
[  475.837899][T10431] netlink: 20 bytes leftover after parsing attributes in process `syz.5.911'.
[  476.014179][T10435] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  478.540280][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.916'.
[  478.570119][T10453] hsr_slave_0: left promiscuous mode
[  478.584073][T10453] hsr_slave_1: left promiscuous mode
[  479.432072][T10461] overlay: ./file0 is not a directory
[  479.965681][T10467] netlink: 'syz.5.919': attribute type 7 has an invalid length.
[  479.992434][T10467] netlink: 'syz.5.919': attribute type 8 has an invalid length.
[  483.207836][T10491] netlink: 'syz.0.924': attribute type 7 has an invalid length.
[  483.225657][T10491] netlink: 'syz.0.924': attribute type 8 has an invalid length.
[  488.300759][T10535] netlink: 112 bytes leftover after parsing attributes in process `syz.2.936'.
[  488.344636][T10535] netlink: 112 bytes leftover after parsing attributes in process `syz.2.936'.
[  488.803022][T10538] netlink: 112 bytes leftover after parsing attributes in process `syz.2.945'.
[  488.834139][T10538] netlink: 112 bytes leftover after parsing attributes in process `syz.2.945'.
[  489.948083][T10543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.939'.
[  491.134017][T10560] netlink: 92 bytes leftover after parsing attributes in process `syz.5.947'.
[  491.148313][T10560] netlink: 92 bytes leftover after parsing attributes in process `syz.5.947'.
[  491.439260][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'.
[  492.096476][T10572] netlink: 28 bytes leftover after parsing attributes in process `syz.7.952'.
[  493.534176][T10587] netlink: 92 bytes leftover after parsing attributes in process `syz.0.957'.
[  493.546125][T10587] netlink: 92 bytes leftover after parsing attributes in process `syz.0.957'.
[  496.755164][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'.
[  497.599443][T10619] netlink: 92 bytes leftover after parsing attributes in process `syz.0.966'.
[  497.630731][T10619] netlink: 92 bytes leftover after parsing attributes in process `syz.0.966'.
[  499.741803][ T5793] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  500.667926][ T5793] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  502.266062][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  502.275636][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  506.557788][ T5793] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  508.758313][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.7.994'.
[  508.767679][T10719] hsr_slave_0: left promiscuous mode
[  508.774301][T10719] hsr_slave_1: left promiscuous mode
[  512.316519][T10752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1005'.
[  512.479930][T10756] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  516.469140][T10793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  516.500057][T10793] batadv_slave_0: entered promiscuous mode
[  517.241273][   T28] audit: type=1326 audit(1756056982.244:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.5.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3de38ebe9 code=0x7ffc0000
[  517.339752][   T28] audit: type=1326 audit(1756056982.244:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.5.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3de38ebe9 code=0x7ffc0000
[  517.369991][   T28] audit: type=1326 audit(1756056982.284:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.5.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fa3de38ebe9 code=0x7ffc0000
[  517.399049][   T28] audit: type=1326 audit(1756056982.284:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.5.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3de38ebe9 code=0x7ffc0000
[  517.426434][   T28] audit: type=1326 audit(1756056982.284:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.5.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3de38ebe9 code=0x7ffc0000
[  521.958188][T10830] sctp: [Deprecated]: syz.2.1024 (pid 10830) Use of struct sctp_assoc_value in delayed_ack socket option.
[  521.958188][T10830] Use struct sctp_sack_info instead
[  525.379651][T10858] sctp: [Deprecated]: syz.0.1032 (pid 10858) Use of struct sctp_assoc_value in delayed_ack socket option.
[  525.379651][T10858] Use struct sctp_sack_info instead
[  528.015962][T10877] sctp: [Deprecated]: syz.2.1039 (pid 10877) Use of struct sctp_assoc_value in delayed_ack socket option.
[  528.015962][T10877] Use struct sctp_sack_info instead
[  528.622801][T10885] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.632342][T10885] batadv_slave_0: entered promiscuous mode
[  528.835397][T10890] sctp: [Deprecated]: syz.5.1043 (pid 10890) Use of struct sctp_assoc_value in delayed_ack socket option.
[  528.835397][T10890] Use struct sctp_sack_info instead
[  528.920255][T10892] sctp: [Deprecated]: syz.2.1044 (pid 10892) Use of struct sctp_assoc_value in delayed_ack socket option.
[  528.920255][T10892] Use struct sctp_sack_info instead
[  529.400504][T10896] sctp: [Deprecated]: syz.0.1045 (pid 10896) Use of struct sctp_assoc_value in delayed_ack socket option.
[  529.400504][T10896] Use struct sctp_sack_info instead
[  530.555061][T10905] sctp: [Deprecated]: syz.5.1049 (pid 10905) Use of struct sctp_assoc_value in delayed_ack socket option.
[  530.555061][T10905] Use struct sctp_sack_info instead
[  532.472635][T10928] delete_channel: no stack
[  533.662289][T10933] capability: warning: `syz.7.1058' uses 32-bit capabilities (legacy support in use)
[  563.424761][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  563.446803][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  656.635448][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  656.642551][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l P5453/1:b..l
[  656.652097][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=61261, q=164 ncpus=2)
[  656.659861][    C0] task:dhcpcd          state:R  running task     stack:23760 pid:5453  ppid:1      flags:0x00004002
[  656.672213][    C0] Call Trace:
[  656.675535][    C0]  <TASK>
[  656.678517][    C0]  __schedule+0x14d2/0x44d0
[  656.683084][    C0]  ? __lock_acquire+0x7c80/0x7c80
[  656.688161][    C0]  ? asan.module_dtor+0x20/0x20
[  656.693062][    C0]  ? _raw_spin_unlock+0x40/0x40
[  656.698113][    C0]  ? preempt_schedule+0xab/0xc0
[  656.703013][    C0]  preempt_schedule_common+0x82/0xc0
[  656.708340][    C0]  preempt_schedule+0xab/0xc0
[  656.713061][    C0]  ? schedule_preempt_disabled+0x20/0x20
[  656.718747][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  656.724773][    C0]  ? lock_chain_count+0x20/0x20
[  656.729669][    C0]  preempt_schedule_thunk+0x1a/0x30
[  656.734927][    C0]  _raw_spin_unlock_irqrestore+0xfa/0x110
[  656.740691][    C0]  ? _raw_spin_unlock+0x40/0x40
[  656.745591][    C0]  ? __wake_up_common+0x2a4/0x4e0
[  656.750663][    C0]  __wake_up_sync_key+0x11f/0x190
[  656.755818][    C0]  ? __wake_up_locked_key_bookmark+0x20/0x20
[  656.761936][    C0]  ? __lock_acquire+0x7c80/0x7c80
[  656.767012][    C0]  ? sock_def_readable+0xad/0x430
[  656.772073][    C0]  sock_def_readable+0x1e1/0x430
[  656.777062][    C0]  unix_dgram_sendmsg+0x10cc/0x1720
[  656.782326][    C0]  ? unix_dgram_poll+0x670/0x670
[  656.787301][    C0]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0
[  656.793787][    C0]  ? aa_sock_msg_perm+0x94/0x150
[  656.798868][    C0]  ? unix_seqpacket_sendmsg+0x10c/0x1e0
[  656.804468][    C0]  sock_write_iter+0x2bb/0x3f0
[  656.809288][    C0]  ? sock_read_iter+0x3b0/0x3b0
[  656.814197][    C0]  ? common_file_perm+0x198/0x1f0
[  656.819359][    C0]  do_iter_write+0x79a/0xc70
[  656.824009][    C0]  ? __asan_memset+0x22/0x40
[  656.828644][    C0]  ? vfs_iter_write+0xa0/0xa0
[  656.833402][    C0]  ? __import_iovec+0x3fa/0x860
[  656.838322][    C0]  ? import_iovec+0x73/0xa0
[  656.842877][    C0]  do_writev+0x252/0x410
[  656.847173][    C0]  ? do_readv+0x3e0/0x3e0
[  656.851571][    C0]  ? lock_chain_count+0x20/0x20
[  656.856489][    C0]  ? __secure_computing+0x111/0x2f0
[  656.861745][    C0]  do_syscall_64+0x55/0xb0
[  656.866202][    C0]  ? clear_bhb_loop+0x40/0x90
[  656.870914][    C0]  ? clear_bhb_loop+0x40/0x90
[  656.875632][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  656.881579][    C0] RIP: 0033:0x7f4bfc36e407
[  656.886045][    C0] RSP: 002b:00007fff43a9b450 EFLAGS: 00000202 ORIG_RAX: 0000000000000014
[  656.894513][    C0] RAX: ffffffffffffffda RBX: 00007f4bfc2e4740 RCX: 00007f4bfc36e407
[  656.902521][    C0] RDX: 0000000000000005 RSI: 00007fff43a9b4b0 RDI: 000000000000000a
[  656.910527][    C0] RBP: 000056063b551c90 R08: 0000000000000000 R09: 0000000000000000
[  656.918538][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000056063b551c90
[  656.926546][    C0] R13: 000000000000012c R14: 00000000ffffffff R15: 0000000000000000
[  656.934575][    C0]  </TASK>
[  656.937632][    C0] task:kthreadd        state:R  running task     stack:25928 pid:2     ppid:0      flags:0x00004000
[  656.948544][    C0] Call Trace:
[  656.951851][    C0]  <TASK>
[  656.954824][    C0]  __schedule+0x14d2/0x44d0
[  656.959400][    C0]  ? asan.module_dtor+0x20/0x20
[  656.964288][    C0]  ? mark_lock+0x94/0x320
[  656.968684][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  656.974731][    C0]  ? preempt_schedule_irq+0xaa/0x140
[  656.980067][    C0]  preempt_schedule_irq+0xb5/0x140
[  656.985226][    C0]  ? preempt_schedule_notrace+0x110/0x110
[  656.991024][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  656.996878][    C0]  irqentry_exit+0x67/0x70
[  657.001346][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  657.007384][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x60
[  657.013580][    C0] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 <c3> 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 70 2e 7e 7e 65 8b
[  657.033229][    C0] RSP: 0018:ffffc90000077300 EFLAGS: 00000293
[  657.039346][    C0] RAX: ffffffff812ebc2f RBX: ffffc900000773a8 RCX: ffff88801a271e00
[  657.047438][    C0] RDX: 0000000000000000 RSI: ffff88801a271e00 RDI: ffffc90000077340
[  657.055443][    C0] RBP: dffffc0000000000 R08: ffffc90000077407 R09: 0000000000000000
[  657.063447][    C0] R10: ffffc900000773a8 R11: fffff5200000ee81 R12: ffffc90000077340
[  657.071467][    C0] R13: ffffc900000773c8 R14: ffffc900000773c8 R15: ffff88801a271e00
[  657.079501][    C0]  ? get_stack_info+0x1f/0x170
[  657.084322][    C0]  get_stack_info+0x1f/0x170
[  657.088958][    C0]  __unwind_start+0x48b/0x7e0
[  657.093708][    C0]  ? stack_trace_save+0xe0/0xe0
[  657.098598][    C0]  arch_stack_walk+0xf8/0x190
[  657.103319][    C0]  ? __unwind_start+0x2d2/0x7e0
[  657.108217][    C0]  stack_trace_save+0x9c/0xe0
[  657.112934][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  657.118081][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  657.124038][    C0]  save_stack+0xf7/0x1f0
[  657.128330][    C0]  ? __reset_page_owner+0x190/0x190
[  657.133596][    C0]  ? page_ext_get+0x1e2/0x2b0
[  657.138314][    C0]  __reset_page_owner+0x4e/0x190
[  657.143303][    C0]  free_unref_page_prepare+0x7ce/0x8e0
[  657.148817][    C0]  free_unref_page+0x32/0x2e0
[  657.153567][    C0]  __slab_free+0x35e/0x410
[  657.158036][    C0]  ? _raw_spin_unlock+0x40/0x40
[  657.162927][    C0]  ? __phys_addr+0xba/0x170
[  657.167475][    C0]  qlist_free_all+0x75/0xe0
[  657.172030][    C0]  kasan_quarantine_reduce+0x143/0x160
[  657.177532][    C0]  __kasan_kmalloc+0x22/0xa0
[  657.182160][    C0]  ? security_prepare_creds+0x4b/0x130
[  657.187662][    C0]  __kmalloc+0xb4/0x240
[  657.191863][    C0]  security_prepare_creds+0x4b/0x130
[  657.197203][    C0]  prepare_creds+0x427/0x5d0
[  657.201844][    C0]  copy_creds+0x105/0xa70
[  657.206226][    C0]  copy_process+0x92a/0x3d70
[  657.210892][    C0]  ? __pidfd_prepare+0x140/0x140
[  657.215883][    C0]  ? kthread_blkcg+0xd0/0xd0
[  657.220520][    C0]  kernel_clone+0x21b/0x840
[  657.225060][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  657.230309][    C0]  ? create_io_thread+0x140/0x140
[  657.235399][    C0]  ? kthread_blkcg+0xd0/0xd0
[  657.240018][    C0]  kernel_thread+0x10d/0x160
[  657.244649][    C0]  ? ptrace_event_pid+0x320/0x320
[  657.249720][    C0]  ? kthread_blkcg+0xd0/0xd0
[  657.254357][    C0]  ? __rwlock_init+0x150/0x150
[  657.259158][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  657.264411][    C0]  kthreadd+0x560/0x730
[  657.268644][    C0]  ? kthreadd+0x30a/0x730
[  657.273018][    C0]  ? kthread_stop_put+0xd0/0xd0
[  657.277907][    C0]  ? lock_chain_count+0x20/0x20
[  657.282799][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  657.288051][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  657.293297][    C0]  ? kthread_stop_put+0xd0/0xd0
[  657.298181][    C0]  ret_from_fork+0x48/0x80
[  657.302632][    C0]  ? kthread_stop_put+0xd0/0xd0
[  657.307517][    C0]  ret_from_fork_asm+0x11/0x20
[  657.312349][    C0]  </TASK>
[  657.315397][    C0] rcu: rcu_preempt kthread starved for 9566 jiffies! g61261 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  657.326534][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  657.336743][    C0] rcu: RCU grace-period kthread stack dump:
[  657.342665][    C0] task:rcu_preempt     state:R  running task     stack:27752 pid:17    ppid:2      flags:0x00004000
[  657.353485][    C0] Call Trace:
[  657.356801][    C0]  <TASK>
[  657.359764][    C0]  __schedule+0x14d2/0x44d0
[  657.364337][    C0]  ? asan.module_dtor+0x20/0x20
[  657.369230][    C0]  ? enqueue_timer+0x225/0x530
[  657.374043][    C0]  ? __mod_timer+0x984/0xdb0
[  657.378738][    C0]  schedule+0xbd/0x170
[  657.382848][    C0]  schedule_timeout+0x160/0x280
[  657.387754][    C0]  ? console_conditional_schedule+0x40/0x40
[  657.393694][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  657.399633][    C0]  ? update_process_times+0x1b0/0x1b0
[  657.405057][    C0]  ? prepare_to_swait_event+0x339/0x360
[  657.410643][    C0]  rcu_gp_fqs_loop+0x302/0x1560
[  657.415552][    C0]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  657.421756][    C0]  ? rcu_gp_init+0x1510/0x1510
[  657.426557][    C0]  ? rcu_gp_cleanup+0xb4c/0xca0
[  657.431448][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  657.436683][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  657.441927][    C0]  rcu_gp_kthread+0x99/0x380
[  657.446659][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  657.451817][    C0]  ? __kthread_parkme+0x7a/0x1c0
[  657.456810][    C0]  ? __kthread_parkme+0x162/0x1c0
[  657.461905][    C0]  kthread+0x2fa/0x390
[  657.466007][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  657.471168][    C0]  ? kthread_blkcg+0xd0/0xd0
[  657.475784][    C0]  ret_from_fork+0x48/0x80
[  657.480248][    C0]  ? kthread_blkcg+0xd0/0xd0
[  657.484874][    C0]  ret_from_fork_asm+0x11/0x20
[  657.489699][    C0]  </TASK>
[  657.492748][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  657.499118][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.102-syzkaller #0
[  657.506875][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  657.516963][    C0] RIP: 0010:unwind_next_frame+0x46d/0x2970
[  657.522823][    C0] Code: 4e 8d 24 ad c4 f2 56 8e 44 29 ed 49 8d 5c ac fc 49 39 dc 76 0d e8 03 e4 4a 00 4d 29 e4 e9 a4 00 00 00 4c 89 e5 4c 89 64 24 28 <48> ba 00 00 00 00 00 fc ff df 4c 8b 74 24 48 48 89 d8 4c 29 e0 48
[  657.542472][    C0] RSP: 0018:ffffc90000006258 EFLAGS: 00000283
[  657.548580][    C0] RAX: ffffffff813aa572 RBX: ffffffff8ec5f308 RCX: 0000000000000100
[  657.556594][    C0] RDX: ffffffff8ca93380 RSI: 00000000001bbff1 RDI: 00000000001bc012
[  657.564691][    C0] RBP: ffffffff8ec5f288 R08: ffffc900000063f0 R09: 0000000000000021
[  657.572697][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff8ec5f288
[  657.580707][    C0] R13: 00000000001bbff1 R14: ffffc9000000635d R15: 0000000000098014
[  657.588722][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  657.597683][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  657.604299][    C0] CR2: 0000200000277030 CR3: 00000000311c8000 CR4: 00000000003506f0
[  657.612308][    C0] Call Trace:
[  657.615616][    C0]  <IRQ>
[  657.618498][    C0]  ? asm_sysvec_apic_timer_interrupt+0x19/0x20
[  657.624707][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  657.630909][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  657.637110][    C0]  ? stack_trace_save+0xe0/0xe0
[  657.641998][    C0]  arch_stack_walk+0x144/0x190
[  657.646819][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  657.653036][    C0]  stack_trace_save+0x9c/0xe0
[  657.657765][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  657.662940][    C0]  ? mark_lock+0x94/0x320
[  657.667317][    C0]  ? __lock_acquire+0x1334/0x7c80
[  657.672391][    C0]  kasan_set_track+0x4e/0x70
[  657.677021][    C0]  ? kasan_set_track+0x4e/0x70
[  657.681826][    C0]  ? kasan_save_free_info+0x2e/0x50
[  657.687074][    C0]  ? ____kasan_slab_free+0x126/0x1e0
[  657.692401][    C0]  ? slab_free_freelist_hook+0x130/0x1b0
[  657.698081][    C0]  ? __kmem_cache_free+0xba/0x1f0
[  657.703150][    C0]  ? skb_release_data+0x634/0x800
[  657.708215][    C0]  ? kfree_skb_reason+0x10e/0x170
[  657.713280][    C0]  ? enqueue_to_backlog+0x1d2/0xe30
[  657.718514][    C0]  ? netif_rx_internal+0x119/0x4e0
[  657.723671][    C0]  ? __netif_rx+0x78/0xc0
[  657.728034][    C0]  ? loopback_xmit+0x457/0x6c0
[  657.732918][    C0]  ? dev_hard_start_xmit+0x246/0x740
[  657.738242][    C0]  ? sch_direct_xmit+0x252/0x4a0
[  657.743218][    C0]  ? __qdisc_run+0xab2/0x1570
[  657.747944][    C0]  ? __dev_queue_xmit+0xf02/0x35a0
[  657.753089][    C0]  ? ip6_finish_output2+0xdf5/0x1650
[  657.758433][    C0]  ? synproxy_send_tcp_ipv6+0x4bc/0x670
[  657.764115][    C0]  ? synproxy_send_client_synack_ipv6+0x7e8/0xc60
[  657.770570][    C0]  ? nft_synproxy_eval_v6+0x36f/0x560
[  657.776069][    C0]  ? nft_synproxy_do_eval+0x3d4/0x570
[  657.781482][    C0]  ? nft_do_chain+0x3f9/0x1580
[  657.786285][    C0]  ? nft_do_chain_inet+0x25b/0x330
[  657.791434][    C0]  ? nf_hook_slow+0xbd/0x200
[  657.796071][    C0]  ? NF_HOOK+0x204/0x390
[  657.800349][    C0]  ? NF_HOOK+0x303/0x390
[  657.804639][    C0]  ? __netif_receive_skb+0xcc/0x290
[  657.809874][    C0]  ? process_backlog+0x380/0x6e0
[  657.814853][    C0]  ? __napi_poll+0xc0/0x460
[  657.819488][    C0]  ? net_rx_action+0x5ea/0xbf0
[  657.824301][    C0]  ? handle_softirqs+0x280/0x820
[  657.829279][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  657.834074][    C0]  ? irq_exit_rcu+0x9/0x20
[  657.838525][    C0]  ? sysvec_apic_timer_interrupt+0xa4/0xc0
[  657.844372][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  657.850605][    C0]  ? __kmem_cache_free+0xba/0x1f0
[  657.855685][    C0]  kasan_save_free_info+0x2e/0x50
[  657.860756][    C0]  ____kasan_slab_free+0x126/0x1e0
[  657.865925][    C0]  slab_free_freelist_hook+0x130/0x1b0
[  657.871437][    C0]  ? skb_release_data+0x634/0x800
[  657.876513][    C0]  __kmem_cache_free+0xba/0x1f0
[  657.881414][    C0]  skb_release_data+0x634/0x800
[  657.886421][    C0]  kfree_skb_reason+0x10e/0x170
[  657.891318][    C0]  enqueue_to_backlog+0x1d2/0xe30
[  657.896384][    C0]  ? skb_network_protocol+0x509/0x760
[  657.901818][    C0]  netif_rx_internal+0x119/0x4e0
[  657.906819][    C0]  ? dev_forward_skb+0x50/0x50
[  657.911639][    C0]  ? rcu_is_watching+0x15/0xb0
[  657.916449][    C0]  __netif_rx+0x78/0xc0
[  657.920643][    C0]  loopback_xmit+0x457/0x6c0
[  657.925276][    C0]  dev_hard_start_xmit+0x246/0x740
[  657.930447][    C0]  sch_direct_xmit+0x252/0x4a0
[  657.935258][    C0]  ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0
[  657.941297][    C0]  __qdisc_run+0xab2/0x1570
[  657.945870][    C0]  __dev_queue_xmit+0xf02/0x35a0
[  657.950891][    C0]  ? __dev_queue_xmit+0x245/0x35a0
[  657.956048][    C0]  ? netdev_core_pick_tx+0x340/0x340
[  657.961382][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  657.967411][    C0]  ? lock_chain_count+0x20/0x20
[  657.972301][    C0]  ? ip6_finish_output2+0xc0f/0x1650
[  657.977626][    C0]  ip6_finish_output2+0xdf5/0x1650
[  657.982803][    C0]  ? ip6_finish_output2+0x661/0x1650
[  657.988129][    C0]  ? nf_hook+0x370/0x370
[  657.992421][    C0]  synproxy_send_tcp_ipv6+0x4bc/0x670
[  657.997845][    C0]  ? synproxy_send_client_synack_ipv6+0xc60/0xc60
[  658.004304][    C0]  ? __alloc_skb+0x138/0x2c0
[  658.008944][    C0]  ? __build_skb_around+0x255/0x3d0
[  658.014188][    C0]  ? synproxy_send_client_synack_ipv6+0x327/0xc60
[  658.020652][    C0]  ? skb_put+0x11b/0x210
[  658.024942][    C0]  synproxy_send_client_synack_ipv6+0x7e8/0xc60
[  658.031229][    C0]  ? kasan_quarantine_put+0xd8/0x220
[  658.036581][    C0]  ? nf_synproxy_ipv4_fini+0x90/0x90
[  658.041911][    C0]  ? synproxy_pernet+0x45/0x270
[  658.046813][    C0]  ? synproxy_pernet+0x45/0x270
[  658.051712][    C0]  nft_synproxy_eval_v6+0x36f/0x560
[  658.056968][    C0]  ? nft_synproxy_eval_v4+0x560/0x560
[  658.062391][    C0]  ? nf_ip_checksum+0x13c/0x520
[  658.067297][    C0]  nft_synproxy_do_eval+0x3d4/0x570
[  658.072546][    C0]  ? nft_synproxy_validate+0xc0/0xc0
[  658.077870][    C0]  ? __local_bh_enable_ip+0x12e/0x1c0
[  658.083286][    C0]  nft_do_chain+0x3f9/0x1580
[  658.087942][    C0]  ? lock_chain_count+0x20/0x20
[  658.092828][    C0]  ? ip6t_do_table+0x1344/0x1500
[  658.097824][    C0]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  658.103772][    C0]  ? ipv6_find_hdr+0xc79/0x1050
[  658.108699][    C0]  nft_do_chain_inet+0x25b/0x330
[  658.113689][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  658.118581][    C0]  ? nf_nat_ipv6_fn+0x21b/0x2d0
[  658.123481][    C0]  ? nf_nat_ipv6_local_fn+0x390/0x390
[  658.128908][    C0]  ? nf_nat_ipv6_fn+0x21b/0x2d0
[  658.133807][    C0]  ? read_lock_is_recursive+0x20/0x20
[  658.139389][    C0]  ? nf_nat_ipv6_local_fn+0x390/0x390
[  658.144821][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  658.149973][    C0]  nf_hook_slow+0xbd/0x200
[  658.154434][    C0]  NF_HOOK+0x204/0x390
[  658.158548][    C0]  ? ip6_input+0xa0/0xa0
[  658.162822][    C0]  ? NF_HOOK+0x9b/0x390
[  658.167014][    C0]  ? ip6_rcv_core+0x1740/0x1740
[  658.171905][    C0]  ? ip6_input+0xa0/0xa0
[  658.176180][    C0]  ? ip6_rcv_finish_core+0x20d/0x420
[  658.181503][    C0]  ? ip6_rcv_finish+0x178/0x230
[  658.186387][    C0]  NF_HOOK+0x303/0x390
[  658.190500][    C0]  ? net_zcopy_put_abort+0x90/0x90
[  658.195643][    C0]  ? NF_HOOK+0x9b/0x390
[  658.199842][    C0]  ? ip6_rcv_core+0x1740/0x1740
[  658.204728][    C0]  ? net_zcopy_put_abort+0x90/0x90
[  658.209894][    C0]  ? ip6_rcv_finish_core+0x420/0x420
[  658.215217][    C0]  __netif_receive_skb+0xcc/0x290
[  658.220296][    C0]  ? process_backlog+0x2be/0x6e0
[  658.225278][    C0]  process_backlog+0x380/0x6e0
[  658.230108][    C0]  ? trigger_rx_softirq+0x60/0x60
[  658.235187][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  658.241212][    C0]  ? lock_chain_count+0x20/0x20
[  658.246105][    C0]  __napi_poll+0xc0/0x460
[  658.250480][    C0]  ? net_rx_action+0x374/0xbf0
[  658.255291][    C0]  net_rx_action+0x5ea/0xbf0
[  658.259983][    C0]  ? net_tx_action+0x950/0x950
[  658.264797][    C0]  ? net_tx_action+0x8e3/0x950
[  658.269602][    C0]  ? net_tx_action+0x608/0x950
[  658.274441][    C0]  ? detach_timer+0x2b0/0x2b0
[  658.279159][    C0]  ? process_backlog+0x6e0/0x6e0
[  658.284146][    C0]  ? lock_chain_count+0x20/0x20
[  658.289044][    C0]  handle_softirqs+0x280/0x820
[  658.293849][    C0]  ? __irq_exit_rcu+0xc7/0x190
[  658.298657][    C0]  ? do_softirq+0x180/0x180
[  658.303198][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  658.308443][    C0]  __irq_exit_rcu+0xc7/0x190
[  658.313075][    C0]  ? irq_exit_rcu+0x20/0x20
[  658.317622][    C0]  irq_exit_rcu+0x9/0x20
[  658.321915][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  658.327593][    C0]  </IRQ>
[  658.330574][    C0]  <TASK>
[  658.333538][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  658.339578][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  658.345348][    C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 e6 3a 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56
[  658.365005][    C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6
[  658.371118][    C0] RAX: 4d681a84c4d30400 RBX: ffffffff8161914b RCX: 4d681a84c4d30400
[  658.379216][    C0] RDX: 0000000000000001 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0
[  658.387219][    C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9
[  658.395226][    C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a8828
[  658.403231][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670
[  658.411237][    C0]  ? do_idle+0x1eb/0x510
[  658.415533][    C0]  default_idle+0x13/0x20
[  658.419906][    C0]  default_idle_call+0x6c/0xa0
[  658.424714][    C0]  do_idle+0x1eb/0x510
[  658.428839][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  658.434084][    C0]  ? asm_sysvec_call_function_single+0x1a/0x20
[  658.440319][    C0]  cpu_startup_entry+0x43/0x60
[  658.445120][    C0]  rest_init+0x2e2/0x300
[  658.449400][    C0]  ? time_init+0x40/0x40
[  658.453684][    C0]  arch_call_rest_init+0xe/0x10
[  658.458585][    C0]  start_kernel+0x459/0x4e0
[  658.463135][    C0]  x86_64_start_reservations+0x2a/0x30
[  658.468635][    C0]  x86_64_start_kernel+0x60/0x60
[  658.473613][    C0]  secondary_startup_64_no_verify+0x179/0x17b
[  658.479744][    C0]  </TASK>