last executing test programs:

6m51.695291349s ago: executing program 2 (id=1253):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x0, @loopback}}}, 0x108)
syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@datacow}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@datasum}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@nospace_cache}, {@acl}]}, 0xff, 0x5122, &(0x7f000000b580)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paWLOSWiSzMILauJDCCNyGhrlwoxhILtpp3HvOc+fe53jPvTONjennIzPnPOd3nuc893IW93udc04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMJzv31ypKx++vr02fMz9d2Hts1cOTC94UwIlfb2Sl7ftf3pl17fsev5idhh9sVsWav1GzLreiFrrOnZ2OrX+/NqCGEsGaCaL59aVxi1e3VfccBSNy7tPbZlf33ziaPN6rXL504VXzotE6s9gdWSn1cXF8+levv3SLJHp9116lV6TtGsf3rC/SsvAgBYkqlGe9H5OJp/xO20D6b1pF1P2s2kHT8hNLsby5GNu6bfPDel9VWaZz2LCuN955nU8/e/026k/ZN2EjWWMM/eXfNIM9FvnnNJfbXmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA7eejN0QfK6qevT589P1PffWjbzJUD0xvOhFBrb69k5crad4/W//xm+/FDP2z98sTFZx+p5v3icrRr5/BrXHlsMoTXuioX47CX1ofQ6C20m+HzYuGN9sozsQAAAMCd5N7275FOO4uDYz3tSjtNVtr/oiws3ri099iW/fXNJ442q9cunzu1/PEafcar33S8Tru2+FPpCsYx/qbjLdbjrvsK45RLR0zz/KMXpv4q61/I/7Xy/B/fOfkfAACAf0L+T8cpNyj/f/vK7x+V9S/k/009hyzk/zjjmP9HwvLyPwAAANzObnX+rxfGKTco/4+/MPZVWf9C/p8aLv+Pdk87bvwlTnjPZAhTg6YOAAAA9BH/333xq4WY17NvDtK8/sTDh8+XjVfI//Xh8v9Y+GJ+RV8YAAAAsGzzn+18sKxeyP+N4fL/+C2dNQAAALAUb70/8V5ZvZD/Z4fL/2vzZX7lQ9bpx/hXCEcmQ5horcxlhZ9C88lOAQAAAFghMaf/8fHu78v2K+T/ufL7/8c7HcTr/3vu/1e4/r+rkN3173E3BgAAAOBuVLyeP94eP3tyQb/n7w97/f99/zv8ctnxC/n/4HD5v9q9XMnn/wEAAMAy/Nee/7ezME65Qff/v+eDt38u61/I/83h8n9crut+eScrlez9eWcyhI2tlfxugl/Hw+1JCgtjXYW2RtJjR+yRFxbGuwptc0mPrZMh3N9aOZgU/h8LzaRwdX1emE8KZ2IhPx86heNJ4WQ80z5dn083LXwXC/kFFgvxCop1nUsikh7X+vVoFW7a41zn4AAAAHeVGJ7zLDvW2wxplF2oDNph7aAdRgbtUB20w2iyQ7pjv+1htrcQtzfPbl7a8//nh8v/8a1Yky36Xf8f4vX/+XMNO9f/z8ZCLSksxEIjvWNAIx4jC7sfxmPUGnmPqxs7BQAAALijxe8Fqqs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/Zu9cYua76AOBnn+N9eHcTqAgpggXqGBe8XtvhoTYV6zRVUShlXVKiClFs7HVYvMHGdgqOADk2KEURNC2R4EOjOEKozoekFgkKNIniRsIoah4oVSOSKBFpnSCi0DSAQiESrmbuPbN3zt15+LGON/39JO+cmf953nl4zr13zgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/hyNf+szftorf/9tLHn/q8qlP7t9w+fOfv+Tch0OYrj3elYW7Bq+9cernt1582/671t10x7FL396fl8vjYaj6pzu/88VY67HlIdzZFUJvGlg9nAX68vvDsb43DIdwTpgP1EvMDGYl0obD9wdCOBjmA/WqvjcQwnAhcNkj9937lWrihoEQVoQQKmkbT1ayNgbSwAX9WWAwDezozQK/Op6pB77bnQXglMU3Q/1Ff3i6McPYwuWavP76TlvHXlnp8HpiYqx5vp9tWOROFfSnD0yf0tNWqo5FUXp7HPFuWwLvttJ2vt7TVvwilX9DOT4fqoTurTPbNl81tyc+0h0mJnqa1bRIz/NjL35uy4mkl8zrMHZg7LS8Dr/60Ipbe1Z94ME7Vq949tA7Djx3qt38UWGTFtOLrRLy19ySeR6jKZ8nS+DtV/qWNO5LVwhh2yd+74Ot4qX5/1jr+X98Ocfb7obcsdaXR7K5eXxkOCZeGMnm5gAAALBkLIW9pjsm7nlPofhoJamvNP8f7+z4fzzkn0/ms9EeCWGqljgwGsJ5tcezwC2xuY+PhvDmWmq6MbAhCRwJ4fW1xKp6VUmJZbHEeBL4yUgemEoCR2NgOgl8KwauTwJfjIHDSWBLDBxJAhfHQJhtHMfvj+Tj6DgwEAObso14OJ6F8IuR2FqyrZ6oVwUAAHCa5LPDvsa7hXMdTjVDnF4eHmiXIZ6B3TRDJakhncHWp1VNa+htV0N3uxrq497Xevilmrva1Vw6DaOrMcONv/ybD4UWSvP/ydbz/8oCHekqHf8PYWPtb8zdnUfm6vFN0w0ZAAAAgFMw9L9Pf7NVvDT/n+rs/P+4T6SnkDk8EHdDbB8NYbIxkFX7h+VAdtR7KA8AAADAUlA/Hl8/Fj6b32anaKfz6XL+6RPMHw/8Ty2Yv//I3Zta9bc0/5/u7Pz/wcbbrBNHYy++NhrCskLgB7GX1UDNeAz8+L2NgXz8R+MGuC5WlZ+YUK/qulhiUwxMJoGDzUr8sF7ivMZA/mTVGz9QH8dsXqIQAAAAgDMu7g6Ix+Xj+f9v+c26z7QqV5r/bzqx8/9r8+DS6f1zQyGs6Q2hJ/1hwAOD2cKAMTDclSfuGczq6kmrumYwhIuqA0urejpf/783XWPwkYGsqhg47y2HXrygmvjmQAhrioFHP3LzO6uJPUmg3vhfDoTwpupo08a/syxrvC9t/OvLQnhjIVCv6uPLQqg21p9WdV8lv45BWtU/V0J4TSFQr+pdlRD2BgCWqPhf6dbig7v3Xr1989zczK5FTMR9+ANh2+zczMSWHXNbK036tDXpc8MyRteUx9TplW+eyJco+vDtG4c7Sdd/JzhZbCvfj186cTC/H78L9dXGua6v4e76dMhve2u5iVD4JtVsyN2LPOTBYiXzT2Kp/pi/PwyFZVftntk18dnNe/bsWpv97TT7uuxvPMyUbau16bYaXKhvHbw8mq6WlTjZbbWyWMmaPVfuXLN779WrZ6/cfMXMFTOfWvuudZMXTq6ffPeFa6qjmsz+thnqyoWqToZ6/OYOx3Uah3p+b6GSM/GpISEhsdQSO4ZWtvw/uTT/39l6/h8/deInf74+Q7Pj/2PxMH/2+Pxh/k0xcLDT4/9jzY7m108MGE8C+2Jgn8P8AAAAvDrESX7cmxn3Sv901XeebVWuNP/f19nv/0/T+v/1pesvbbbM/6pYYrLZ+v/pMv/19f/3NVv/P13mv77+/8FXYP3/q+qBZJP8wvr/AADAq8GZW/+/7fL+6QUCShnaLu+fXiCglKHtMv6dXiDghNf/f/I//+q/Qwul+f/1nc3/LdwPAAAAZ48v/NlnfqdVvDT/P9jZ/P/Mr/8Xmp3/P94sMN1sYUDr/wEAALBENVv/b+zawY+1Klea/x/ubP4fT7vobsgda315JFvTLqRr2r0wUv/JAAAAACwN3WFioq/DvA0ro244+TYfy5cCbZUuevpPjp3Y+f9HOpv/N/wu46sPrbi1Z9UHHnz5jtUrnj30jgPPzR//BwAAABZPp/slAAAAAAAAAAAAAACAV97T/7F/fat46ff/YWPt8Wa//4/X/Yu/L3htQ+5Ya/v1//L7l73/tr21JQsfGAnhrcXA9v3bzwn5tflXFgP3fnTV66qJ/WmJu5+6+Jlq4mNp4H2rz32pmrgoCWyKiyS+Pg3Eqyq+tDwJxOUV/z0NxO1xOA3054EvL8/G0ZVuq58OZ9uqK91Wjw+HMFoI1LfVncNZG13pAG9IAvUBfjoNxAH+eR7oTnt121DWqxgYjkVvGsp6BQDAWSt+C+wL22bnZibjV/h4e35v423UsGTZNeVquzps/ol8abIP375xuJN0T/pddP5a432hUh3C2tLX1WKWrtooT08tbTbda5sMud1qb91NyqVOdNP1Nx/RQDaiiS075rb2tR34+vZZ1vW2zbK2NNkpZumubdIOaumgLx2MqMNt00GX4/3uMDHRk+T6gxgcCw3avSI6/b1+cZ2/Zq+CYp5PHTvwq1b1leb/Y53N/yvFcb2UXwxgX7yy3t+NWuYfAAAAFteXN/z6G/Hfh669/9FWeUvz//HO5v9xD1Z+KDjb23EkXv//wGgItUvrj2WBW2JzHx8N4c211HQskV1Q/9JYYjIL3BJ3mKyKJTZNN1a1LAYOJ4GfjOSBI0ngaAzkeykOhXxXzt+PhPDOWmpjY4mdscRYEvhgDIwngYkYmEwCy2NgKgk8vzwPTCeBf4uBMNu4rW5fnm8rAACADtWu4ZbPs+Lx5zjtSud5h3vbZehql2GwXYbudhkqLTP0hcPNRhHvfztm6EtOXukqZOpLmx1IailliBfDb9rxtlu3fvj/h40504KlpuP5B/XzDboaM9z1nt5KaKE0/5/sbP4/2HibtX40zv/nr/+XBX4Qu/e1eOr4eAz8+L2NgXzHwNE42b2uXtV0XiKftF8XS0zFwHgS2BkDU0lg08Y8cPB1jYF8pl1v/EC98dm8RCEAAAAAZ1zcQRB308T5/027vzTUqlxp/j/V2fw/tjdUbOyLsdZjy0O4s2u+N/XA6uEsEPdjDMefx79hOIRzCjs46iVmBrMS/UnD4fsD2S/U+9OqvjeQ/fgg3r/skfvu/Uo1ccNACCsKe1/qbTxZydoYSAMX9GeBwTSwozcLxD0/9cB3u7MAnLL6XsH4gspPdakbW7hck9ffq+WaoOnwSvtAF8i30G+uFktph2u+T7XuxJ62lvtvOW1Kb48j3m1L8d025t1W/CKVf0M5Ph+qhO6tM9s2XzW3Jz5S/CVrySI9z8VfqXaSPg2vw30n39v2KmkHJpOPj8mFyy38OuyK1X31oRW39qz6wIN3rF7x7KF3HHiu4240EX8ofN/n/3X4R4XNu9gqIX/NLbnPk2mfJ0viv4Hk3T3uaQshbHz+69e1ipfm/9Odzf97k9uaX8eNuXs0hLcVNu4DcfP/8Wj2OVgIZJ+SrykHskPu/zXS9JMTAAAATrf67o76/oLZ/DY7ITydJ5fzT4dwfPQE8sf9FVML5u+034N//dEVreKl+f+m1vP/ZUk3Hf93/J9F4vj/gs72XdHL0gf2ndKu6FJ1LArH/xd0tr/bHP9fkOP/jv8vxPH/Nhz/X9DZ/rSVviXt9KUrhPDsH93zeKt4af6/s7P5v/X/Fl60r77+36Zm6//tbLb+3z7r/wEAAIuqyUJz6TyvtHpfKUO6el8pQ9sFAtsuMdh6/b8W6+y9atb/K23Uduv/PXP+k78JLZTm//s6m//Hl8NQsfWlsv7f+MYmVV0fAzstDAgAAMDZqNm+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5Zd/3D/2xtFb//t5c8/tTlU5/cv+Hy5z9/ybkPhzBbe7wrC3cNXnvj1M9vvfi2/Xetu+mOY5e+vZKX68tvf7chd6z15ZEQDhYeGY6JF0aqd+YDl73/tr291cQDIyG8NQsM55VsP6f691sjIawslrj3o6teV03sny+RBe5+6uJnqomPpYH3rT73pWriojzQlXb3H5dn3e1Ku/uV5SGMFgL17n5yeWNV9Tb+NA90p23803DWRgwMx6LfGM7aiIG5WGJ2WQhrekPoSau6v5JV1ZNW9S+VrKqetKovVEK4KITQm1b1VH9WVW868of7s6pi4Ly3HHrxgmriYH8Ia4qBRz9y8zuriU8ngXrjf9EfwpuqL5m08W/3ZY33pY3f0BfCG0MI/WmJX/ZmJfrTEk/3hvCaQqDe+Cd6Q9gbeFWIHz4Nn2i79169ffPc3MyuxUh8JEv0520NhG2zczMTW3bMba0kfWqmq5A+fs3Jj/2JFz+3pXr74ds3DneS7s3L9dW6vK6v4e76s733sV+DxUrmn5hS/TF/fxgKy67aPbNr4rOb9+zZtTb722n2ddnfnjyabau1S2VbrSxWsmbPlTvX7N579erZKzdfMXPFzKfWvmvd5IWT6yfffeGa6qgms7+nY6g3N4QGzsRQz+8tVLKoHwASEhJnILF2EWrubvh0mzzbP8hLX/TnO9oXKrUP6NK0opilqzbK0zHoDSc54pP5ntJ2RGtLE4dSlnULZLmmMcv60mRivpaBLEvte11pclhsrLu2SeP97jAx0dNsO4w13i1u3p+dwuZ9LN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//t/8lBw==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x29f)

6m50.722725624s ago: executing program 2 (id=1256):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

6m50.519926619s ago: executing program 2 (id=1258):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={<r5=>r4, @in6={{0xa, 0x3, 0x0, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r5, 0x6}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

6m50.251871756s ago: executing program 2 (id=1260):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x434, &(0x7f0000000940)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

6m49.127054784s ago: executing program 2 (id=1262):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29})
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1003, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000"], 0x50)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6m45.593318872s ago: executing program 2 (id=1276):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0xfc, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x8, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

6m44.969762198s ago: executing program 32 (id=1276):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0xfc, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x8, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

21.824050744s ago: executing program 0 (id=2369):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000080)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2, 0x8ec6, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000005c0)='\n\x00', 0x2)
r5 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, 0xfffffffffffffebe)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x15, 0x4, 0x4, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x0, 0x1}, 0x50)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl(r7, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x11, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f00000003c0)={'batadv_slave_1\x00', {0x2, 0x20, @empty=0xcf05fdfd}})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="200000001e0021000000000000000000070040"], 0x20}}, 0x80)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r12, @ANYBLOB], 0x3c}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7800, 0xff09, 0xfffffffa, 0x3, {{0x18, 0x4, 0x0, 0x9, 0x60, 0x68, 0x0, 0x6, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0x5f, 0x3, 0x4, [{@broadcast, 0x8}, {@local, 0x4}, {@loopback, 0xfffffff7}, {@rand_addr=0x64010100, 0xb3be}, {@local, 0x3}]}, @rr={0x7, 0x1f, 0x88, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}]}}}}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x190, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x134, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
ioctl(r7, 0x8914, &(0x7f0000000000)='lapb0\x00'/40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRES64=r7, @ANYRESHEX=r6, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYRESHEX=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x6, "a874e400"}, @generic={0x1, 0x2}]}}}}}}}}, 0x0)

21.426060013s ago: executing program 0 (id=2372):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11)
r2 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000400)=0x14e1, 0x4)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000400000002000000"], 0x44}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000)
sendmmsg$inet6(r2, &(0x7f0000002940), 0x40000000000017d, 0x888)
write$tcp_mem(r1, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

20.300367362s ago: executing program 0 (id=2377):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x8f, 0x8}]}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4)
r1 = syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0)
read(r3, &(0x7f0000000180)=""/4, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x6, 0x2, 0x2, 0x5, 0x5}, &(0x7f0000000140)=0x14)

19.456865592s ago: executing program 0 (id=2379):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe68, 0x2, [@TCA_MATCHALL_ACT={0xe64, 0x2, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x1, 0x84, 0x3, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x802, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x81, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xefa, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xffe, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53d2, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f15, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x6, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x0, 0xfffffffc}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0x800000e, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x40000100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0x7f, 0x100}, {0x81, 0x4, 0x988, 0x3, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe98, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0xfffffffc, 0x5, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x3, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x203, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe9c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="da", 0x1}], 0x1}, 0x4000880)

19.132580351s ago: executing program 0 (id=2383):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc040564a, 0x0)
sendmsg(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00)="1400000025000103010000000000000002010000", 0x14}], 0x1}, 0x0)

18.662294612s ago: executing program 0 (id=2384):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000900000084"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), 0x0, 0x6c, r0}, 0x38)

11.98213376s ago: executing program 4 (id=2402):
syz_usb_connect(0x1, 0xb60, &(0x7f000000a980)=ANY=[@ANYBLOB="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"], &(0x7f000000a900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1000}, &(0x7f0000000180)=0x8)

9.383550375s ago: executing program 1 (id=2405):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x20}]}, 0x10)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$inet6(0xa, 0x3, 0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r5, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r5, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26, 0x1000000})
ioctl$IOMMU_DESTROY$stdev(r4, 0x3b80, &(0x7f0000000180)={0x8, r6})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)

8.731938321s ago: executing program 4 (id=2406):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

7.745530016s ago: executing program 4 (id=2408):
syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(0x0, 0xe, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

7.609296809s ago: executing program 3 (id=2409):
sched_setaffinity(0x0, 0x0, 0x0)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f000000c5c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.519821167s ago: executing program 4 (id=2410):
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000940)=[{&(0x7f00000004c0)}, {&(0x7f00000005c0)="722ec4825bb4e0350dcfb962af5386d3becb8283c78f46c5929f412beb2a9c1148432e85f87b136845be6a676a527655838a6c314b497b99ba33a4c8648b68c06016767c6eafcdd2d24e0cc8f00cfe9f5e9c2d01eb3b330e3678f1f9e15002a732babfea76fe5da9f80bf58ae82fabaa830404f3c25acba8b9d2f1667bc8d6c3ff0ffbf7c5f50275a981f4d7c19f18de6bca57", 0x93}, {0x0}, {0x0}], 0x4, &(0x7f00000009c0)=ANY=[], 0xc8}, 0x48884)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0xfffffffffffffd43)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="000509000000280834df7a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x7, "0100"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @local=@item_4={0x3, 0x2, 0x1, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0)
r3 = syz_open_dev$evdev(0x0, 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x0, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'ipvlan1\x00', <r6=>0x0})
unshare(0x2040400)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB='6\x00'], 0x20)
bind$packet(r4, &(0x7f0000000300)={0x11, 0x6, r6}, 0x14)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000})
ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000001740))
r9 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00')
dup3(r4, r9, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f00000000c0)={0x0, r9})

6.481078168s ago: executing program 3 (id=2411):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video4linux(0x0, 0x2, 0x200)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x1, 0x328, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x6}, 0x94)

5.774960665s ago: executing program 1 (id=2412):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0xb49, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000280)=""/72, 0x0, &(0x7f0000001500)=""/188, 0xfec00000})

5.626761429s ago: executing program 1 (id=2413):
syz_usb_connect(0x1, 0xb60, &(0x7f000000a980)=ANY=[@ANYBLOB="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"], &(0x7f000000a900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1000}, &(0x7f0000000180)=0x8)

4.727608082s ago: executing program 3 (id=2414):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc040564a, 0x0)
sendmsg(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00)="1400000025000103010000000000000002010000", 0x14}], 0x1}, 0x0)

3.877431293s ago: executing program 1 (id=2415):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x20}]}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$inet6(0xa, 0x3, 0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r3, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r3, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26})
ioctl$IOMMU_DESTROY$stdev(r2, 0x3b80, &(0x7f0000000180)={0x8, r4})

3.671540248s ago: executing program 3 (id=2416):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0))
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

2.914491347s ago: executing program 1 (id=2417):
syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(0x0, 0xe, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

1.830454974s ago: executing program 3 (id=2418):
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setaffinity(0x0, 0x0, 0x0)
write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f000000c5c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.729960856s ago: executing program 1 (id=2419):
syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x20}]}, 0x10)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$inet6(0xa, 0x3, 0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r4, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r4, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r6=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26, 0x1000000})
ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000180)={0x8, r5})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0)

1.667018228s ago: executing program 4 (id=2420):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x810000a0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x5000180)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e)
prlimit64(r4, 0xe, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00')
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x890)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.58364353s ago: executing program 3 (id=2421):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x200)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

0s ago: executing program 4 (id=2422):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0xb49, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000280)=""/72, 0x0, &(0x7f0000001500)=""/188, 0xfec00000})

kernel console output (not intermixed with test programs):

gadget: fail, usb_gadget_register_driver returned -16
[  427.840783][   T56] usb 4-1: USB disconnect, device number 16
[  427.945983][   T28] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  428.156098][   T28] usb 5-1: Using ep0 maxpacket: 16
[  428.163788][   T28] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  428.174116][   T28] usb 5-1: config 0 has no interfaces?
[  428.182722][   T28] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  428.192202][   T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.201637][   T28] usb 5-1: Product: syz
[  428.207821][   T28] usb 5-1: Manufacturer: syz
[  428.212518][   T28] usb 5-1: SerialNumber: syz
[  428.229492][   T28] r8152-cfgselector 5-1: config 0 descriptor??
[  428.600734][   T28] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  428.943383][T11000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  429.006304][T11000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.429838][T11017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  429.706741][T11017] syzkaller0: entered promiscuous mode
[  429.736400][T11017] syzkaller0: entered allmulticast mode
[  430.438968][T11017] tipc: Resetting bearer <eth:syzkaller0>
[  430.461321][   T28] usb 5-1: USB disconnect, device number 6
[  430.510910][T11016] tipc: Resetting bearer <eth:syzkaller0>
[  430.578562][T11032] netlink: 'syz.3.1523': attribute type 29 has an invalid length.
[  430.607615][T11016] tipc: Disabling bearer <eth:syzkaller0>
[  430.625530][T11032] netlink: 'syz.3.1523': attribute type 29 has an invalid length.
[  430.642888][T11032] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1523'.
[  430.652241][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1523'.
[  430.676192][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1523'.
[  434.248369][T11073] netlink: 'syz.1.1536': attribute type 29 has an invalid length.
[  434.256954][T11073] netlink: 'syz.1.1536': attribute type 29 has an invalid length.
[  434.286645][   T28] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  434.357043][T11073] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1536'.
[  434.372091][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1536'.
[  434.377020][T11077] loop4: detected capacity change from 0 to 764
[  434.384935][T11073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1536'.
[  434.486292][   T28] usb 4-1: Using ep0 maxpacket: 16
[  434.501917][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  434.675197][   T28] usb 4-1: config 0 has no interfaces?
[  434.848585][   T28] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  435.072741][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.287284][   T28] usb 4-1: Product: syz
[  435.291531][   T28] usb 4-1: Manufacturer: syz
[  435.327001][   T28] usb 4-1: SerialNumber: syz
[  435.406773][   T28] r8152-cfgselector 4-1: config 0 descriptor??
[  436.521142][T11084] loop4: detected capacity change from 0 to 32768
[  436.531884][   T28] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  436.551077][T11065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  436.625302][T11065] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  436.668442][T11084] (syz.4.1539,11084,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  436.693216][T11084] (syz.4.1539,11084,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  436.735595][T11084] JBD2: Ignoring recovery information on journal
[  436.855634][T11084] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  437.677420][ T5937] usb 4-1: USB disconnect, device number 17
[  438.617000][T11117] loop0: detected capacity change from 0 to 764
[  438.850566][ T9964] ocfs2: Unmounting device (7,4) on (node local)
[  439.977834][T11133] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  439.987943][T11133] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  440.089615][T11133] bond2: entered promiscuous mode
[  440.369985][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  440.751731][T11138] netlink: 'syz.4.1549': attribute type 29 has an invalid length.
[  440.776317][T11138] netlink: 'syz.4.1549': attribute type 29 has an invalid length.
[  440.819057][T11138] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1549'.
[  440.852147][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1549'.
[  440.875924][   T56] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  440.893772][T11138] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1549'.
[  441.096182][   T56] usb 1-1: Using ep0 maxpacket: 16
[  441.602115][T11142] loop3: detected capacity change from 0 to 131072
[  441.619327][T11142] F2FS-fs (loop3): invalid crc value
[  441.652806][   T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  441.735711][T11142] F2FS-fs (loop3): Found nat_bits in checkpoint
[  441.790974][T11142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  441.952706][   T56] usb 1-1: config 0 has no interfaces?
[  442.063935][   T56] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  442.117165][T11153] loop4: detected capacity change from 0 to 764
[  442.278035][   T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.290098][   T56] usb 1-1: Product: syz
[  442.502312][   T56] usb 1-1: Manufacturer: syz
[  442.507044][   T56] usb 1-1: SerialNumber: syz
[  442.521346][   T56] r8152-cfgselector 1-1: config 0 descriptor??
[  442.644230][T11159] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  442.990770][   T56] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  443.208789][T11136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  443.237289][T11136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  443.908674][ T5817] usb 1-1: USB disconnect, device number 10
[  444.751813][T11174] netlink: 'syz.4.1566': attribute type 29 has an invalid length.
[  444.760301][T11174] netlink: 'syz.4.1566': attribute type 29 has an invalid length.
[  444.778595][T11174] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1566'.
[  444.787965][T11174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1566'.
[  444.797209][T11174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1566'.
[  446.349258][T11186] loop4: detected capacity change from 0 to 764
[  446.815075][T11185] loop1: detected capacity change from 0 to 764
[  446.896142][ T5937] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  446.946884][T11202] netlink: 'syz.4.1576': attribute type 29 has an invalid length.
[  446.980348][T11202] netlink: 'syz.4.1576': attribute type 29 has an invalid length.
[  447.005470][T11202] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1576'.
[  447.019591][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1576'.
[  447.033003][T11202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1576'.
[  447.085970][ T5937] usb 4-1: Using ep0 maxpacket: 16
[  447.093445][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  447.106090][ T5937] usb 4-1: config 0 has no interfaces?
[  447.114555][ T5937] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  447.123932][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.156930][ T5937] usb 4-1: Product: syz
[  447.161170][ T5937] usb 4-1: Manufacturer: syz
[  447.194728][ T5937] usb 4-1: SerialNumber: syz
[  447.204577][ T5937] r8152-cfgselector 4-1: config 0 descriptor??
[  447.428840][ T5937] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  448.170309][T11195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  448.307763][T11195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  448.997489][   T56] usb 4-1: USB disconnect, device number 18
[  449.294656][T11233] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  449.306352][T11233] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  449.752994][T11233] bond1: entered promiscuous mode
[  450.204744][T11237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  450.229819][T11237] syzkaller0: entered promiscuous mode
[  450.244452][T11239] netlink: 'syz.0.1588': attribute type 29 has an invalid length.
[  450.260526][T11237] syzkaller0: entered allmulticast mode
[  450.279260][T11239] netlink: 'syz.0.1588': attribute type 29 has an invalid length.
[  450.300402][T11242] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1588'.
[  450.310899][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1588'.
[  450.336685][T11237] tipc: Resetting bearer <eth:syzkaller0>
[  450.356873][T11236] tipc: Resetting bearer <eth:syzkaller0>
[  450.367692][T11242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1588'.
[  450.407909][T11236] tipc: Disabling bearer <eth:syzkaller0>
[  452.867719][T11274] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  452.877254][T11274] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  453.029837][T11274] bond3: entered promiscuous mode
[  453.694407][T11281] netlink: 'syz.3.1602': attribute type 29 has an invalid length.
[  453.702844][T11281] netlink: 'syz.3.1602': attribute type 29 has an invalid length.
[  453.748865][T11281] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1602'.
[  453.759439][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1602'.
[  453.768829][T11281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1602'.
[  453.876885][ T7681] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  454.106423][ T7681] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  454.115551][ T7681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.145871][ T7681] usb 2-1: Product: syz
[  454.150097][ T7681] usb 2-1: Manufacturer: syz
[  454.154720][ T7681] usb 2-1: SerialNumber: syz
[  454.965985][ T7681] net_ratelimit: 1 callbacks suppressed
[  454.966008][ T7681] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32
[  454.989320][ T7681] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  455.001660][ T7681] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  455.061479][ T7681] lan78xx: probe of 2-1:1.0 failed with error -32
[  455.577851][T11306] loop3: detected capacity change from 0 to 32768
[  455.595775][T11306] (syz.3.1609,11306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  455.615264][T11306] (syz.3.1609,11306,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  455.644839][T11306] JBD2: Ignoring recovery information on journal
[  455.703110][T11306] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  455.725580][   T28] usb 2-1: USB disconnect, device number 9
[  456.532651][T11313] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  456.542057][T11313] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  457.244940][T11313] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  457.389521][T11316] netlink: 'syz.0.1611': attribute type 29 has an invalid length.
[  457.427911][T11316] netlink: 'syz.0.1611': attribute type 29 has an invalid length.
[  457.460022][ T5777] ocfs2: Unmounting device (7,3) on (node local)
[  457.485010][T11316] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1611'.
[  457.512661][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1611'.
[  457.541556][T11316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1611'.
[  459.903143][T11352] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  459.913066][T11352] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  460.058055][T11352] bond2: entered promiscuous mode
[  464.139756][T11381] overlayfs: missing 'lowerdir'
[  467.036941][T11408] loop1: detected capacity change from 0 to 4096
[  467.636819][T11410] netlink: 'syz.3.1642': attribute type 29 has an invalid length.
[  467.872270][T11410] netlink: 'syz.3.1642': attribute type 29 has an invalid length.
[  468.055765][T11411] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1642'.
[  468.242420][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'.
[  468.296263][T11407] ntfs3: loop1: mft corrupted
[  468.404968][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1642'.
[  469.342142][T11419] overlayfs: missing 'lowerdir'
[  469.949008][T11422] serio: Serial port ttyS3
[  472.098874][T11448] netlink: 'syz.0.1653': attribute type 29 has an invalid length.
[  472.118254][T11448] netlink: 'syz.0.1653': attribute type 29 has an invalid length.
[  472.165242][T11448] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1653'.
[  472.175928][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1653'.
[  472.195241][T11448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'.
[  473.084504][T11453] loop0: detected capacity change from 0 to 2048
[  473.140468][T11453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  473.181759][T11457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1657'.
[  473.353299][T11431] loop1: detected capacity change from 0 to 32768
[  473.373792][T11431] (syz.1.1647,11431,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  473.400786][T11431] (syz.1.1647,11431,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  473.401001][T11460] serio: Serial port ttyS3
[  473.433916][T11431] JBD2: Ignoring recovery information on journal
[  473.530179][T11431] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  473.650981][ T5776] ocfs2: Unmounting device (7,1) on (node local)
[  473.774213][T11470] loop4: detected capacity change from 0 to 4096
[  474.066550][T11470] EXT4-fs: Ignoring removed orlov option
[  474.090531][T11470] EXT4-fs (loop4): Test dummy encryption mode enabled
[  474.153003][T11470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  474.858830][T11470] capability: warning: `syz.4.1662' uses 32-bit capabilities (legacy support in use)
[  475.060827][T11484] netlink: 'syz.0.1664': attribute type 29 has an invalid length.
[  475.074995][T11484] netlink: 'syz.0.1664': attribute type 29 has an invalid length.
[  475.092596][T11484] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1664'.
[  475.102024][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'.
[  475.111512][T11484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1664'.
[  475.112021][T11488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1666'.
[  475.215689][ T9964] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.344893][T11443] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  475.576078][T11443] usb 2-1: Using ep0 maxpacket: 16
[  475.593791][T11443] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  475.642312][T11443] usb 2-1: config 0 has no interfaces?
[  475.681118][T11443] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  475.706505][T11443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.742231][T11443] usb 2-1: Product: syz
[  475.764273][T11443] usb 2-1: Manufacturer: syz
[  475.779628][T11443] usb 2-1: SerialNumber: syz
[  475.888446][T11443] r8152-cfgselector 2-1: config 0 descriptor??
[  476.139901][T11443] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  476.357182][T11486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.385423][T11486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.436837][T11492] loop3: detected capacity change from 0 to 32768
[  476.487817][T11492] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1669 (11492)
[  476.531573][T11490] loop0: detected capacity change from 0 to 131072
[  476.550596][T11490] F2FS-fs (loop0): invalid crc value
[  476.585499][T11490] F2FS-fs (loop0): Found nat_bits in checkpoint
[  476.590394][T11492] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  476.633692][T11492] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  476.647535][T11490] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  476.655732][T11492] BTRFS info (device loop3): enabling auto defrag
[  476.677733][T11492] BTRFS info (device loop3): force clearing of disk cache
[  476.684962][T11492] BTRFS info (device loop3): disabling log replay at mount time
[  476.705961][T11492] BTRFS info (device loop3): turning on async discard
[  476.712805][T11492] BTRFS info (device loop3): setting nodatacow, compression disabled
[  476.735981][T11492] BTRFS info (device loop3): turning off async discard
[  476.742920][T11492] BTRFS info (device loop3): disabling free space tree
[  476.765930][T11492] BTRFS info (device loop3): disabling tree log
[  476.772255][T11492] BTRFS info (device loop3): enabling disk space caching
[  476.796212][T11492] BTRFS info (device loop3): disk space caching is enabled
[  477.109640][T11519] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  477.508698][ T1210] usb 2-1: USB disconnect, device number 10
[  477.826386][T11492] BTRFS error (device loop3: state M): nologreplay must be used with ro mount option
[  478.831922][ T5777] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  479.035286][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1677'.
[  480.328018][   T27] audit: type=1326 audit(1785826066.811:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.1.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e499e019 code=0x7ffc0000
[  480.418569][   T27] audit: type=1326 audit(1785826066.811:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.1.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e499e019 code=0x7ffc0000
[  480.462600][   T27] audit: type=1326 audit(1785826066.851:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.1.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e499e019 code=0x7ffc0000
[  480.533927][   T27] audit: type=1326 audit(1785826066.851:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.1.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e499e019 code=0x7ffc0000
[  480.592968][   T27] audit: type=1326 audit(1785826066.851:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.1.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f28e499e019 code=0x7ffc0000
[  480.695856][   T27] audit: type=1326 audit(1785826066.851:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.1.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e499e019 code=0x7ffc0000
[  480.799506][   T27] audit: type=1326 audit(1785826066.851:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.1.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e499e019 code=0x7ffc0000
[  480.885258][   T27] audit: type=1326 audit(1785826066.851:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.1.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f28e499e019 code=0x7ffc0000
[  480.936204][T11443] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  480.955599][   T27] audit: type=1326 audit(1785826066.851:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11542 comm="syz.1.1680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f28e499e019 code=0x7ffc0000
[  481.136123][T11443] usb 2-1: Using ep0 maxpacket: 16
[  481.143754][T11443] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  481.155016][T11443] usb 2-1: config 0 has no interfaces?
[  481.179839][T11443] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  481.198146][T11443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.225298][T11443] usb 2-1: Product: syz
[  481.234202][T11443] usb 2-1: Manufacturer: syz
[  481.249075][T11443] usb 2-1: SerialNumber: syz
[  481.340614][T11443] r8152-cfgselector 2-1: config 0 descriptor??
[  481.505247][T11551] netlink: 'syz.0.1675': attribute type 29 has an invalid length.
[  481.534252][T11551] netlink: 'syz.0.1675': attribute type 29 has an invalid length.
[  481.572338][T11443] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  481.607676][T11551] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1675'.
[  481.750623][T11549] loop3: detected capacity change from 0 to 131072
[  481.837902][T11547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.863265][T11547] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.873590][T11549] F2FS-fs (loop3): invalid crc value
[  481.883771][T11549] F2FS-fs (loop3): Found nat_bits in checkpoint
[  481.921997][T11551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1675'.
[  481.932597][T11549] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  481.978442][T11551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1675'.
[  482.345988][T11563] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  483.704043][T11570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1687'.
[  484.422971][ T5937] usb 2-1: USB disconnect, device number 11
[  485.064250][T11579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'.
[  485.476506][T11586] netlink: 'syz.4.1694': attribute type 29 has an invalid length.
[  485.495178][T11586] netlink: 'syz.4.1694': attribute type 29 has an invalid length.
[  485.662171][T11586] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1694'.
[  485.706018][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1694'.
[  485.715044][T11586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1694'.
[  486.387238][T11595] syzkaller0: entered promiscuous mode
[  486.425068][T11595] syzkaller0: entered allmulticast mode
[  486.757170][T11604] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  486.766436][T11604] syzkaller0: entered promiscuous mode
[  486.771962][T11604] syzkaller0: entered allmulticast mode
[  486.793679][T11604] tipc: Resetting bearer <eth:syzkaller0>
[  486.803479][T11603] tipc: Resetting bearer <eth:syzkaller0>
[  486.852663][T11602] loop3: detected capacity change from 0 to 4096
[  486.860486][T11602] EXT4-fs: Ignoring removed orlov option
[  486.867467][T11603] tipc: Disabling bearer <eth:syzkaller0>
[  486.895667][T11602] EXT4-fs (loop3): Test dummy encryption mode enabled
[  486.910946][T11602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  486.978279][T11443] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  487.085505][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.177591][T11443] usb 1-1: Using ep0 maxpacket: 16
[  487.199198][T11443] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  487.225272][T11443] usb 1-1: config 0 has no interfaces?
[  487.240227][T11443] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  487.250395][T11443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.261352][T11443] usb 1-1: Product: syz
[  487.265704][T11443] usb 1-1: Manufacturer: syz
[  487.271213][T11443] usb 1-1: SerialNumber: syz
[  487.279912][T11443] r8152-cfgselector 1-1: config 0 descriptor??
[  487.491480][T11443] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  487.695361][T11600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.704096][T11600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.830199][T11620] netlink: 'syz.1.1706': attribute type 29 has an invalid length.
[  487.838454][T11620] netlink: 'syz.1.1706': attribute type 29 has an invalid length.
[  487.853944][T11620] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1706'.
[  487.863419][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1706'.
[  487.872567][T11620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1706'.
[  489.295123][    T8] usb 1-1: USB disconnect, device number 11
[  489.455161][T11630] syzkaller0: entered promiscuous mode
[  489.491563][T11630] syzkaller0: entered allmulticast mode
[  489.734960][T11634] loop0: detected capacity change from 0 to 32768
[  489.774407][T11634] (syz.0.1711,11634,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  489.788929][T11634] (syz.0.1711,11634,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  489.814180][T11634] JBD2: Ignoring recovery information on journal
[  489.847005][T11636] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  489.852190][T11634] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  489.872502][T11639] syzkaller0: entered promiscuous mode
[  489.918336][T11639] syzkaller0: entered allmulticast mode
[  490.059588][T11632] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  490.530760][T11632] tipc: Resetting bearer <eth:syzkaller0>
[  490.578268][T11631] tipc: Resetting bearer <eth:syzkaller0>
[  490.677739][T11631] tipc: Disabling bearer <eth:syzkaller0>
[  490.712801][ T5778] ocfs2: Unmounting device (7,0) on (node local)
[  490.928907][T11652] netlink: 'syz.4.1716': attribute type 29 has an invalid length.
[  490.937887][T11652] netlink: 'syz.4.1716': attribute type 29 has an invalid length.
[  491.593504][T11654] loop3: detected capacity change from 0 to 131072
[  491.647031][T11654] F2FS-fs (loop3): invalid crc value
[  491.648989][T11652] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1716'.
[  491.698910][T11654] F2FS-fs (loop3): Found nat_bits in checkpoint
[  491.700815][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'.
[  491.762603][T11654] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  491.764712][T11652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1716'.
[  491.796007][T11663] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xe
[  492.150060][T11667] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  492.594637][ T1210] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  492.816371][ T1210] usb 5-1: Using ep0 maxpacket: 16
[  492.838480][ T1210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  492.881706][ T1210] usb 5-1: config 0 has no interfaces?
[  492.895161][ T1210] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  492.895238][T11673] syzkaller0: entered promiscuous mode
[  492.906412][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.919049][ T1210] usb 5-1: Product: syz
[  492.923280][ T1210] usb 5-1: Manufacturer: syz
[  492.929029][T11673] syzkaller0: entered allmulticast mode
[  492.936431][ T1210] usb 5-1: SerialNumber: syz
[  492.966807][ T1210] r8152-cfgselector 5-1: config 0 descriptor??
[  493.189664][ T1210] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  493.447702][T11678] loop0: detected capacity change from 0 to 32768
[  493.477105][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.502449][T11678] (syz.0.1725,11678,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  493.517333][T11678] (syz.0.1725,11678,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  493.570776][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  493.608762][T11678] JBD2: Ignoring recovery information on journal
[  493.825219][T11678] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  495.022214][T11688] netlink: 'syz.1.1727': attribute type 29 has an invalid length.
[  495.033079][T11688] netlink: 'syz.1.1727': attribute type 29 has an invalid length.
[  495.068835][T11688] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1727'.
[  495.142999][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1727'.
[  495.143905][    T8] usb 5-1: USB disconnect, device number 7
[  495.155739][T11688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1727'.
[  495.312670][ T5778] ocfs2: Unmounting device (7,0) on (node local)
[  495.713635][T11697] syz.4.1731 (11697) used greatest stack depth: 16936 bytes left
[  495.983323][T11707] syzkaller0: entered promiscuous mode
[  495.989519][T11707] syzkaller0: entered allmulticast mode
[  496.736857][T11712] loop3: detected capacity change from 0 to 65536
[  496.762983][T11712] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  496.790975][T11712] XFS (loop3): Ending clean mount
[  496.800846][T11712] XFS (loop3): Quotacheck needed: Please wait.
[  496.866447][T11712] XFS (loop3): Quotacheck: Done.
[  496.954455][ T5777] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  496.965856][ T5817] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  496.980431][T11727] netlink: 'syz.4.1738': attribute type 29 has an invalid length.
[  496.989116][T11727] netlink: 'syz.4.1738': attribute type 29 has an invalid length.
[  497.013901][T11727] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1738'.
[  497.023428][T11727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1738'.
[  497.041603][T11727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1738'.
[  497.165950][ T5817] usb 1-1: Using ep0 maxpacket: 16
[  497.178886][ T5817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  497.215339][ T5817] usb 1-1: config 0 has no interfaces?
[  497.238395][ T5817] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  497.263516][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.295853][ T5817] usb 1-1: Product: syz
[  497.302495][ T5817] usb 1-1: Manufacturer: syz
[  497.322769][ T5817] usb 1-1: SerialNumber: syz
[  497.341346][ T5817] r8152-cfgselector 1-1: config 0 descriptor??
[  497.396648][T11729] loop4: detected capacity change from 0 to 4096
[  497.427801][T11729] EXT4-fs: Ignoring removed orlov option
[  497.457050][T11729] EXT4-fs (loop4): Test dummy encryption mode enabled
[  497.489465][T11729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  497.583888][ T5817] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  497.637365][T11739] syzkaller0: entered promiscuous mode
[  497.665905][T11739] syzkaller0: entered allmulticast mode
[  497.790273][T11717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.802752][T11717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  498.130451][ T9964] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.223062][  T146] usb 1-1: config 0 descriptor??
[  498.353781][  T146] usb 1-1: can't set config #0, error -71
[  498.353962][ T5937] usb 1-1: USB disconnect, device number 12
[  498.434099][T11753] netlink: 'syz.0.1748': attribute type 29 has an invalid length.
[  498.443525][T11753] netlink: 'syz.0.1748': attribute type 29 has an invalid length.
[  498.459133][T11753] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1748'.
[  498.468686][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1748'.
[  498.477784][T11753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1748'.
[  498.486939][ T1210] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  498.681542][ T1210] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  498.690742][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.698892][ T1210] usb 5-1: Product: syz
[  498.703111][ T1210] usb 5-1: Manufacturer: syz
[  498.707792][ T1210] usb 5-1: SerialNumber: syz
[  498.714454][ T1210] usb 5-1: config 0 descriptor??
[  498.725556][ T1210] ch341 5-1:0.0: ch341-uart converter detected
[  498.857655][T11758] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  498.865597][T11758] syzkaller0: entered promiscuous mode
[  498.871264][T11758] syzkaller0: entered allmulticast mode
[  498.884786][T11758] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  498.920029][T11758] tipc: Resetting bearer <eth:syzkaller0>
[  498.944870][T11757] tipc: Resetting bearer <eth:syzkaller0>
[  498.977319][T11757] tipc: Disabling bearer <eth:syzkaller0>
[  499.027423][T11762] syzkaller0: entered promiscuous mode
[  499.032976][T11762] syzkaller0: entered allmulticast mode
[  499.315331][T11764] loop3: detected capacity change from 0 to 32768
[  499.336471][T11764] (syz.3.1753,11764,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  499.350221][T11764] (syz.3.1753,11764,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  499.407171][T11764] JBD2: Ignoring recovery information on journal
[  499.443615][T11764] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  500.316066][ T1210] ch341-uart ttyUSB0: failed to read break control: -71
[  500.325931][ T1210] ch341-uart: probe of ttyUSB0 failed with error -71
[  500.370151][ T1210] usb 5-1: USB disconnect, device number 8
[  500.419146][ T1210] ch341 5-1:0.0: device disconnected
[  500.467923][T11773] loop0: detected capacity change from 0 to 4096
[  500.478649][ T5777] ocfs2: Unmounting device (7,3) on (node local)
[  500.492408][T11773] EXT4-fs: Ignoring removed orlov option
[  500.530231][T11773] EXT4-fs (loop0): Test dummy encryption mode enabled
[  500.563538][T11773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.676034][   T28] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  500.774511][T11779] netlink: 'syz.3.1757': attribute type 29 has an invalid length.
[  500.783718][T11779] netlink: 'syz.3.1757': attribute type 29 has an invalid length.
[  500.808171][T11779] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1757'.
[  500.817648][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1757'.
[  500.826769][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1757'.
[  500.827536][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.905876][   T28] usb 2-1: Using ep0 maxpacket: 16
[  500.913506][   T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.944327][   T28] usb 2-1: config 0 has no interfaces?
[  500.962006][   T28] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  501.001858][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.023294][   T28] usb 2-1: Product: syz
[  501.030241][   T28] usb 2-1: Manufacturer: syz
[  501.044751][   T28] usb 2-1: SerialNumber: syz
[  501.055293][   T28] r8152-cfgselector 2-1: config 0 descriptor??
[  501.626750][T11775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.656913][T11775] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.698685][   T28] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  501.811375][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  501.925751][T11793] syzkaller0: entered promiscuous mode
[  501.931618][T11793] syzkaller0: entered allmulticast mode
[  502.368839][ T1210] usb 2-1: USB disconnect, device number 12
[  502.516898][T11808] netlink: 'syz.4.1767': attribute type 29 has an invalid length.
[  502.553713][T11808] netlink: 'syz.4.1767': attribute type 29 has an invalid length.
[  502.605137][T11808] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1767'.
[  502.640369][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'.
[  502.690013][T11808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1767'.
[  502.711936][T11810] loop1: detected capacity change from 0 to 4096
[  502.720126][T11810] EXT4-fs: Ignoring removed orlov option
[  502.848283][T11810] EXT4-fs (loop1): Test dummy encryption mode enabled
[  502.919071][T11810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.788303][T11826] syzkaller0: entered promiscuous mode
[  503.793935][T11826] syzkaller0: entered allmulticast mode
[  503.813418][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.846722][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.902697][T11829] syzkaller0: entered promiscuous mode
[  503.915901][T11829] syzkaller0: entered allmulticast mode
[  504.415356][ T1210] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  505.007388][T11845] netlink: 'syz.3.1780': attribute type 29 has an invalid length.
[  505.057376][T11845] netlink: 'syz.3.1780': attribute type 29 has an invalid length.
[  505.086861][T11846] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1780'.
[  505.111391][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'.
[  505.143563][T11846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1780'.
[  505.805320][T11840] loop0: detected capacity change from 0 to 131072
[  505.830357][T11840] F2FS-fs (loop0): invalid crc value
[  505.845976][ T1210] usb 5-1: Using ep0 maxpacket: 16
[  506.044765][T11850] loop3: detected capacity change from 0 to 32768
[  506.058206][T11850] (syz.3.1782,11850,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  506.071924][T11850] (syz.3.1782,11850,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  506.096979][ T1210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  506.111040][ T1210] usb 5-1: config 0 has no interfaces?
[  506.128107][T11840] F2FS-fs (loop0): Found nat_bits in checkpoint
[  506.173368][T11840] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  506.181789][ T1210] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  506.194289][T11850] JBD2: Ignoring recovery information on journal
[  506.212958][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.226675][ T1210] usb 5-1: Product: syz
[  506.231933][ T1210] usb 5-1: Manufacturer: syz
[  506.236921][ T1210] usb 5-1: SerialNumber: syz
[  506.246901][ T1210] r8152-cfgselector 5-1: config 0 descriptor??
[  506.254881][T11850] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  506.385821][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  506.473055][ T1210] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  506.680293][T11859] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  507.018599][T11861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  507.069435][T11861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  507.810744][ T7681] usb 5-1: USB disconnect, device number 9
[  508.064926][ T5777] ocfs2: Unmounting device (7,3) on (node local)
[  508.159185][T11864] syzkaller0: entered promiscuous mode
[  508.164727][T11864] syzkaller0: entered allmulticast mode
[  508.194665][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.060841][T11881] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  509.322042][T11885] loop0: detected capacity change from 0 to 4096
[  509.357356][T11885] EXT4-fs: Ignoring removed orlov option
[  509.414639][T11885] EXT4-fs (loop0): Test dummy encryption mode enabled
[  509.499442][T11885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  509.523088][T11443] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  509.583694][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.726173][T11443] usb 5-1: Using ep0 maxpacket: 16
[  509.746168][T11443] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  509.783717][T11893] syzkaller0: entered promiscuous mode
[  509.794440][T11893] syzkaller0: entered allmulticast mode
[  509.795513][T11443] usb 5-1: config 0 has no interfaces?
[  509.819441][T11443] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  509.847852][T11443] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.872885][T11443] usb 5-1: Product: syz
[  509.886427][T11443] usb 5-1: Manufacturer: syz
[  509.901704][T11443] usb 5-1: SerialNumber: syz
[  509.923123][T11443] r8152-cfgselector 5-1: config 0 descriptor??
[  510.159584][T11443] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  510.334406][T11901] syzkaller0: entered promiscuous mode
[  510.343998][T11901] syzkaller0: entered allmulticast mode
[  510.391699][T11880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.410737][T11880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  510.885210][T11913] loop1: detected capacity change from 0 to 4096
[  510.893335][T11913] EXT4-fs: Ignoring removed orlov option
[  510.907919][T11913] EXT4-fs (loop1): Test dummy encryption mode enabled
[  510.924084][T11913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  511.000710][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  511.110009][T11443] usb 5-1: USB disconnect, device number 10
[  511.235360][T11918] syzkaller0: entered promiscuous mode
[  511.241567][T11918] syzkaller0: entered allmulticast mode
[  511.251029][   T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.999172][T11948] loop0: detected capacity change from 0 to 4096
[  514.029552][T11948] EXT4-fs: Ignoring removed orlov option
[  514.057985][T11948] EXT4-fs (loop0): Test dummy encryption mode enabled
[  514.084888][T11948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  514.265913][   T28] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  514.300014][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.484672][   T28] usb 4-1: Using ep0 maxpacket: 16
[  514.493208][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  514.536069][   T28] usb 4-1: config 0 has no interfaces?
[  514.544182][   T28] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  514.575964][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.584037][   T28] usb 4-1: Product: syz
[  514.605877][   T28] usb 4-1: Manufacturer: syz
[  514.610532][   T28] usb 4-1: SerialNumber: syz
[  514.646573][   T28] r8152-cfgselector 4-1: config 0 descriptor??
[  514.876485][   T28] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  515.077134][T11953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.098936][T11953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  515.113440][T11958] syzkaller0: entered promiscuous mode
[  515.126961][T11958] syzkaller0: entered allmulticast mode
[  515.137111][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.203127][T11961] syzkaller0: entered promiscuous mode
[  515.208777][T11961] syzkaller0: entered allmulticast mode
[  515.529926][T11969] syzkaller0: entered promiscuous mode
[  515.535741][T11969] syzkaller0: entered allmulticast mode
[  515.780821][   T28] usb 4-1: USB disconnect, device number 19
[  516.032341][T11981] syzkaller0: entered promiscuous mode
[  516.038277][T11981] syzkaller0: entered allmulticast mode
[  516.218909][T11983] syzkaller0: entered promiscuous mode
[  516.229863][T11983] syzkaller0: entered allmulticast mode
[  517.654152][T11986] loop1: detected capacity change from 0 to 131072
[  517.669076][T11986] F2FS-fs (loop1): invalid crc value
[  517.697398][T11986] F2FS-fs (loop1): Found nat_bits in checkpoint
[  517.758939][T11986] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  518.163345][T12007] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  518.935940][   T28] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  519.135996][   T28] usb 4-1: Using ep0 maxpacket: 16
[  519.146986][T12010] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  519.147352][   T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  519.175982][   T28] usb 4-1: config 0 has no interfaces?
[  519.186341][T12010] syzkaller0: entered promiscuous mode
[  519.193648][   T28] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  519.204495][T12010] syzkaller0: entered allmulticast mode
[  519.214802][   T28] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.236360][T12011] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  519.244840][   T28] usb 4-1: Product: syz
[  519.249562][   T28] usb 4-1: Manufacturer: syz
[  519.254206][   T28] usb 4-1: SerialNumber: syz
[  519.288090][   T28] r8152-cfgselector 4-1: config 0 descriptor??
[  519.316928][T12010] tipc: Resetting bearer <eth:syzkaller0>
[  519.337743][T12009] tipc: Resetting bearer <eth:syzkaller0>
[  519.397324][T12009] tipc: Disabling bearer <eth:syzkaller0>
[  519.506790][   T28] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  519.717186][T12016] syzkaller0: entered promiscuous mode
[  519.719390][T12005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.723892][T12016] syzkaller0: entered allmulticast mode
[  519.745249][T12005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.372529][T11443] usb 4-1: USB disconnect, device number 20
[  521.451977][T12045] syzkaller0: entered promiscuous mode
[  521.458661][T12045] syzkaller0: entered allmulticast mode
[  521.714063][T12048] bond4: entered promiscuous mode
[  523.385919][   T28] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  523.650254][   T28] usb 1-1: Using ep0 maxpacket: 16
[  523.673853][   T28] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  523.696934][   T28] usb 1-1: config 0 has no interfaces?
[  523.707883][   T28] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  523.717243][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.725258][   T28] usb 1-1: Product: syz
[  523.733734][   T28] usb 1-1: Manufacturer: syz
[  523.738572][   T28] usb 1-1: SerialNumber: syz
[  523.745657][   T28] r8152-cfgselector 1-1: config 0 descriptor??
[  523.762680][T12071] syzkaller0: entered promiscuous mode
[  523.768419][T12071] syzkaller0: entered allmulticast mode
[  523.969526][   T28] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  524.264230][T12078] bond0: entered promiscuous mode
[  524.344858][T12056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  524.421523][T12056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.409741][ T7681] usb 1-1: USB disconnect, device number 13
[  525.583771][T12094] syzkaller0: entered promiscuous mode
[  525.612207][T12094] syzkaller0: entered allmulticast mode
[  526.400288][T12111] bond1: entered promiscuous mode
[  527.250525][T12114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1873'.
[  527.523696][T12124] syzkaller0: entered promiscuous mode
[  527.535453][T12124] syzkaller0: entered allmulticast mode
[  528.522508][ T7681] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  528.838772][ T7681] usb 2-1: Using ep0 maxpacket: 16
[  528.851880][ T7681] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.870832][ T7681] usb 2-1: config 0 has no interfaces?
[  528.893595][ T7681] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  528.916130][ T7681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.927600][ T7681] usb 2-1: Product: syz
[  528.944802][ T7681] usb 2-1: Manufacturer: syz
[  528.957086][ T7681] usb 2-1: SerialNumber: syz
[  528.979171][ T7681] r8152-cfgselector 2-1: config 0 descriptor??
[  528.994712][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1884'.
[  529.127371][T12148] syzkaller0: entered promiscuous mode
[  529.132980][T12148] syzkaller0: entered allmulticast mode
[  529.193806][ T7681] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  529.204114][ T1088] usb 2-1: config 0 descriptor??
[  529.356060][    T8] usb 1-1: new low-speed USB device number 14 using dummy_hcd
[  529.577515][T12118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  529.602007][T12118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  529.906083][    T8] usb 1-1: unable to get BOS descriptor or descriptor too short
[  529.920684][    T8] usb 1-1: config 8 has an invalid interface number: 59 but max is 3
[  529.932958][    T8] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  529.945837][    T8] usb 1-1: config 8 has 1 interface, different from the descriptor's value: 4
[  529.954810][    T8] usb 1-1: config 8 has no interface number 0
[  529.986258][    T8] usb 1-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping
[  530.015973][    T8] usb 1-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[  530.046327][    T8] usb 1-1: config 8 interface 59 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0
[  530.091577][    T8] usb 1-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10
[  530.110599][    T8] usb 1-1: config 8 interface 59 has no altsetting 0
[  530.124356][    T8] usb 1-1: string descriptor 0 read error: -22
[  530.140198][    T8] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88
[  530.155860][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.183899][ T5818] usb 2-1: USB disconnect, device number 13
[  530.190375][ T1088] usb 2-1: can't set config #0, error -71
[  530.258670][    T8] ttusbir 1-1:8.59: cannot find expected altsetting
[  530.817182][ T5818] usb 1-1: USB disconnect, device number 14
[  531.568732][T12172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1896'.
[  531.857579][T12176] syzkaller0: entered promiscuous mode
[  531.880550][T12176] syzkaller0: entered allmulticast mode
[  532.074672][ T7681] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  532.197572][T12189] syzkaller0: entered promiscuous mode
[  532.203126][T12189] syzkaller0: entered allmulticast mode
[  532.266017][ T7681] usb 5-1: Using ep0 maxpacket: 16
[  532.277274][ T7681] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  532.308350][ T7681] usb 5-1: config 0 has no interfaces?
[  532.325999][ T7681] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  532.365990][ T7681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.374065][ T7681] usb 5-1: Product: syz
[  532.395333][ T7681] usb 5-1: Manufacturer: syz
[  532.404505][ T7681] usb 5-1: SerialNumber: syz
[  532.420152][ T7681] r8152-cfgselector 5-1: config 0 descriptor??
[  532.504190][T12194] loop3: detected capacity change from 0 to 4096
[  532.517249][T12194] EXT4-fs: Ignoring removed orlov option
[  532.663482][T12194] EXT4-fs (loop3): Test dummy encryption mode enabled
[  532.701656][ T7681] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  532.740227][   T11] usb 5-1: config 0 descriptor??
[  532.790455][T12194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.862769][T12180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.893396][T12180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.986018][ T5937] usb 2-1: new low-speed USB device number 14 using dummy_hcd
[  533.200729][ T5937] usb 2-1: unable to get BOS descriptor or descriptor too short
[  533.230972][ T5937] usb 2-1: config 8 has an invalid interface number: 59 but max is 3
[  533.255916][ T5937] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  533.266834][ T5937] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4
[  533.295889][ T5937] usb 2-1: config 8 has no interface number 0
[  533.302715][ T5937] usb 2-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping
[  533.346823][ T5937] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[  533.370375][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.386112][ T5937] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0
[  533.403838][ T5937] usb 2-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10
[  533.456562][ T5937] usb 2-1: config 8 interface 59 has no altsetting 0
[  533.494796][ T5937] usb 2-1: string descriptor 0 read error: -22
[  533.516258][   T11] usb 5-1: can't set config #0, error -71
[  533.516637][ T5937] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88
[  533.522193][T11443] usb 5-1: USB disconnect, device number 11
[  533.570325][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.608343][ T5937] ttusbir 2-1:8.59: cannot find expected altsetting
[  533.687537][T12207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1909'.
[  533.848645][ T5937] usb 2-1: USB disconnect, device number 14
[  534.959981][T12221] syzkaller0: entered promiscuous mode
[  534.965525][T12221] syzkaller0: entered allmulticast mode
[  535.008116][T12224] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  535.212094][T12226] syzkaller0: entered promiscuous mode
[  535.218363][T12226] syzkaller0: entered allmulticast mode
[  535.469357][T12231] loop0: detected capacity change from 0 to 32768
[  535.489152][T12231] (syz.0.1917,12231,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  535.504536][T12231] (syz.0.1917,12231,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  535.540210][T12231] JBD2: Ignoring recovery information on journal
[  535.585562][T12231] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  536.375167][T12241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1920'.
[  536.456575][ T5818] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  537.127420][T12243] loop3: detected capacity change from 0 to 131072
[  537.145837][ T5818] usb 5-1: Using ep0 maxpacket: 16
[  537.159482][T12243] F2FS-fs (loop3): invalid crc value
[  537.197832][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.218063][T12243] F2FS-fs (loop3): Found nat_bits in checkpoint
[  537.264013][T12243] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  537.286333][ T5818] usb 5-1: config 0 has no interfaces?
[  537.501348][ T5778] ocfs2: Unmounting device (7,0) on (node local)
[  537.518441][ T5818] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  538.013631][T12252] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  538.088292][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.096677][ T5818] usb 5-1: Product: syz
[  538.100971][ T5818] usb 5-1: Manufacturer: syz
[  538.106214][ T5818] usb 5-1: SerialNumber: syz
[  538.128081][ T5818] r8152-cfgselector 5-1: config 0 descriptor??
[  538.346755][ T5818] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  538.571045][T12238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.636135][T12238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.007700][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1923'.
[  539.979822][ T7681] usb 5-1: USB disconnect, device number 12
[  540.170310][T12267] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  541.423664][T12283] syzkaller0: entered promiscuous mode
[  541.442036][T12283] syzkaller0: entered allmulticast mode
[  541.766029][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1930'.
[  542.685377][T12294] loop0: detected capacity change from 0 to 131072
[  542.735102][T12294] F2FS-fs (loop0): invalid crc value
[  542.789338][T12294] F2FS-fs (loop0): Found nat_bits in checkpoint
[  542.857226][T12294] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  543.102236][T12305] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.359096][T12309] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  544.196802][T12305] syzkaller0: entered promiscuous mode
[  544.202796][T12305] syzkaller0: entered allmulticast mode
[  544.242902][T12305] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  544.267603][    T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  544.586375][    T8] usb 5-1: Using ep0 maxpacket: 16
[  544.620301][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  544.643422][    T8] usb 5-1: config 0 has no interfaces?
[  544.664560][    T8] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  544.673865][ T1210] tipc: Node number set to 2960126567
[  544.687605][T12304] tipc: Resetting bearer <eth:syzkaller0>
[  544.717138][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.764034][    T8] usb 5-1: Product: syz
[  544.789672][    T8] usb 5-1: Manufacturer: syz
[  544.794448][    T8] usb 5-1: SerialNumber: syz
[  544.805070][T12304] tipc: Disabling bearer <eth:syzkaller0>
[  544.812386][    T8] r8152-cfgselector 5-1: config 0 descriptor??
[  544.995743][T12318] loop3: detected capacity change from 0 to 512
[  545.014156][T12318] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  545.035317][    T8] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  545.053851][T12318] EXT4-fs (loop3): 1 truncate cleaned up
[  545.067648][T12318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  545.230142][T12322] EXT4-fs (loop3): shut down requested (1)
[  545.250247][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.280699][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.337106][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.542404][T12325] syzkaller0: entered promiscuous mode
[  545.548089][T12325] syzkaller0: entered allmulticast mode
[  545.898540][    T8] usb 5-1: USB disconnect, device number 13
[  546.077191][T12330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1943'.
[  547.214250][T12340] syzkaller0: entered promiscuous mode
[  547.220129][T12340] syzkaller0: entered allmulticast mode
[  548.165967][T12348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  548.174658][T12348] syzkaller0: entered promiscuous mode
[  548.180436][T12348] syzkaller0: entered allmulticast mode
[  548.191113][T12348] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  548.225141][T12348] tipc: Resetting bearer <eth:syzkaller0>
[  548.257307][T12347] tipc: Resetting bearer <eth:syzkaller0>
[  548.322254][T12347] tipc: Disabling bearer <eth:syzkaller0>
[  548.349700][T12351] syzkaller0: entered promiscuous mode
[  548.353986][    T8] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  548.355301][T12351] syzkaller0: entered allmulticast mode
[  548.561308][    T8] usb 2-1: Using ep0 maxpacket: 8
[  548.590759][    T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  548.600921][    T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  548.615545][    T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  548.633092][    T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  548.646041][T11443] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  548.661072][    T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  548.693299][T12358] syz.3.1953: attempt to access beyond end of device
[  548.693299][T12358] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  548.706393][T12358] FAT-fs (nbd3): unable to read boot sector
[  548.775344][    T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  548.852458][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.937971][T11443] usb 1-1: Using ep0 maxpacket: 16
[  549.021457][T11443] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  549.143446][T11443] usb 1-1: config 0 has no interfaces?
[  549.304306][T11443] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  549.446421][T11443] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.566064][T11443] usb 1-1: Product: syz
[  549.581069][T11443] usb 1-1: Manufacturer: syz
[  549.604924][T11443] usb 1-1: SerialNumber: syz
[  549.631845][T11443] r8152-cfgselector 1-1: config 0 descriptor??
[  549.653929][T12362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1954'.
[  550.091396][T12366] usbtmc 2-1:16.0: usb_control_msg returned -32
[  550.107064][ T7681] usb 2-1: USB disconnect, device number 15
[  550.138866][T12353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.162580][T12365] loop3: detected capacity change from 0 to 32768
[  550.174009][T11443] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  550.185413][T12365] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  550.198110][T12365] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  550.207387][T12365] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  550.217157][T12365] BTRFS info (device loop3): use zstd compression, level 3
[  550.219335][T12353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.224979][T12365] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  550.248335][T12365] BTRFS info (device loop3): trying to use backup root at mount time
[  550.256638][T12365] BTRFS info (device loop3): enabling auto defrag
[  550.263810][T12365] BTRFS info (device loop3): disabling free space tree
[  550.271347][T12365] BTRFS error (device loop3): cannot disable free space tree
[  550.282260][T12365] BTRFS error (device loop3): open_ctree failed: -22
[  550.444336][ T5792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5792)
[  551.570706][ T7681] usb 1-1: USB disconnect, device number 15
[  552.360007][T12377] syzkaller0: entered promiscuous mode
[  552.365662][T12377] syzkaller0: entered allmulticast mode
[  552.559081][T12384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  552.592431][T12383] syzkaller0: entered promiscuous mode
[  552.602078][T12383] syzkaller0: entered allmulticast mode
[  552.624864][T12384] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  552.744372][T12389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1963'.
[  552.809951][T12387] tipc: Resetting bearer <eth:syzkaller0>
[  552.845123][T12382] tipc: Resetting bearer <eth:syzkaller0>
[  552.984971][T12382] tipc: Disabling bearer <eth:syzkaller0>
[  554.000092][T12386] loop0: detected capacity change from 0 to 131072
[  554.123365][T12386] F2FS-fs (loop0): invalid crc value
[  554.161749][T12386] F2FS-fs (loop0): Found nat_bits in checkpoint
[  554.246124][T12386] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  554.369612][T12393] loop1: detected capacity change from 0 to 131072
[  554.388160][T12393] F2FS-fs (loop1): invalid crc value
[  554.646876][T12393] F2FS-fs (loop1): Found nat_bits in checkpoint
[  554.746850][T12406] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  555.016230][T12409] overlayfs: failed to resolve './file0': -2
[  555.035990][T12393] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  555.453336][T12411] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  557.498059][T12414] loop4: detected capacity change from 0 to 32768
[  557.528113][T12414] (syz.4.1969,12414,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  557.543441][T12414] (syz.4.1969,12414,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  557.594212][T12414] JBD2: Ignoring recovery information on journal
[  557.658454][T12414] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  558.720717][T12422] gadgetfs: bound to dummy_udc driver
[  559.498558][ T9964] ocfs2: Unmounting device (7,4) on (node local)
[  559.825940][ T5818] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  560.136054][ T5818] usb 2-1: Using ep0 maxpacket: 16
[  560.436810][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.512542][ T5818] usb 2-1: config 0 has no interfaces?
[  560.569666][ T5818] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  560.593809][T12440] syzkaller0: entered promiscuous mode
[  560.644203][T12440] syzkaller0: entered allmulticast mode
[  560.659731][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.691610][ T5818] usb 2-1: Product: syz
[  560.719560][ T5818] usb 2-1: Manufacturer: syz
[  560.724276][ T5818] usb 2-1: SerialNumber: syz
[  560.798254][ T5818] r8152-cfgselector 2-1: config 0 descriptor??
[  561.472814][T12424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  561.697294][T12424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  561.767800][ T5818] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  562.145544][T12462] overlayfs: failed to resolve './file0': -2
[  563.206537][ T7490] usb 2-1: USB disconnect, device number 16
[  563.258039][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  564.624176][T12481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  564.646355][T12481] syzkaller0: entered promiscuous mode
[  564.688423][T12481] syzkaller0: entered allmulticast mode
[  564.750598][T12484] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  564.835498][T12483] syzkaller0: entered promiscuous mode
[  564.875291][T12483] syzkaller0: entered allmulticast mode
[  564.892966][T12481] tipc: Resetting bearer <eth:syzkaller0>
[  564.919292][T12480] tipc: Resetting bearer <eth:syzkaller0>
[  564.976900][T12480] tipc: Disabling bearer <eth:syzkaller0>
[  565.793129][T12494] loop1: detected capacity change from 0 to 256
[  565.812777][T12494] exfat: Deprecated parameter 'utf8'
[  565.820388][T12494] exfat: Deprecated parameter 'namecase'
[  565.909411][T12494] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d)
[  566.186202][T12501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1990'.
[  567.722898][T12517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  567.778861][T12521] syzkaller0: entered promiscuous mode
[  567.799044][T12521] syzkaller0: entered allmulticast mode
[  567.854393][T12517] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  568.301663][T12528] tipc: Resetting bearer <eth:syzkaller0>
[  568.485516][T12529] syzkaller0: entered promiscuous mode
[  568.501683][T12529] syzkaller0: entered allmulticast mode
[  568.514054][T12516] tipc: Resetting bearer <eth:syzkaller0>
[  568.596760][T12516] tipc: Disabling bearer <eth:syzkaller0>
[  568.805652][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2001'.
[  568.926211][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2001'.
[  569.859936][T12552] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  572.966255][ T7490] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  573.197550][ T7490] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE6, skipping
[  573.210445][ T7490] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  573.220209][ T7490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.240107][ T7490] usb 5-1: config 0 descriptor??
[  573.502057][ T7490] ath6kl: Failed to submit usb control message: -71
[  573.516936][ T7490] ath6kl: unable to send the bmi data to the device: -71
[  573.524044][ T7490] ath6kl: Unable to send get target info: -71
[  573.554940][ T7490] ath6kl: Failed to init ath6kl core: -71
[  573.565515][ T7490] ath6kl_usb: probe of 5-1:0.0 failed with error -71
[  573.622037][ T7490] usb 5-1: USB disconnect, device number 14
[  576.848380][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2013'.
[  578.712701][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2025'.
[  580.038690][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2027'.
[  580.060418][T12637] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2027'.
[  580.091082][T12639] syzkaller0: entered promiscuous mode
[  580.115824][T12639] syzkaller0: entered allmulticast mode
[  583.477633][T12673] syzkaller0: entered promiscuous mode
[  583.483738][T12673] syzkaller0: entered allmulticast mode
[  589.992306][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2051'.
[  592.661114][T12740] loop3: detected capacity change from 0 to 32768
[  592.693825][T12740] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2054 (12740)
[  592.853321][T12740] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  593.117248][T12740] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  593.300329][T12740] BTRFS info (device loop3): enabling auto defrag
[  593.345964][T12740] BTRFS info (device loop3): force clearing of disk cache
[  593.373726][T12740] BTRFS info (device loop3): disabling log replay at mount time
[  593.401200][T12740] BTRFS info (device loop3): turning on async discard
[  593.445302][T12740] BTRFS info (device loop3): setting nodatacow, compression disabled
[  593.497280][T12740] BTRFS info (device loop3): turning off async discard
[  593.505030][T12740] BTRFS info (device loop3): disabling free space tree
[  593.562712][T12740] BTRFS info (device loop3): disabling tree log
[  593.572822][T12740] BTRFS info (device loop3): enabling disk space caching
[  593.591522][T12740] BTRFS info (device loop3): disk space caching is enabled
[  593.619564][T12740] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  593.656460][T12740] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  593.667345][T12764] syzkaller0: entered promiscuous mode
[  593.692208][T12764] syzkaller0: entered allmulticast mode
[  593.732608][T12740] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  593.780428][T12740] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  593.835564][T12740] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  593.877006][T12740] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  593.961529][T12740] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  594.043977][T12740] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  594.238254][T12740] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  594.552831][T12740] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  594.881631][T12740] BTRFS error (device loop3): open_ctree failed: -12
[  595.256692][ T5784] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  595.372644][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2062'.
[  599.199742][T12812] loop4: detected capacity change from 0 to 128
[  600.623272][T12817] loop3: detected capacity change from 0 to 131072
[  600.681599][T12817] F2FS-fs (loop3): invalid crc value
[  600.783860][T12817] F2FS-fs (loop3): Found nat_bits in checkpoint
[  600.901614][T12817] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  601.247706][T12826] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  601.845180][ T5817] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  602.194522][ T5817] usb 2-1: unable to get BOS descriptor or descriptor too short
[  602.209656][ T5817] usb 2-1: config 8 has an invalid interface number: 59 but max is 3
[  602.218579][ T5817] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  602.240042][ T5817] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4
[  602.255145][ T5817] usb 2-1: config 8 has no interface number 0
[  602.263566][ T5817] usb 2-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping
[  602.275950][ T5817] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[  602.291979][ T5817] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0
[  602.302364][ T5817] usb 2-1: config 8 interface 59 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 10
[  602.318528][ T5817] usb 2-1: config 8 interface 59 has no altsetting 0
[  602.656650][ T5817] usb 2-1: string descriptor 0 read error: -22
[  602.713975][ T5817] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88
[  602.880549][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.933843][ T5817] ttusbir 2-1:8.59: cannot find expected altsetting
[  603.346855][ T5817] usb 2-1: USB disconnect, device number 17
[  606.761288][T12855] loop1: detected capacity change from 0 to 131072
[  606.804027][T12855] F2FS-fs (loop1): invalid crc value
[  606.888789][T12855] F2FS-fs (loop1): Found nat_bits in checkpoint
[  606.967319][T12855] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  608.066787][T12873] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  609.880413][T12895] file system registered
[  609.894935][T12895] unloading
[  612.166407][T12908] loop3: detected capacity change from 0 to 131072
[  612.178099][T12908] F2FS-fs (loop3): invalid crc value
[  612.260851][T12908] F2FS-fs (loop3): Found nat_bits in checkpoint
[  612.321140][T12908] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  612.438456][T12918] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  612.447833][T12918] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  613.183982][T12918] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  614.616530][T12924] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  615.488521][T12929] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in;
[  615.488521][T12929]    program syz.4.2106 not setting count and/or reply_len properly
[  615.861451][T12934] loop0: detected capacity change from 0 to 4096
[  615.885642][T12934] EXT4-fs: Ignoring removed orlov option
[  615.903786][T12934] EXT4-fs (loop0): Test dummy encryption mode enabled
[  615.927060][T12934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  616.691252][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.051090][T12956] overlayfs: failed to resolve './file0': -2
[  619.781737][T12960] loop0: detected capacity change from 0 to 131072
[  619.798320][T12960] F2FS-fs (loop0): invalid crc value
[  619.898262][T12960] F2FS-fs (loop0): Found nat_bits in checkpoint
[  619.982191][T12961] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  619.990533][T12961] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  620.017803][T12961] bond3: entered promiscuous mode
[  620.023246][T12960] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  621.753985][T12970] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  625.066339][T12991] overlayfs: failed to resolve './file0': -2
[  625.067150][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  625.382037][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2121'.
[  626.511970][T12998] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  626.522370][T12998] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  626.637062][T12998] bond4: entered promiscuous mode
[  627.298811][T13005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2125'.
[  628.357817][T13003] syzkaller0: entered promiscuous mode
[  628.371425][T13003] syzkaller0: entered allmulticast mode
[  633.780911][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2133'.
[  634.107793][T13046] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  635.089564][T13049] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  635.100465][T13049] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  635.360169][T13049] bond2: entered promiscuous mode
[  636.038469][T13055] loop3: detected capacity change from 0 to 128
[  636.088925][T13055] FAT-fs (loop3): Unrecognized mount option "time_offset=0y0000400000000161" or missing value
[  636.328918][T13064] overlayfs: failed to resolve './file0': -2
[  637.712745][T13072] syzkaller0: entered promiscuous mode
[  637.721400][T13072] syzkaller0: entered allmulticast mode
[  637.756276][T13073] nbd4: detected capacity change from 0 to 8
[  637.900254][T13077] block nbd4: shutting down sockets
[  638.599543][    C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  638.608984][    C1] Buffer I/O error on dev nbd4, logical block 0, async page read
[  638.646716][ T5784] ldm_validate_partition_table(): Disk read failed.
[  638.653394][ T5784] Dev nbd4: unable to read RDB block 0
[  638.700675][ T5784]  nbd4: unable to read partition table
[  638.716333][ T5784] nbd4: partition table beyond EOD, truncated
[  638.836270][T13083] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  638.845413][T13083] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  639.601720][T13083] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  639.819385][T13091] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  640.956876][T13102] overlayfs: failed to resolve './file0': -2
[  641.008641][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2150'.
[  641.019990][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2150'.
[  643.859465][T13114] syzkaller0: entered promiscuous mode
[  643.865122][T13114] syzkaller0: entered allmulticast mode
[  644.160348][T13118] loop0: detected capacity change from 0 to 32768
[  644.261264][T13123] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  644.270459][T13123] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  644.872914][T13123] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  644.943992][T13118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2157 (13118)
[  644.988168][T13118] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  644.998483][T13118] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  645.007249][T13118] BTRFS info (device loop0): turning on sync discard
[  645.013964][T13118] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  645.023380][T13118] BTRFS info (device loop0): use zstd compression, level 3
[  645.030657][T13118] BTRFS info (device loop0): turning on async discard
[  645.037482][T13118] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  645.048127][T13118] BTRFS info (device loop0): trying to use backup root at mount time
[  645.056252][T13118] BTRFS info (device loop0): enabling auto defrag
[  645.062671][T13118] BTRFS info (device loop0): using free space tree
[  645.238058][ T1138] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  645.323851][T13118] BTRFS error (device loop0): failed to load root extent
[  645.328344][T13132] loop4: detected capacity change from 0 to 2048
[  645.331464][T13118] BTRFS warning (device loop0): try to load backup roots slot 1
[  645.360808][ T1101] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  645.521181][T13118] BTRFS warning (device loop0): couldn't read tree root
[  645.528448][T13118] BTRFS warning (device loop0): try to load backup roots slot 2
[  645.573287][   T57] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  645.677353][T13132] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  645.768240][T13118] BTRFS warning (device loop0): couldn't read tree root
[  645.775418][T13118] BTRFS warning (device loop0): try to load backup roots slot 3
[  645.848549][T13118] BTRFS info (device loop0): enabling ssd optimizations
[  645.857867][T13118] BTRFS info (device loop0): rebuilding free space tree
[  645.901455][T13132] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh
[  645.989186][T13118] BTRFS info (device loop0): checking UUID tree
[  646.654209][T13157] overlayfs: failed to resolve './file0': -2
[  647.166205][T13160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2162'.
[  647.175818][T13160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2162'.
[  648.679829][ T5778] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  652.004699][T13183] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  652.014448][T13183] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  652.322003][T13183] bond5: entered promiscuous mode
[  652.443847][T13190] syzkaller0: entered promiscuous mode
[  652.465971][T13190] syzkaller0: entered allmulticast mode
[  652.818541][T13202] overlayfs: failed to resolve './file0': -2
[  652.837356][T13202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2175'.
[  652.848767][T13202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2175'.
[  652.882630][ T1210] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[  653.166213][ T1210] usb 4-1: device descriptor read/64, error -71
[  653.674248][ T1210] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[  654.818931][ T1210] usb 4-1: device descriptor read/64, error -71
[  655.056048][ T1210] usb usb4-port1: attempt power cycle
[  656.915875][T13223] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16)
[  656.925270][T13223] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16)
[  657.044868][T13223] bond3: entered promiscuous mode
[  657.174824][T13229] syzkaller0: entered promiscuous mode
[  657.180550][T13229] syzkaller0: entered allmulticast mode
[  657.194888][T13227] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  658.372154][T13240] overlayfs: failed to resolve './file0': -2
[  658.433582][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2185'.
[  658.443384][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2185'.
[  658.964703][T13249] overlayfs: missing 'lowerdir'
[  661.841393][T13269] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  662.125408][T13276] syzkaller0: entered promiscuous mode
[  662.152899][T13276] syzkaller0: entered allmulticast mode
[  662.314467][T13283] overlayfs: failed to resolve './file0': -2
[  662.373513][T13284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2198'.
[  662.382620][T13284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2198'.
[  663.421334][    T8] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  663.472443][T13290] loop4: detected capacity change from 0 to 128
[  664.292420][T13290] FAT-fs (loop4): Unrecognized mount option "time_offset=0y0000400000000161" or missing value
[  664.325807][    T8] usb 4-1: Using ep0 maxpacket: 16
[  664.375100][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  664.406483][ T5784] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  664.430536][    T8] usb 4-1: config 0 has no interfaces?
[  664.449022][    T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  664.484863][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.499526][    T8] usb 4-1: Product: syz
[  664.499792][T13298] overlayfs: missing 'lowerdir'
[  664.503804][    T8] usb 4-1: Manufacturer: syz
[  664.528976][    T8] usb 4-1: SerialNumber: syz
[  664.557168][    T8] r8152-cfgselector 4-1: config 0 descriptor??
[  664.906102][ T5937] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  664.907849][    T8] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  664.950117][ T2937] usb 4-1: config 0 descriptor??
[  665.097086][ T5937] usb 2-1: Using ep0 maxpacket: 8
[  665.129582][ T5937] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  665.139501][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.265568][ T5937] pvrusb2: Hardware description: Terratec Grabster AV400
[  665.274108][ T5937] pvrusb2: **********
[  665.274358][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  665.278312][ T5937] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  665.306007][ T5937] pvrusb2: Important functionality might not be entirely working.
[  665.314947][ T5937] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  665.363329][ T5937] pvrusb2: **********
[  665.430537][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  665.442482][ T2325] pvrusb2: Invalid write control endpoint
[  665.657278][ T2325] pvrusb2: Invalid write control endpoint
[  665.663382][ T2325] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  665.695032][ T2325] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  665.710083][ T2325] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  665.739381][ T2325] pvrusb2: Device being rendered inoperable
[  665.761336][T13302] pvrusb2: Attempted to execute control transfer when device not ok
[  665.777988][ T2325] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  665.802797][ T7681] usb 2-1: USB disconnect, device number 18
[  665.809615][ T2325] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  665.849583][ T2325] pvrusb2: Attached sub-driver cx25840
[  665.859093][ T2325] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  665.894709][ T2325] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  666.136836][    T8] usb 4-1: USB disconnect, device number 24
[  666.216047][ T2937] usb 4-1: can't set config #0, error -71
[  667.051831][T13312] loop4: detected capacity change from 0 to 131072
[  667.069828][T13318] overlayfs: failed to resolve './file0': -2
[  667.113567][T13312] F2FS-fs (loop4): invalid crc value
[  667.133949][T13319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2210'.
[  667.143396][T13319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2210'.
[  667.382630][T13312] F2FS-fs (loop4): Found nat_bits in checkpoint
[  667.454486][T13312] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  667.762755][T13326] 9pnet_fd: Insufficient options for proto=fd
[  668.098159][T13328] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  668.974956][T13338] overlayfs: missing 'lowerdir'
[  669.780278][T13349] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  669.935877][ T7490] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  670.725809][ T7490] usb 4-1: Using ep0 maxpacket: 16
[  670.733109][ T7490] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  670.756836][ T7490] usb 4-1: config 0 has no interfaces?
[  670.781809][ T7490] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  670.806719][ T7490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.814786][ T7490] usb 4-1: Product: syz
[  670.832890][ T7490] usb 4-1: Manufacturer: syz
[  670.840509][ T7490] usb 4-1: SerialNumber: syz
[  670.866848][ T7490] r8152-cfgselector 4-1: config 0 descriptor??
[  670.894758][T13357] overlayfs: failed to resolve './file0': -2
[  671.151943][ T7490] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  671.454658][T13347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  671.686029][T13347] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  671.845206][T13363] 9pnet_fd: Insufficient options for proto=fd
[  672.586557][T13361] loop0: detected capacity change from 0 to 131072
[  672.599678][T13361] F2FS-fs (loop0): invalid crc value
[  672.627126][T13361] F2FS-fs (loop0): Found nat_bits in checkpoint
[  672.680540][T13361] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  672.944944][T13361] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  673.051685][ T5817] usb 4-1: USB disconnect, device number 25
[  673.301826][T13375] loop4: detected capacity change from 0 to 128
[  673.348216][T13375] FAT-fs (loop4): Unrecognized mount option "time_offset=0y0000400000000161" or missing value
[  673.927358][T13380] overlayfs: missing 'lowerdir'
[  674.092554][T13385] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  675.429837][T13391] overlayfs: failed to resolve './file0': -2
[  676.824512][T13398] 9pnet_fd: Insufficient options for proto=fd
[  677.295809][   T56] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  678.219322][T13401] loop3: detected capacity change from 0 to 131072
[  678.314768][T13401] F2FS-fs (loop3): invalid crc value
[  678.399524][T13401] F2FS-fs (loop3): Found nat_bits in checkpoint
[  678.463328][T13401] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  678.650463][   T56] usb 2-1: Using ep0 maxpacket: 16
[  678.656330][T13401] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  678.768829][   T56] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  678.800283][   T56] usb 2-1: config 0 has no interfaces?
[  678.829009][   T56] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  678.870687][   T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.907731][   T56] usb 2-1: Product: syz
[  678.915821][   T56] usb 2-1: Manufacturer: syz
[  678.920478][   T56] usb 2-1: SerialNumber: syz
[  678.963938][   T56] r8152-cfgselector 2-1: config 0 descriptor??
[  679.241767][   T56] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  679.467169][T13404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  679.516609][T13404] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  680.092207][T13413] loop4: detected capacity change from 0 to 131072
[  680.166893][T13413] F2FS-fs (loop4): invalid crc value
[  680.174625][T13420] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  680.268231][T13413] F2FS-fs (loop4): Found nat_bits in checkpoint
[  680.316312][T13413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  680.693919][T13425] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  680.754896][ T5937] usb 2-1: USB disconnect, device number 19
[  681.746371][T13434] overlayfs: failed to resolve './file0': -2
[  682.447709][T13441] 9pnet_fd: Insufficient options for proto=fd
[  683.435662][T13443] loop1: detected capacity change from 0 to 131072
[  683.530328][T13443] F2FS-fs (loop1): invalid crc value
[  683.568374][T13443] F2FS-fs (loop1): Found nat_bits in checkpoint
[  683.623443][T13443] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  683.872232][T13443] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  684.316167][T13461] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  684.355805][ T5817] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  685.221540][T13464] overlayfs: missing 'lowerdir'
[  685.246037][ T5817] usb 1-1: Using ep0 maxpacket: 16
[  685.257895][ T5817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  685.291885][ T5817] usb 1-1: config 0 has no interfaces?
[  685.312955][ T5817] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  685.325807][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.344115][ T5817] usb 1-1: Product: syz
[  685.354260][ T5817] usb 1-1: Manufacturer: syz
[  685.364392][ T5817] usb 1-1: SerialNumber: syz
[  685.381579][ T5817] r8152-cfgselector 1-1: config 0 descriptor??
[  685.569283][T13471] overlayfs: failed to resolve './file0': -2
[  685.941386][T13458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.091149][T13458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.152012][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  686.426382][ T5817] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  686.554201][T13478] 9pnet_fd: Insufficient options for proto=fd
[  687.063692][ T5937] usb 1-1: USB disconnect, device number 16
[  687.641436][T13480] loop4: detected capacity change from 0 to 131072
[  687.662067][T13480] F2FS-fs (loop4): invalid crc value
[  687.717814][T13480] F2FS-fs (loop4): Found nat_bits in checkpoint
[  687.793716][T13480] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  687.919096][T13480] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  688.775183][T13498] syzkaller0: left promiscuous mode
[  688.780567][T13498] syzkaller0: left allmulticast mode
[  689.097044][T13508] 9pnet_fd: Insufficient options for proto=fd
[  689.161558][T13510] overlayfs: failed to resolve './file0': -2
[  690.435940][T11443] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  690.626222][T11443] usb 2-1: Using ep0 maxpacket: 16
[  690.645600][T11443] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  690.677098][T11443] usb 2-1: config 0 has no interfaces?
[  690.683929][T13520] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  690.728596][T11443] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  690.781864][T11443] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.815626][T11443] usb 2-1: Product: syz
[  690.838604][T11443] usb 2-1: Manufacturer: syz
[  690.853890][T11443] usb 2-1: SerialNumber: syz
[  690.914762][T11443] r8152-cfgselector 2-1: config 0 descriptor??
[  691.212036][T11443] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  691.489428][T13507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.524342][T13507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.132461][    T8] usb 2-1: USB disconnect, device number 20
[  694.253965][T13556] overlayfs: failed to resolve './file0': -2
[  695.906845][ T5937] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  696.119901][ T5937] usb 1-1: Using ep0 maxpacket: 16
[  696.143644][T13566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2282'.
[  696.161199][ T5937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  696.171914][ T5937] usb 1-1: config 0 has no interfaces?
[  696.183796][ T5937] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  696.205994][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.215822][ T5937] usb 1-1: Product: syz
[  696.220038][ T5937] usb 1-1: Manufacturer: syz
[  696.224651][ T5937] usb 1-1: SerialNumber: syz
[  696.507575][ T5937] r8152-cfgselector 1-1: config 0 descriptor??
[  697.038628][ T5937] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  697.177696][T13581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  697.259136][T13581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  699.857753][ T7681] usb 1-1: USB disconnect, device number 17
[  703.301705][T13610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  703.313167][T13610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  703.324035][T13610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  703.341465][T13610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  703.349540][T13610] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  703.358380][T13610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  703.379069][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  703.405155][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  703.414564][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  703.426181][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  703.437176][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  703.453810][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  703.630935][  T146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.093779][  T146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.688182][  T146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.959973][  T146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.567021][T13610] Bluetooth: hci2: command tx timeout
[  705.568259][  T146] tipc: Left network mode
[  705.624572][T13609] chnl_net:caif_netlink_parms(): no params data found
[  707.134468][T13609] bridge0: port 1(bridge_slave_0) entered blocking state
[  707.232927][T13609] bridge0: port 1(bridge_slave_0) entered disabled state
[  707.341709][T13609] bridge_slave_0: entered allmulticast mode
[  707.399331][T13609] bridge_slave_0: entered promiscuous mode
[  707.417672][T13609] bridge0: port 2(bridge_slave_1) entered blocking state
[  707.424870][T13609] bridge0: port 2(bridge_slave_1) entered disabled state
[  707.432873][T13609] bridge_slave_1: entered allmulticast mode
[  707.440663][T13609] bridge_slave_1: entered promiscuous mode
[  707.648243][T13610] Bluetooth: hci2: command tx timeout
[  707.676301][T13609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  707.689871][T13609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  708.013642][T13609] team0: Port device team_slave_0 added
[  708.112661][T13609] team0: Port device team_slave_1 added
[  708.213675][T13609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  708.225108][T13609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  708.252634][T13609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  708.265595][ T5818] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  708.344374][T13609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  708.354102][T13609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  708.383308][T13609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  708.462713][  T146] batman_adv: batadv0: Removing interface: wlan0
[  708.490286][ T5818] usb 5-1: unable to get BOS descriptor or descriptor too short
[  708.524818][ T5818] usb 5-1: config 8 has an invalid interface number: 59 but max is 3
[  708.556568][ T5818] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  708.604925][ T5818] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 4
[  708.653690][ T5818] usb 5-1: config 8 has no interface number 0
[  708.667023][ T5818] usb 5-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping
[  708.685036][ T5818] usb 5-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[  708.700769][T13609] hsr_slave_0: entered promiscuous mode
[  708.703661][ T5818] usb 5-1: config 8 interface 59 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  708.724302][T13609] hsr_slave_1: entered promiscuous mode
[  708.746677][T13609] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  708.755021][T13609] Cannot create hsr debugfs directory
[  708.758629][ T5818] usb 5-1: config 8 interface 59 has no altsetting 0
[  708.786642][  T146] hsr_slave_0: left promiscuous mode
[  708.801887][  T146] hsr_slave_1: left promiscuous mode
[  708.802513][ T5818] usb 5-1: string descriptor 0 read error: -22
[  708.821388][ T5818] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88
[  708.840936][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.931340][  T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  708.948351][  T146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  708.950441][ T5818] ttusbir 5-1:8.59: cannot find expected altsetting
[  708.985322][  T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  709.029759][  T146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  709.053813][  T146] bridge_slave_1: left allmulticast mode
[  709.066021][  T146] bridge_slave_1: left promiscuous mode
[  709.092210][  T146] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.138858][  T146] bridge_slave_0: left allmulticast mode
[  709.150650][  T146] bridge_slave_0: left promiscuous mode
[  709.165345][  T146] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.206297][ T5818] usb 5-1: USB disconnect, device number 15
[  709.328334][  T146] veth1_macvtap: left promiscuous mode
[  709.333958][  T146] veth0_macvtap: left promiscuous mode
[  709.370703][  T146] veth1_vlan: left promiscuous mode
[  709.380765][  T146] veth0_vlan: left promiscuous mode
[  709.699919][  T146] bond3 (unregistering): Released all slaves
[  709.720054][  T146] bond2 (unregistering): Released all slaves
[  709.726537][T13610] Bluetooth: hci2: command tx timeout
[  709.747348][  T146] bond1 (unregistering): Released all slaves
[  709.772808][  T146] bond0 (unregistering): Released all slaves
[  711.806288][T13610] Bluetooth: hci2: command tx timeout
[  712.516662][  T146] team0 (unregistering): Port device team_slave_1 removed
[  712.608340][  T146] team0 (unregistering): Port device team_slave_0 removed
[  713.312643][T13738] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  713.324634][T13738] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  713.334474][T13738] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  715.086141][T13773] loop4: detected capacity change from 0 to 256
[  715.093565][T13773] exfat: Deprecated parameter 'utf8'
[  715.145890][T13773] exfat: Deprecated parameter 'namecase'
[  715.220250][T13773] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d)
[  716.039696][T13792] netlink: 'syz.0.2342': attribute type 29 has an invalid length.
[  716.080475][T13792] netlink: 'syz.0.2342': attribute type 29 has an invalid length.
[  716.125426][T13609] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  716.164434][T13609] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  716.221809][T13794] syzkaller0: entered promiscuous mode
[  716.235824][T13794] syzkaller0: entered allmulticast mode
[  716.253062][T13609] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  716.281603][T13609] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  717.140065][T13805] loop3: detected capacity change from 0 to 131072
[  717.188095][T13805] F2FS-fs (loop3): invalid crc value
[  717.260264][T13807] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  717.273956][T13805] F2FS-fs (loop3): Found nat_bits in checkpoint
[  717.346198][T13805] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  717.751377][T13817] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  717.760171][T13609] 8021q: adding VLAN 0 to HW filter on device bond0
[  717.842673][T13609] 8021q: adding VLAN 0 to HW filter on device team0
[  717.845856][T13819] loop0: detected capacity change from 0 to 256
[  717.887098][T13819] exfat: Deprecated parameter 'utf8'
[  717.897056][T13819] exfat: Deprecated parameter 'namecase'
[  717.925215][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  717.932483][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  717.974416][T13819] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d)
[  718.032212][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.039504][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state
[  718.260007][ T7490] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  718.470268][ T7490] usb 5-1: Using ep0 maxpacket: 16
[  718.499861][ T7490] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  718.524239][ T7490] usb 5-1: config 0 has no interfaces?
[  718.536421][ T7490] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  718.755063][ T7490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.764281][ T7490] usb 5-1: Product: syz
[  718.769317][ T7490] usb 5-1: Manufacturer: syz
[  718.773987][ T7490] usb 5-1: SerialNumber: syz
[  718.791693][ T7490] r8152-cfgselector 5-1: config 0 descriptor??
[  719.008723][ T7490] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  719.018779][T13609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  719.211833][T13609] veth0_vlan: entered promiscuous mode
[  719.211994][T13822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  719.270705][T13609] veth1_vlan: entered promiscuous mode
[  719.283662][T13822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  719.400716][T13609] veth0_macvtap: entered promiscuous mode
[  719.429824][T13609] veth1_macvtap: entered promiscuous mode
[  719.492386][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  719.535809][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.576168][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  719.591961][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.607762][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  719.623932][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.656960][T13609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  719.703851][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  719.742861][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.782646][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  719.801279][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.826486][T13609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  719.852057][T13609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  719.894648][T13609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  719.938372][T13609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  719.960370][T13609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  719.970574][T13609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  719.981051][T13609] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  720.010978][ T7490] usb 5-1: USB disconnect, device number 16
[  720.247905][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.277340][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.429681][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  720.458391][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  720.666822][T13860] syzkaller0: entered promiscuous mode
[  720.672379][T13860] syzkaller0: entered allmulticast mode
[  722.317675][T13849] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  722.733893][T13849] usb 2-1: unable to get BOS descriptor or descriptor too short
[  722.746026][ T5818] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  722.777975][T13849] usb 2-1: config 8 has an invalid interface number: 59 but max is 3
[  722.794145][T13849] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  722.820776][T13849] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4
[  722.842646][T13889] netlink: 'syz.3.2351': attribute type 29 has an invalid length.
[  722.856257][T13849] usb 2-1: config 8 has no interface number 0
[  722.864854][T13849] usb 2-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping
[  722.876733][T13889] netlink: 'syz.3.2351': attribute type 29 has an invalid length.
[  722.896066][T13849] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[  722.908698][T13849] usb 2-1: config 8 interface 59 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  722.924263][T13849] usb 2-1: config 8 interface 59 has no altsetting 0
[  722.955930][ T5818] usb 1-1: Using ep0 maxpacket: 16
[  722.966079][T13849] usb 2-1: string descriptor 0 read error: -22
[  722.972435][T13849] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88
[  722.986123][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  723.012754][ T5818] usb 1-1: config 0 has no interfaces?
[  723.018806][T13849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.051274][ T5818] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  723.066585][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.089480][T13849] ttusbir 2-1:8.59: cannot find expected altsetting
[  723.107532][ T5818] usb 1-1: Product: syz
[  723.115767][ T5818] usb 1-1: Manufacturer: syz
[  723.128481][ T5818] usb 1-1: SerialNumber: syz
[  723.144157][ T5818] r8152-cfgselector 1-1: config 0 descriptor??
[  723.359355][T13849] usb 2-1: USB disconnect, device number 21
[  723.385508][ T5818] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  723.594308][T13881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  723.625237][T13881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  724.466996][ T7490] usb 1-1: USB disconnect, device number 18
[  724.609790][T13925] syzkaller0: entered promiscuous mode
[  724.615503][T13925] syzkaller0: entered allmulticast mode
[  726.558082][T13942] netlink: 'syz.0.2369': attribute type 29 has an invalid length.
[  726.650627][T13942] netlink: 'syz.0.2369': attribute type 29 has an invalid length.
[  727.162596][T13953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2372'.
[  727.902040][ T5818] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  728.816149][ T5818] usb 5-1: Using ep0 maxpacket: 16
[  728.825280][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  728.855931][ T5818] usb 5-1: config 0 has no interfaces?
[  728.871099][T13978] netlink: 'syz.3.2380': attribute type 29 has an invalid length.
[  728.892870][ T5818] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  728.904544][T13978] netlink: 'syz.3.2380': attribute type 29 has an invalid length.
[  728.918680][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.937178][ T5818] usb 5-1: Product: syz
[  728.941420][ T5818] usb 5-1: Manufacturer: syz
[  728.946552][ T5818] usb 5-1: SerialNumber: syz
[  728.957092][ T5818] r8152-cfgselector 5-1: config 0 descriptor??
[  729.442415][ T5818] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  729.650097][T13962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.698931][T13962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  730.325424][ T5937] usb 5-1: USB disconnect, device number 17
[  730.685114][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  730.697875][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  730.707547][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  730.718000][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  730.725770][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  730.733246][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  730.858400][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2386'.
[  731.032391][T14001] chnl_net:caif_netlink_parms(): no params data found
[  731.135013][T14010] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  731.957352][T14001] bridge0: port 1(bridge_slave_0) entered blocking state
[  731.964845][T14001] bridge0: port 1(bridge_slave_0) entered disabled state
[  731.972382][T14001] bridge_slave_0: entered allmulticast mode
[  731.979975][T14001] bridge_slave_0: entered promiscuous mode
[  731.992589][T14001] bridge0: port 2(bridge_slave_1) entered blocking state
[  732.000245][T14001] bridge0: port 2(bridge_slave_1) entered disabled state
[  732.026010][T14001] bridge_slave_1: entered allmulticast mode
[  732.043513][T14001] bridge_slave_1: entered promiscuous mode
[  732.192781][T14001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  732.497208][T14020] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  732.730929][T14001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  732.767444][T13610] Bluetooth: hci4: command tx timeout
[  733.272845][T14001] team0: Port device team_slave_0 added
[  733.605558][T14001] team0: Port device team_slave_1 added
[  733.743115][T14001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  733.753145][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  733.780276][T14001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  733.813430][T14001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  733.824751][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  733.857598][T14001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  734.119561][ T5937] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  734.180789][T14001] hsr_slave_0: entered promiscuous mode
[  734.205359][T14001] hsr_slave_1: entered promiscuous mode
[  734.273356][T14001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  734.290991][T14036] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  734.308031][ T5937] usb 2-1: Using ep0 maxpacket: 16
[  734.389530][T14001] Cannot create hsr debugfs directory
[  734.389738][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  734.406985][ T5937] usb 2-1: config 0 has no interfaces?
[  734.501083][ T5937] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  734.560316][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.672976][ T5937] usb 2-1: Product: syz
[  734.718039][ T5937] usb 2-1: Manufacturer: syz
[  734.783206][ T5937] usb 2-1: SerialNumber: syz
[  734.845958][T13610] Bluetooth: hci4: command tx timeout
[  734.890939][ T5937] r8152-cfgselector 2-1: config 0 descriptor??
[  735.093770][ T1101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.218501][ T5937] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  735.312852][T14035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2397'.
[  735.329165][ T1101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.434088][T14028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  735.469551][ T1101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.482318][T14028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  735.590346][ T1101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.205374][ T1101] tipc: Left network mode
[  736.212435][T13849] usb 2-1: USB disconnect, device number 22
[  736.996249][T13610] Bluetooth: hci4: command tx timeout
[  737.632330][T14057] loop1: detected capacity change from 0 to 131072
[  737.659904][T14057] F2FS-fs (loop1): invalid crc value
[  737.669286][T14057] F2FS-fs (loop1): Found nat_bits in checkpoint
[  737.745919][T14057] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  737.795789][ T5937] usb 5-1: new low-speed USB device number 18 using dummy_hcd
[  737.984590][T14001] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  738.201265][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short
[  738.357603][ T5937] usb 5-1: config 8 has an invalid interface number: 59 but max is 3
[  738.517924][T14073] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36
[  738.549277][ T5937] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  738.602237][T14001] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  738.619581][ T5937] usb 5-1: config 8 has 1 interface, different from the descriptor's value: 4
[  738.701974][ T5937] usb 5-1: config 8 has no interface number 0
[  738.752855][ T5937] usb 5-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping
[  738.820004][ T5937] usb 5-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[  739.006104][T13610] Bluetooth: hci4: command tx timeout
[  739.036206][T14001] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  739.074154][T14001] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  739.077638][ T5937] usb 5-1: config 8 interface 59 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  739.095237][ T5937] usb 5-1: config 8 interface 59 has no altsetting 0
[  739.126067][ T5937] usb 5-1: string descriptor 0 read error: -22
[  739.132423][ T5937] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88
[  739.143486][ T1101] IPVS: stopping backup sync thread 6592 ...
[  739.146055][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.590496][ T5937] usb 5-1: can't set config #8, error -71
[  739.606625][ T5937] usb 5-1: USB disconnect, device number 18
[  740.077198][ T1101] hsr_slave_0: left promiscuous mode
[  740.083564][ T1101] hsr_slave_1: left promiscuous mode
[  740.098145][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  740.118064][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  740.137255][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  740.151676][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  740.168769][ T1101] bridge_slave_1: left allmulticast mode
[  740.181267][ T1101] bridge_slave_1: left promiscuous mode
[  740.195718][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state
[  740.212614][ T1101] bridge_slave_0: left allmulticast mode
[  740.222004][ T1101] bridge_slave_0: left promiscuous mode
[  740.228837][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state
[  740.289536][ T1101] veth1_macvtap: left promiscuous mode
[  740.295269][ T1101] veth0_macvtap: left promiscuous mode
[  740.306755][ T1101] veth1_vlan: left promiscuous mode
[  740.318992][ T1101] veth0_vlan: left promiscuous mode
[  742.118319][T14110] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  742.966492][T13849] usb 2-1: new low-speed USB device number 23 using dummy_hcd
[  743.217588][T13849] usb 2-1: unable to get BOS descriptor or descriptor too short
[  743.254018][T13849] usb 2-1: config 8 has an invalid interface number: 59 but max is 3
[  743.265757][T13849] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  743.322076][T13849] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 4
[  743.334200][T13849] usb 2-1: config 8 has no interface number 0
[  743.341821][T13849] usb 2-1: config 8 interface 59 altsetting 2 has an invalid endpoint with address 0x1A, skipping
[  743.368814][T13849] usb 2-1: config 8 interface 59 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 8
[  743.399916][T13849] usb 2-1: config 8 interface 59 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  743.413291][T13849] usb 2-1: config 8 interface 59 has no altsetting 0
[  743.442464][T13849] usb 2-1: string descriptor 0 read error: -22
[  743.462861][T13849] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=73.88
[  743.472044][T13849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.490698][T13849] ttusbir 2-1:8.59: cannot find expected altsetting
[  743.545871][ T5937] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  743.730332][ T5818] usb 2-1: USB disconnect, device number 23
[  743.930608][ T1101] team0 (unregistering): Port device team_slave_1 removed
[  744.049166][ T1101] team0 (unregistering): Port device team_slave_0 removed
[  744.168748][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  744.290354][ T5937] usb 5-1: Using ep0 maxpacket: 16
[  744.307846][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  744.318563][ T5937] usb 5-1: config 0 has no interfaces?
[  744.325535][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  744.327727][ T5937] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  744.355753][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.363834][ T5937] usb 5-1: Product: syz
[  744.368798][ T5937] usb 5-1: Manufacturer: syz
[  744.373457][ T5937] usb 5-1: SerialNumber: syz
[  744.386561][ T5937] r8152-cfgselector 5-1: config 0 descriptor??
[  744.609673][T14126] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  744.705649][ T5937] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  745.062410][T14119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.128927][T14119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  746.500521][T13849] usb 5-1: USB disconnect, device number 19
[  748.133136][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  748.458657][   T12] ------------[ cut here ]------------
[  748.464804][   T12] WARNING: CPU: 0 PID: 12 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830
[  748.474955][   T12] Modules linked in:
[  748.478931][   T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0
[  748.486372][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  748.496542][   T12] Workqueue: iou_exit io_ring_exit_work
[  748.502150][   T12] RIP: 0010:io_ring_exit_work+0x3b9/0x830
[  748.507974][   T12] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 f1 fe 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 15 03 f7 e9 b1 fd ff ff e8 f7 14 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00
[  748.527695][   T12] RSP: 0018:ffffc90000117a40 EFLAGS: 00010293
[  748.533884][   T12] RAX: ffffffff8a845c89 RBX: ffff888079e20000 RCX: ffff88801b65da00
[  748.541969][   T12] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[  748.550021][   T12] RBP: ffffc90000117bb0 R08: ffffc900001179c7 R09: 1ffff92000022f38
[  748.558084][   T12] R10: dffffc0000000000 R11: fffff52000022f39 R12: dffffc0000000000
[  748.566221][   T12] R13: 000000010000ae55 R14: 000000010000ae59 R15: ffff888079e20510
[  748.574234][   T12] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  748.583258][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  748.589920][   T12] CR2: 00007fb59e9556c8 CR3: 000000005ec6f000 CR4: 00000000003506f0
[  748.597975][   T12] Call Trace:
[  748.601289][   T12]  <TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  748.604263][   T12]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  748.610298][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  748.615629][   T12]  ? process_scheduled_works+0x975/0x1600
[  748.621518][   T12]  ? process_scheduled_works+0x975/0x1600
[  748.627344][   T12]  process_scheduled_works+0xa60/0x1600
[  748.633618][   T12]  ? worker_attach_to_pool+0x370/0x370
[  748.639242][   T12]  ? assign_work+0x3cc/0x5d0
[  748.644056][   T12]  worker_thread+0xa5e/0xfe0
[  748.648783][   T12]  kthread+0x2fa/0x390
[  748.652890][   T12]  ? pr_cont_work+0x550/0x550
[  748.657689][   T12]  ? kthread_blkcg+0xd0/0xd0
[  748.662708][   T12]  ret_from_fork+0x48/0x80
[  748.667227][   T12]  ? kthread_blkcg+0xd0/0xd0
[  748.671946][   T12]  ret_from_fork_asm+0x11/0x20
[  748.676851][   T12]  </TASK>
[  748.679909][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  748.687214][   T12] CPU: 0 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0
[  748.694612][   T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  748.704711][   T12] Workqueue: iou_exit io_ring_exit_work
[  748.710311][   T12] Call Trace:
[  748.713616][   T12]  <TASK>
[  748.716579][   T12]  dump_stack_lvl+0x18c/0x250
[  748.721331][   T12]  ? show_regs_print_info+0x20/0x20
[  748.726576][   T12]  ? load_image+0x420/0x420
[  748.731171][   T12]  panic+0x2ca/0x720
[  748.735109][   T12]  ? bpf_jit_dump+0xd0/0xd0
[  748.739656][   T12]  ? ret_from_fork_asm+0x11/0x20
[  748.744651][   T12]  __warn+0x2e0/0x470
[  748.748685][   T12]  ? io_ring_exit_work+0x3b9/0x830
[  748.753840][   T12]  ? io_ring_exit_work+0x3b9/0x830
[  748.758995][   T12]  report_bug+0x2be/0x4f0
[  748.763430][   T12]  ? io_ring_exit_work+0x3b9/0x830
[  748.768593][   T12]  ? io_ring_exit_work+0x3b9/0x830
[  748.773754][   T12]  ? io_ring_exit_work+0x3bb/0x830
[  748.778901][   T12]  handle_bug+0xcf/0x120
[  748.783167][   T12]  exc_invalid_op+0x1a/0x50
[  748.787690][   T12]  asm_exc_invalid_op+0x1a/0x20
[  748.792631][   T12] RIP: 0010:io_ring_exit_work+0x3b9/0x830
[  748.798373][   T12] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 f1 fe 10 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 15 03 f7 e9 b1 fd ff ff e8 f7 14 03 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00
[  748.817991][   T12] RSP: 0018:ffffc90000117a40 EFLAGS: 00010293
[  748.824070][   T12] RAX: ffffffff8a845c89 RBX: ffff888079e20000 RCX: ffff88801b65da00
[  748.832051][   T12] RDX: 0000000000000000 RSI: fffffffffffffffc RDI: 0000000000000000
[  748.840034][   T12] RBP: ffffc90000117bb0 R08: ffffc900001179c7 R09: 1ffff92000022f38
[  748.848020][   T12] R10: dffffc0000000000 R11: fffff52000022f39 R12: dffffc0000000000
[  748.856023][   T12] R13: 000000010000ae55 R14: 000000010000ae59 R15: ffff888079e20510
[  748.864021][   T12]  ? io_ring_exit_work+0x3b9/0x830
[  748.869199][   T12]  ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0
[  748.875033][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  748.880247][   T12]  ? process_scheduled_works+0x975/0x1600
[  748.885980][   T12]  ? process_scheduled_works+0x975/0x1600
[  748.891713][   T12]  process_scheduled_works+0xa60/0x1600
[  748.897293][   T12]  ? worker_attach_to_pool+0x370/0x370
[  748.902768][   T12]  ? assign_work+0x3cc/0x5d0
[  748.907383][   T12]  worker_thread+0xa5e/0xfe0
[  748.912009][   T12]  kthread+0x2fa/0x390
[  748.916091][   T12]  ? pr_cont_work+0x550/0x550
[  748.920778][   T12]  ? kthread_blkcg+0xd0/0xd0
[  748.925375][   T12]  ret_from_fork+0x48/0x80
[  748.929802][   T12]  ? kthread_blkcg+0xd0/0xd0
[  748.934406][   T12]  ret_from_fork_asm+0x11/0x20
[  748.939196][   T12]  </TASK>
[  748.942344][   T12] Kernel Offset: disabled
[  748.946735][   T12] Rebooting in 86400 seconds..