last executing test programs:

5m7.351010488s ago: executing program 0 (id=1):
r0 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)})
r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x800714, &(0x7f0000000180)={[{@stripe={'stripe', 0x3d, 0xc}}]}, 0x1, 0x4c3, &(0x7f0000009c00)="$eJzs3MtvFdUfAPDvTB+8Cu2PH6IiaBGNxEdLy0MWLtRoXOjCRBdua1sQuVBDawKk0WoM/gPujUsTl67cuTHqwvgHaOLSkBBtTChGk5p5lbb33tKWlgvt55Pc3nNmzsw5Z+ac23Pn3JkANq3e7E8S0RURv0REdxFdmKC3eJuZnhy+MT05nMTs7Bt/JHm669OTw1XSarsdZeRwGpF+ksTzSX2+45cunx2q1UYvlPH+iXPv9Y9fuvzMmXNDp0dPj54fPHny2NGBZ08MHl+wXYNd1dnWYFlWr+v7Phjb/8/BYsHbP3yV7WvvgSI6vx63dKOuFK82StabHbU/Z3OL1z2+7MzuDTvnhZP2FhaEFWmLiOx0deT9vzva4ubJ646XP25p4YB1lf1v2tJ89dQssIEl0eoSAK1R/aPPvv9Wr/j3Dg0+7gLXXojoLMMz05PDM3PXAdojLZd3rGP+vRHx1tTfn2evWOl1CACAVcjHNk8vGv/l0tibvxdzHbvKOZSeiPhfROyOiP9HxJ6IuC8iT3t/RDxQbDzbvcz8exfF68c/6dWGZV4j2fjvuXljv5l59S/fetrK2M68/h3JqTO10SPlMTkcHVuy+MASeXz7UmfTdfPHf9kry78aC5YFuNpeXKCb28nI0MTQWh2Eax9F7GtvVP9kbiYgawEPRsS+le16VxU48+SX+5slunX9l7AG80yzX0Q8UZz/qVhU/0rSZH4ya+MnBo/3b43a6JH+qlXU+/HnK683y/+26r8GsvO/fWH7X5Si+6+kmK/tiFpt9ML4yvO48uunTb/TrKD9z8naf2fyZj5n/dM7xbKLQxMTFwYiOpPX8njZWbZGtnzw5rYXy3iVPqv/4UON+//ucpus/g9FRNaID0TsejgiHinLfjAiHo2IQ0vU//sXH3t3ifonkURLz/9Iw8+/ufbfk8yfr19FoO3sd9/UzZi/sqOq/zLO/7GYyj9rC/nn3y0st4BrcQwBAADgbpdGRFckaV8R7u2KNO3rK37Dvye2p7Wx8YmnTo29f36kuEegJzrS6kpX97zroQPJVLnHIj5YXiuu1h8trxt/1rYtj/cNj9VGWlx32Ox2LOz/UfX/zO9trS4dsO6az6MtcWsAsCEs7v9pi8oB3HnL+R2N7wKwMTXo/42eoQFsQJ7XAptXo/7/4aJ43fjfCAE2hPr+/1uDR9YBG5HxP2xe+j9sXvo/bEq3c1//6gPVzQJLJq6K2DDN1mXf4b+BApE2ORpZoHo8zHoWY1vcXBJpHuiKlh+W1QW6l5M4Ir6+7bza1qDMWY+5w40tmj+1CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4N7xXwAAAP//3xLcgQ==")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}})
r3 = openat$qat_adf_ctl(0xffffff9c, &(0x7f00000002c0), 0x2002, 0x0)
ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f00000007c0)={{}, 0x40})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xb7, 0x2, 0xffff}]}, 0x10)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ce\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000340)={0x0, @bt={0x1, 0x80000001, 0x1, 0x2, 0x1, 0x8, 0x6138, 0x8000, 0x0, 0x1, 0x6, 0x6, 0x7, 0x3bc00, 0x1c, 0x0, {0xb4a, 0x401}, 0x7, 0x1}})
r7 = accept4(r6, 0x0, 0x0, 0x0)
ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0x8000)
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f00000004c0), 0x208e24b)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r9, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r9, &(0x7f0000000040), 0x0, 0x0)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0)
sendfile(r8, r10, 0x0, 0x8)

5m4.668006898s ago: executing program 0 (id=13):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000200000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)

5m2.592138014s ago: executing program 0 (id=18):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa04804, &(0x7f0000000e40)={[{@rootdir={'rootdir', 0x3d, 0x10001}}, {@dmode={'dmode', 0x3d, 0xdf4a}}, {@unhide}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@dmode={'dmode', 0x3d, 0x3}}, {@undelete}, {@gid_ignore}, {@longad}, {@gid_forget}, {@uid_ignore}, {@nostrict}, {@mode={'mode', 0x3d, 0x52}}]}, 0x1, 0xc4d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9)

4m59.91623772s ago: executing program 0 (id=25):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0)
io_setup(0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x10)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007050000080013002d15010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3f00004d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402275fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7db0825e9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1752], &(0x7f0000000100)='GPL\x00', 0x290, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
close_range(r3, 0xffffffffffffffff, 0x200000000000000)

4m55.086955298s ago: executing program 0 (id=34):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000120001000004080000000000000003000000100000000000000000000002000000000300000000000006040000000000002e"], 0x0, 0x4d}, 0x20)

4m51.360862219s ago: executing program 0 (id=44):
r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0xa0000)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000580)={"a0453822", 0x0, 0x6, 0x2, 0xc0, 0x8, "3377f877c734c40400", "0001d615", '\x00', "04ffffbf", ["c386afeefff8ffffff7eec01", "00800000000000000010000a", "000000000000000000c40800", "0000000000000100"]})

4m49.676247529s ago: executing program 32 (id=44):
r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0xa0000)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000580)={"a0453822", 0x0, 0x6, 0x2, 0xc0, 0x8, "3377f877c734c40400", "0001d615", '\x00', "04ffffbf", ["c386afeefff8ffffff7eec01", "00800000000000000010000a", "000000000000000000c40800", "0000000000000100"]})

2m56.249978536s ago: executing program 3 (id=451):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
dup(0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020)

2m55.99875221s ago: executing program 3 (id=455):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @empty}}, 0x100, 0x1, 0x4, 0x1, 0x82, 0xaf07, 0xbb}, &(0x7f0000000300)=0x9c)

2m55.796101119s ago: executing program 3 (id=458):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0xa)
landlock_restrict_self(r1, 0x3)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0)
landlock_restrict_self(r2, 0x4)
r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x2c800)
unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0)

2m55.628884513s ago: executing program 3 (id=461):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae8", 0x1b)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x4044094}, 0x14)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000a80)=""/134, 0x86}], 0x2}, 0x40012001)

2m55.323545135s ago: executing program 3 (id=465):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
dup(0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020)

2m55.142751074s ago: executing program 3 (id=468):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

2m39.613639262s ago: executing program 33 (id=468):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5)

2m33.124261021s ago: executing program 2 (id=548):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x44)

2m32.956295749s ago: executing program 2 (id=549):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd86)
write$P9_RLINK(r1, &(0x7f0000000380)={0x7, 0x47, 0x1}, 0x7)

2m32.704264672s ago: executing program 5 (id=551):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0xf, 0x4, &(0x7f0000000040)={0x14, "f51d2a4cc4949d9c3a1df608c310f6aa436bba5f2faa4926deff85d80fe447883b"}})

2m31.388132012s ago: executing program 2 (id=558):
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m31.232189175s ago: executing program 2 (id=559):
socket$packet(0x11, 0x2, 0x300)
r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x1, 0x4, 0xff, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000340)={0x30a32c0, 0x1, @ofdm={0x1, 0x13, 0x15, 0x4, 0x4, 0x2, 0x4}})

2m30.762948399s ago: executing program 5 (id=561):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYBLOB='-'], 0x27)

2m30.412151239s ago: executing program 5 (id=564):
sendmsg(0xffffffffffffffff, 0x0, 0x40000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x404c850}, 0x0)

2m30.219143505s ago: executing program 2 (id=566):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x1c00}]}}}}}}, 0x46)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x3, 0x7, 0x45, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x4000, 0x1c4213})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x60, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540)

2m30.138385242s ago: executing program 5 (id=567):
ioctl$FE_DISEQC_RESET_OVERLOAD(0xffffffffffffffff, 0x6f3e, 0x0)

2m29.960109784s ago: executing program 5 (id=569):
fchdir(0xffffffffffffffff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000180)={0x7f6e}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000380)={0x300a, r0}, 0x0)
landlock_restrict_self(r1, 0x0)
symlinkat(&(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00')
link(&(0x7f0000000440)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m29.818739573s ago: executing program 5 (id=570):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0xa888, r6, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000180)="a9", 0x30}], 0x1}, 0x20008110)

2m27.86814744s ago: executing program 2 (id=576):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x5}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, 0x0, 0x0)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xffffffcf, 0x10}, &(0x7f00000001c0)=0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000400)={@val={0x3, 0x8917}, @val={0x1, 0x0, 0x0, 0x0, 0x1c}, @ipv4=@icmp={{0xf, 0x4, 0x0, 0x0, 0xb8, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x27, 0x47, [@dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x2e}]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0xe, 0x0, {0x1c, 0x4, 0x3, 0x4, 0xb, 0x68, 0x1, 0x1, 0x21, 0x2, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010102, {[@noop, @generic={0x86, 0x4, "1948"}, @rr={0x7, 0xb, 0xa9, [@local, @local]}, @lsrr={0x83, 0x7, 0x17, [@remote]}, @timestamp_prespec={0x44, 0x14, 0x2c, 0x3, 0x5, [{@multicast2, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x38000000}]}, @ra={0x94, 0x4}, @generic={0x44, 0xf, "a8d2b39ac0ff1f7dc0f36f5ffb"}, @ssrr={0x89, 0xf, 0x6c, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0xbe, 0x3, 0x3, [{@multicast1, 0x85}]}]}}, "bc3ac8ce"}}}, 0xc6)
syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r0], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c27fffffffddffffff350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090780000"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe80000000000000000000000000001dfe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5071d19189ef57b344e90402f3d890780000"], 0x0)
r5 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r7 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402)
writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)="0393", 0x2}], 0x1)

2m14.695795213s ago: executing program 34 (id=570):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0xa888, r6, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000180)="a9", 0x30}], 0x1}, 0x20008110)

2m12.739966338s ago: executing program 35 (id=576):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x5}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, 0x0, 0x0)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xffffffcf, 0x10}, &(0x7f00000001c0)=0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000400)={@val={0x3, 0x8917}, @val={0x1, 0x0, 0x0, 0x0, 0x1c}, @ipv4=@icmp={{0xf, 0x4, 0x0, 0x0, 0xb8, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@rr={0x7, 0x27, 0x47, [@dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x2e}]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0xe, 0x0, {0x1c, 0x4, 0x3, 0x4, 0xb, 0x68, 0x1, 0x1, 0x21, 0x2, @dev={0xac, 0x14, 0x14, 0x21}, @private=0xa010102, {[@noop, @generic={0x86, 0x4, "1948"}, @rr={0x7, 0xb, 0xa9, [@local, @local]}, @lsrr={0x83, 0x7, 0x17, [@remote]}, @timestamp_prespec={0x44, 0x14, 0x2c, 0x3, 0x5, [{@multicast2, 0xfffffffb}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x38000000}]}, @ra={0x94, 0x4}, @generic={0x44, 0xf, "a8d2b39ac0ff1f7dc0f36f5ffb"}, @ssrr={0x89, 0xf, 0x6c, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0xbe, 0x3, 0x3, [{@multicast1, 0x85}]}]}}, "bc3ac8ce"}}}, 0xc6)
syz_emit_ethernet(0x4a, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r0], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c27fffffffddffffff350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2000090780000"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6026843500140601fe80000000000000000000000000001dfe8000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5071d19189ef57b344e90402f3d890780000"], 0x0)
r5 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r7 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402)
writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)="0393", 0x2}], 0x1)

12.784438516s ago: executing program 7 (id=1305):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x401e, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qltdQWja2M3vB5Nn3mfePPNODoFnJiQAU2s+/fXnJNwIV0IIsyGE6yEU+0m5FdZjeCGEcDOEMPPYlpT5PxMXQwhXQwg3RsVjzaQ89Pnt4a21n9765ZvvLl249sXX35dpYAqNvla6O3F/vxtj3orxYZmvD9tF7K4OyxgPdC7H49085vezraLCfv1oXr2IK604P9/Z64/idqfeGMVWe7vI7/TiCfvD1lGd4g0P67vFuJltFbHdz4vYOoznPTiM322H/UGs0yzrfVSUD4PBUYz57CCL17PzqIiN3qDMx7p5MzsYxWEZy9OFRt5pFuvYOsEH/T/3dru3d5AOs91+O++la9XaS9XanUptN29mg2y1Uu8276ymC63OaFplkNW76608b3WyaiPvLqYLrUajUqulC3ezrXa9l9Zq1ZXqUmVtsdy7nb5+/72000wXRvHVdm9v0O700+18N43vWEyXqysvL6a3auk7G5vp5oN79zY23/3g7vv3X9l487Vy0j+WlS4sLy0vV2pLleXa4hRd/yflosd4/XAiyaQXAHD+TLj/B6bUiyfo/7uPyvET+//dByGcfv8f9P9jca7632nv/0/h+uFE9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFPrh7kv3yh25uP4Wpl/pkw9V46TEMJMCOH3J5gNF4/VnC3rzP3L/Lm/reHbJBQVRue4VG5XQwjr5fbbs6f9KQAAAMDT66uPb34Wu/X4Mj/pBXGW4k2bmesfjqleEkKYm/9xTNVmRi/Pj6lYuFBsB2OqVtzAujymYvGW24VxVftPZo+Fy4+FJIaZM10OAABwJo53AmfbhQAAAHCWPp30ApiMJBw9yjx6Flz88v6vB4JXjo0AAACAcyiZ9AIAAACAU1f0//7/DwAAAJ5u8f//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9i5nxu1gSgOwM82DuSfgqLc00puUEZKyDHHiALSBAXkQA1pgBrILSVEOMLjZWHFYSWPbS36PskMtsyPNxYcZkYaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGNKfelfHj88/++Ycm37y9AYAAAC45VDv1u2bZTp/211/31362J0XEVFGxK2xexWvrjKrLqd+vP/X5f31kxp+R7QJp++Yd8ebiPjSHf8+DP0UAAAA4H7tN9tVGq2nl+XUBTGmNGlTvvuaKa+IiHr5N1Naecr7lCms/X3P4numtHYCa5EpLE25zXKlPUv7dz/P2i0umiI15c2PnYvM1ncAAGBE1VUz7igEAACAMX2bugCmUcTDUuZ5KXCemm557/XVGQAAAPACFVMXAAAAAAyuHf+PtP9fM9D+f02V7XEAAADAfUr7/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCkQ71b7zfbVd+cY9NPnt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPxnf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePO7v/yfmBpnkrnXxtLzSLJ2amydGnvnxtEfxtevAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq2KMkkNEFDzYi023tbUHQTwowYN/ghDSbY3d+qPNwZYi5uJNcu5F1JuIoMRbT/4DPbfQS731kEMF8TgyszO70zbYbbAz0+TzgbfvO8Pw3vfNQsh33iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGX73Wmc5B9z4zguz924e2U172/e1+eubd5azFseR00m/WR4uX4QLbSXCAAAAPtHUtX3IYTb6dZy3sdzRf2fVtfkNf/3z47jqp6/v+6v+qr2z9vvv915cTLR3HiefNAza6Ph0QdT6T2+VXbbcw+9olfc+eLZS1J8IfEHGy9sp8X9jL69fv29fhEeaCJbAGA3jlR9GVS/D+X9oM3EANg3erXCu6r/k7l2cwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABowvZGeLqKoxDCYm8a527evbK6U39t89Zi1U5evboZvp6OmQ+RhhDOrI2GRxtdTbddvHT53MpoNLwwQ/D24T9+zLIsm+nihwevhBD+j3F2E7xTLv/cRzNcHEILGe4m+KcbaXQtiMsvuyv5PBlBiz+UAADYk9Ky5XX97XRrOT8XzYeQ/XBv/f96LQ4z1v93Pj55oz5Xvf4fNLbC7ltaP//50sVLl99YO79ydnh2+OmbxwZvDY6fOnHi1FLxrGTJExMAAAAeWZZl2eSgX7Z6/R/PP7j/f6gWhxnr/y++G3xVnzhR/+9ouunXdiYAAAD72/Ov/v1XtMP5qN8PX66sr18YjD8nx8fGny2k+sgOlK1e/yfzbWcFAAAANGF7I7pn//90LQ4z7v8/89NLv9THTEIIB8v9/yOrn41ON7ecTmviz4nbXiMAAADtOli2+v5/Wrz/H09eeYhDCIdfG8flvwH8z/o/Lev/5P1vfq7PVX///3hzS+ykeGF8P4p+IYTeQtsZAQAAsJc9Vba82P8z3Vr+5NdDH/a9/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQtH8DAAD//4gjQ+s=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800})

8.100081485s ago: executing program 7 (id=1352):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4440, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f00000001c0)=ANY=[], 0x1, 0x5508, &(0x7f0000002480)="$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")
capset(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
syz_open_procfs(0xffffffffffffffff, 0x0)

5.476123174s ago: executing program 4 (id=1368):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x2f, &(0x7f0000000000), 0x4)

4.359140347s ago: executing program 4 (id=1370):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040100"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
syz_usb_disconnect(r0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000e6000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xc, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

3.743034968s ago: executing program 8 (id=1376):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'})
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0)

3.673466636s ago: executing program 8 (id=1377):
syz_usb_connect(0x2, 0x5f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100193ac931040206582a3b50102030109024d0001027f400909040c07027b85530009058103030000000622023ed13729711a6e3f7ee9e3c2f767f89a2dee56136e3bbee236b084ecfe5b5c6c09059a"], 0x0)

2.543720946s ago: executing program 1 (id=1389):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
socket$inet6(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x200, 0x0)
userfaultfd(0x801)
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0xa, 0x5, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.428337887s ago: executing program 1 (id=1390):
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$OCFS2_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB, @ANYRESDEC], 0x48}}, 0x20004800)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

2.250210688s ago: executing program 8 (id=1393):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r0, 0x5)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff77}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000040))
syz_open_dev$usbfs(&(0x7f0000000400), 0x4, 0x800)
socket$packet(0x11, 0x2, 0x300)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240)
readv(r2, 0x0, 0x0)

2.177141253s ago: executing program 7 (id=1394):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socket$qrtr(0x2a, 0x2, 0x0)
r0 = getpgrp(0xffffffffffffffff)
sched_getscheduler(r0)

2.175972074s ago: executing program 1 (id=1395):
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fe9000/0x2000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.907075578s ago: executing program 1 (id=1398):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfffb, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x400)
readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20)

1.880313458s ago: executing program 4 (id=1399):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.462539462s ago: executing program 4 (id=1403):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001340)='\'', 0x1}], 0x1}}], 0x1, 0x40088c0)
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180))

1.22669026s ago: executing program 6 (id=1404):
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001080)={0x14, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0xc, @string={0xc, 0x3, "4c515919419b952740e4"}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)

1.217602332s ago: executing program 4 (id=1405):
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$OCFS2_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00", @ANYRESDEC], 0x48}}, 0x20004800)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.137271803s ago: executing program 6 (id=1406):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x60)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
socket(0x10, 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080))
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r7, 0x84, 0x80, 0x0, &(0x7f0000001080))
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x40184152, &(0x7f0000000480)={0x0, 0x0, 0xfffffffffffffff7})
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

979.472306ms ago: executing program 7 (id=1407):
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x5}, {0x6, 0xfd}]})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x1, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00"})
sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000000000f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x62, 0x6, @broadcast}, 0x14)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
io_setup(0x20000000001005, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000740)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x7, 0x0, r2, &(0x7f0000000080)='=', 0x1}])
r4 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x0)

977.854492ms ago: executing program 4 (id=1408):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000022c0)={0x2020}, 0x2020)

901.016975ms ago: executing program 6 (id=1409):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}]}, 0x5, 0x53f, &(0x7f0000000600)="$eJzs3c1PHPUbAPBnloWWl98PTLzoicREa1SQQtM24VAuHowHIxhN9OAq9CXdFgOYCMYo1ZMJiQcO6gFjjFeD/4Hx2ETjn0GaEE086A0z+17YhYUubnU+n2S6Mzuzfb4zD893vzM7LAFk1mj6Ty7isYj4PIkYbliXj8rK0fJ2W5Pb19Mpib292d+SSCJiY3L7enX7pPI4WHnZpYj46dOIN+4cjLu8unazUCwuLFWWx1duvTu+vLr23I1bhWsL1xZuT12cvHj5wtSFS53b1y++f+3rzT9feGXz1aG/fvjl18+SuBJDlXWN+9Epo/31Y7LfuU4H67JctxvAifRU6rw30j5gOHoqVZ8ajjvnu9o44FR9FBF7QEYl6h8yqjoOSM9/q1N3RyT8k3ZnyieAG5VrO1u1/OfL14bibOnccOCPpOHMsHxdY7QD8dP/Y/ru+lw6xSldhwEAoO7j9Yh4Pp8/OP5PHnh8d6WNbfbHMP4DgNP340xEPNvs+l+udv0nmlz/GUyHDR2If/T7f+5e+bG/A9HYb3cmYrrh3q6thvxXjPRUlv6XLkRvcvVGcSHN/f9L9zH1nkmXJw6JsfPJ8GardWn+f/9uY7Y6pfHTx/oWuXv5M/e/Zr6wUniQfaZudz3i8Xyz/Ce1+k+a1H/68/BymzEu/zw92Grd0fnf56k2g9KWvW8inmxa//U7F5ND788cL3UH49VOoYm+mH29Vfxj55+OSut/4PD8l/r/2v26y8eP8eGX3z7dal1j/qfvrs+12//3JXOlBvZVnnu/sLKyNBHRl7x08Hl3MdYOSPV4VI9Xmv9zTzR//z+s/09HY2+1GXr3zRffbrWu8fO/av6rnwVy+tL8zx9R/8l99X/8me2drz5oFf/o/Kf1P1VqTPWe+fkkMf47QrsJ6nY7AQAAAAAAAAAAAAAAAAAAAAAAsiYXEUOR5MZq87nc2Fj5+30fjYFccXF55Zmri+/dno/S38oeid5c9asehxu+D3aiNF9fPr9veTIiHomIzZ7+0vLYO4vF+W7vPAAAAAAAAAAAAAAAAAAAADwkBlv8/n9qp6fbrQNOXb7bDQC6Rv1Ddql/yC71D9ml/iG71D9kl/qH7FL/kF0nrX/9Bvz7qWMAAAAAAAAAAAAAAAAAAAAAAAAAAADoqOXVtZuFYnFh6b87czYiTvrykehke9IDnkTEQ3FYzJg5bKbbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1P0dAAD//+NU3pQ=")

873.860137ms ago: executing program 1 (id=1410):
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x3050, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x3, 0x1, 0x1}, 0x18, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
landlock_restrict_self(r3, 0xd)
r4 = getpgrp(0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4})
sendmsg$unix(r1, &(0x7f0000000080), 0x240408c1)

837.001928ms ago: executing program 8 (id=1411):
socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1d, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

664.115732ms ago: executing program 6 (id=1412):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000280)=[{0x8, 0x8000, 0x0, 0x0}], 0x1})

605.271113ms ago: executing program 8 (id=1413):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

570.173171ms ago: executing program 1 (id=1414):
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=<r1=>0x0)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x2}, 0x0)
r6 = dup2(r5, r5)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10})
ioctl$BLKTRACESTART(r5, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r6, 0x1275, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0)
clock_adjtime(0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0)

509.057998ms ago: executing program 7 (id=1415):
memfd_secret(0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0)
sendfile(r1, r0, 0x0, 0x8)

387.930307ms ago: executing program 6 (id=1416):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
clock_getres(0x8, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r5)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r6, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40480d4)
socket$packet(0x11, 0x3, 0x300)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4)
r8 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbc, {0x0, 0x0, 0x0, r9, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x8080)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4)

183.269374ms ago: executing program 7 (id=1417):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d00000000000030001280080001006873"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008"], 0x110}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0)

113.378857ms ago: executing program 8 (id=1418):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2ab00a1, &(0x7f0000000000)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x34]}}]})

0s ago: executing program 6 (id=1419):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x60)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
socket(0x10, 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080))
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$bt_hci(r7, 0x84, 0x80, 0x0, &(0x7f0000001080))
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r6, 0x40184152, &(0x7f0000000480)={0x0, 0x0, 0xfffffffffffffff7})
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000002003043060000000000001090224"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

point zero, skipping
[  195.208041][ T5599] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  195.208062][ T5599] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  195.208093][ T5599] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  195.208128][ T5599] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  195.208148][ T5599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.331237][ T5599] usb 2-1: config 0 descriptor??
[  195.490063][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.255'.
[  195.525029][ T6843] warning: `syz.2.251' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  195.634133][ T5599] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  195.710894][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.720161][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.797639][ T6842] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3826387664 (30611101312 ns) > initial count (10715853736 ns). Using initial count to start timer.
[  195.934021][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1
[  195.963628][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.255'.
[  195.974497][ T6852] netlink: 'syz.3.254': attribute type 1 has an invalid length.
[  195.974513][ T6852] netlink: 'syz.3.254': attribute type 2 has an invalid length.
[  196.230418][ T6867] netlink: 'syz.4.257': attribute type 5 has an invalid length.
[  196.991726][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.263'.
[  197.713844][ T6904] syzkaller1: entered promiscuous mode
[  197.713880][ T6904] syzkaller1: entered allmulticast mode
[  197.724121][ T5599] usb 2-1: USB disconnect, device number 6
[  197.830490][ T5599] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  198.253516][ T6924] netlink: 'syz.1.270': attribute type 4 has an invalid length.
[  198.592918][ T6095] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  198.742989][ T6095] usb 3-1: config 2 has an invalid interface number: 79 but max is 0
[  198.743014][ T6095] usb 3-1: config 2 has no interface number 0
[  198.743061][ T6095] usb 3-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  198.743083][ T6095] usb 3-1: config 2 interface 79 has no altsetting 0
[  198.745745][ T6095] usb 3-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb
[  198.745770][ T6095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.745787][ T6095] usb 3-1: Product: syz
[  198.745799][ T6095] usb 3-1: Manufacturer: syz
[  198.745811][ T6095] usb 3-1: SerialNumber: syz
[  198.850656][ T6929] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  199.133509][ T6095] usb 3-1: USB disconnect, device number 11
[  199.881967][ T6403] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  200.024185][ T6403] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  200.097331][ T6403] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  200.183788][ T6403] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  200.189588][ T6403] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  200.394557][ T6403] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  200.399307][ T6403] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  200.542816][ T6403] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  201.379677][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.679986][ T6403] 8021q: adding VLAN 0 to HW filter on device team0
[  201.765103][  T184] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.765307][  T184] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.888630][  T184] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.888831][  T184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.875643][   T32] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  203.060622][   T32] usb 3-1: Using ep0 maxpacket: 8
[  203.062252][   T32] usb 3-1: config 1 has an invalid interface number: 216 but max is 0
[  203.062267][   T32] usb 3-1: config 1 has no interface number 0
[  203.062292][   T32] usb 3-1: config 1 interface 216 has no altsetting 0
[  203.078810][   T32] usb 3-1: New USB device found, idVendor=03f0, idProduct=1efa, bcdDevice=d9.f7
[  203.078834][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.078851][   T32] usb 3-1: Product: syz
[  203.078863][   T32] usb 3-1: Manufacturer: syz
[  203.078875][   T32] usb 3-1: SerialNumber: syz
[  203.520761][   T32] usb 3-1: USB disconnect, device number 12
[  204.686273][ T6403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.192332][ T5621] usb 2-1: new low-speed USB device number 7 using dummy_hcd
[  205.347985][ T5621] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  205.348009][ T5621] usb 2-1: config 0 has no interface number 0
[  205.348048][ T5621] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  205.348072][ T5621] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  205.348109][ T5621] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  205.348128][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.461322][ T5621] usb 2-1: config 0 descriptor??
[  205.462926][ T7084] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  205.567993][ T5621] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  205.921148][ T5766] usb 2-1: USB disconnect, device number 7
[  205.921146][    C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  206.135870][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.316'.
[  206.333420][ T7119] 8021q: adding VLAN 0 to HW filter on device bond1
[  206.334786][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.316'.
[  206.517945][ T6403] veth0_vlan: entered promiscuous mode
[  206.550940][ T6403] veth1_vlan: entered promiscuous mode
[  206.836927][ T6403] veth0_macvtap: entered promiscuous mode
[  206.858934][ T6403] veth1_macvtap: entered promiscuous mode
[  206.897134][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.003597][ T5734] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  207.064287][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.174331][  T184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.177290][  T184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.182798][ T5734] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.182839][ T5734] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.186465][ T5734] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  207.186488][ T5734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.186505][ T5734] usb 3-1: Product: syz
[  207.186517][ T5734] usb 3-1: Manufacturer: syz
[  207.186529][ T5734] usb 3-1: SerialNumber: syz
[  207.188285][  T184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.188323][  T184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.527850][ T5734] cdc_ncm 3-1:1.0: skipping garbage
[  207.527869][ T5734] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  207.527907][ T5734] cdc_ncm 3-1:1.0: bind() failure
[  207.727164][ T5734] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  207.727210][ T5734] cdc_ncm 3-1:1.1: bind() failure
[  207.806190][ T5734] usb 3-1: USB disconnect, device number 13
[  208.267734][ T7164] netlink: 7 bytes leftover after parsing attributes in process `syz.3.327'.
[  208.605945][ T7171] netlink: 'syz.3.329': attribute type 1 has an invalid length.
[  208.858489][  T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.858509][  T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.143039][ T7189] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  209.173119][ T1466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.173136][ T1466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.682270][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  209.854533][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.854575][   T10] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  209.858251][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  209.858276][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.858293][   T10] usb 4-1: Product: syz
[  209.858305][   T10] usb 4-1: Manufacturer: syz
[  209.858316][   T10] usb 4-1: SerialNumber: syz
[  209.930214][   T10] cdc_ncm 4-1:1.0: skipping garbage
[  209.930231][   T10] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  209.930266][   T10] cdc_ncm 4-1:1.0: bind() failure
[  209.953373][ T7213] fuse: Unknown parameter '0xffffffffffffffff'
[  209.971430][   T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  209.971472][   T10] cdc_ncm 4-1:1.1: bind() failure
[  210.135716][ T5621] usb 4-1: USB disconnect, device number 9
[  212.808511][ T7289] netlink: 7 bytes leftover after parsing attributes in process `syz.2.374'.
[  213.280726][ T5621] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  213.430599][ T5621] usb 3-1: Using ep0 maxpacket: 32
[  213.565849][ T5621] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  213.565886][ T5621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7
[  213.565908][ T5621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024
[  213.628440][ T5621] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  213.628480][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.628498][ T5621] usb 3-1: Product: syz
[  213.628510][ T5621] usb 3-1: Manufacturer: syz
[  213.628522][ T5621] usb 3-1: SerialNumber: syz
[  213.675716][ T5621] usb 3-1: config 0 descriptor??
[  213.704039][ T5621] usb 3-1: no audio or video endpoints found
[  213.865708][ T7324] netlink: 7 bytes leftover after parsing attributes in process `syz.5.387'.
[  213.898052][ T5599] usb 3-1: USB disconnect, device number 14
[  214.309764][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.5.395'.
[  214.321140][ T7340] netlink: 28 bytes leftover after parsing attributes in process `syz.5.395'.
[  215.693186][   T38] audit: type=1326 audit(1779720737.257:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.5.408" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  215.693234][   T38] audit: type=1326 audit(1779720737.257:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.5.408" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  215.792896][ T7372] netlink: 'syz.5.408': attribute type 4 has an invalid length.
[  215.862380][   T38] audit: type=1326 audit(1779720737.427:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.5.408" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  215.865371][ T7379] netlink: 'syz.5.408': attribute type 4 has an invalid length.
[  216.679455][ T7407] fuse: Bad value for 'fd'
[  216.689737][   T38] audit: type=1326 audit(1779720738.247:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.5.408" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  216.689765][   T38] audit: type=1326 audit(1779720738.247:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7368 comm="syz.5.408" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  217.834674][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  217.997037][   T10] usb 2-1: config 2 has an invalid interface number: 79 but max is 0
[  217.997053][   T10] usb 2-1: config 2 has no interface number 0
[  217.997070][   T10] usb 2-1: config 2 interface 79 has no altsetting 0
[  217.999314][   T10] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb
[  217.999338][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.999355][   T10] usb 2-1: Product: syz
[  217.999367][   T10] usb 2-1: Manufacturer: syz
[  217.999376][   T10] usb 2-1: SerialNumber: syz
[  218.308861][   T10] usb 2-1: USB disconnect, device number 8
[  218.932325][   T37] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  219.030634][   T38] audit: type=1800 audit(1779720740.577:8): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.431" name="/" dev="fuse" ino=1 res=0 errno=0
[  219.111026][   T37] usb 6-1: Using ep0 maxpacket: 8
[  219.119479][   T37] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  219.119503][   T37] usb 6-1: config 0 has no interface number 0
[  219.119545][   T37] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  219.119566][   T37] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  219.119585][   T37] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  219.119607][   T37] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  219.119645][   T37] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  219.119665][   T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.225078][   T37] usb 6-1: config 0 descriptor??
[  219.267585][   T37] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  221.582076][   T10] usb 6-1: USB disconnect, device number 2
[  221.632615][   T10] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  221.858585][   T38] audit: type=1326 audit(1779720743.397:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.5.446" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  221.888516][   T38] audit: type=1326 audit(1779720743.417:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.5.446" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  221.905897][   T38] audit: type=1326 audit(1779720743.467:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.5.446" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  221.907946][   T38] audit: type=1326 audit(1779720743.467:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.5.446" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  221.907993][   T38] audit: type=1326 audit(1779720743.467:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.5.446" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  221.908451][   T38] audit: type=1326 audit(1779720743.467:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.5.446" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  221.908490][   T38] audit: type=1326 audit(1779720743.467:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.5.446" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  221.908774][   T38] audit: type=1326 audit(1779720743.467:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.5.446" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  221.914738][   T38] audit: type=1326 audit(1779720743.467:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.5.446" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6f2019ce59 code=0x7ffc0000
[  222.011957][   T38] audit: type=1800 audit(1779720743.567:18): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.444" name="/" dev="fuse" ino=1 res=0 errno=0
[  222.359708][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'.
[  223.137983][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'.
[  223.853310][ T7530] syzkaller0: entered promiscuous mode
[  223.853335][ T7530] syzkaller0: entered allmulticast mode
[  224.477164][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'.
[  225.521951][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'.
[  227.340379][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'.
[  228.671582][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'.
[  238.704302][ T7606] netlink: 68 bytes leftover after parsing attributes in process `syz.5.496'.
[  238.787066][ T7612] 8021q: adding VLAN 0 to HW filter on device bond2
[  238.789969][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.498'.
[  239.174506][ T5766] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  239.215225][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'.
[  239.228019][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  239.271311][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  239.286057][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  239.288039][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  239.288814][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  239.327821][ T5766] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.327846][ T5766] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  239.327894][ T5766] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  239.327915][ T5766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.403194][ T5766] usb 6-1: config 0 descriptor??
[  239.473617][ T5766] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  239.529004][ T5766] dvb-usb: bulk message failed: -22 (3/0)
[  239.717422][ T5766] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  239.753769][ T5766] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  239.753823][ T5766] usb 6-1: media controller created
[  239.773764][ T5766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  239.921991][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'.
[  240.049289][ T5766] dvb-usb: bulk message failed: -22 (6/0)
[  240.049417][ T5766] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  240.058698][ T5766] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input5
[  240.327533][ T7660] 8021q: adding VLAN 0 to HW filter on device bond3
[  240.329754][ T7665] netlink: 68 bytes leftover after parsing attributes in process `syz.1.515'.
[  240.330432][ T7664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.516'.
[  240.459213][ T7676] binder: 7669:7676 ioctl c018620c 200000000900 returned -1
[  240.468521][ T7676] binder: 7669:7676 ioctl c0c0583b 200000000240 returned -22
[  240.632512][ T5766] dvb-usb: schedule remote query interval to 150 msecs.
[  240.632536][ T5766] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  240.664601][ T5766] usb 6-1: USB disconnect, device number 3
[  240.792288][ T5599] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  240.964990][ T5599] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  240.965016][ T5599] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[  240.965072][ T5599] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  240.965096][ T5599] usb 3-1: config 220 interface 0 has no altsetting 0
[  240.965112][ T5599] usb 3-1: config 220 interface 1 has no altsetting 0
[  240.973315][ T5599] usb 3-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9
[  240.973340][ T5599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.973358][ T5599] usb 3-1: Product: syz
[  240.973369][ T5599] usb 3-1: Manufacturer: syz
[  240.973381][ T5599] usb 3-1: SerialNumber: syz
[  241.549882][   T60] Bluetooth: hci4: command tx timeout
[  241.972722][ T5766] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  242.298244][ T6499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.307527][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'.
[  243.611296][   T60] Bluetooth: hci4: command tx timeout
[  243.693022][ T5599] usb 3-1: selecting invalid altsetting 0
[  243.696396][ T5599] uvcvideo 3-1:220.0: probe with driver uvcvideo failed with error -22
[  243.721532][ T5599] usb 3-1: selecting invalid altsetting 0
[  243.721553][ T5599] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  243.760672][ T5599] usb 3-1: USB disconnect, device number 15
[  244.111253][ T6499] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.754945][ T6499] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.931943][ T5345] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  245.082559][ T5345] usb 5-1: Using ep0 maxpacket: 16
[  245.084628][ T5345] usb 5-1: config 0 has no interfaces?
[  245.088081][ T5345] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  245.088104][ T5345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.088120][ T5345] usb 5-1: Product: syz
[  245.088132][ T5345] usb 5-1: Manufacturer: syz
[  245.088151][ T5345] usb 5-1: SerialNumber: syz
[  245.102616][ T5345] usb 5-1: config 0 descriptor??
[  245.268621][ T6499] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.457765][   T37] usb 5-1: USB disconnect, device number 9
[  245.690706][   T60] Bluetooth: hci4: command tx timeout
[  246.050598][ T1777] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  246.201832][ T1777] usb 6-1: Using ep0 maxpacket: 16
[  246.204356][ T1777] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.204383][ T1777] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  246.204417][ T1777] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  246.204437][ T1777] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.709025][   T38] audit: type=1800 audit(1779720768.267:19): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.552" name="/" dev="fuse" ino=1 res=0 errno=0
[  246.779439][ T1777] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  247.243543][ T1777] usb 6-1: USB disconnect, device number 4
[  247.294090][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.294355][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.294614][ T7642] bridge_slave_0: entered allmulticast mode
[  247.338415][ T7642] bridge_slave_0: entered promiscuous mode
[  247.447396][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.447647][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.456148][ T7642] bridge_slave_1: entered allmulticast mode
[  247.475916][ T7642] bridge_slave_1: entered promiscuous mode
[  247.770681][   T60] Bluetooth: hci4: command tx timeout
[  248.011833][ T7821] netlink: 27 bytes leftover after parsing attributes in process `syz.1.562'.
[  248.119572][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.5.564'.
[  248.712502][ T5766] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  248.863849][ T5766] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  248.863873][ T5766] usb 5-1: config 0 has no interface number 0
[  248.863914][ T5766] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  248.863944][ T5766] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  248.863982][ T5766] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  248.864001][ T5766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.949245][ T5766] usb 5-1: config 0 descriptor??
[  248.950022][ T7841] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  249.032359][ T5766] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  249.249915][ T5766] usb 5-1: USB disconnect, device number 10
[  249.250017][    C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  249.611342][ T6499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.671038][ T6499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.712546][ T6499] bond0 (unregistering): Released all slaves
[  249.720391][ T6499] bond1 (unregistering): Released all slaves
[  249.794651][ T7642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.892623][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5
[  250.055891][ T7859] syzkaller0: entered promiscuous mode
[  250.055915][ T7859] syzkaller0: entered allmulticast mode
[  250.063481][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.155359][ T5345] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  251.351540][ T5345] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  251.385417][ T5345] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  251.385444][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.385454][ T5345] usb 3-1: Product: syz
[  251.385461][ T5345] usb 3-1: Manufacturer: syz
[  251.385468][ T5345] usb 3-1: SerialNumber: syz
[  251.424916][ T5345] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  251.571816][ T7896] netlink: 27 bytes leftover after parsing attributes in process `syz.4.580'.
[  251.936549][ T5345] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  251.937002][ T5345] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  251.937052][ T5345] usb 3-1: media controller created
[  252.070893][ T5345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  252.780648][ T5345] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  252.973866][ T5345] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  252.973890][ T5345] usb 2-1: config 0 has no interface number 0
[  252.973928][ T5345] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  252.973942][ T5345] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  252.973963][ T5345] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  252.973974][ T5345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.977492][ T5345] usb 2-1: config 0 descriptor??
[  252.978339][ T7903] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  253.086435][ T5345] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  253.203012][ T5345] usb 2-1: USB disconnect, device number 9
[  253.203116][    C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  255.616354][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  255.616446][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  256.350656][   T37] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  256.503404][   T37] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  256.503429][   T37] usb 2-1: config 0 has no interface number 0
[  256.503484][   T37] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  256.503509][   T37] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  256.503546][   T37] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  256.503567][   T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.565827][   T37] usb 2-1: config 0 descriptor??
[  256.566865][ T7927] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  256.603273][   T37] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  256.781613][ T5345] usb 2-1: USB disconnect, device number 10
[  256.781690][    C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  257.788129][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'.
[  263.898639][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  263.943589][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  263.944774][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  263.946022][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  263.946665][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  265.176558][ T7931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'.
[  265.561421][ T7642] team0: Port device team_slave_0 added
[  265.595112][ T7642] team0: Port device team_slave_1 added
[  265.928224][ T5734] usb 3-1: USB disconnect, device number 16
[  266.010633][ T5620] Bluetooth: hci3: command tx timeout
[  266.333228][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  266.372736][   T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  266.380241][   T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  266.382100][ T7960] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer.
[  266.388348][   T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  266.392385][   T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  266.770707][   T37] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  266.921514][   T37] usb 5-1: Using ep0 maxpacket: 32
[  266.950144][   T37] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.950165][   T37] usb 5-1: config 0 has no interfaces?
[  266.950192][   T37] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  266.950212][   T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.004234][   T37] usb 5-1: config 0 descriptor??
[  267.445450][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.445466][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.445488][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.886554][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.886569][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  267.886589][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.055695][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.604'.
[  268.096511][ T7642] hsr_slave_0: entered promiscuous mode
[  268.106311][ T7642] hsr_slave_1: entered promiscuous mode
[  268.109094][ T5620] Bluetooth: hci3: command tx timeout
[  268.111376][ T7642] debugfs: 'hsr0' already exists in 'hsr'
[  268.111399][ T7642] Cannot create hsr debugfs directory
[  268.270593][ T6499] hsr_slave_0: left promiscuous mode
[  268.290631][ T6499] hsr_slave_1: left promiscuous mode
[  268.291801][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.291823][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.331703][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.331726][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.418157][ T6499] veth1_macvtap: left promiscuous mode
[  268.418255][ T6499] veth0_macvtap: left promiscuous mode
[  268.418471][ T6499] veth1_vlan: left promiscuous mode
[  268.418653][ T6499] veth0_vlan: left promiscuous mode
[  268.570630][ T5620] Bluetooth: hci6: command tx timeout
[  269.131225][ T6499] team0 (unregistering): Port device team_slave_1 removed
[  269.171767][ T6499] team0 (unregistering): Port device team_slave_0 removed
[  269.339872][ T5621] usb 5-1: USB disconnect, device number 11
[  269.412062][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.1.604'.
[  269.423536][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6
[  270.180657][ T5620] Bluetooth: hci3: command tx timeout
[  270.660714][ T5620] Bluetooth: hci6: command tx timeout
[  271.263009][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7
[  271.526064][ T7642] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  271.741078][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  271.803408][ T7642] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  271.891874][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  272.254824][ T5620] Bluetooth: hci3: command tx timeout
[  272.348533][ T6499] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.491315][ T7642] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  272.592204][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  272.651170][ T7642] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  272.709587][ T7642] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  272.740670][   T60] Bluetooth: hci6: command tx timeout
[  273.088670][ T6499] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.795298][ T6499] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.841984][ T7933] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.842379][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.842583][ T7933] bridge_slave_0: entered allmulticast mode
[  273.844630][ T7933] bridge_slave_0: entered promiscuous mode
[  273.911517][ T7933] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.911853][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.912409][ T7933] bridge_slave_1: entered allmulticast mode
[  273.915698][ T7933] bridge_slave_1: entered promiscuous mode
[  274.440455][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8
[  274.441571][ T7959] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.442430][ T7959] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.442663][ T7959] bridge_slave_0: entered allmulticast mode
[  274.485871][ T7959] bridge_slave_0: entered promiscuous mode
[  274.528154][ T7933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.566282][ T7959] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.566576][ T7959] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.568776][ T7959] bridge_slave_1: entered allmulticast mode
[  274.577310][ T7959] bridge_slave_1: entered promiscuous mode
[  274.813362][   T60] Bluetooth: hci6: command tx timeout
[  275.010430][ T6499] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.142944][ T8112] binder: 8111:8112 ioctl c00c6211 0 returned -14
[  275.246207][ T7933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.597915][ T7959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.625441][ T7933] team0: Port device team_slave_0 added
[  275.638275][ T7959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.667325][ T7933] team0: Port device team_slave_1 added
[  275.885435][ T7959] team0: Port device team_slave_0 added
[  275.887241][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.887254][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.887276][ T7933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.949378][ T8106] netlink: 84 bytes leftover after parsing attributes in process `syz.4.624'.
[  275.977447][ T7959] team0: Port device team_slave_1 added
[  275.987039][ T7933] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.987052][ T7933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  275.987075][ T7933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.273419][ T8126] netlink: 56 bytes leftover after parsing attributes in process `syz.1.630'.
[  276.273439][ T8126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.630'.
[  276.383303][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.383314][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.383326][ T7959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.634611][ T7959] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.634621][ T7959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  276.634635][ T7959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.759840][ T8137] binder: 8136:8137 ioctl c00c6211 0 returned -14
[  276.897043][ T7933] hsr_slave_0: entered promiscuous mode
[  276.898402][ T7933] hsr_slave_1: entered promiscuous mode
[  276.899493][ T7933] debugfs: 'hsr0' already exists in 'hsr'
[  276.899508][ T7933] Cannot create hsr debugfs directory
[  277.036665][ T7959] hsr_slave_0: entered promiscuous mode
[  277.039941][ T7959] hsr_slave_1: entered promiscuous mode
[  277.041576][ T7959] debugfs: 'hsr0' already exists in 'hsr'
[  277.041598][ T7959] Cannot create hsr debugfs directory
[  277.071146][ T1777] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  277.220586][ T1777] usb 2-1: Using ep0 maxpacket: 16
[  277.222501][ T1777] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.222517][ T1777] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.222537][ T1777] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  277.222548][ T1777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.337413][ T6499] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  277.672226][ T1777] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  277.849378][ T8139] fuse: Bad value for 'fd'
[  277.948659][ T6499] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.264962][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.638'.
[  278.436069][ T6499] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.865106][ T7642] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.044621][ T1777] usb 2-1: reset high-speed USB device number 11 using dummy_hcd
[  279.082035][ T6499] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.299851][ T7642] 8021q: adding VLAN 0 to HW filter on device team0
[  279.546987][ T8170] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261
[  279.593769][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9
[  279.645562][ T6495] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.645707][ T6495] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.673030][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.673256][ T6071] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.899070][ T7933] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  279.965795][ T7933] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  280.016228][ T7933] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  280.028245][ T5621] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  280.112818][ T7933] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  280.183455][ T5621] usb 5-1: Using ep0 maxpacket: 16
[  280.185505][ T5621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.185531][ T5621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.185551][ T5621] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  280.185588][ T5621] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  280.185608][ T5621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.284546][ T5766] usb 2-1: USB disconnect, device number 11
[  280.318287][ T5621] usb 5-1: config 0 descriptor??
[  280.492794][ T7933] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  280.619954][ T7933] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  280.638415][ T7933] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  280.681945][ T7933] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  280.890329][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.898019][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.206119][ T5621] usbhid 5-1:0.0: can't add hid device: -71
[  281.206228][ T5621] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  281.271485][ T5621] usb 5-1: USB disconnect, device number 12
[  281.523442][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10
[  281.894021][ T6499] bridge_slave_1: left allmulticast mode
[  281.894053][ T6499] bridge_slave_1: left promiscuous mode
[  281.894303][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.059104][ T6499] bridge_slave_0: left allmulticast mode
[  282.059136][ T6499] bridge_slave_0: left promiscuous mode
[  282.059387][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.332571][ T6499] bridge_slave_1: left allmulticast mode
[  282.332594][ T6499] bridge_slave_1: left promiscuous mode
[  282.332747][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.481840][ T6499] bridge_slave_0: left allmulticast mode
[  282.481863][ T6499] bridge_slave_0: left promiscuous mode
[  282.482028][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.540661][ T5621] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  282.690884][ T5621] usb 2-1: Using ep0 maxpacket: 16
[  282.705217][ T5621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.705248][ T5621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.705259][ T5621] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  282.705282][ T5621] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  282.705292][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.711690][ T5621] usb 2-1: config 0 descriptor??
[  283.336435][ T8232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.337383][ T8232] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.521435][ T6499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  283.601543][ T6499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  283.623211][ T6499] bond0 (unregistering): Released all slaves
[  284.141363][ T6499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.210374][ T6499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.245345][ T6499] bond0 (unregistering): Released all slaves
[  284.791148][ T5621] usbhid 2-1:0.0: can't add hid device: -71
[  284.791261][ T5621] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  284.809081][ T5621] usb 2-1: USB disconnect, device number 12
[  285.038351][ T7959] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  285.085112][ T7959] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  285.106043][ T7959] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  285.138838][ T7959] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  285.299836][ T7959] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  285.313888][ T7959] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  285.328551][ T7959] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  285.385691][ T7959] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  286.933357][   T37] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  287.094037][   T37] usb 5-1: unable to get BOS descriptor or descriptor too short
[  287.098300][   T37] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  287.098324][   T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.098334][   T37] usb 5-1: Product: syz
[  287.098341][   T37] usb 5-1: Manufacturer: syz
[  287.098396][   T37] usb 5-1: SerialNumber: syz
[  287.142649][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11
[  287.165442][   T37] usb 5-1: selecting invalid altsetting 1
[  287.168197][   T37] usb 5-1: unit 6 not found!
[  287.301713][ T7933] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.333309][ T7642] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.637291][ T7933] 8021q: adding VLAN 0 to HW filter on device team0
[  287.683779][ T8308] kvm: requested 1676 ns i8254 timer period limited to 200000 ns
[  287.965679][   T37] usb 5-1: 2:0: sticky mixer values (0/123/1 => 0), disabling
[  287.990025][   T37] usb 5-1: selecting invalid altsetting 1
[  287.998428][   T37] usb 5-1: unit 6 not found!
[  288.196560][   T37] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2)
[  288.197827][   T37] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  288.226414][   T37] usb 5-1: selecting invalid altsetting 1
[  288.227199][   T37] usb 5-1: unit 6 not found!
[  288.227737][   T37] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2)
[  288.454783][ T1466] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.454920][ T1466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.523532][   T37] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22
[  288.543120][   T37] usb 5-1: USB disconnect, device number 13
[  288.564469][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.566215][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.636397][ T7959] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.691745][ T7945] udevd[7945]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  288.847023][ T6499] hsr_slave_0: left promiscuous mode
[  288.881280][ T6499] hsr_slave_1: left promiscuous mode
[  288.882268][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  288.882287][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.944095][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  288.944119][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.143217][ T6499] hsr_slave_0: left promiscuous mode
[  289.183710][ T6499] hsr_slave_1: left promiscuous mode
[  289.184853][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.184875][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.225233][ T6499] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.225258][ T6499] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.471916][ T6499] veth1_macvtap: left promiscuous mode
[  289.473217][ T6499] veth0_macvtap: left promiscuous mode
[  289.473545][ T6499] veth1_vlan: left promiscuous mode
[  289.477409][ T6499] veth0_vlan: left promiscuous mode
[  289.622524][ T6499] veth1_macvtap: left promiscuous mode
[  289.622623][ T6499] veth0_macvtap: left promiscuous mode
[  289.638712][ T6499] veth1_vlan: left promiscuous mode
[  289.639038][ T6499] veth0_vlan: left promiscuous mode
[  290.772588][ T6499] team0 (unregistering): Port device team_slave_1 removed
[  290.841262][ T6499] team0 (unregistering): Port device team_slave_0 removed
[  291.633565][ T6499] team0 (unregistering): Port device team_slave_1 removed
[  291.691856][ T6499] team0 (unregistering): Port device team_slave_0 removed
[  292.005559][ T8367] program syz.4.688 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  292.146366][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12
[  292.362930][ T7959] 8021q: adding VLAN 0 to HW filter on device team0
[  292.450030][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.450259][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  292.609233][  T184] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.609476][  T184] bridge0: port 2(bridge_slave_1) entered forwarding state
[  292.880387][ T7642] veth0_vlan: entered promiscuous mode
[  293.094870][ T7642] veth1_vlan: entered promiscuous mode
[  293.406665][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'.
[  293.674398][ T8396] 8021q: adding VLAN 0 to HW filter on device bond4
[  293.681865][ T8398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.694'.
[  293.823662][ T7642] veth0_macvtap: entered promiscuous mode
[  293.981943][ T7642] veth1_macvtap: entered promiscuous mode
[  294.148559][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13
[  294.264609][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.381779][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.494589][   T97] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.498647][   T97] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.643014][   T97] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.802805][   T97] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.404788][ T7933] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.991146][ T7959] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.348904][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.704'.
[  296.397523][ T6501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.397542][ T6501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.426984][ T8464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.704'.
[  296.649412][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.649431][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.349022][ T8484] ksmbd: Unknown IPC event: 3, ignore.
[  297.601209][ T7933] veth0_vlan: entered promiscuous mode
[  297.757659][ T7933] veth1_vlan: entered promiscuous mode
[  297.767221][ T7959] veth0_vlan: entered promiscuous mode
[  297.829732][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.712'.
[  297.861370][ T8500] netlink: 28 bytes leftover after parsing attributes in process `syz.6.712'.
[  297.979746][ T7959] veth1_vlan: entered promiscuous mode
[  298.271959][ T7933] veth0_macvtap: entered promiscuous mode
[  298.311635][ T7933] veth1_macvtap: entered promiscuous mode
[  298.371945][ T7959] veth0_macvtap: entered promiscuous mode
[  298.393565][ T8515] ksmbd: Unknown IPC event: 3, ignore.
[  298.426463][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.718'.
[  298.614624][ T7959] veth1_macvtap: entered promiscuous mode
[  298.634447][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.649349][ T5274] 8021q: adding VLAN 0 to HW filter on device eth14
[  298.668492][ T6495] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  298.688078][ T6495] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  298.706382][ T6495] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  298.707592][ T6495] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  298.748894][ T7933] batman_adv: batadv0: Interface activated: batadv_slave_1
[  298.820601][ T1462] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  298.824471][ T1462] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  298.833378][ T7959] batman_adv: batadv0: Interface activated: batadv_slave_0
[  298.870386][ T1462] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  298.894608][ T1462] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  298.937529][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.721'.
[  298.962859][ T7959] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.113914][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.6.721'.
[  299.231661][ T8535] netlink: 60 bytes leftover after parsing attributes in process `syz.6.723'.
[  299.231684][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.6.723'.
[  299.311586][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.330165][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.475209][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.523669][ T6071] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.082775][ T8546] IPv6: Can't replace route, no match found
[  300.478911][ T8550] ksmbd: Unknown IPC event: 3, ignore.
[  300.535559][   T38] audit: type=1326 audit(1779720822.077:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8551 comm="syz.6.728" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c9094ce59 code=0x0
[  300.641628][ T6501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.641648][ T6501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.224048][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'.
[  301.318055][ T8566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'.
[  301.413051][ T6501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.413065][ T6501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.597358][ T6495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.597378][ T6495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.734771][ T6501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.734789][ T6501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.847153][ T8597] ksmbd: Unknown IPC event: 3, ignore.
[  303.045482][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.741'.
[  303.107790][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.6.741'.
[  303.320682][ T6095] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  303.478679][ T6095] usb 9-1: Using ep0 maxpacket: 32
[  303.484059][ T6095] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[  303.484097][ T6095] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  303.484140][ T6095] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  303.484165][ T6095] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  303.484188][ T6095] usb 9-1: config 0 interface 0 has no altsetting 0
[  303.491838][ T6095] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  303.491863][ T6095] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  303.491881][ T6095] usb 9-1: Product: syz
[  303.491893][ T6095] usb 9-1: Manufacturer: syz
[  303.491906][ T6095] usb 9-1: SerialNumber: syz
[  303.588584][ T6095] usb 9-1: config 0 descriptor??
[  303.627526][ T6095] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  303.645459][ T6095] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  303.824206][ T8625] netlink: 32 bytes leftover after parsing attributes in process `syz.6.747'.
[  303.924781][ T6095] usb 9-1: USB disconnect, device number 2
[  303.970357][ T6095] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[  304.663024][ T8650] netlink: 12 bytes leftover after parsing attributes in process `syz.8.752'.
[  304.681113][ T8651] netlink: 27 bytes leftover after parsing attributes in process `syz.1.754'.
[  304.682955][ T8650] netlink: 28 bytes leftover after parsing attributes in process `syz.8.752'.
[  305.896822][   T38] audit: type=1800 audit(1779720827.457:21): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.760" name="/" dev="fuse" ino=1 res=0 errno=0
[  305.943640][ T8679] Invalid logical block size (8192)
[  306.726124][ T5274] 8021q: adding VLAN 0 to HW filter on device eth15
[  306.903463][ T8714] netlink: 27 bytes leftover after parsing attributes in process `syz.8.766'.
[  307.199785][ T8707] syzkaller0: entered promiscuous mode
[  307.199810][ T8707] syzkaller0: entered allmulticast mode
[  307.595773][   T38] audit: type=1800 audit(1779720829.147:22): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.772" name="/" dev="fuse" ino=1 res=0 errno=0
[  308.742455][ T8756] ksmbd: Unknown IPC event: 3, ignore.
[  308.830658][   T32] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  308.993061][   T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  308.993111][   T32] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  308.993157][   T32] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  308.993179][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.047609][   T32] usb 5-1: config 0 descriptor??
[  309.061981][   T32] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  310.141007][ T5274] 8021q: adding VLAN 0 to HW filter on device eth16
[  310.520667][ T6095] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[  310.685104][ T6095] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  310.685131][ T6095] usb 8-1: config 0 has no interface number 0
[  310.685171][ T6095] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  310.685193][ T6095] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  310.685217][ T6095] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  310.685240][ T6095] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  310.685271][ T6095] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  310.685294][ T6095] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  310.685334][ T6095] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  310.685355][ T6095] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.830150][ T6095] usb 8-1: config 0 descriptor??
[  310.874924][ T8801] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  310.875115][ T8801] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  311.260558][   T32] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[  311.413284][   T32] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  311.413310][   T32] usb 7-1: config 0 has no interface number 0
[  311.413352][   T32] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  311.413376][   T32] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  311.413414][   T32] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  311.413434][   T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.584663][ T6095] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  311.587058][   T32] usb 7-1: config 0 descriptor??
[  311.591270][ T8804] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  311.899322][ T6095] usb 8-1: USB disconnect, device number 2
[  311.899417][    C1] ldusb 8-1:0.55: usb_submit_urb failed (-19)
[  311.965722][   T32] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  312.012771][   T32] usb 7-1: USB disconnect, device number 2
[  312.044357][ T6095] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  312.242588][   T37] usb 5-1: USB disconnect, device number 14
[  312.628211][ T8831] ksmbd: Unknown IPC event: 3, ignore.
[  313.320371][ T8845] loop7: detected capacity change from 0 to 256
[  313.376328][ T8850] loop8: detected capacity change from 0 to 1024
[  313.917239][ T8850] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.917385][ T8850] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  314.127973][ T8845] FAT-fs (loop7): Directory bread(block 64) failed
[  314.128005][ T8845] FAT-fs (loop7): Directory bread(block 65) failed
[  314.128108][ T8845] FAT-fs (loop7): Directory bread(block 66) failed
[  314.128129][ T8845] FAT-fs (loop7): Directory bread(block 67) failed
[  314.182262][ T8845] FAT-fs (loop7): Directory bread(block 68) failed
[  314.182293][ T8845] FAT-fs (loop7): Directory bread(block 69) failed
[  314.182411][ T8845] FAT-fs (loop7): Directory bread(block 70) failed
[  314.182432][ T8845] FAT-fs (loop7): Directory bread(block 71) failed
[  314.182523][ T8845] FAT-fs (loop7): Directory bread(block 72) failed
[  314.182543][ T8845] FAT-fs (loop7): Directory bread(block 73) failed
[  314.306703][ T6499] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:20: bg 0: block 112: padding at end of block bitmap is not set
[  315.007322][ T7959] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  315.115715][ T8874] ksmbd: Unknown IPC event: 3, ignore.
[  315.597067][ T8866] loop6: detected capacity change from 0 to 40427
[  315.881345][ T8866] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  315.881371][ T8866] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  316.147136][   T37] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  316.304958][   T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.304990][   T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.305010][   T37] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  316.305048][   T37] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  316.305070][   T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.449888][   T37] usb 2-1: config 0 descriptor??
[  317.057348][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  317.057438][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  317.094528][   T37] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  317.094564][   T37] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  317.094590][   T37] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  317.094614][   T37] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  317.094638][   T37] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  317.094663][   T37] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  317.094687][   T37] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  317.094711][   T37] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  317.094735][   T37] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  317.586034][ T8920] ksmbd: Unknown IPC event: 3, ignore.
[  317.819642][ T8866] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  318.207504][   T37] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  318.264947][   T37] usb 2-1: USB disconnect, device number 13
[  318.408757][ T8931] fido_id[8931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  318.421382][ T8866] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  318.421792][ T8866] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  318.775787][ T8943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.838'.
[  318.813462][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'.
[  318.850717][   T37] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  318.880546][ T5734] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  319.015759][   T37] usb 2-1: Using ep0 maxpacket: 32
[  319.018497][   T37] usb 2-1: unable to get BOS descriptor or descriptor too short
[  319.041066][ T5734] usb 9-1: Using ep0 maxpacket: 16
[  319.053299][ T5734] usb 9-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  319.053328][ T5734] usb 9-1: config 0 interface 0 has no altsetting 0
[  319.053364][ T5734] usb 9-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  319.053386][ T5734] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.106279][   T37] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  319.106304][   T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.106322][   T37] usb 2-1: Product: syz
[  319.106344][   T37] usb 2-1: Manufacturer: syz
[  319.106356][   T37] usb 2-1: SerialNumber: syz
[  319.174718][ T5734] usb 9-1: config 0 descriptor??
[  319.401403][  T822] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  319.609323][ T5734] usbhid 9-1:0.0: can't add hid device: -71
[  319.609838][ T5734] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  319.644576][ T5734] usb 9-1: USB disconnect, device number 3
[  319.662454][  T822] usb 8-1: Using ep0 maxpacket: 32
[  319.683404][  T822] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.683437][  T822] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.686034][  T822] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  319.686057][  T822] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  319.686076][  T822] usb 8-1: Product: syz
[  319.686088][  T822] usb 8-1: Manufacturer: syz
[  319.765543][   T37] usb 2-1: unit 0 not found!
[  319.788433][  T822] hub 8-1:4.0: USB hub found
[  319.938286][   T37] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  319.971652][   T37] usb 2-1: unit 0 not found!
[  319.992800][   T37] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22
[  320.007434][  T822] hub 8-1:4.0: 2 ports detected
[  320.145528][   T37] usb 2-1: unit 0 not found!
[  320.184599][ T8952] loop4: detected capacity change from 0 to 40427
[  320.212460][  T822] hub 8-1:4.0: hub_hub_status failed (err = -71)
[  320.212479][  T822] hub 8-1:4.0: config failed, can't get hub status (err -71)
[  320.276243][ T8952] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  320.276267][ T8952] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  320.513134][  T822] usb 8-1: USB disconnect, device number 3
[  320.774311][ T5734] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  320.926373][ T5734] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.926403][ T5734] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.927548][ T5734] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  320.927574][ T5734] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  320.927592][ T5734] usb 9-1: Manufacturer: syz
[  321.035837][ T5734] usb 9-1: config 0 descriptor??
[  321.364049][ T8952] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  321.517289][   T37] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22
[  321.537397][   T37] usb 2-1: USB disconnect, device number 14
[  321.721200][ T5734] uclogic 0003:256C:006D.0004: failed retrieving Huion firmware version: -71
[  321.721262][ T5734] uclogic 0003:256C:006D.0004: failed probing parameters: -71
[  321.721364][ T5734] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71
[  321.797087][ T8952] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  321.797109][ T8952] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  321.800335][ T8976] loop6: detected capacity change from 0 to 256
[  321.844447][ T5734] usb 9-1: USB disconnect, device number 4
[  321.866938][ T7934] udevd[7934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  322.858706][ T8963] loop1: detected capacity change from 0 to 40427
[  322.872675][ T8963] f2fs: Unknown parameter 'whint_mode'
[  322.911044][ T9003] netlink: 52 bytes leftover after parsing attributes in process `syz.6.849'.
[  322.962564][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.849'.
[  324.365383][ T8982] syz.4.841: attempt to access beyond end of device
[  324.365383][ T8982] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  324.999073][ T9057] netlink: 52 bytes leftover after parsing attributes in process `syz.6.866'.
[  325.055826][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.866'.
[  325.576231][ T9072] loop1: detected capacity change from 0 to 256
[  325.992825][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.7.872'.
[  326.259831][ T9084] loop8: detected capacity change from 0 to 512
[  326.269903][ T9084] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  326.293678][ T9085] ksmbd: Unknown IPC event: 3, ignore.
[  326.298456][   T97] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  326.298493][   T97] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  326.298519][   T97] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  326.298544][   T97] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  326.587876][ T9084] FAT-fs (loop8): Directory bread(block 8321499170) failed
[  326.587908][ T9084] FAT-fs (loop8): Directory bread(block 8321499171) failed
[  326.587930][ T9084] FAT-fs (loop8): Directory bread(block 8321499172) failed
[  326.587952][ T9084] FAT-fs (loop8): Directory bread(block 8321499173) failed
[  326.587974][ T9084] FAT-fs (loop8): Directory bread(block 8321499174) failed
[  326.587996][ T9084] FAT-fs (loop8): Directory bread(block 8321499175) failed
[  326.588017][ T9084] FAT-fs (loop8): Directory bread(block 8321499176) failed
[  326.588039][ T9084] FAT-fs (loop8): Directory bread(block 8321499177) failed
[  326.588060][ T9084] FAT-fs (loop8): Directory bread(block 8321499178) failed
[  326.588087][ T9084] FAT-fs (loop8): Directory bread(block 8321499179) failed
[  326.814698][ T9091] loop1: detected capacity change from 0 to 128
[  326.824135][ T9091] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  326.834966][ T9091] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  327.400106][ T9109] loop6: detected capacity change from 0 to 256
[  327.807365][ T9115] netlink: 52 bytes leftover after parsing attributes in process `syz.8.881'.
[  327.809831][ T9109] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d)
[  328.126565][ T9109] exFAT-fs (loop6): valid_size(150994954) is greater than size(10)
[  329.478452][ T9129] loop7: detected capacity change from 0 to 7
[  329.716994][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  329.807794][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  329.810045][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  329.810290][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  329.906074][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  329.906113][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  329.907887][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  329.907919][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  329.908585][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  329.908614][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  329.909370][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  329.909397][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  330.083107][ T9138] ksmbd: Unknown IPC event: 3, ignore.
[  331.058161][ T9168] syz.6.885(9168): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  331.606500][ T9184] loop4: detected capacity change from 0 to 512
[  332.503418][ T9184] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.896: bad orphan inode 15
[  332.503454][ T9184] loop4: lost filesystem error report for type 5 error -117
[  332.535407][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  332.535432][    C1] EXT4-fs (loop4): initial error at time 1779720854: ext4_orphan_get:1423
[  332.535455][    C1] EXT4-fs (loop4): last error at time 1779720854: ext4_orphan_get:1423
[  332.558445][ T9184] ext4_test_bit(bit=14, block=18) = 1
[  332.558464][ T9184] is_bad_inode(inode)=0
[  332.558472][ T9184] NEXT_ORPHAN(inode)=1023
[  332.558478][ T9184] max_ino=32
[  332.558485][ T9184] i_nlink=0
[  332.658419][ T9184] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.896: corrupted xattr block 19: invalid header
[  332.658455][ T9184] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  332.673901][ T9184] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117)
[  332.676359][ T9184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  332.678394][ T9184] ext4 filesystem being mounted at /186/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  332.940580][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  333.023189][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  333.045870][   T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  333.092326][    T9] usb 2-1: Using ep0 maxpacket: 16
[  333.117958][    T9] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  333.117989][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  333.118019][    T9] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  333.118039][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.187640][    T9] usb 2-1: config 0 descriptor??
[  333.244439][   T10] usb 8-1: Using ep0 maxpacket: 32
[  333.247172][   T10] usb 8-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  333.247198][   T10] usb 8-1: config 0 interface 0 has no altsetting 0
[  333.247237][   T10] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  333.247257][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.343906][   T10] usb 8-1: config 0 descriptor??
[  333.421655][ T9199] ksmbd: Unknown IPC event: 3, ignore.
[  333.607505][   T10] usbhid 8-1:0.0: can't add hid device: -71
[  333.607671][   T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  333.668184][    T9] uclogic 0003:145F:0212.0005: interface is invalid, ignoring
[  333.708755][   T10] usb 8-1: USB disconnect, device number 4
[  333.861146][ T5734] usb 2-1: USB disconnect, device number 15
[  334.605736][ T9234] loop7: detected capacity change from 0 to 128
[  334.606767][ T9234] EXT4-fs: inline encryption not supported
[  334.639970][ T9235] loop1: detected capacity change from 0 to 256
[  334.649688][ T9235] exfat: Deprecated parameter 'utf8'
[  334.672459][ T9234] EXT4-fs (loop7): Test dummy encryption mode enabled
[  334.891765][ T9234] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  334.921853][ T9234] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.066491][ T9235] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  335.188502][ T9234] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  336.402947][ T9258] ksmbd: Unknown IPC event: 3, ignore.
[  336.489706][ T7933] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  337.533421][ T9297] overlayfs: missing 'lowerdir'
[  337.852069][ T9307] ksmbd: Unknown IPC event: 3, ignore.
[  338.180608][ T6095] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  338.438490][ T6095] usb 8-1: device descriptor read/64, error -71
[  338.562326][ T9323] capability: warning: `syz.6.927' uses 32-bit capabilities (legacy support in use)
[  338.628401][ T9325] loop4: detected capacity change from 0 to 16
[  338.790753][ T6095] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  338.859149][ T9325] erofs (device loop4): mounted with root inode @ nid 36.
[  338.936870][ T6095] usb 8-1: device descriptor read/64, error -71
[  339.042681][ T6095] usb usb8-port1: attempt power cycle
[  339.213651][ T9334] ip6erspan0: entered allmulticast mode
[  339.269537][ T9325] syz.4.928: attempt to access beyond end of device
[  339.269537][ T9325] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16
[  339.310920][ T9325] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  339.310972][ T9325] erofs (device loop4): read error -117 @ 0 of nid 89
[  339.312675][   T38] audit: type=1800 audit(1779720860.877:23): pid=9325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.928" name="file2" dev="loop4" ino=89 res=0 errno=0
[  339.391188][ T6095] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  339.411256][ T6095] usb 8-1: device descriptor read/8, error -71
[  339.715614][ T6095] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  339.735476][ T6095] usb 8-1: device descriptor read/8, error -71
[  339.855845][ T6095] usb usb8-port1: unable to enumerate USB device
[  339.932560][ T9349] ksmbd: Unknown IPC event: 3, ignore.
[  340.610287][ T9372] loop6: detected capacity change from 0 to 512
[  340.719590][ T9374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'.
[  340.783956][ T9372] EXT4-fs (loop6): DAX unsupported by block device.
[  340.979664][ T9380] loop1: detected capacity change from 0 to 1024
[  341.100063][ T9382] loop7: detected capacity change from 0 to 2048
[  341.148938][ T9380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.328564][ T9390] ksmbd: Unknown IPC event: 3, ignore.
[  341.477430][ T9382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.634584][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.757650][ T9399] loop4: detected capacity change from 0 to 512
[  341.933509][ T9399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.933647][ T9399] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.070684][ T6095] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  342.230793][ T9388] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  342.243583][ T6095] usb 7-1: Using ep0 maxpacket: 16
[  342.246794][ T6095] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.246821][ T6095] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.246841][ T6095] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  342.246878][ T6095] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  342.246897][ T6095] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.385116][ T9410] netlink: 56 bytes leftover after parsing attributes in process `syz.1.951'.
[  342.385179][ T9410] netlink: 27 bytes leftover after parsing attributes in process `syz.1.951'.
[  343.060058][ T6095] usb 7-1: config 0 descriptor??
[  343.212518][ T9409] EXT4-fs (loop4): shut down requested (2)
[  343.438067][   T38] audit: type=1800 audit(1779720864.997:24): pid=9405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.953" name="file2" dev="loop4" ino=16 res=0 errno=0
[  343.487324][ T6095] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  343.487359][ T6095] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  343.487385][ T6095] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  343.487417][ T6095] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  343.487443][ T6095] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  343.487468][ T6095] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  343.487493][ T6095] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  343.487517][ T6095] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  343.487542][ T6095] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  343.487567][ T6095] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  343.648559][ T6095] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0006/input/input6
[  343.797118][ T5615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.123880][ T6095] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  344.168599][ T6095] usb 7-1: USB disconnect, device number 3
[  344.342860][ T9421] fido_id[9421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  345.100939][   T32] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  345.212035][ T9439] loop6: detected capacity change from 0 to 1024
[  345.214688][ T9439] EXT4-fs: Ignoring removed nomblk_io_submit option
[  345.260582][   T32] usb 5-1: Using ep0 maxpacket: 32
[  345.263670][   T32] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  345.263693][   T32] usb 5-1: config 0 has no interface number 0
[  345.263732][   T32] usb 5-1: config 0 interface 184 has no altsetting 0
[  345.266231][   T32] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  345.266257][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.266275][   T32] usb 5-1: Product: syz
[  345.266288][   T32] usb 5-1: Manufacturer: syz
[  345.266301][   T32] usb 5-1: SerialNumber: syz
[  345.313850][ T9439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  345.323806][ T9439] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  345.366085][   T32] usb 5-1: config 0 descriptor??
[  345.777188][ T9424] loop1: detected capacity change from 0 to 40427
[  345.786770][ T9424] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288)
[  345.795088][ T9424] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288)
[  345.795771][ T9424] F2FS-fs (loop1): invalid crc value
[  345.796040][ T9424] F2FS-fs (loop1): invalid crc value
[  345.796068][ T9424] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  345.817537][ T7642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  346.014988][   T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  346.015015][   T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  346.919099][ T9459] Illegal XDP return value 4294967274 on prog  (id 25) dev syz_tun, expect packet loss!
[  347.273584][   T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  347.299408][ T9464] loop1: detected capacity change from 0 to 512
[  347.338807][ T9464] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  347.439374][   T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[  347.439401][   T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[  347.439417][   T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  347.439433][   T32] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  347.439724][   T32] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  347.443828][   T10] usb 7-1: Using ep0 maxpacket: 16
[  347.471962][   T10] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  347.471992][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  347.472022][   T10] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  347.472042][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.491743][   T10] usb 7-1: config 0 descriptor??
[  347.551495][   T32] usb 5-1: USB disconnect, device number 15
[  347.858407][ T9464] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.972: invalid indirect mapped block 4294967295 (level 0)
[  347.858442][ T9464] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  347.887540][    C1] EXT4-fs (loop1): initial error at time 1779720869: ext4_free_branches:1023: inode 16
[  347.887575][    C1] EXT4-fs (loop1): last error at time 1779720869: ext4_free_branches:1023: inode 16
[  347.977082][   T10] uclogic 0003:145F:0212.0007: interface is invalid, ignoring
[  348.030821][ T9464] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.972: invalid indirect mapped block 4294967295 (level 1)
[  348.030858][ T9464] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  348.117024][   T10] usb 7-1: USB disconnect, device number 4
[  348.199489][ T9464] EXT4-fs (loop1): 1 orphan inode deleted
[  348.199503][ T9464] EXT4-fs (loop1): 1 truncate cleaned up
[  348.244378][ T9464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.287091][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.409925][ T9464] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  348.593713][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.840881][ T9482] loop8: detected capacity change from 0 to 128
[  348.909336][ T9482] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  348.932020][ T9482] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  349.236534][ T9479] loop7: detected capacity change from 0 to 8192
[  349.248111][ T9479] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  350.487205][   T38] audit: type=1804 audit(1779720872.017:25): pid=9479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.976" name="/newroot/46/file1/bus" dev="loop7" ino=1048630 res=1 errno=0
[  351.389452][ T7959] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  351.666356][  T822] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  351.701571][   T37] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[  351.783789][ T9509] loop7: detected capacity change from 0 to 128
[  351.883845][  T822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  351.883889][  T822] usb 2-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00
[  351.883909][  T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.928752][   T37] usb 7-1: unable to get BOS descriptor or descriptor too short
[  351.941364][   T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 25753, setting to 8
[  351.941394][   T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  351.941414][   T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt
[  351.941434][   T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  351.941453][   T37] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  351.944834][   T37] usb 7-1: string descriptor 0 read error: -22
[  351.944983][   T37] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  351.945004][   T37] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.037337][  T822] usb 2-1: config 0 descriptor??
[  352.058351][ T9498] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  352.071673][   T37] usb 7-1: config 0 descriptor??
[  352.072895][ T9500] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  352.098189][   T37] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  352.166461][ T9509] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  352.173520][ T9509] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  352.449743][ T9517] syz.7.983 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  352.540683][  T822] sony 0003:054C:1000.0008: unknown main item tag 0x2
[  352.540721][  T822] sony 0003:054C:1000.0008: unknown main item tag 0x4
[  352.540746][  T822] sony 0003:054C:1000.0008: unexpected long global item
[  352.541456][  T822] sony 0003:054C:1000.0008: parse failed
[  352.541553][  T822] sony 0003:054C:1000.0008: probe with driver sony failed with error -22
[  352.563355][   T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  352.716599][  T822] usb 2-1: USB disconnect, device number 16
[  352.720049][   T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  352.720075][   T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  352.720095][   T10] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  352.729358][   T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  352.729383][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  352.729401][   T10] usb 9-1: Product: syz
[  352.729413][   T10] usb 9-1: Manufacturer: syz
[  352.729425][   T10] usb 9-1: SerialNumber: syz
[  353.062624][ T7933] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  353.357440][   T10] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  353.437339][   T37] usb 7-1: USB disconnect, device number 5
[  353.458523][   T10] usb 9-1: USB disconnect, device number 5
[  353.613533][   T10] usblp0: removed
[  353.676957][ T9538] kvm: kvm [9537]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000006)
[  353.882676][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.998'.
[  353.976954][   T10] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  354.026123][ T6071] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  354.034788][ T6071] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  354.034838][ T6071] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  354.034869][ T6071] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  354.054112][   T37] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  354.134491][   T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  354.134519][   T10] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  354.143888][   T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  354.143917][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  354.143934][   T10] usb 9-1: Product: syz
[  354.143947][   T10] usb 9-1: Manufacturer: syz
[  354.143960][   T10] usb 9-1: SerialNumber: syz
[  354.210628][   T37] usb 7-1: Using ep0 maxpacket: 32
[  354.235315][   T37] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  354.235338][   T37] usb 7-1: config 0 has no interfaces?
[  354.235365][   T37] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  354.235385][   T37] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.290325][ T9550] loop7: detected capacity change from 0 to 256
[  354.301723][ T9550] exfat: Deprecated parameter 'namecase'
[  354.321289][   T37] usb 7-1: config 0 descriptor??
[  354.415497][ T9550] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[  354.648712][   T10] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  354.658999][   T10] usb 9-1: USB disconnect, device number 6
[  354.673689][   T10] usblp0: removed
[  355.054131][ T9558] loop4: detected capacity change from 0 to 128
[  355.086948][  T822] usb 7-1: USB disconnect, device number 6
[  355.227810][ T9558] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  355.229734][ T9558] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  355.822188][  T822] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  355.948439][ T9579] loop7: detected capacity change from 0 to 128
[  355.958220][ T9579] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  355.962823][ T9577] loop1: detected capacity change from 0 to 512
[  355.978109][ T9579] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  356.234286][  T822] usb 5-1: unable to get BOS descriptor or descriptor too short
[  356.234914][ T9577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.235403][ T9577] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.235797][  T822] usb 5-1: unable to read config index 0 descriptor/start: -71
[  356.235827][  T822] usb 5-1: can't read configurations, error -71
[  356.482768][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.752292][ T5615] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  357.056946][ T9607] ksmbd: Unknown IPC event: 3, ignore.
[  358.952418][ T9659] netlink: 91 bytes leftover after parsing attributes in process `syz.4.1043'.
[  361.017676][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1064'.
[  362.306524][ T9743] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1077'.
[  362.407904][ T9749] ksmbd: Unknown IPC event: 3, ignore.
[  362.438110][ T9747] loop1: detected capacity change from 0 to 256
[  362.439151][ T9747] exfat: Deprecated parameter 'utf8'
[  362.498394][ T9747] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  362.801604][ T6095] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  362.963305][ T6095] usb 8-1: Using ep0 maxpacket: 16
[  362.965765][ T6095] usb 8-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  362.965795][ T6095] usb 8-1: config 0 interface 0 has no altsetting 0
[  362.965826][ T6095] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  362.965847][ T6095] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.075866][ T6095] usb 8-1: config 0 descriptor??
[  363.540974][ T6095] uclogic 0003:145F:0212.0009: interface is invalid, ignoring
[  363.748561][   T10] usb 8-1: USB disconnect, device number 9
[  364.556368][ T9784] loop7: detected capacity change from 0 to 128
[  364.636756][ T9784] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  364.647312][ T9784] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  365.005895][ T9798] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1103'.
[  365.210577][ T5620] Bluetooth: hci4: command 0x0406 tx timeout
[  365.484876][ T9813] loop4: detected capacity change from 0 to 256
[  365.658020][ T9813] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  365.744696][ T9776] loop1: detected capacity change from 0 to 40427
[  365.768269][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1113'.
[  365.768861][ T9776] F2FS-fs (loop1): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  365.768883][ T9776] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  365.769192][ T9776] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  365.769208][ T9776] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  365.817354][ T9822] loop7: detected capacity change from 0 to 512
[  365.888935][ T9822] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.889026][ T9822] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.360716][ T9822] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:105: comm syz.7.1108: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  366.491298][ T9837] loop8: detected capacity change from 0 to 256
[  366.492214][ T9837] exfat: Deprecated parameter 'namecase'
[  366.492249][ T9837] exfat: Deprecated parameter 'namecase'
[  366.492294][ T9837] exfat: Deprecated parameter 'namecase'
[  366.494792][ T9776] loop1: detected capacity change from 0 to 256
[  366.574312][ T9841] loop4: detected capacity change from 0 to 512
[  366.625684][ T9837] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  366.631018][ T9841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.631152][ T9841] ext4 filesystem being mounted at /syzcgroup/unified/syz4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  366.725161][ T9829] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #15: comm syz.7.1108: corrupted xattr block 33: invalid checksum
[  366.725308][ T9829] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74
[  366.871274][ T9829] EXT4-fs warning (device loop7): ext4_evict_inode:287: xattr delete (err -74)
[  367.050311][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.163145][ T9853] fuse: Unknown parameter 'group_id00000000000000000000'
[  367.376029][   T38] audit: type=1800 audit(1779720888.937:26): pid=9841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1118" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=18 res=0 errno=0
[  367.539988][ T9866] loop8: detected capacity change from 0 to 256
[  367.606328][ T9866] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  367.617884][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1126'.
[  368.625662][ T9902] devpts: Bad value for 'uid'
[  368.625681][ T9902] devpts: Bad value for 'uid'
[  368.955774][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'.
[  368.959216][ T9912] loop7: detected capacity change from 0 to 128
[  368.960169][ T9912] EXT4-fs: Ignoring removed nobh option
[  369.114367][ T9912] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  369.116533][ T9912] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  370.075336][ T7933] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  370.442588][ T9940] loop7: detected capacity change from 0 to 256
[  370.459730][ T9940] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  370.459746][ T9940] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  370.610042][ T9940] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  370.625408][ T9940] exFAT-fs (loop7): failed to load alloc-bitmap
[  370.625423][ T9940] exFAT-fs (loop7): failed to recognize exfat type
[  370.882784][ T9952] loop7: detected capacity change from 0 to 128
[  372.210607][ T6095] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  372.360634][ T6095] usb 9-1: Using ep0 maxpacket: 32
[  372.365172][ T6095] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  372.365195][ T6095] usb 9-1: config 0 has no interfaces?
[  372.365229][ T6095] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  372.365251][ T6095] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.393565][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  372.438239][ T6095] usb 9-1: config 0 descriptor??
[  372.560581][   T10] usb 5-1: Using ep0 maxpacket: 8
[  372.563238][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  372.568107][   T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice= 0.40
[  372.568133][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.568151][   T10] usb 5-1: Product: syz
[  372.568164][   T10] usb 5-1: Manufacturer: syz
[  372.568176][   T10] usb 5-1: SerialNumber: syz
[  372.886529][   T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  372.887255][   T10] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  372.887753][   T10] usb 5-1: unit 4 not found!
[  373.021161][   T10] usb 5-1: USB disconnect, device number 18
[  373.132997][ T8978] udevd[8978]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  373.229194][ T6095] usb 9-1: USB disconnect, device number 7
[  374.149740][T10025] loop7: detected capacity change from 0 to 40427
[  374.192880][T10025] F2FS-fs (loop7): build fault injection rate: 771
[  374.213635][T10025] F2FS-fs (loop7): invalid crc value
[  374.495004][T10025] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  374.674719][T10073] fuse: Unexpected value for 'default_permissions'
[  374.678143][T10025] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  374.874230][T10080] fuse: Bad value for 'fd'
[  376.130032][ T7933] syz-executor: attempt to access beyond end of device
[  376.130032][ T7933] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  376.174620][ T7933] CPU: 0 UID: 0 PID: 7933 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  376.174652][ T7933] Tainted: [L]=SOFTLOCKUP
[  376.174659][ T7933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  376.174678][ T7933] Call Trace:
[  376.174685][ T7933]  <TASK>
[  376.174695][ T7933]  dump_stack_lvl+0xe8/0x150
[  376.174725][ T7933]  f2fs_stop_checkpoint+0x3ef/0x5d0
[  376.174755][ T7933]  f2fs_write_end_io+0x1274/0x1740
[  376.174796][ T7933]  __submit_merged_bio+0x256/0x6a0
[  376.174827][ T7933]  __submit_merged_write_cond+0x3c9/0x4e0
[  376.174859][ T7933]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  376.174907][ T7933]  f2fs_write_data_pages+0x287e/0x34f0
[  376.174969][ T7933]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  376.175044][ T7933]  ? do_raw_spin_lock+0x12b/0x2f0
[  376.175076][ T7933]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  376.175101][ T7933]  ? lockdep_hardirqs_on+0x7a/0x110
[  376.175119][ T7933]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  376.175136][ T7933]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  376.175159][ T7933]  ? reacquire_held_locks+0x104/0x190
[  376.175182][ T7933]  ? rt_spin_lock+0x1e0/0x400
[  376.175211][ T7933]  ? rt_spin_unlock+0x14f/0x200
[  376.175236][ T7933]  ? rt_spin_unlock+0x160/0x200
[  376.175257][ T7933]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  376.175284][ T7933]  do_writepages+0x32e/0x550
[  376.175303][ T7933]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  376.175327][ T7933]  ? rt_spin_unlock+0x14f/0x200
[  376.175359][ T7933]  filemap_fdatawrite+0x1ec/0x2f0
[  376.175382][ T7933]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  376.175397][ T7933]  ? __lock_acquire+0x6b5/0x2d10
[  376.175459][ T7933]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  376.175489][ T7933]  ? rt_spin_unlock+0x160/0x200
[  376.175514][ T7933]  f2fs_sync_dirty_inodes+0x30e/0x830
[  376.175548][ T7933]  f2fs_write_checkpoint+0x9df/0x26a0
[  376.175599][ T7933]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  376.175658][ T7933]  ? kfree+0x1c5/0x6c0
[  376.175675][ T7933]  ? __wake_up_common_lock+0x18a/0x1e0
[  376.175695][ T7933]  ? f2fs_stop_gc_thread+0x82/0xb0
[  376.175724][ T7933]  kill_f2fs_super+0x314/0x730
[  376.175748][ T7933]  ? __pfx_kill_f2fs_super+0x10/0x10
[  376.175779][ T7933]  ? lockdep_hardirqs_on+0x7a/0x110
[  376.175811][ T7933]  deactivate_locked_super+0xbc/0x130
[  376.175834][ T7933]  cleanup_mnt+0x437/0x4d0
[  376.175855][ T7933]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.175876][ T7933]  task_work_run+0x1d9/0x270
[  376.175902][ T7933]  ? __pfx_task_work_run+0x10/0x10
[  376.175934][ T7933]  exit_to_user_mode_loop+0xf3/0x4d0
[  376.175954][ T7933]  ? rcu_is_watching+0x15/0xb0
[  376.175978][ T7933]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.175998][ T7933]  do_syscall_64+0x33e/0x560
[  376.176015][ T7933]  ? trace_irq_disable+0x3b/0x140
[  376.176035][ T7933]  ? clear_bhb_loop+0x40/0x90
[  376.176057][ T7933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.176074][ T7933] RIP: 0033:0x7ff4f7cce097
[  376.176099][ T7933] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  376.176113][ T7933] RSP: 002b:00007ffc707d7c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  376.176133][ T7933] RAX: 0000000000000000 RBX: 00007ff4f7d621ca RCX: 00007ff4f7cce097
[  376.176144][ T7933] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc707d7d00
[  376.176156][ T7933] RBP: 00007ffc707d7d00 R08: 00007ffc707d8d00 R09: 00000000ffffffff
[  376.176168][ T7933] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc707d8d90
[  376.176179][ T7933] R13: 00007ff4f7d621ca R14: 000000000005b884 R15: 00007ffc707d8dd0
[  376.176210][ T7933]  </TASK>
[  376.177170][ T7933] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  376.250842][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1214'.
[  376.356217][T10107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1219'.
[  377.190588][  T822] usb 9-1: new low-speed USB device number 8 using dummy_hcd
[  377.343870][  T822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.343895][  T822] usb 9-1: config 0 has no interfaces?
[  377.343923][  T822] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  377.343943][  T822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.350857][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  377.356987][  T822] usb 9-1: config 0 descriptor??
[  377.553571][   T10] usb 2-1: Using ep0 maxpacket: 32
[  377.565381][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.565404][   T10] usb 2-1: config 0 has no interfaces?
[  377.565432][   T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  377.565457][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.623104][ T6095] usb 9-1: USB disconnect, device number 8
[  377.624953][   T10] usb 2-1: config 0 descriptor??
[  377.868070][ T6095] usb 2-1: USB disconnect, device number 17
[  378.500149][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  378.500232][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  378.569778][T10163] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1245'.
[  378.935627][T10179] loop8: detected capacity change from 0 to 256
[  378.955922][T10179] exfat: Deprecated parameter 'utf8'
[  379.073273][T10179] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  381.154873][T10199] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1259'.
[  381.541389][   T10] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[  381.703392][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  381.703417][   T10] usb 9-1: config 0 has no interfaces?
[  381.703441][   T10] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  381.703462][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.754030][   T10] usb 9-1: config 0 descriptor??
[  381.977297][   T10] usb 9-1: USB disconnect, device number 9
[  382.971772][T10245] loop7: detected capacity change from 0 to 512
[  383.026749][T10245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.026885][T10245] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  383.698462][ T7933] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.092588][T10269] loop7: detected capacity change from 0 to 128
[  384.111944][T10269] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  384.141080][T10269] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  385.295011][T10281] loop7: detected capacity change from 0 to 8192
[  385.414272][   T38] audit: type=1800 audit(1779720906.967:27): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1295" name="file2" dev="loop7" ino=1048636 res=0 errno=0
[  385.524323][T10281] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1)
[  385.524348][T10281] FAT-fs (loop7): Filesystem has been set read-only
[  385.737221][T10299] loop8: detected capacity change from 0 to 512
[  386.907943][T10320] loop1: detected capacity change from 0 to 1024
[  386.971754][T10320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.109056][T10297] loop7: detected capacity change from 0 to 40427
[  387.125384][T10297] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64)
[  387.125407][T10297] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  387.125735][T10297] F2FS-fs (loop7): Image doesn't support compression
[  387.199994][T10297] F2FS-fs (loop7): invalid crc value
[  387.394196][T10320] ext4: Unknown parameter 'msdos'
[  387.394741][T10327] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  387.478971][T10327] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  387.479002][T10327] EXT4-fs (loop1): This should not happen!! Data will be lost
[  387.479002][T10327] 
[  387.479017][T10327] EXT4-fs (loop1): Total free blocks count 0
[  387.479030][T10327] EXT4-fs (loop1): Free/Dirty block details
[  387.479071][T10327] EXT4-fs (loop1): free_blocks=20480
[  387.479109][T10327] EXT4-fs (loop1): dirty_blocks=80
[  387.479121][T10327] EXT4-fs (loop1): Block reservation details
[  387.479132][T10327] EXT4-fs (loop1): i_reserved_data_blocks=5
[  387.479744][T10327] EXT4-fs error (device loop1) in ext4_setattr:6120: error 28
[  387.754278][T10297] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  387.785363][ T6490] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  387.866691][ T5614] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  387.928231][T10297] F2FS-fs (loop7): f2fs_disable_checkpoint starts, unusable: 0
[  387.928259][T10297] F2FS-fs (loop7): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  387.928383][T10297] F2FS-fs (loop7): Start checkpoint disabled!
[  388.353650][T10349] kvm: kvm [10348]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1
[  388.374811][T10297] F2FS-fs (loop7): f2fs_disable_checkpoint finishes, err:0
[  388.376029][T10297] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  388.376055][T10297] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  388.409091][T10349] kvm: kvm [10348]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff9d000000bd
[  388.409609][T10349] kvm: kvm [10348]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xfff50000000c
[  389.157817][T10378] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1337'.
[  390.896979][T10371] Bluetooth: hci3: command 0x0406 tx timeout
[  390.897147][T10371] Bluetooth: hci6: command 0x0406 tx timeout
[  390.935246][T10412] loop8: detected capacity change from 0 to 4096
[  391.253348][T10412] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.382752][T10419] loop1: detected capacity change from 0 to 256
[  391.410164][ T6071] kworker/u8:16: attempt to access beyond end of device
[  391.410164][ T6071] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  391.435180][ T6071] CPU: 0 UID: 0 PID: 6071 Comm: kworker/u8:16 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  391.435207][ T6071] Tainted: [L]=SOFTLOCKUP
[  391.435214][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  391.435224][ T6071] Workqueue: writeback wb_workfn (flush-7:7)
[  391.435256][ T6071] Call Trace:
[  391.435263][ T6071]  <TASK>
[  391.435271][ T6071]  dump_stack_lvl+0xe8/0x150
[  391.435298][ T6071]  f2fs_stop_checkpoint+0x3ef/0x5d0
[  391.435327][ T6071]  f2fs_write_end_io+0x1274/0x1740
[  391.435366][ T6071]  __submit_merged_bio+0x256/0x6a0
[  391.435397][ T6071]  __submit_merged_write_cond+0x3c9/0x4e0
[  391.435429][ T6071]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  391.435476][ T6071]  f2fs_write_data_pages+0x287e/0x34f0
[  391.435537][ T6071]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  391.435575][ T6071]  ? __lock_acquire+0x6b5/0x2d10
[  391.435633][ T6071]  ? __lock_acquire+0x6b5/0x2d10
[  391.435693][ T6071]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  391.435719][ T6071]  do_writepages+0x32e/0x550
[  391.435741][ T6071]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  391.435763][ T6071]  ? reacquire_held_locks+0x104/0x190
[  391.435785][ T6071]  ? rt_spin_lock+0x1e0/0x400
[  391.435815][ T6071]  __writeback_single_inode+0x133/0x10e0
[  391.435837][ T6071]  ? rt_spin_unlock+0x160/0x200
[  391.435860][ T6071]  writeback_sb_inodes+0x97f/0x1980
[  391.435909][ T6071]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  391.435964][ T6071]  ? __pfx_rt_spin_lock+0x10/0x10
[  391.435984][ T6071]  ? rt_spin_unlock+0x14f/0x200
[  391.436016][ T6071]  wb_writeback+0x445/0xb00
[  391.436038][ T6071]  ? queue_io+0x251/0x440
[  391.436063][ T6071]  ? __pfx_wb_writeback+0x10/0x10
[  391.436098][ T6071]  wb_workfn+0x3fd/0xf20
[  391.436118][ T6071]  ? look_up_lock_class+0x57/0x110
[  391.436154][ T6071]  ? __pfx_wb_workfn+0x10/0x10
[  391.436183][ T6071]  ? do_raw_spin_unlock+0xf5/0x210
[  391.436208][ T6071]  ? process_one_work+0x8be/0x1630
[  391.436236][ T6071]  ? process_one_work+0x8be/0x1630
[  391.436272][ T6071]  ? process_one_work+0x8be/0x1630
[  391.436295][ T6071]  process_one_work+0x98b/0x1630
[  391.436342][ T6071]  ? __pfx_process_one_work+0x10/0x10
[  391.436364][ T6071]  ? do_raw_spin_lock+0x12b/0x2f0
[  391.436405][ T6071]  worker_thread+0xb49/0x1140
[  391.436435][ T6071]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  391.436466][ T6071]  kthread+0x388/0x470
[  391.436486][ T6071]  ? __pfx_worker_thread+0x10/0x10
[  391.436501][ T6071]  ? __pfx_kthread+0x10/0x10
[  391.436522][ T6071]  ret_from_fork+0x514/0xb70
[  391.436548][ T6071]  ? __pfx_ret_from_fork+0x10/0x10
[  391.436569][ T6071]  ? __switch_to+0xc79/0x1410
[  391.436591][ T6071]  ? __pfx_kthread+0x10/0x10
[  391.436613][ T6071]  ret_from_fork_asm+0x1a/0x30
[  391.436653][ T6071]  </TASK>
[  391.741741][ T6071] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  391.798225][   T10] loop7: lost filesystem error report for type 5 error -108
[  392.112304][T10419] FAT-fs (loop1): Directory bread(block 64) failed
[  392.112336][T10419] FAT-fs (loop1): Directory bread(block 65) failed
[  392.112502][T10419] FAT-fs (loop1): Directory bread(block 66) failed
[  392.112523][T10419] FAT-fs (loop1): Directory bread(block 67) failed
[  392.112620][T10419] FAT-fs (loop1): Directory bread(block 68) failed
[  392.112641][T10419] FAT-fs (loop1): Directory bread(block 69) failed
[  392.112732][T10419] FAT-fs (loop1): Directory bread(block 70) failed
[  392.112758][T10419] FAT-fs (loop1): Directory bread(block 71) failed
[  392.112855][T10419] FAT-fs (loop1): Directory bread(block 72) failed
[  392.112874][T10419] FAT-fs (loop1): Directory bread(block 73) failed
[  392.282815][T10412] fs-verity (loop8, inode 16): Error -4 reading file data
[  392.282874][T10412] fs-verity (loop8, inode 16): Error -4 building Merkle tree
[  392.532104][   T38] audit: type=1800 audit(1779720914.087:28): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1351" name="file1" dev="loop8" ino=15 res=0 errno=0
[  392.532147][   T38] audit: type=1800 audit(1779720914.097:29): pid=10422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1351" name="file1" dev="loop8" ino=15 res=0 errno=0
[  392.930345][ T7959] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.994565][T10454] loop1: detected capacity change from 0 to 256
[  394.360697][   T10] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[  394.514515][   T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  394.514540][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  394.514557][   T10] usb 5-1: config 0 has no interface number 0
[  394.514600][   T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  394.514619][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.546669][   T10] usb 5-1: config 0 descriptor??
[  394.572663][   T10] iowarrior 5-1:0.1: no interrupt-in endpoint found
[  394.807434][   T10] usb 5-1: USB disconnect, device number 19
[  394.970846][   T37] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  395.048484][T10446] loop7: detected capacity change from 0 to 40427
[  395.077063][T10446] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  395.078374][T10446] F2FS-fs (loop7): invalid crc value
[  395.133237][   T37] usb 9-1: config 2 has an invalid interface number: 12 but max is 0
[  395.133262][   T37] usb 9-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[  395.133279][   T37] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  395.133295][   T37] usb 9-1: config 2 has no interface number 0
[  395.133335][   T37] usb 9-1: config 2 interface 12 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  395.133367][   T37] usb 9-1: config 2 interface 12 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  395.133388][   T37] usb 9-1: config 2 interface 12 altsetting 7 endpoint 0x8A has invalid wMaxPacketSize 0
[  395.133407][   T37] usb 9-1: config 2 interface 12 has no altsetting 0
[  395.139756][   T37] usb 9-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3
[  395.139783][   T37] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.139802][   T37] usb 9-1: Product: syz
[  395.139815][   T37] usb 9-1: Manufacturer: syz
[  395.139828][   T37] usb 9-1: SerialNumber: syz
[  395.517796][   T37] em28xx 9-1:2.12: New device syz syz @ 12 Mbps (2040:8265, interface 12, class 12)
[  395.517830][   T37] em28xx 9-1:2.12: Device initialization failed.
[  395.517843][   T37] em28xx 9-1:2.12: Device must be connected to a high-speed USB 2.0 port.
[  395.582063][   T37] usb 9-1: USB disconnect, device number 10
[  395.847681][T10446] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  396.085569][T10507] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1390'.
[  396.106789][T10446] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  397.309158][T10534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1405'.
[  397.517691][T10541] binder: 10540:10541 ioctl c0306201 0 returned -14
[  397.836000][T10555] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1413'.
[  398.517423][T10567] 
[  398.517435][T10567] ======================================================
[  398.517443][T10567] WARNING: possible circular locking dependency detected
[  398.517459][T10567] syzkaller #0 Tainted: G             L     
[  398.517470][T10567] ------------------------------------------------------
[  398.517478][T10567] syz.1.1414/10567 is trying to acquire lock:
[  398.517489][T10567] ffff88803997c410 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480
[  398.517543][T10567] 
[  398.517543][T10567] but task is already holding lock:
[  398.517549][T10567] ffffffff8e74bdd8 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0
[  398.517598][T10567] 
[  398.517598][T10567] which lock already depends on the new lock.
[  398.517598][T10567] 
[  398.517605][T10567] 
[  398.517605][T10567] the existing dependency chain (in reverse order) is:
[  398.517612][T10567] 
[  398.517612][T10567] -> #7 (major_names_lock){+.+.}-{4:4}:
[  398.517637][T10567]        mutex_lock_nested+0x5a/0x1d0
[  398.517659][T10567]        blk_request_module+0x35/0x2a0
[  398.517680][T10567]        blkdev_get_no_open+0x3f/0xe0
[  398.517698][T10567]        bdev_file_open_by_dev+0xa0/0x240
[  398.517718][T10567]        swsusp_check+0x56/0x490
[  398.517737][T10567]        software_resume+0x51/0x4c0
[  398.517752][T10567]        resume_store+0x333/0x4f0
[  398.517768][T10567]        kernfs_fop_write_iter+0x3b0/0x540
[  398.517791][T10567]        vfs_write+0x629/0xba0
[  398.517809][T10567]        ksys_write+0x156/0x270
[  398.517828][T10567]        do_syscall_64+0x15f/0x560
[  398.517844][T10567]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.517861][T10567] 
[  398.517861][T10567] -> #6 (system_transition_mutex){+.+.}-{4:4}:
[  398.517886][T10567]        mutex_lock_nested+0x5a/0x1d0
[  398.517905][T10567]        lock_system_sleep+0x49/0x70
[  398.517923][T10567]        resume_store+0x2ff/0x4f0
[  398.517938][T10567]        kernfs_fop_write_iter+0x3b0/0x540
[  398.517961][T10567]        vfs_write+0x629/0xba0
[  398.517980][T10567]        ksys_write+0x156/0x270
[  398.517998][T10567]        do_syscall_64+0x15f/0x560
[  398.518014][T10567]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.518031][T10567] 
[  398.518031][T10567] -> #5 (&of->mutex){+.+.}-{4:4}:
[  398.518055][T10567]        mutex_lock_nested+0x5a/0x1d0
[  398.518076][T10567]        kernfs_seq_start+0x5c/0x420
[  398.518097][T10567]        seq_read_iter+0x3f8/0xe20
[  398.518119][T10567]        vfs_read+0x58b/0xa80
[  398.518136][T10567]        ksys_read+0x156/0x270
[  398.518154][T10567]        do_syscall_64+0x15f/0x560
[  398.518170][T10567]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.518186][T10567] 
[  398.518186][T10567] -> #4 (&p->lock){+.+.}-{4:4}:
[  398.518210][T10567]        mutex_lock_nested+0x5a/0x1d0
[  398.518230][T10567]        seq_read_iter+0xb8/0xe20
[  398.518251][T10567]        lo_rw_aio+0xc80/0xf00
[  398.518268][T10567]        loop_process_work+0x92a/0x11b0
[  398.518286][T10567]        process_one_work+0x98b/0x1630
[  398.518308][T10567]        worker_thread+0xb49/0x1140
[  398.518323][T10567]        kthread+0x388/0x470
[  398.518347][T10567]        ret_from_fork+0x514/0xb70
[  398.518367][T10567]        ret_from_fork_asm+0x1a/0x30
[  398.518390][T10567] 
[  398.518390][T10567] -> #3 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}:
[  398.518415][T10567]        process_one_work+0x8d7/0x1630
[  398.518438][T10567]        worker_thread+0xb49/0x1140
[  398.518452][T10567]        kthread+0x388/0x470
[  398.518469][T10567]        ret_from_fork+0x514/0xb70
[  398.518488][T10567]        ret_from_fork_asm+0x1a/0x30
[  398.518510][T10567] 
[  398.518510][T10567] -> #2 ((wq_completion)loop1){+.+.}-{0:0}:
[  398.518534][T10567]        touch_wq_lockdep_map+0xcb/0x180
[  398.518551][T10567]        __flush_workqueue+0x14b/0x14f0
[  398.518567][T10567]        drain_workqueue+0xd3/0x390
[  398.518584][T10567]        lo_release+0x287/0x8f0
[  398.518601][T10567]        bdev_release+0x541/0x660
[  398.518619][T10567]        blkdev_release+0x15/0x20
[  398.518638][T10567]        __fput+0x461/0xa70
[  398.518653][T10567]        fput_close_sync+0x11f/0x240
[  398.518669][T10567]        __x64_sys_close+0x7e/0x110
[  398.518685][T10567]        do_syscall_64+0x15f/0x560
[  398.518700][T10567]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.518718][T10567] 
[  398.518718][T10567] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  398.518742][T10567]        mutex_lock_nested+0x5a/0x1d0
[  398.518761][T10567]        __del_gendisk+0x127/0x980
[  398.518782][T10567]        del_gendisk+0xe7/0x160
[  398.518803][T10567]        loop_remove+0x42/0xc0
[  398.518818][T10567]        loop_control_ioctl+0x4ba/0x5b0
[  398.518835][T10567]        __se_sys_ioctl+0xff/0x170
[  398.518855][T10567]        do_syscall_64+0x15f/0x560
[  398.518870][T10567]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.518887][T10567] 
[  398.518887][T10567] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  398.518911][T10567]        __lock_acquire+0x15a5/0x2d10
[  398.518931][T10567]        lock_acquire+0x106/0x350
[  398.518949][T10567]        down_read+0x97/0x200
[  398.518965][T10567]        add_disk_fwnode+0xe7/0x480
[  398.518986][T10567]        loop_add+0x86e/0xb50
[  398.519002][T10567]        blk_request_module+0x27d/0x2a0
[  398.519023][T10567]        blkdev_get_no_open+0x3f/0xe0
[  398.519041][T10567]        blkdev_open+0x1f5/0x620
[  398.519060][T10567]        do_dentry_open+0x83d/0x13e0
[  398.519075][T10567]        vfs_open+0x3b/0x350
[  398.519088][T10567]        path_openat+0x2eea/0x3960
[  398.519107][T10567]        do_file_open+0x23e/0x4a0
[  398.519125][T10567]        do_sys_openat2+0x115/0x200
[  398.519141][T10567]        __x64_sys_creat+0x8f/0xc0
[  398.519156][T10567]        do_syscall_64+0x15f/0x560
[  398.519172][T10567]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.519189][T10567] 
[  398.519189][T10567] other info that might help us debug this:
[  398.519189][T10567] 
[  398.519195][T10567] Chain exists of:
[  398.519195][T10567]   &set->update_nr_hwq_lock --> system_transition_mutex --> major_names_lock
[  398.519195][T10567] 
[  398.519226][T10567]  Possible unsafe locking scenario:
[  398.519226][T10567] 
[  398.519231][T10567]        CPU0                    CPU1
[  398.519237][T10567]        ----                    ----
[  398.519243][T10567]   lock(major_names_lock);
[  398.519255][T10567]                                lock(system_transition_mutex);
[  398.519269][T10567]                                lock(major_names_lock);
[  398.519283][T10567]   rlock(&set->update_nr_hwq_lock);
[  398.519296][T10567] 
[  398.519296][T10567]  *** DEADLOCK ***
[  398.519296][T10567] 
[  398.519301][T10567] 1 lock held by syz.1.1414/10567:
[  398.519312][T10567]  #0: ffffffff8e74bdd8 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0
[  398.519368][T10567] 
[  398.519368][T10567] stack backtrace:
[  398.519382][T10567] CPU: 1 UID: 0 PID: 10567 Comm: syz.1.1414 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  398.519408][T10567] Tainted: [L]=SOFTLOCKUP
[  398.519415][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  398.519426][T10567] Call Trace:
[  398.519433][T10567]  <TASK>
[  398.519441][T10567]  dump_stack_lvl+0xe8/0x150
[  398.519463][T10567]  print_circular_bug+0x2e1/0x300
[  398.519491][T10567]  check_noncircular+0x12e/0x150
[  398.519518][T10567]  __lock_acquire+0x15a5/0x2d10
[  398.519543][T10567]  ? number+0xb1/0xf80
[  398.519566][T10567]  ? __pfx___schedule+0x10/0x10
[  398.519593][T10567]  ? add_disk_fwnode+0xe7/0x480
[  398.519614][T10567]  lock_acquire+0x106/0x350
[  398.519634][T10567]  ? add_disk_fwnode+0xe7/0x480
[  398.519662][T10567]  down_read+0x97/0x200
[  398.519679][T10567]  ? add_disk_fwnode+0xe7/0x480
[  398.519701][T10567]  ? __pfx_down_read+0x10/0x10
[  398.519723][T10567]  add_disk_fwnode+0xe7/0x480
[  398.519748][T10567]  loop_add+0x86e/0xb50
[  398.519769][T10567]  ? __pfx_loop_add+0x10/0x10
[  398.519793][T10567]  ? __pfx_loop_probe+0x10/0x10
[  398.519814][T10567]  ? __pfx_loop_probe+0x10/0x10
[  398.519834][T10567]  ? blk_request_module+0x25b/0x2a0
[  398.519858][T10567]  ? __pfx_loop_probe+0x10/0x10
[  398.519880][T10567]  blk_request_module+0x27d/0x2a0
[  398.519905][T10567]  blkdev_get_no_open+0x3f/0xe0
[  398.519925][T10567]  blkdev_open+0x1f5/0x620
[  398.519948][T10567]  ? __pfx_blkdev_open+0x10/0x10
[  398.519969][T10567]  do_dentry_open+0x83d/0x13e0
[  398.519990][T10567]  vfs_open+0x3b/0x350
[  398.520005][T10567]  ? path_openat+0x2ed3/0x3960
[  398.520027][T10567]  path_openat+0x2eea/0x3960
[  398.520053][T10567]  ? lockdep_hardirqs_on+0x7a/0x110
[  398.520076][T10567]  ? __pfx_path_openat+0x10/0x10
[  398.520103][T10567]  ? do_raw_spin_lock+0x12b/0x2f0
[  398.520125][T10567]  do_file_open+0x23e/0x4a0
[  398.520145][T10567]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  398.520164][T10567]  ? __pfx_do_file_open+0x10/0x10
[  398.520184][T10567]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  398.520214][T10567]  ? alloc_fd+0x679/0x6f0
[  398.520236][T10567]  do_sys_openat2+0x115/0x200
[  398.520253][T10567]  ? __se_sys_futex+0x3a8/0x450
[  398.520277][T10567]  ? __pfx_do_sys_openat2+0x10/0x10
[  398.520297][T10567]  ? rcu_is_watching+0x15/0xb0
[  398.520321][T10567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.520344][T10567]  __x64_sys_creat+0x8f/0xc0
[  398.520363][T10567]  do_syscall_64+0x15f/0x560
[  398.520381][T10567]  ? clear_bhb_loop+0x40/0x90
[  398.520401][T10567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.520417][T10567] RIP: 0033:0x7f1854aace59
[  398.520432][T10567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.520448][T10567] RSP: 002b:00007f1852cc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  398.520469][T10567] RAX: ffffffffffffffda RBX: 00007f1854d26180 RCX: 00007f1854aace59
[  398.520483][T10567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0
[  398.520495][T10567] RBP: 00007f1854b42d6f R08: 0000000000000000 R09: 0000000000000000
[  398.520506][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  398.520518][T10567] R13: 00007f1854d26218 R14: 00007f1854d26180 R15: 00007fff2f749078
[  398.520539][T10567]  </TASK>
[  398.905688][T10567] block device autoloading is deprecated and will be removed.
[  399.074668][T10569] tmpfs: Cannot change global quota limit on remount