last executing test programs:

36.27370717s ago: executing program 3 (id=2135):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file1\x00', 0x2800802, &(0x7f0000000480)=ANY=[], 0x1, 0xf58, &(0x7f0000005580)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x32004c8, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESOCT=0x0, @ANYBLOB='8,\x00'], 0x1, 0x656, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5530, &(0x7f000000c740)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f00000003c0)={0x0, 0x2})
set_mempolicy(0x4003, &(0x7f0000000080), 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={0x0}}, 0x0)
syz_io_uring_setup(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f00009f6000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x10000000)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/198, 0xc6)

36.035999397s ago: executing program 4 (id=2136):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000)
preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0)
gettid() (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) (async)
preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0) (async)

35.690107525s ago: executing program 4 (id=2140):
capset(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="00c0000000080000b99271c5ae547d5e7bd0050b8b249ee8f2b60034ef7e01cff564aa5740087214b9fca5e1a2596e25fc000ae40f97b05579218dcec1f3d85bf907b57549937fd19f2f73d1c18127933439aa6616750e6b0054f004363fd61850b9ec3221f80c03330af1cd32fbf63aee3f2705ba34e181257f41d1d2394fba0e53ce0fe01cfc492257e6afb482f57e15d284817e6f6a8d01a89344e3b31ecdcb988c971f20322c155eb8b96ac08cb595724a0a51184c77df"], 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x5609, 0x0)
r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x2)
unlink(&(0x7f0000000280)='./file1\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000300))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

34.536730329s ago: executing program 4 (id=2142):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x810, &(0x7f0000000100)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESDEC, @ANYRES64], 0x1, 0xa1c, &(0x7f0000000d00)="$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")
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040100001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e400128009000100766c616e00000000d400028006000100000000000c0002000000000000000000060005000000000006000100000000000600050000000000100004800c00010000000000000000007c0004800c00010000000000000000000c00010000000000000000000c00010000000000000000000c0001000000fdc8000000000c00010000000000000000000c00010000000000000000000c00010000000000000000000c00010000000000000000000c00010000000000000000000c000100000000000000000006000500000000000c000200000000000000000004"], 0x104}, 0x1, 0xba01}, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0xfd, 0x4})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

33.498146549s ago: executing program 4 (id=2148):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x0)
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[], 0x1, 0xa3a, &(0x7f0000000a80)="$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")
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000002c0)={0x6, 0xff, 0xfff, 0xe471}, 0x10)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
connect$bt_l2cap(r0, 0x0, 0x0)
r2 = getpid()
capget(&(0x7f0000000100)={0x20080522, r2}, &(0x7f0000000140)={0x10000, 0x8, 0x4, 0xf8a80000, 0x6, 0x10001})
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000180)='./file0\x00', 0x1600008, &(0x7f00000001c0)=ANY=[], 0x3, 0x632, &(0x7f0000000800)="$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")
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04030b00c800ce5dd37d19965fc01aff701b650101000000000000000000be0fd2b9228fdd729d2e844f66b0148e71729157fb7c50a2989575f160fc528c56d6af7f45ea4658fd464746dfe5480edb141a43f8e0cbf9424089c91e71b0eae1f058de8b8efa4cec9ca0f1ce1fd2189440ecf7c7"], 0xe)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r4, 0x0, 0x110)
write$binfmt_elf64(r0, 0x0, 0x78)

31.7391806s ago: executing program 3 (id=2154):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030362c626172726965722c6e6f626172726965722c736d61636b66737472616e736d7574653d55dac73dddd1aa0ff491f57216572f1e671a989f42c64dc0b65d67d4250567573bb5e8d8c2d916d55de0fad0693e50202f126e0e71e930d123c47bc4a1d2ab46e52a07fd8ca501f330abb8b07d3a5364154ec1faf99b6a9779abe230ce8f5a290ef9442c7569643c", @ANYRES8, @ANYBLOB="101500000000", @ANYRES32, @ANYRESDEC, @ANYRES64], 0x1, 0x6f8, &(0x7f0000000300)="$eJzs3TtoJOcdAPD/rFarXQXOOvseTjBY+MAJEbmTTsiJ0uQSQlBhgnGK1OJO5xO30hlJDrojxHIefQpXqZxCnUkRnCrNQVLHGIJblYYEN67UKczszGpWu9pd6fS6+PcTs/PNfM/5z87M7g5iAvjaWpiK6tNIYmHqzc10eWd7tjmyPTuWZzcjohYRlYhqaxbJamS5d/IpvpmuzMsnh/Xz4fL8259/tfNFa6maT1n5Sr96PdS6V23lU0xGxEg+7zZ6SIufHOy+o727h7Y3rKS9hWnAbhSBiz89U6vwzPa6bLXzPv539tqv+lGOW+CCSlrXzS4TEeMRUY9oXfXzs0PlbEd38rbOewAAAABwVI2jV3lhN3ZjMy6dxnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/1X+/P8knypFejKS4vn/tXxd5OkLaPCDED8ba82fnv5gAAAAAAAAAODUvbobu7EZl4rlvSS75/9a6R7/N+K9WI+lWIubsRmLsREbsRYzETFRaqi2ubixsTaT1Yy40qfm7fi0R83bh4/xzglvMwAAAAAAAABccPUB+Q9Hu9f9Nhb27/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBFkESMtGbZdKVIT0SlGhH1iKil5bYiPi3Sz4mk18qnZz8OAAAAeCb1zsWkPkSdF96P3diMS8XyXpJ957+WfV+ux3uxGhuxHBvRjKW4l3+HTr/1V3a2Z5s727MrUZ9dSVf+/b97mVY7P/7ySEPPWozWbw+9e345K9GI+7GcrbkZdyOJVpeVvJWXd7Zn0/lKOq5sbB0+SMeU/CjXZzQjpfS99OX6J1n6j52/IlSPtInHMJZHpbeJLHe0HZHpfGxpjctFBHpHYuDeqfbtaSYq7V9+rvTvqXfMP+jf+/iBUj1/uTkXByNxOyrtPXStKxKjnZW//bePf/mgufrwwf31qYuzST29P7DEwUjMliJxvf974rmKxGDTWSSutpcX4mfxi5iKL8feirVYjl/FYmzE0mSRv5i/n9PXif6R+my8vPTWoJGkx+Rk+/zVa0yT0TGmmIyfZqnFeC3bp5diOZJ4FBFL8Ub2dztm2meD/T18dYijvjLEmbbkxneyWTtM0Ti87F+Ga/KkpHG9XIpr+Zw7keWV1+xH6cWeUSqudcNfj0qq38oTaQu/63t9OGsHIzFTisRLh71fWiH9c/apYb25+nDtweK7Q/b3ej5Pj6M/XKirRLqHX4x6vnGXs9ckO6ams7yX2lfYznjV8jsuLZWuvKvteq0j9efxKO51HKnfj7mYi/ms9LWs9GjXFSvNu95uqfMcnualn7Sq7Rs75c9bj6LZ+jwEwMU2/t3xWuM/jX81Pmr8vvGg8Wb9J2M/GHulFqP/HP1hdXrk9coryV/jo/jN/vd/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+NYfP3m42GwurfVOVHpnJf1rLTb3igeJ9SnTkUjyR+UMUThZf/xkb2CD/RNj+fCOWf0kE8XTGstZxdMUOwtPnuIwkq2D+6s+eF8UT3kaooukK+Bp5WOPueh5f83oBdiVBxOTx6xe3q48UbxhS4WP/u5t9NpfIxHRq/CAE8fIM596gHN2a2Pl3Vvrj598b3ll8Z2ld5ZWR+fm5qfn596YvXV/ubk03XotVTj1h98CZ6X8caKtFhGvDq7b50GtAAAAAAAAAAAAwCk6i/+FOO9tBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5vC1NRfRpJzEzfnE6Xd7Znm+lUpPdLViOiEhHJryOSf0TcidYUE6XmksP6+XB5/u3Pv9r5Yr+talG+ErF1aL3hbOVTTEbESD4/qfbuDm6vtp8c65GdtCOTBuxGETg4b/8LAAD//6Nb8HA=")
syz_open_dev$evdev(&(0x7f0000000040), 0x491782ce, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
inotify_init1(0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x400, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x2}, 0x90) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
shutdown(r1, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async)
r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
close(r3)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') (async)
execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) (async)
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) (async)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0)
mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x8000000000000000)

31.403430503s ago: executing program 0 (id=2155):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

31.265714319s ago: executing program 0 (id=2156):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x10)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x90)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r4 = syz_pidfd_open(0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121201, 0x0)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"})
r6 = socket$kcm(0x10, 0x2, 0x4)
close(r6)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x8, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00400020208000200030001000400bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
write$binfmt_aout(r5, &(0x7f0000000080)=ANY=[], 0xff2e) (async)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x6, 0x1000000, 0x3, 0x0, "5a5f0020008a3fc945e8724a114177ffffef00"})
r7 = syz_open_pts(r5, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000002500)={0x10, 0x3, 0x4a, 0x2, 0x0, "f937267f0f7ba576c8a70300e1b5069cc64c56"}) (async)
r8 = dup(r7)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="033c00001500080000000700000008000b0000df0000"], 0x1c}}, 0x0) (async)
read$FUSE(r8, &(0x7f0000000380)={0x2020}, 0x2020) (async)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000001c0)={0xb, 0x1})
read$FUSE(r8, &(0x7f0000006580)={0x2020}, 0xffffff80) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000000))

30.789892799s ago: executing program 0 (id=2158):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="4b000000020000000b"], 0x0)

30.547471687s ago: executing program 0 (id=2160):
read$msr(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x10001)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

26.923852721s ago: executing program 0 (id=2161):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x67e8, &(0x7f0000000080)={0x0, 0xb0aa, 0x80, 0xfff7fff7, 0x390, 0x0, r0}, 0x0, 0x0)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) (async, rerun: 64)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (rerun: 64)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
lseek(r1, 0x1000000, 0x0)

25.583570735s ago: executing program 4 (id=2165):
r0 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000008c0)={[{@nodots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs}, {@fat=@gid}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8b3}}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@dots}, {@fat=@showexec}, {@nodots}, {@nodots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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")
mount$nfs(&(0x7f0000000100)='@.\\', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="646f74732c646f74732c646f74732c636865636b3d72656c617865642c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d7374726963742c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c646f74732c646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c6e6f646f74732c646f74732c666d61736b3d30303030303030303030303030303030303030303030322c6e6f646f74732c646f74732c666c7573682c6e6f646f74732c636865636b3d6e6f726d616c2c0079c7cebee7a0df8765ffc536c4e752679b645307d1bf097e07b8e261bb27d1bb80ee490fc501e4f230ddf1483b11ac5c39a93cfc3ba360037c79a9be063a3bf5015e3d6a8cad0e98ccb29619c51c44ec612fc7ff44fa8cf7759eada764c43ba9d602a958bd209ace3df01c3dae04baa94aedc5515da8160ae0"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") (async)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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")
mknod$loop(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
gettid() (async)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
r2 = getuid()
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x188244a, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r4, @ANYRES64=r5, @ANYRES8=0x0, @ANYRES64=r6], 0xe, 0x2b3, &(0x7f0000000200)="$eJzs3UFrI3UUAPA3yTQb9ZAgXhTBAT14KluvXhplBbEnJYJ60ODugiRhYRcCVjDbUz+BR7+HH8GLF7+B4FXw1iKVkcnMNAlN2lJjCvX3Oz3mP+/Nm/mH5JQ3X70+Hj58ksTRyW/RbifR2I/9OE2iG42oPY80AIC74zTP48/8JplpY/PdAADbUP7+l267FwBgOz757POPegcHDz7Osna82jme9JOIGB9P+uV673F8E6N4FPejE2cR+bky/uDDgweRZoVuvDWeTvpF5vjLX6r6vT8iZvl70Ynu6vy9rLSQP530d+LFyKL3eKdutROvrM5/Z0V+9Fvx9psL/e9GJ379Op7EKB5GkTvP/34vy97Pfzj57oviMkV+0oj+vdl5c3lzm/sCAAAAAAAAAAAAAAAAAAAAAMDdtptlSTm+Zza/pzhUzd9pns3Wd7Nad3k+T5mf1IXK+UB5VCN6pnn8WM7X+Su/n2VZXp04z0/jtdSLBQAAAAAAAAAAAAAAAAAAAKDw7NvD4WA0evR0I0E9DaD+W/8N6qQxHIz2F468EYfDQXNdweR8AME1LrE4baDodd3JUQSRprGhx3JV8ELRTxHE8yrYROV78839NMqg3piN3sXL75VFD4eDrFqqH/JwkFx1rXa9cT8tLrXi3zaWzz4SZ/nSUrTPW13Oam3oabReWrn0d57n16vz7u/lHlVHktmIjetdfaf+9K66wSJoX9yLn9cXXPuV0dzE9w4AAAAAAAAAAAAAAAAAAHDR/E+/KxaPLk1t/GdNAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCWzd//XwftiFg+ciGYVsmXnVMFrXj67JZvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BfwIAAP//j89OGA==")
write$binfmt_script(r6, &(0x7f0000000340), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0)
r7 = dup(r5)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f000001d000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r8, 0xae9a)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2004840, &(0x7f0000000740)={[{@i_version}, {@resuid}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@resuid}], [{@obj_type={'obj_type', 0x3d, '\x00\x00\x00\xe3^\x1b\xbc\x9a\xe6>\xaeYtK\xc0\xde\x04j\xe8\x00'}}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_eq}, {@euid_gt}]}, 0x1, 0x503, &(0x7f0000000a40)="$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") (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2004840, &(0x7f0000000740)={[{@i_version}, {@resuid}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@resuid}], [{@obj_type={'obj_type', 0x3d, '\x00\x00\x00\xe3^\x1b\xbc\x9a\xe6>\xaeYtK\xc0\xde\x04j\xe8\x00'}}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_eq}, {@euid_gt}]}, 0x1, 0x503, &(0x7f0000000a40)="$eJzs3cFrHF8dAPDvbHZr06a/5KcetGCttpIW7W7S2DZ4qBXEngpqvdeYbELIJhuym7YJRVP8AwQRFTzpxYvgHyBIwYtHEQp6VlQU0VYPHrQjuztJk3Q3SdtNNk0+H5jOe/P2zfe9LTOZt/OYCeDYOh8RtyLiRZqmlyNiMNuey5ZYay2Nzz1/9miysSSRpnf/kUSSbVvfV5KtT2fVTkbEV29HfCN5NW5tZXVuolIpL2X5Un1+sVRbWb0yOz8xU54pL4yNjV4fvzF+bXykK/08ExE3v/iX73/np1+6+cvPPPjjvb9d+majWQNZ+eZ+vKb8ToWtrhea38XmCktvGOwwyjd7mOnfW53H+9geAAA6a1zjfzAiPhkRl2Mw+na+nAUAAADeQennB+K/SUTa3okO2wEAAIB3SK45BzbJFbO5AAORyxWLrTm8H45TuUq1Vv/0dHV5Yao1V3YoCrnp2Up5JJsrPBSFpJEfbaZf5q9uy49FxPsR8b3B/ma+OFmtTPX6xw8AAAA4Jk5vG///e7A1/gcAAACOmKFeNwAAAADYd8b/AAAAcPQZ/wMAAMCR9uU7dxpLuv7+66n7K8tz1ftXpsq1ueL88mRxsrq0WJypVmeaz+yb321/lWp18bOxsPywVC/X6qXayuq9+eryQv3e7JZXYAMAAAAH6P2PP/l9EhFrn+tvLg0net0o4EDkN1JJtt44+vs2iv7wXmv95wNsGLDv+nrdAKBn8r1uANAzhV43AOi5ZJfyjpN3fpOtP9Hd9gAAAN03/NHO9/9zO9Zc27kYOPQcxHB8uf8Px1fz/v9eJ/y6WIAjpeAKAI69t77/v6s0fa0GAQAAXTfQXJJcMft5byByuWIx4kzztQCFZHq2Uh6JiPci4neDhQ808qPNmsmuYwYAAAAAAAAAAAAAAAAAAAAAAAAAoCVNk0gBAACAIy0i99fkV61n+Q8PXhzY/vvAieQ/g5G9IvTBj+7+4OFEvb402tj+z43t9R9m269urev9AAAAANAb6+P09XE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTT82ePJteXg4z79y9ExFC7+Pk42VyfjEJEnPpXEvlN9ZKI6OtC/LXHEfGRdvGTRrM2QraL37//8WMo+xbaxT/dhfhwnD1pnH9utTv+cnG+uW5//OUjtuTfVOfzX2yc//o6HP9n9hjj7NOflzrGfxxxNt/+/LMeP+kQ/8Ie43/9a6urncrSH0cMt/37k2yJVarPL5ZqK6tXZucnZsoz5YWxsdHr4zfGr42PlKZnK+Xs37YxvvuxX7zYqf+nOsQf2qX/F/fY//89ffjsQ61koV38SxfaxP/1T7JPvBo/l/3t+1SWbpQPr6fXWunNzv3st+d26v9Uh/7v9v9/aY/9v/yVb/9pjx8FAA5AbWV1bqJSKS8d2URjlH4ImiFxCBPf6uoO0zRNG8fUW+wnicPwtTQTvT4zAQAA3fbyor/XLQEAAAAAAAAAAAAAAAAAAIDjq93Tv253+XFi22OubaSSbjxCGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgK/4fAAD//23E2hI=")
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x4008550c)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x2, @in=@local, 0x0, 0x1}}, 0xe8)
getegid() (async)
r10 = getegid()
write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x8, {0x10, 0x1, 0x7}, 0x10e, r2, r10, 0x8, 0x5, 0x800, 0x7fffffff, 0xb861, 0x8, 0x0, 0x53b, 0x4, 0xff, 0x1, 0x2, 0x6, 0x7f, 0x7fffffff}}, 0xa0)
sendmmsg$inet6(r9, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)

24.833966188s ago: executing program 3 (id=2166):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)

24.704729168s ago: executing program 0 (id=2167):
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x0, <r0=>0x0, 0x1})
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000180)={0x0, r0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"})
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'})

24.421033481s ago: executing program 3 (id=2168):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
write$binfmt_script(r1, &(0x7f0000020240), 0x10010)
close_range(r0, 0xffffffffffffffff, 0x0)

24.153880975s ago: executing program 3 (id=2169):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x28}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

23.913529735s ago: executing program 3 (id=2170):
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="e6d4fd3c336ed8f737c3befd3f12d5627d6367dd64618d76b77feb3ce7cd715c4e70d2dff5db181dbf530db0918c75a50d2613ccb6409fb78e76f1b8b1ef7ce01afa4a4e947bf080f3457bb520074e4114fbdc4493204540f3b19d56fe1ecf8b22f79aab35bb188b397f69a1bb9f245c0dd22cd68e2f1636ada49d84d6d255ef976ef5cd08c366054f562440373b0c782d55185cd517eaf00b7fdca095ad4738ff8aab9db801cd2a763352b8", @ANYRESDEC=0x0], 0x1, 0x2f4, &(0x7f0000000340)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
r3 = socket(0x18, 0x803, 0x100000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRES64=r2, @ANYBLOB="510b2403b3d90669d50855c5dfa18181d07ff25e7502f958d7879823c574539aab711f70ac17439303df68adf3a0073fa6ec8329e92746e9302d6fd1a9dafa2383e56585a981251e77144be85f01a5fde2c7559171742fbb684183ef80cbc2f20458f8faef2b128d88da3b32bd21a4f7935ced53f65aecede91cd74de1d043efb3203701ca6adde79dd5ce2babe509804ab0a1c26bfbe81ca1dd71c8a2ca07239eec138a48f63c1344f9320ea74c08a7ee70a1cbbac7b1e14cebfc1541ae40b2f821359e1ff253c041511f4de1e75dc93f18b3d19b640c35e9e0e9", @ANYRES8], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
socket$unix(0x1, 0x0, 0x0) (async)
socket$unix(0x1, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x228, 0xc8, 0xb8, 0x228, 0x2804, 0x338, 0x2e8, 0x2e8, 0x338, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0x1d0, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:cpu_online_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
r5 = socket(0x2, 0x80805, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000040), 0x55af)
mmap(&(0x7f00003fe000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async)
mmap(&(0x7f00003fe000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0xa, &(0x7f0000000080), &(0x7f0000000340)=0x1b)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)
read(r0, &(0x7f0000000280)=""/115, 0x73)
gettid()
r7 = getpid()
sched_setscheduler(r7, 0x0, &(0x7f0000000100))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)

23.609471418s ago: executing program 4 (id=2171):
read$msr(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x10001)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

9.026800195s ago: executing program 1 (id=2186):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x64142, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/../file0\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
flock(0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200))
setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
prlimit64(0xffffffffffffffff, 0x1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

8.002499562s ago: executing program 1 (id=2187):
r0 = geteuid()
keyctl$get_persistent(0x16, r0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x48)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5ce, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x6}, 0x48)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2711, @hyper}, 0x10)
write(r2, &(0x7f0000000140)="56ad48e079de02b61faf8900c8c5c2b155161105294e3934e9f83731591162ba4a86878d853c7ad52402812ef1fd79da9bad802b8d813e3980aa007cf771ced368ca2bc78d1282e362d919268358875f0284004ad5c833c9d6e780c0c7bd6d44ce7d58d3dc733e5d9c6f6369652efd89b4c6d2c7cdacad46dfc40476e22f712e9b8be6ab6b2ce0cdcd3b8689a8cae49d79032ec07ea05eb3d8af00eae9e8c082e127114bdbf363ef49a93311fee9679a80918ed52100d9aad061ceea65a0125b2133b5369e", 0xc5)
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
keyctl$get_persistent(0x16, r4, 0xfffffffffffffffb)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2}, 0x4)
r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, r4, r7)
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x1)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f00000003c0)={0x2, 0x3}, 0x4)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r10, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x23c, r11, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x14e, 0x2a, [@preq={0x82, 0x36, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x9, 0x20, 0x81, @broadcast, 0x8, @value=@device_b, 0x3, 0x6, 0x2, [{{}, @device_a, 0x3}, {{0x1}, @broadcast, 0x7ff}]}}, @ibss={0x6, 0x2, 0x2}, @measure_req={0x26, 0x9, {0x1, 0x2d, 0x5, "8e67d3b0d111"}}, @fast_bss_trans={0x37, 0x7b, {0x9, 0x1, "0ca3bb9485e941aa75862e808d0402f5", "4d65e6d567096cee7dc785f0c110abc7bd8109a57b85b82c76c2c05fbe3c80dd", "ca1bca8bfd76e0a9c201f840778a47ae1627abe6f5230d0eaff52c05529fefaf", [{0x2, 0x27, "0d21a5b06b6a87dd884abd53fabad5b29d60bb005ac2aee4fe19968b1778267ad8e15d366295b9"}]}}, @channel_switch={0x25, 0x3, {0x0, 0x28, 0x5}}, @fast_bss_trans={0x37, 0x6d, {0x81, 0x3, "b397ae7ffab9521729cc9f17bb2cca8b", "d91123e926c369bb585cdd29977d4d0020446a25c67fccd6879028ffdab4f616", "4b41ba89b02f4b40694c5062b6ac130dd6580e534d8998f7de2d43cd85910cc5", [{0x1, 0x9, "7db07ce4e20f95199a"}, {0x3, 0xa, "2c10169889a2c1ba3893"}, {0x1, 0x2, '\n.'}]}}, @mic={0x8c, 0x10, {0x4ed, "3db5aef59807", @short="0bdd02868e0b0ce8"}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xb2, 0x2a, [@random={0x1, 0x5f, "17ab114cd8363ee9087c8bf0bfbac4d7b827fc2e417661208618ef64898869bf428486a3c7c99d5ff480f72dc8e4daf4970735c70a395c4a4c5f40865b6a973d87bc11784e6ca4d435dc2304a7b0e159af957384b7ced9025141159147be6a"}, @measure_req={0x26, 0x45, {0x9, 0x1f, 0xff, "5ce0e6f23282a3dd43885703bc5fa739dabb0129ba93ee6836d5ca3f777a50d3a2109f21b636eca6a3d7a07424c4a48cf007c2759c1ee1bdc544410d73e365786a19"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @dsss={0x3, 0x1, 0x70}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8001}, 0x8040)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x5, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003b80)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x29fc, 0xc, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x29c8, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x2b, 0x6, 0x1, 0x0, "69d6b8c75069e43996bc8224ee7a1d066e63878322c1adbd935e33b2075f337e887bc436d03630"}]}, {0x113c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1024, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x80}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xcf}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_LEN={0x8}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x76}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}, {0x1374, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x11c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x537c}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x66, 0x1, "840dcd4032f7094d27b5795fa3798b06b5826e423daf805f175b892be5f88c19ed687391f5df49a33e3d63ad823c75658c63a95547f0679041d307e4c26bc9bec4bd4d0ae448385c820b0a9c053708568c204c32036cb0a00a193bec39216ee6d122"}, @NFTA_DATA_VALUE={0xab, 0x1, "19070e326dbd655a8d3f7b06932240d5919f49f5cb61a313184f41e5aa6b5cbd1dffd6d9779f9c766a8f5fda3f040b67207c32fb867ec58f5a39bd9976ed4866e2d8b978c5991c755465f10488297ea3c81f107b01db79d416327a65a66f932340567c791641123dd49d7e8e545a191bf7b9e7077b68376cedac3b7676efe7b1fa7d1c81560d4dcb63fa59be8ea63a333d3e528d5d9a130f8bb67873b0f698dad9db56078c9003"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x81}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xde, 0x1, "973a557e90456d1cc00fc3f6b40bfdc4e3779d55b60c75590833ad6aab1b3dbd3724ae1877baa8efdb3369db0f9305b028a06414a222e94244f63011c7a71ed7186553377ebfc53eaa274c619e035e3485d470e3655eaf2aa2e9353eabeda5c08166f5a3db9d23e0ec7584bfe9baf73c08005c641e9192558fb8cf0f78ddf231f2ffdf0d649e23dd5ac8379de0d1129514ce9fe248775e62f6a9002f832b567604355830e7476ebc5980384f4181989ebc164e3c73d0198e8add84ffeb61b2e9f3f7f78db49b6c8765ffc1586b1452058feca756f1cbb205d5ca"}, @NFTA_DATA_VALUE={0x94, 0x1, "13a21059d9ee99bdfec9e7842734188d997f6e57dc26148fb00b3cfb02f52bcca1217ffc9361b60fca769c00858f08b12297ec744549f1194cd11e9f603cc01539f228adbf6c332b4ec6ae9ae6f3e269332163ef35f46cfa469263fa004ca37ae39e0c090d8e938b2f4f019658ea3554da9de27e92dcf44cdeb341350afa3d9a1c6320c342fd6fdcdac7bfb036c8782d"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x100}]}]}]}, {0x2e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x17c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "4769fc66783f3bd41bdf6ebf2fa14c50d676210de3afcd92d9a9189431bb5fe77e1824dfd11b7bbbf2e5c9c4857bec33fe669ee985bfe218975f4640987a6fac30c5dd5d9d35f33965b7209081adf718c56eef3edd1f124a215c1567b291b6b0186f1cd3195e7314b5b1008adedaf4497755f409e2df9de80a1b2a3b5e73b9b21eaeabf7f46ecd7cacab3783ce92f80728c4cc8e2f1c72c400f8b55ba1aaf64008bf2112bab8d7d0b757781088326bcb7486b0519c73e0836ad16e0a2d7b31711aad7caf4ce2dde9b700fdcc6a64ba65b46abdbbe10456fb7159032b57"}, @NFTA_DATA_VALUE={0x91, 0x1, "64f9b383ab988a6b433db9c44466a3d48a42d2f87855c547b359e18015b28bd4f310621da40c49435ddb3fb840cf795cfc4586a3d9f8f83936f7cd821d626b8aefadc5f845f03b9fc294603e8b3ef51d5a370203c22aae3e4afcd4bd6dcb9d22b437c133b23225ea24c49866d15e1ab9d4552be98fa5ed1c1f51da190c6bcafddbe53410ddfd2732df64aa8b3e"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x12c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x101, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0x80, 0x6, 0x1, 0x0, "2ef4046e8319b26d90b3a2e79bb15375b3f01aa0777428da992cc08c848989d39c18b4c7fedfc608e569669773771024972ba519d96263cd6113f5be03a95c8cadd89384ed656db965136de62ea3d48ffeac7a37b66105a9112ae571c0850dc0e9dc5bafeefa0aff8ab5a2e0e82d2a7da31836275b764c1f8fa8b255"}, @NFTA_SET_ELEM_EXPRESSIONS={0xf0, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x34}]}}}, {0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SREG={0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x6}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x76f}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x101}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9e}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xbe}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}]}]}]}, @NFT_MSG_NEWTABLE={0x1f0, 0x0, 0xa, 0x3, 0x0, 0x0, {0xd, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xc6, 0x6, "69d0841649ba27c23ab627200101d7914c75cc6b906e9ff49e5aa685beffb7d54517d6154e9e055ce5a4326844c30c9139eb6f1e7ca7e8509495fe01ebf67e0e7f0a2a69f1ef2f009b9a043cf0ceb976b07f323f89b5ea1292f1f30b8843f89c17002a6c748e6c5c88137a284ff8b631b5e8f9f54c3737afea53403611ff292b415a028587b41eb1f511eeeeacf5bf4a0aba75cb37f0f89d8aa8d9e23b8ea6ba1cee4b16ee55c58e8fd31c5c458a4d286693d53d731b269cc07e91ea18536c6ec2e0"}, @NFTA_TABLE_USERDATA={0x1b, 0x6, "a1db3a2706f7dda715d450533b61b7fe1f90b981e92db7"}, @NFTA_TABLE_USERDATA={0xbb, 0x6, "11ec102fa76978f88ac0b45d077ceba978a219dab87221f803ab3bac17d394540baedc640ce6170bdfb91a86aa4bafc7ac3b481ec61c19bb3c527a066a847c686f4aa1cd455833240b7d39f3d30ee109f1083050180ae731065e60c743a228b713f13963dee806d14ea422208a3e5f06a24d57eb1d0ddba572fb2e0e36b5156ef16b2054dbda8092105a68cb3c834d5b450df93f0d43bd8f83b0c1f2f2616ed6c73f672583478fcb916f0e9a9e40d45f9d15ba8c95cd89"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELTABLE={0x204, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xbc, 0x6, "8df4581d2535edfda8eb605b92cc0bc1099781261100a8eaf01cbc3d3c08e770eb8c8edfb0fd94daab9a9e6bd1534df001825598cbecff0e5a84cf5efbf36fde96c13e94f82cb5db7e7655fe0eb5ca14771d65223b1f28386944662141587578ec1ee56df1e7c8999ea5550a0c4b12a613db9155d728307d19db89aa40ea406284d04f4ec96f1fe06f9a4abf6a5c3e69117ac59e4b9c99788b8d6fd4fa3819f77c63860029fe23054457cdbffc27bda2da99c98f55407883"}, @NFTA_TABLE_USERDATA={0x84, 0x6, "0710aafb46e0295d4e83e71e25183b97403b21830bc2b48c9f4bb17344a907bd9c99c00faaf186577dffa782a57357bbd59ca4086a6e686f333c991491640a234926f7232b9d6edf4c8f02ae6d892d0cf575e161c6df0652b2dd144a77d033a845e90f8e5fce27d5f93e2b7d733c5b99a1f2d5b946cd3e159bf20933af58e282"}, @NFTA_TABLE_USERDATA={0x89, 0x6, "4a068a462e470015cd2751b8b9424034d8ccaf12cb61adeb1ad6fb8e2844dc55a5d384190c125d8a773b9506d922bf6cee331e1a0ec455ad1857fe47ff9dd3101b048bfae57ab3703b586d6b0255ad2936638297525db0a4c01d51174b14426dbd24b7ea941222522336045809f9fb580c5aba5ac5be2b1c7b997c5a2bdaeabd0bb407aeb4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x22c, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xe6, 0x6, "23648ff5a58f34053095c492572e4f5462bb51f9ca4f0770c840457d20739549f65a4180ee8c8346142c562fbbaf02a3263369ea8c59ebf6dd6ab646c3efca5bb055ea689b318e5c0eddc20c715b1ca9d5df782d3181b7106e5d2db8ad236d7db53a44854095ef4057481a44fb62c724e68a1f544699cdbc86e018a39d1ad954dfca8ad21f76895a59e16e224fd11aacfffa826305b4d9d89661127ab9373ab63a86336aa526691d0bd66a97ca1054e9c5fbe1c3f1aa001064d20a3ec28e740eb002021a3a24909058f5fc5d9809489a1c02ee16828aebf9b12843a3e971954d6837"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x4e, 0x6, "84512d6c0edf2cac83ab711e37883007b5925efe888ceb4adb7f8982048ded442876532a48d05cd2934fd25f2570dd9815007bb472470219b934a4f4e8e099feed3406eb888311055753"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb2, 0x6, "d990e9e7ee864dc3c9b52a343cc9980bce01e63c7d70b5e6cae00e9501883e91d5fd9633fbdc83611a7f7ec16cb494a3b4e5ee37816ab4c835ef39a2006cdfc29b98f7945434384ad4d9aabcb7a259f63b4aa089d4ee402e5a2fb4c7a439434c2d51b4c563fa16dcd83d2940762f6960e1d35f162e0c8567cff610c50fd4ba7f2395c1d573ab84131e1fc61f750b0b6537b505754af0ca2c247905223d5762cc03c03b89e161aaa56e3801c44c61"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x120, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x5d, 0xc, "6d328f9f21925e9946be5a932c23ace63653c619f112b0b93f4609843fae1e250a5215436858e93065d18e2a63fd513b9f38c1aeb119e77e5d42cdbbb14992e02a561e0450a702c5d6980ac45f63e8915eb5d49e558edb2f80"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x74}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x400}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_USERDATA={0x43, 0xc, "36573294a8217856792eb509cfb17545722d31d953deb89e6add863afbf1c46894154a95a21ed022ccae287cff4a2ebacae3ad43198743e9f6d6ede93a378e"}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELCHAIN={0xbc, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x20}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x31d2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1000}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x797}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x32c0}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000003c00)={0x0, 0x4, 0x4a, 0x2, @vifc_lcl_addr=@private=0xa010100, @empty}, 0x10)
setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f0000003c40)=0x1, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003c80)={<r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000003cc0)={0x1, 'bridge0\x00'})
r13 = openat$cgroup(r12, &(0x7f0000003d00)='syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r13, &(0x7f0000003d40)='cgroup.procs\x00', 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000004000)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003dc0)={0x1f8, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x865}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffff8}, @CTA_EXPECT_NAT={0x188, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xd3}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40}, 0x8c0)
statx(0xffffffffffffffff, &(0x7f00000040c0)='./file0\x00', 0x6000, 0x80, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000004040)='./file0\x00', &(0x7f0000004080)='system.posix_acl_default\x00', &(0x7f0000004200)={{}, {0x1, 0x4}, [{0x2, 0x0, r4}], {0x4, 0x7}, [{0x8, 0x7, r5}, {0x8, 0x2, r14}, {0x8, 0x8, r5}, {0x8, 0x5, r5}], {0x10, 0x3}, {0x20, 0x4}}, 0x4c, 0x2)

7.716359203s ago: executing program 1 (id=2188):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0)
r5 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000030801040000000000e2ffffffffffff0100000008f507545cdf7305000140000000000600020001000000"], 0x30}}, 0x0)
ftruncate(r5, 0xee72)
sendfile(r1, r5, 0x0, 0x8000fffffffe)
r7 = fcntl$dupfd(r5, 0x0, r5)
r8 = dup3(r1, r7, 0x0)
r9 = inotify_init1(0x0)
inotify_add_watch(r9, &(0x7f0000000140)='.\x00', 0x540008b3)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1b)
r10 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r11 = ioctl$TIOCGPTPEER(r10, 0x5441, 0x1)
ioctl$TIOCOUTQ(r11, 0x5411, &(0x7f0000000040))

7.217758524s ago: executing program 1 (id=2189):
read$msr(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x10001)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

5.999487944s ago: executing program 2 (id=2190):
socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200))
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x100000)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map, 0xffffffffffffffff, 0x44, 0x0, 0xffffffffffffffff, @prog_id}, 0x20)
r3 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$smackfs_ipv6host(r3, 0x0, 0x9a)

5.579105793s ago: executing program 1 (id=2191):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r5, 0x5609, &(0x7f0000000000))

4.574550508s ago: executing program 2 (id=2192):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6ce, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
r0 = socket$isdn_base(0x22, 0x3, 0x0)
accept(r0, 0x0, 0x0)
ioperm(0x0, 0x3, 0x2000007fffffff)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x6, 0x6, 0xb, 0x20}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1e, 0x0, 0x10001, 0x1, 0x419, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000000c0), 0x4000000000001a7, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0xa, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x8)

3.275252587s ago: executing program 2 (id=2193):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x3, &(0x7f00000001c0)=@raw=[@generic={0x2, 0x7, 0x8, 0xff80, 0x51f3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4b90}], &(0x7f0000000200)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0xe, 0xf68}, 0x10, 0x20bd8, 0xffffffffffffffff, 0x1, &(0x7f00000003c0)=[0xffffffffffffffff], &(0x7f0000000400)=[{0x5, 0x2, 0x3, 0xc}], 0x10, 0xfffffffd}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000500a3d50000000d18116764", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x8, 0x10001, 0x9}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_free_blocks\x00', r2}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_free_blocks\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f0000000140), 0x12)
ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x0, 0x2, 0xc2, 0x0, 0x87}}) (async)
ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x0, 0x2, 0xc2, 0x0, 0x87}})

3.017653579s ago: executing program 2 (id=2194):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
io_uring_setup(0x2602, &(0x7f0000000380)={0x0, 0x3, 0x100, 0x3, 0x4000340, 0x0, r0})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1)
open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsopen(&(0x7f0000000100)='vxfs\x00', 0x0)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000300)={0x43, 0x8, 0x80000001, 0x3, 0x81, "11e06893f55334da8db2923c8d277373c9bacd", 0x1ff})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000080)='GPL\x00'}, 0x90)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x242, &(0x7f0000000540)="$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")
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}], 0x10)
sendto$inet6(r1, &(0x7f0000000000)="eb", 0x1a000, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0xc8842, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x5421, &(0x7f0000000100))
pipe2(0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
sync()
sync()

2.110842665s ago: executing program 1 (id=2195):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000500a3d50000000d18116764", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_free_blocks\x00', r3}, 0x10)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3})
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe69}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r6, 0x83, 0x104, &(0x7f0000000340)=ANY=[@ANYBLOB="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"])
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
sendmmsg$inet6(r5, &(0x7f0000001a00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @local, 0x4}, 0x7a, 0x0}}], 0x40002f5, 0x200000c4)
close_range(r0, 0xffffffffffffffff, 0x0)

2.022381028s ago: executing program 2 (id=2196):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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")
mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x31)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/sysvipc/msg\x00', 0x0, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
accept4(r3, 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=2197):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file1\x00', 0x2800802, &(0x7f0000000480)=ANY=[], 0x1, 0xf58, &(0x7f0000005580)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x32004c8, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYRESOCT=0x0, @ANYBLOB='8,\x00'], 0x1, 0x656, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5530, &(0x7f000000c740)="$eJzs3EtvG1UbB/DHSdP72zdCLNh1pAopkWqrTi+CXYFWXESrqsCCFTi2a7m1PVHsOiErFiwRC74JAokVSz4DC9bsEAsQO6Qgz5m0DTQSIk5M099PGv9njsfPnGNVlZ6ZyAE8txaz33+txLk4FRHzEXE2otivlFvheoqXIuJ8RMw9sVXK8UcDxyPidFEqYjHVrJRvfXlxfOHqL+/89t0PJ46d+erbH2e1ZmD2Xo6I/lra3+inzDsp75fjjXG3yP6VcZnpjf6D8jhPudFeLSpsNHbOaxR5uZPOz9ceDid5r9doTrLTvVeMrw3SBYfjzk6d4gP3G+vFcau9WmR3mBfZ2Urz2txK/ztuDUepTqus90lRPkajnUzj7c12Ws/agyKbg+35NJ7q5q325iTHZZaXi2beaxXzWN3HF/0f92538HAzG7fXh918kF2t1V+p1a9V6+t5qz1qX6k2+q1rV7KlTm9yWnXUbvSvd/K802vXmnl/OVvqNJvVej1butFe7TYGWb1eu1y7VL26XO5dzN68/UHWa2VLk3y9O3g46vaG2b18PUufWM5WapdfXc4u1LP3bt3J7ty9efPWnffjxoe3X7v19hvlSX+bVra0cmllpVq/VF2pLx+Z9Z9/tP6P9lj/Z+Wkp7h+2JfKrCcA8Ow5oP4/4pz+H9jbwfX/63dje7sYn17/f6LIx/1/yn/f/4/Kcf3/tPrf7Wn2/3v1v0e7/5/J+mFf9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+tnxa+fqvYWUzHZ8rx/5VDL5THlYiYi4jtp5iP47tqzpd1FvY4f+Evc/i+EkWFyTVOlNvpiLhebn/8/6C/BQAAADi6vvn0/BepW08vi7OeEIcp3bSZO/vxlOpVImJh8ecpVZubvLw4pWLFv+9jsTmlasUNrJNTKpZuuR2bVrV/ZH5XnHwiKinmDnU6AADAodjdCRxuFwIAAMBh+vxpgxrBo68SO48yd54FF395//iB4KldRwAAAMAzqDLrCQAAAAAHruj//f4fAAAAHG3p9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5k535u1AaiOAA/2ziQfwqKck8r3KCMlJBjjhEFpAlKIC2kAWogt5QQwQqPFy0rdrWSx/bu6vskGMaCHzMIH+aNNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD06W+9Xf3++fVX15zDsZs8swEAAACu2dfbVfNinvrv2+sf20uf234REWVEXFu7V/HmIrNqc+oH3l/fG8OfiCbh9B3T9vEuIhZVxCIi/n/q+1cAAACA12u33izTaj09zcceEENKRZvyw7dMeUVE1PN/mdLKU96XTGHN/3sSPzKlNQWsWaawVHKb5Ep7kuZ2P1ftZneaIjXl45/PNncAAGBA1UUz7CoEAACAIX0fewCMo4jbrczzVuA0Ne323tuLHgAAAPACFWMPAAAAAOhds/5/1uf/hfP/AAAAoKt0/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB92tfb1W69WXbNORy7yTMbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG7Yn3cUCIEwCIO96zuTuf9hpUFTU5MqED7+xmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDe/+8v/ialxJpl7bSw9jyRrp8bWqbF3bhz9YXz9GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GJ/XlIgBIIgCuaM/530/Q8rCXoGESKg4VFFLRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgi373y/+JqXEmmTttLB2PJGtXja2rxt6DxtGD8fZvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GLnDl7jqMIAgL+Z2dnYqhij5BARBQ96sem2tvYmHpTgwT9BCOm2xq6KNQdbipCLt5JzL6JHEUGJt/4PPbfQS731kEMFD54ib3Zm82wrrq2d2XZ/P3jzvh2Ged+bhZDvvUkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCx9+5BXMTD4jjO63PX71zaiP2Nu/ro6s7NldhinLWZ9OPh5fRDttxdIgAAAMyPoqnvQwi3yt212OeLVf1fNtfEmv+7Z8dxU8/fXfc3fVP7x/brL7dfnAy0OB4n3vTM5mh49N5Ueo9ulrPtuX+9olc9+Wrtpai+kPyD7Rf2yup5ZpevXXuvX4ULbWQLADyII01fB83vQ7EfdJkYAHOjlxTeTf1fLHabEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAb9rbD002chRBWegdxdOPOpY379Vd3bq407eSVKzvpPeMtyhDCmc3R8GiLc5l1X164eG59NBqebz94JYTQ1ejv1NM/99EUF4fQyfMR/E9BXn/Zs5LP4xF0+EMJAIAnUlm3WNffKnfX4rlsKYT97/9e/7+exGHK+v/2xyevp2Ol9f+gtRl2aCGJ83++bHXrz/39/QsX39z8dP3s8Ozws7eODd4eHD914sSp1WqtZNWKCQAAAA+nX7e0/s+X7t3/P5zEYcr6/4tvB1+nYxXzVv9P6WDTr+tMAAAA5tvzr/7xe3af81m/H75a39o6PxgfJ5+PjY8PONzlh0z3P1moW1r/F0ttZgAAAAB0ZW87myx5xOB0Eocp9/+f+eGln9J7FiGEQ/X+/5GNz0en25vOTGvjz4m7niMAAADdOlS3dP+/rN7/zyf1fx5CeOO1cVz/G8Cp6v/i/W9+TMdK3/8/3t4UZ1K+PH4eVb8cQm+564wAAAB4kj1Vt1js/1burn3y8+EP+97/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjbXwEAAP//cDpDKw==")
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f00000003c0)={0x0, 0x2})
set_mempolicy(0x4003, &(0x7f0000000080), 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={0x0}}, 0x0)
syz_io_uring_setup(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f00009f6000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x10000000)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000003c0)=""/198, 0xc6)

kernel console output (not intermixed with test programs):

city change from 0 to 1024
[  806.662260][ T5095] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  806.680187][ T5095] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  806.689599][ T5095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.701506][T13767] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size
[  806.725596][ T5095] usb 4-1: config 0 descriptor??
[  806.735234][ T5095] gspca_main: vc032x-2.14.0 probing 046d:0892
[  806.936635][ T5095] gspca_vc032x: reg_r err -32
[  806.943292][T13777] fuse: Unknown parameter '‡roup_iƒBw¿úzæˆd'
[  806.950999][ T5095] vc032x 4-1:0.0: probe with driver vc032x failed with error -32
[  807.038886][T13781] SET target dimension over the limit!
[  807.093523][T13771] kvm: emulating exchange as write
[  807.293961][T13784] loop0: detected capacity change from 0 to 512
[  807.869200][T13795] binder: 13794:13795 ioctl c018620c 20000080 returned -22
[  807.912440][T13796] 9pnet_fd: Insufficient options for proto=fd
[  807.953256][T13799] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1886'.
[  808.022633][T13799] debugfs: Directory 'ü!' with parent 'ieee80211' already present!
[  808.093559][ T5095] usb 4-1: USB disconnect, device number 25
[  808.171718][T13807] loop4: detected capacity change from 0 to 16
[  808.210906][   T29] audit: type=1800 audit(1719375522.829:949): pid=13812 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1888" name="bus" dev="sda1" ino=2089 res=0 errno=0
[  808.348709][ T5190] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  808.477494][T13816] netlink: 'syz.0.1891': attribute type 21 has an invalid length.
[  808.513762][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'.
[  808.559749][ T5190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  808.593946][ T5190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  808.638519][ T5190] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  808.670921][ T5190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.717393][ T5190] usb 3-1: config 0 descriptor??
[  809.148334][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[  809.154733][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  809.205048][ T5190] usbhid 3-1:0.0: can't add hid device: -71
[  809.218004][ T5190] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  809.242882][ T5190] usb 3-1: USB disconnect, device number 25
[  809.314799][T13810] loop3: detected capacity change from 0 to 32768
[  809.401651][T13835] Cannot find add_set index 0 as target
[  809.501573][T13810] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names
[  809.553538][T13810] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  809.603270][T13810] bcachefs (loop3): alloc_read... done
[  809.617732][T13810] bcachefs (loop3): stripes_read... done
[  809.635055][T13810] bcachefs (loop3): snapshots_read... done
[  809.660439][T13810] bcachefs (loop3): journal_replay... done
[  809.666600][T13810] bcachefs (loop3): resume_logged_ops... done
[  809.681156][T13810] bcachefs (loop3): going read-write
[  809.702186][T13810] bcachefs (loop3): done starting filesystem
[  809.807715][ T5190] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  809.935008][T12706] bcachefs (loop3): shutting down
[  809.945616][T12706] bcachefs (loop3): going read-only
[  809.954981][T12706] bcachefs (loop3): finished waiting for writes to stop
[  809.980000][T12706] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12
[  810.011372][T12706] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14
[  810.027837][ T5190] usb 1-1: Using ep0 maxpacket: 8
[  810.048389][T12706] bcachefs (loop3): shutdown complete, journal seq 15
[  810.048536][ T5190] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  810.056164][T12706] bcachefs (loop3): marking filesystem clean
[  810.074446][ T5190] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  810.094656][ T5190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.113564][ T5190] usb 1-1: config 0 descriptor??
[  810.127771][ T5190] gspca_main: vc032x-2.14.0 probing 046d:0892
[  810.208000][T12215] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  810.233885][T12706] bcachefs (loop3): shutdown complete
[  810.324491][ T5190] gspca_vc032x: reg_r err -32
[  810.331119][ T5190] vc032x 1-1:0.0: probe with driver vc032x failed with error -32
[  810.412805][T12215] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[  810.427757][T12215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.458483][T12215] usb 3-1: config 0 descriptor??
[  810.475901][T12215] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  811.075323][T12215] gspca_sonixj: reg_w1 err -71
[  811.108007][T12215] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  811.159347][T12215] usb 3-1: USB disconnect, device number 26
[  811.379748][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  811.457111][ T5136] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  811.659611][ T5136] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[  811.688440][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.729023][ T5136] usb 4-1: config 0 descriptor??
[  811.747746][ T5136] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  811.767677][ T5139] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  811.820863][T13872] loop1: detected capacity change from 0 to 8192
[  811.870571][T13872]  loop1: p2 p4[EZD]
[  811.888178][T13872] loop1: p2 size 2130706432 extends beyond EOD, truncated
[  811.906554][T13872] loop1: p4 size 65536 extends beyond EOD, truncated
[  811.933072][T13878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1908'.
[  811.963604][ T5136] gspca_sonixj: reg_w1 err -71
[  811.979220][ T5136] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  811.987703][ T5139] usb 5-1: Using ep0 maxpacket: 32
[  812.001735][ T5136] usb 4-1: USB disconnect, device number 26
[  812.005214][ T5139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  812.051449][ T5139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  812.098616][ T5139] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  812.128292][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.167348][ T5139] usb 5-1: config 0 descriptor??
[  812.204947][ T5139] hub 5-1:0.0: USB hub found
[  812.446846][ T5139] hub 5-1:0.0: config failed, can't read hub descriptor (err -90)
[  812.565458][ T5129] usb 1-1: USB disconnect, device number 20
[  812.719339][ T5139] usbhid 5-1:0.0: can't add hid device: -71
[  812.745868][ T5139] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  812.802263][ T5139] usb 5-1: USB disconnect, device number 13
[  812.946946][T13890] loop2: detected capacity change from 0 to 512
[  812.971487][T13890] EXT4-fs: Ignoring removed oldalloc option
[  812.994923][T13890] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1913: Parent and EA inode have the same ino 15
[  813.013160][T13890] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.1913: Parent and EA inode have the same ino 15
[  813.028171][T13890] EXT4-fs (loop2): 1 orphan inode deleted
[  813.035337][T13890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  813.066859][   T29] audit: type=1800 audit(1719375527.679:950): pid=13890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1913" name="file2" dev="loop2" ino=15 res=0 errno=0
[  813.245538][ T9202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  813.907777][ T5136] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  814.178710][T13888] loop0: detected capacity change from 0 to 32768
[  814.260415][ T5136] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[  814.366775][T13888] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1912 (13888)
[  814.414463][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.499512][ T5136] usb 2-1: config 0 descriptor??
[  814.522436][ T5136] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  814.529457][T13888] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  814.571451][T13888] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  814.602156][T13888] BTRFS info (device loop0): using free-space-tree
[  814.724546][ T5136] gspca_sonixj: reg_w1 err -71
[  814.735941][ T5136] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  814.756607][   T58] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  814.796635][ T5136] usb 2-1: USB disconnect, device number 29
[  814.804456][   T29] audit: type=1326 audit(1719375529.429:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.2.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada0575ae9 code=0x7ffc0000
[  814.860369][   T29] audit: type=1326 audit(1719375529.449:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.2.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada0575ae9 code=0x7ffc0000
[  814.911277][   T29] audit: type=1326 audit(1719375529.449:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.2.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fada0574550 code=0x7ffc0000
[  814.967631][   T29] audit: type=1326 audit(1719375529.449:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.2.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  814.969887][   T58] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[  815.021076][   T29] audit: type=1326 audit(1719375529.449:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.2.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  815.056828][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.063276][   T29] audit: type=1326 audit(1719375529.449:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.2.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  815.077323][   T58] usb 4-1: config 0 descriptor??
[  815.104085][   T58] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  815.117756][ T5139] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  815.137632][   T29] audit: type=1326 audit(1719375529.449:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.2.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  815.187618][   T29] audit: type=1326 audit(1719375529.579:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.2.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  815.229741][   T29] audit: type=1326 audit(1719375529.659:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13924 comm="syz.2.1921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  815.247738][ T5129] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  815.352381][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  815.375096][ T5139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  815.405687][ T5139] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  815.431576][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.451061][ T5139] usb 3-1: config 0 descriptor??
[  815.491744][T13931] loop1: detected capacity change from 0 to 2048
[  815.507670][ T5129] usb 5-1: Using ep0 maxpacket: 8
[  815.520767][ T5129] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  815.531409][T13933] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  815.534815][ T5129] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  815.565718][ T5129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  815.577335][ T5129] usb 5-1: config 0 descriptor??
[  815.654981][ T5129] gspca_main: vc032x-2.14.0 probing 046d:0892
[  815.734710][   T58] gspca_sonixj: reg_w1 err -71
[  815.784622][   T58] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  815.856149][   T58] usb 4-1: USB disconnect, device number 27
[  815.871260][ T5129] gspca_vc032x: reg_r err -32
[  815.876086][ T5129] vc032x 5-1:0.0: probe with driver vc032x failed with error -32
[  816.109672][ T5139] isku 0003:1E7D:319C.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0
[  816.154893][T11069] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  816.323387][ T5139] isku 0003:1E7D:319C.001B: couldn't init struct isku_device
[  816.353558][ T5139] isku 0003:1E7D:319C.001B: couldn't install keyboard
[  816.383876][ T5139] isku 0003:1E7D:319C.001B: probe with driver isku failed with error -71
[  816.400273][ T5139] usb 3-1: USB disconnect, device number 27
[  816.963057][T13933] NILFS (loop1): vblocknr = 22 has abnormal lifetime: start cno (= 1099511627778) > current cno (= 3)
[  816.989503][T13933] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=6)
[  817.107807][T13933] Remounting filesystem read-only
[  817.123266][ T8204] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  817.153361][ T8204] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  817.228403][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  817.275690][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  817.301712][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  817.334536][ T8204] NILFS (loop1): discard dirty page: offset=0, ino=3
[  817.410497][ T8204] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  817.427303][ T8204] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  817.448599][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  817.451939][T13955] loop2: detected capacity change from 0 to 512
[  817.485712][ T8204] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  817.577745][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  817.624508][ T8204] NILFS (loop1): discard dirty page: offset=32768, ino=3
[  817.633930][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  817.652094][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  817.665185][ T8204] NILFS (loop1): discard dirty block: blocknr=45, size=1024
[  817.695230][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  817.729997][ T8204] NILFS (loop1): discard dirty page: offset=98304, ino=3
[  817.747068][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  817.779462][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  817.801512][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  817.817670][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  817.833592][ T8204] NILFS (loop1): discard dirty page: offset=102400, ino=3
[  817.854681][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  817.883710][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  817.917665][   T58] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  818.000237][   T25] usb 5-1: USB disconnect, device number 14
[  818.021492][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  818.047590][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  818.102430][ T8204] NILFS (loop1): discard dirty page: offset=106496, ino=3
[  818.120443][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  818.127709][   T58] usb 4-1: Using ep0 maxpacket: 32
[  818.129997][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  818.152997][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  818.194069][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  818.195976][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  818.213787][   T58] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  818.245521][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.267613][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  818.273653][   T58] usb 4-1: config 0 descriptor??
[  818.287726][ T8204] NILFS (loop1): discard dirty page: offset=110592, ino=3
[  818.291613][   T58] hub 4-1:0.0: USB hub found
[  818.294884][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  818.294911][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  818.294933][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  818.373908][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  818.387608][ T8204] NILFS (loop1): discard dirty page: offset=114688, ino=3
[  818.404993][ T8204] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  818.417884][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.441426][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.463932][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.487581][ T8204] NILFS (loop1): discard dirty page: offset=131072, ino=3
[  818.505694][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.517853][   T58] hub 4-1:0.0: config failed, can't read hub descriptor (err -90)
[  818.527631][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.557741][ T8204] NILFS (loop1): discard dirty block: blocknr=46, size=1024
[  818.567628][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.596318][ T8204] NILFS (loop1): discard dirty page: offset=163840, ino=3
[  818.613815][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.634142][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.653337][ T8204] NILFS (loop1): discard dirty block: blocknr=47, size=1024
[  818.667829][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.687135][ T8204] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  818.705813][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.735455][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.742869][   T58] usbhid 4-1:0.0: can't add hid device: -71
[  818.755726][ T8204] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  818.761032][   T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  818.767593][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.798674][ T8204] NILFS (loop1): discard dirty page: offset=229376, ino=3
[  818.814857][   T58] usb 4-1: USB disconnect, device number 28
[  818.827292][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.847614][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.866841][ T8204] NILFS (loop1): discard dirty block: blocknr=50, size=1024
[  818.876984][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.894405][ T8204] NILFS (loop1): discard dirty page: offset=0, ino=12
[  818.911644][ T8204] NILFS (loop1): discard dirty block: blocknr=17, size=1024
[  818.928739][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.947577][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.966808][ T8204] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  818.994309][ T7958] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  819.078964][ T7958] NILFS (loop1): discard dirty page: offset=0, ino=6
[  819.088528][ T7958] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  819.095973][ T7958] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  819.104882][T13960] loop0: detected capacity change from 0 to 32768
[  819.109936][ T7958] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  819.126251][ T7958] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  819.137075][ T7958] NILFS (loop1): discard dirty page: offset=0, ino=5
[  819.156558][ T7958] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  819.165569][ T7958] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  819.185359][ T7958] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  819.196129][ T7958] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  819.222441][  T113] read_mapping_page failed!
[  819.525428][T13972] read_mapping_page failed!
[  819.719477][   T29] kauditd_printk_skb: 28 callbacks suppressed
[  819.719499][   T29] audit: type=1800 audit(1719375534.339:988): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1935" name="bus" dev="sda1" ino=2094 res=0 errno=0
[  820.163864][T13966] loop4: detected capacity change from 0 to 32768
[  820.251456][T13966] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1933 (13966)
[  820.328708][T13966] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  820.384321][T13966] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  820.398833][T13978] loop1: detected capacity change from 0 to 512
[  820.424043][T13966] BTRFS info (device loop4): using free-space-tree
[  820.533720][T13978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  820.558171][T13978] ext4 filesystem being mounted at /root/syzkaller.5kO20C/330/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  820.666495][T13971] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1925'.
[  820.678420][T13971] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1925'.
[  820.842574][T14007] loop0: detected capacity change from 0 to 1764
[  820.870743][T14007] iso9660: Bad value for 'gid'
[  821.002245][ T7958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  821.058118][ T5095] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  821.288883][ T5095] usb 3-1: Using ep0 maxpacket: 8
[  821.322641][ T5095] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  821.378185][ T5095] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  821.419548][ T5095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.462877][ T5086] Bluetooth: hci0: command 0x0406 tx timeout
[  821.484184][ T5095] usb 3-1: config 0 descriptor??
[  821.519270][ T5095] gspca_main: vc032x-2.14.0 probing 046d:0892
[  821.544063][ T7940] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  821.725134][ T5095] gspca_vc032x: reg_r err -32
[  821.740544][ T5095] vc032x 3-1:0.0: probe with driver vc032x failed with error -32
[  821.745336][T14024] loop0: detected capacity change from 0 to 512
[  822.810001][T14046] loop0: detected capacity change from 0 to 1764
[  822.828718][T14046] iso9660: Bad value for 'gid'
[  823.006357][T14049] hub 9-0:1.0: USB hub found
[  823.040715][T14049] hub 9-0:1.0: 8 ports detected
[  823.216967][T14052] loop1: detected capacity change from 0 to 4096
[  823.247019][T14052] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  823.274203][T14045] loop3: detected capacity change from 0 to 512
[  823.286945][T14057] loop0: detected capacity change from 0 to 512
[  823.303583][T14052] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  823.333653][T14045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  823.406818][T14060] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  823.428509][T14045] ext4 filesystem being mounted at /root/syzkaller.A0Ts60/50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  823.622944][T14040] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1951'.
[  823.677381][T14040] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1951'.
[  823.823225][   T58] usb 3-1: USB disconnect, device number 28
[  823.986726][T12706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  824.491896][T14074] loop3: detected capacity change from 0 to 512
[  824.612182][T14074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  824.625303][T14074] ext4 filesystem being mounted at /root/syzkaller.A0Ts60/51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  825.335820][T12706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  825.435656][T14090] loop2: detected capacity change from 0 to 1764
[  825.479754][T14090] iso9660: Bad value for 'gid'
[  825.717981][T14092] hub 9-0:1.0: USB hub found
[  825.735299][T14092] hub 9-0:1.0: 8 ports detected
[  826.037714][   T58] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  826.227812][   T58] usb 3-1: Using ep0 maxpacket: 8
[  826.238919][   T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  826.273637][   T58] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  826.318768][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.389204][   T58] usb 3-1: config 0 descriptor??
[  826.418655][   T58] gspca_main: vc032x-2.14.0 probing 046d:0892
[  826.622026][   T58] gspca_vc032x: reg_r err -32
[  826.628497][T14104] loop4: detected capacity change from 0 to 512
[  826.645865][   T58] vc032x 3-1:0.0: probe with driver vc032x failed with error -32
[  826.733505][T14100] loop3: detected capacity change from 0 to 512
[  826.819323][T14100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  826.897883][T14100] ext4 filesystem being mounted at /root/syzkaller.A0Ts60/53/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  827.068251][T14100] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1969'.
[  827.149514][T14100] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1969'.
[  827.351183][T12706] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  827.586020][T14117] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1972'.
[  827.618858][T14117] sysfs: cannot create duplicate filename '/class/ieee80211/ü!'
[  827.701540][T14117] CPU: 0 PID: 14117 Comm: syz.3.1972 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
[  827.711781][T14117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  827.721880][T14117] Call Trace:
[  827.725192][T14117]  <TASK>
[  827.728193][T14117]  dump_stack_lvl+0x241/0x360
[  827.732927][T14117]  ? __pfx_dump_stack_lvl+0x10/0x10
[  827.738178][T14117]  ? __pfx__printk+0x10/0x10
[  827.742822][T14117]  ? sysfs_warn_dup+0x51/0xa0
[  827.747539][T14117]  ? kmalloc_trace_noprof+0x19c/0x2c0
[  827.752969][T14117]  sysfs_warn_dup+0x8e/0xa0
[  827.757515][T14117]  sysfs_do_create_link_sd+0xbe/0x110
[  827.762930][T14117]  device_add_class_symlinks+0x1c5/0x250
[  827.768623][T14117]  device_add+0x553/0xbf0
[  827.773010][T14117]  wiphy_register+0x1d3f/0x2b30
[  827.777935][T14117]  ? __pfx_wiphy_register+0x10/0x10
[  827.783175][T14117]  ? minstrel_ht_alloc+0x72b/0x860
[  827.788345][T14117]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  827.794457][T14117]  ieee80211_register_hw+0x3098/0x3d80
[  827.799982][T14117]  ? ieee80211_register_hw+0x11a1/0x3d80
[  827.805761][T14117]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  827.811632][T14117]  ? __asan_memset+0x23/0x50
[  827.816268][T14117]  ? __hrtimer_init+0x170/0x250
[  827.821169][T14117]  mac80211_hwsim_new_radio+0x2597/0x44c0
[  827.826963][T14117]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  827.833078][T14117]  ? kmalloc_node_track_caller_noprof+0x242/0x440
[  827.839733][T14117]  ? kstrndup+0x5c/0xb0
[  827.843940][T14117]  ? __asan_memcpy+0x40/0x70
[  827.848608][T14117]  hwsim_new_radio_nl+0xe4c/0x21d0
[  827.854138][T14117]  ? __pfx___nla_validate_parse+0x10/0x10
[  827.860006][T14117]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  827.865666][T14117]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  827.872055][T14117]  genl_rcv_msg+0xb14/0xec0
[  827.876616][T14117]  ? mark_lock+0x9a/0x350
[  827.881004][T14117]  ? __pfx_genl_rcv_msg+0x10/0x10
[  827.886109][T14117]  ? __pfx_lock_acquire+0x10/0x10
[  827.891176][T14117]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  827.896777][T14117]  ? __pfx___might_resched+0x10/0x10
[  827.901765][T14106] loop0: detected capacity change from 0 to 32768
[  827.902098][T14117]  netlink_rcv_skb+0x1e3/0x430
[  827.913280][T14117]  ? __pfx_genl_rcv_msg+0x10/0x10
[  827.918332][T14117]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  827.923684][T14117]  ? __netlink_deliver_tap+0x77e/0x7c0
[  827.929219][T14117]  genl_rcv+0x28/0x40
[  827.933237][T14117]  netlink_unicast+0x7ea/0x980
[  827.938057][T14117]  ? __pfx_netlink_unicast+0x10/0x10
[  827.943386][T14117]  ? __virt_addr_valid+0x183/0x520
[  827.948560][T14117]  ? __check_object_size+0x49c/0x900
[  827.953901][T14117]  ? bpf_lsm_netlink_send+0x9/0x10
[  827.959063][T14117]  netlink_sendmsg+0x8db/0xcb0
[  827.963898][T14117]  ? __pfx_netlink_sendmsg+0x10/0x10
[  827.969316][T14117]  ? __import_iovec+0x536/0x820
[  827.974281][T14117]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  827.979589][T14117]  ? security_socket_sendmsg+0x87/0xb0
[  827.985074][T14117]  ? __pfx_netlink_sendmsg+0x10/0x10
[  827.990377][T14117]  __sock_sendmsg+0x221/0x270
[  827.995081][T14117]  ____sys_sendmsg+0x525/0x7d0
[  827.999873][T14117]  ? __pfx_____sys_sendmsg+0x10/0x10
[  828.005192][T14117]  __sys_sendmsg+0x2b0/0x3a0
[  828.009802][T14117]  ? __pfx___sys_sendmsg+0x10/0x10
[  828.014960][T14117]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  828.020965][T14117]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  828.027304][T14117]  ? exc_page_fault+0x590/0x8c0
[  828.032174][T14117]  ? do_syscall_64+0xb6/0x230
[  828.036875][T14117]  do_syscall_64+0xf3/0x230
[  828.041401][T14117]  ? clear_bhb_loop+0x35/0x90
[  828.046100][T14117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  828.052014][T14117] RIP: 0033:0x7f32c6175ae9
[  828.056455][T14117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  828.076250][T14117] RSP: 002b:00007f32c6fc8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  828.084683][T14117] RAX: ffffffffffffffda RBX: 00007f32c6304070 RCX: 00007f32c6175ae9
[  828.092666][T14117] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  828.100647][T14117] RBP: 00007f32c61f6746 R08: 0000000000000000 R09: 0000000000000000
[  828.108717][T14117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  828.116694][T14117] R13: 000000000000006e R14: 00007f32c6304070 R15: 00007fffba3aaaa8
[  828.124688][T14117]  </TASK>
[  828.162196][T14120] loop3: detected capacity change from 0 to 16
[  828.273588][T14126] loop1: detected capacity change from 0 to 256
[  828.286465][T14126] exfat: Deprecated parameter 'utf8'
[  828.292076][T14126] exfat: Deprecated parameter 'namecase'
[  828.298551][T14126] exfat: Deprecated parameter 'namecase'
[  828.304342][T14126] exfat: Deprecated parameter 'utf8'
[  828.309758][T14126] exfat: Deprecated parameter 'utf8'
[  829.088725][T14126] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  829.109288][T14123] netlink: 'syz.1.1973': attribute type 10 has an invalid length.
[  829.117314][T14123] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1973'.
[  829.152177][ T5190] usb 3-1: USB disconnect, device number 29
[  829.164040][T14127] fuse: Unknown parameter '‡roup_iƒBw¿úzæˆd'
[  829.426465][T14133] loop3: detected capacity change from 0 to 16
[  829.441939][T14133] erofs: (device loop3): erofs_read_inode: unsupported datalayout 5 of nid 36
[  829.733938][T14106] read_mapping_page failed!
[  830.012187][T14144] Cannot find add_set index 0 as target
[  830.037683][ T5190] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  830.347819][ T5190] usb 4-1: Using ep0 maxpacket: 32
[  830.355403][ T5190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  830.387647][ T5190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  830.434107][ T5190] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  830.467947][ T5190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  830.477880][  T112] read_mapping_page failed!
[  830.513470][ T5190] usb 4-1: config 0 descriptor??
[  830.529423][T14140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  830.548899][ T5190] hub 4-1:0.0: USB hub found
[  830.766015][ T5190] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  831.037623][ T5190] hid-generic 0003:046D:C314.001C: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.3-1/input0
[  831.333308][T14133] loop3: detected capacity change from 0 to 1024
[  831.375286][T14133] xt_hashlimit: overflow, try lower: 3/0
[  831.543583][T14162] netlink: 'syz.4.1983': attribute type 12 has an invalid length.
[  831.551619][T14162] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1983'.
[  832.408630][T14157] loop1: detected capacity change from 0 to 512
[  832.508507][ T5190] usb 4-1: USB disconnect, device number 29
[  832.565935][T14166] loop2: detected capacity change from 0 to 4096
[  832.603380][T14157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  832.616837][T14166] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  832.648904][T14166] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[  832.706204][T14174] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  832.711454][T14157] ext4 filesystem being mounted at /root/syzkaller.5kO20C/338/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  832.792159][   T29] audit: type=1800 audit(1719375547.409:989): pid=14175 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1981" name="bus" dev="sda1" ino=2096 res=0 errno=0
[  832.798013][   T58] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  832.897338][T14156] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1982'.
[  832.945531][T14156] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1982'.
[  832.991476][ T5204] hfsplus: b-tree write err: -5, ino 8
[  833.038752][   T58] usb 5-1: Using ep0 maxpacket: 8
[  833.068191][   T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  833.125890][   T58] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  833.177123][   T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.197479][   T58] usb 5-1: config 0 descriptor??
[  833.206379][   T58] gspca_main: vc032x-2.14.0 probing 046d:0892
[  833.487671][T14179] loop3: detected capacity change from 0 to 256
[  833.500543][T14179] exfat: Deprecated parameter 'utf8'
[  833.506132][T14179] exfat: Deprecated parameter 'namecase'
[  833.512727][T14179] exfat: Deprecated parameter 'namecase'
[  833.518559][T14179] exfat: Deprecated parameter 'utf8'
[  833.524018][T14179] exfat: Deprecated parameter 'utf8'
[  833.779769][ T5091] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  833.792059][ T5091] Bluetooth: hci5: Injecting HCI hardware error event
[  833.808042][ T5091] Bluetooth: hci5: hardware error 0x00
[  834.226439][T14179] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  834.252585][T14178] netlink: 'syz.3.1986': attribute type 10 has an invalid length.
[  834.260899][T14178] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1986'.
[  834.275264][   T58] gspca_vc032x: reg_r err -32
[  834.301655][   T58] vc032x 5-1:0.0: probe with driver vc032x failed with error -32
[  834.523431][ T7958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  834.735605][T14188] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1987'.
[  834.780415][T14188] sysfs: cannot create duplicate filename '/class/ieee80211/ü!'
[  834.801994][T14188] CPU: 1 PID: 14188 Comm: syz.3.1987 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
[  834.812225][T14188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  834.822498][T14188] Call Trace:
[  834.825811][T14188]  <TASK>
[  834.828783][T14188]  dump_stack_lvl+0x241/0x360
[  834.833516][T14188]  ? __pfx_dump_stack_lvl+0x10/0x10
[  834.838765][T14188]  ? __pfx__printk+0x10/0x10
[  834.843403][T14188]  ? sysfs_warn_dup+0x51/0xa0
[  834.848126][T14188]  ? kmalloc_trace_noprof+0x19c/0x2c0
[  834.853637][T14188]  sysfs_warn_dup+0x8e/0xa0
[  834.858193][T14188]  sysfs_do_create_link_sd+0xbe/0x110
[  834.863610][T14188]  device_add_class_symlinks+0x1c5/0x250
[  834.869381][T14188]  device_add+0x553/0xbf0
[  834.873764][T14188]  wiphy_register+0x1d3f/0x2b30
[  834.878689][T14188]  ? __pfx_wiphy_register+0x10/0x10
[  834.884021][T14188]  ? minstrel_ht_alloc+0x72b/0x860
[  834.889283][T14188]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  834.895398][T14188]  ieee80211_register_hw+0x3098/0x3d80
[  834.900924][T14188]  ? ieee80211_register_hw+0x11a1/0x3d80
[  834.906615][T14188]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  834.912485][T14188]  ? __asan_memset+0x23/0x50
[  834.917132][T14188]  ? __hrtimer_init+0x170/0x250
[  834.922045][T14188]  mac80211_hwsim_new_radio+0x2597/0x44c0
[  834.927884][T14188]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  834.934004][T14188]  ? kmalloc_node_track_caller_noprof+0x242/0x440
[  834.940561][T14188]  ? kstrndup+0x5c/0xb0
[  834.944764][T14188]  ? __asan_memcpy+0x40/0x70
[  834.949581][T14188]  hwsim_new_radio_nl+0xe4c/0x21d0
[  834.954847][T14188]  ? __pfx___nla_validate_parse+0x10/0x10
[  834.960618][T14188]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  834.966264][T14188]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  834.972651][T14188]  genl_rcv_msg+0xb14/0xec0
[  834.977193][T14188]  ? mark_lock+0x9a/0x350
[  834.981753][T14188]  ? __pfx_genl_rcv_msg+0x10/0x10
[  834.986946][T14188]  ? __pfx_lock_acquire+0x10/0x10
[  834.992012][T14188]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  834.997613][T14188]  ? __pfx___might_resched+0x10/0x10
[  835.002969][T14188]  netlink_rcv_skb+0x1e3/0x430
[  835.007800][T14188]  ? __pfx_genl_rcv_msg+0x10/0x10
[  835.012854][T14188]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  835.018282][T14188]  ? __netlink_deliver_tap+0x77e/0x7c0
[  835.023793][T14188]  genl_rcv+0x28/0x40
[  835.027886][T14188]  netlink_unicast+0x7ea/0x980
[  835.032679][T14188]  ? __pfx_netlink_unicast+0x10/0x10
[  835.038025][T14188]  ? __virt_addr_valid+0x183/0x520
[  835.043199][T14188]  ? __check_object_size+0x49c/0x900
[  835.048527][T14188]  ? bpf_lsm_netlink_send+0x9/0x10
[  835.053715][T14188]  netlink_sendmsg+0x8db/0xcb0
[  835.058560][T14188]  ? __pfx_netlink_sendmsg+0x10/0x10
[  835.063875][T14188]  ? __import_iovec+0x536/0x820
[  835.068746][T14188]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  835.074046][T14188]  ? security_socket_sendmsg+0x87/0xb0
[  835.079536][T14188]  ? __pfx_netlink_sendmsg+0x10/0x10
[  835.084838][T14188]  __sock_sendmsg+0x221/0x270
[  835.089543][T14188]  ____sys_sendmsg+0x525/0x7d0
[  835.094328][T14188]  ? __pfx_____sys_sendmsg+0x10/0x10
[  835.099651][T14188]  __sys_sendmsg+0x2b0/0x3a0
[  835.104261][T14188]  ? __pfx___sys_sendmsg+0x10/0x10
[  835.109419][T14188]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  835.115420][T14188]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  835.121762][T14188]  ? exc_page_fault+0x590/0x8c0
[  835.126636][T14188]  ? do_syscall_64+0xb6/0x230
[  835.131345][T14188]  do_syscall_64+0xf3/0x230
[  835.135879][T14188]  ? clear_bhb_loop+0x35/0x90
[  835.140581][T14188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  835.146682][T14188] RIP: 0033:0x7f32c6175ae9
[  835.151118][T14188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  835.170826][T14188] RSP: 002b:00007f32c6fc8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  835.179260][T14188] RAX: ffffffffffffffda RBX: 00007f32c6304070 RCX: 00007f32c6175ae9
[  835.187243][T14188] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  835.195223][T14188] RBP: 00007f32c61f6746 R08: 0000000000000000 R09: 0000000000000000
[  835.203202][T14188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  835.211368][T14188] R13: 000000000000006e R14: 00007f32c6304070 R15: 00007fffba3aaaa8
[  835.219369][T14188]  </TASK>
[  835.335519][T14188] loop3: detected capacity change from 0 to 16
[  835.602495][   T58] usb 5-1: USB disconnect, device number 15
[  835.697661][ T5190] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  835.887628][ T5190] usb 2-1: Using ep0 maxpacket: 8
[  835.913939][ T5190] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  835.946607][ T5190] usb 2-1: config 0 has no interface number 0
[  835.982045][ T5190] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x62 has an invalid bInterval 0, changing to 7
[  836.013714][ T5190] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  836.043945][T14205] SET target dimension over the limit!
[  836.047574][ T5190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.095566][ T5190] usb 2-1: config 0 descriptor??
[  836.108286][ T5190] iowarrior 2-1:0.1: no interrupt-in endpoint found
[  836.228238][T14197] loop0: detected capacity change from 0 to 8192
[  836.348184][ T5091] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  836.495870][   T29] audit: type=1800 audit(1719375551.109:990): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1991" name="bus" dev="sda1" ino=2077 res=0 errno=0
[  836.846168][T14216] loop0: detected capacity change from 0 to 256
[  837.160120][T14222] loop2: detected capacity change from 0 to 256
[  837.174884][T14222] exfat: Deprecated parameter 'utf8'
[  837.181677][T14222] exfat: Deprecated parameter 'namecase'
[  837.188254][T14222] exfat: Deprecated parameter 'namecase'
[  837.194066][T14222] exfat: Deprecated parameter 'utf8'
[  837.199529][T14222] exfat: Deprecated parameter 'utf8'
[  837.347128][T14222] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  837.387897][T14222] netlink: 'syz.2.1998': attribute type 10 has an invalid length.
[  837.395926][T14222] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1998'.
[  837.911419][T14223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1996'.
[  837.933600][ T5190] usb 2-1: USB disconnect, device number 30
[  838.366622][T14231] loop3: detected capacity change from 0 to 512
[  838.718253][ T5139] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  838.987900][ T5139] usb 1-1: Using ep0 maxpacket: 8
[  839.020213][ T5139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  839.051095][ T5139] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  839.081293][T14232] loop2: detected capacity change from 0 to 512
[  839.087916][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.115944][ T5139] usb 1-1: config 0 descriptor??
[  839.126921][ T5139] gspca_main: vc032x-2.14.0 probing 046d:0892
[  839.151023][T14240] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2003'.
[  839.190958][T14232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  839.230940][T14240] debugfs: Directory 'ü!' with parent 'ieee80211' already present!
[  839.264868][T14232] ext4 filesystem being mounted at /root/syzkaller.xa4h6R/257/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  839.289169][T14220] loop4: detected capacity change from 0 to 32768
[  839.353805][T14230] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1999'.
[  839.360110][T14240] loop1: detected capacity change from 0 to 16
[  839.365496][T14230] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1999'.
[  839.496899][ T9202] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  839.531480][T14220] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names
[  839.564153][T14220] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  839.649460][T14220] bcachefs (loop4): alloc_read... done
[  839.677709][T14220] bcachefs (loop4): stripes_read... done
[  839.683486][T14220] bcachefs (loop4): snapshots_read... done
[  839.715437][T14220] bcachefs (loop4): journal_replay... done
[  839.734390][ T5139] gspca_vc032x: reg_r err -32
[  839.741665][ T5139] vc032x 1-1:0.0: probe with driver vc032x failed with error -32
[  839.754712][T14220] bcachefs (loop4): resume_logged_ops... done
[  839.769136][T14220] bcachefs (loop4): going read-write
[  839.777468][T14220] bcachefs (loop4): bch2_copygc_start(): error creating copygc thread EINTR
[  839.793784][T14220] bcachefs (loop4): error starting copygc thread
[  839.800719][T14220] bcachefs (loop4): going read-only
[  839.806191][T14220] bcachefs (loop4): finished waiting for writes to stop
[  839.815435][T14220] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  839.835548][T14220] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  839.882853][T14220] bcachefs (loop4): shutdown complete, journal seq 11
[  840.002992][T14220] bcachefs (loop4): marking filesystem clean
[  840.123489][T14220] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR
[  840.242042][T14220] bcachefs (loop4): shutting down
[  840.439275][T14273] netlink: 'syz.1.2008': attribute type 12 has an invalid length.
[  840.448408][T14273] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2008'.
[  841.479418][T14220] bcachefs (loop4): shutdown complete
[  841.498048][ T5190] usb 1-1: USB disconnect, device number 21
[  842.118550][T14290] loop2: detected capacity change from 0 to 256
[  842.132815][T14290] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  842.308665][ T5129] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  842.547734][ T5129] usb 4-1: Using ep0 maxpacket: 8
[  842.581491][ T5129] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  842.610129][ T5129] usb 4-1: config 0 has no interface number 0
[  842.633391][ T5129] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x62 has an invalid bInterval 0, changing to 7
[  842.666774][ T5129] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  842.681774][ T5129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.711383][ T5129] usb 4-1: config 0 descriptor??
[  842.739213][ T5129] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  843.109664][ T5129] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  843.220834][   T29] audit: type=1326 audit(1719375557.839:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14302 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada0575ae9 code=0x7ffc0000
[  843.317782][   T29] audit: type=1326 audit(1719375557.839:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14302 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fada0575ae9 code=0x7ffc0000
[  843.337755][ T5129] usb 1-1: Using ep0 maxpacket: 8
[  843.350286][   T29] audit: type=1326 audit(1719375557.839:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14302 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fada0574550 code=0x7ffc0000
[  843.374676][   T29] audit: type=1326 audit(1719375557.839:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14302 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  843.410178][ T5129] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  843.465835][ T5129] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  843.468953][   T29] audit: type=1326 audit(1719375557.839:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14302 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  843.486649][ T5129] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  843.513592][ T5129] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  843.541414][ T5129] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  843.553394][ T5129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.577771][   T25] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  843.597252][   T29] audit: type=1326 audit(1719375557.839:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14302 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  843.692951][   T29] audit: type=1326 audit(1719375557.839:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14302 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  843.757304][   T29] audit: type=1326 audit(1719375558.029:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14302 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  843.789730][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  843.797622][   T29] audit: type=1326 audit(1719375558.129:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14302 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  843.828125][ T5129] usb 1-1: GET_CAPABILITIES returned 0
[  843.838789][ T5129] usbtmc 1-1:16.0: can't read capabilities
[  843.867713][   T29] audit: type=1326 audit(1719375558.199:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14302 comm="syz.2.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fada05756eb code=0x7ffc0000
[  843.891332][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  843.920119][   T25] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  843.949139][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.972135][   T25] usb 3-1: config 0 descriptor??
[  844.007748][ T5140] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  844.155903][T14310] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2018'.
[  844.190434][T14310] sysfs: cannot create duplicate filename '/class/ieee80211/ü!'
[  844.197827][ T5140] usb 2-1: Using ep0 maxpacket: 8
[  844.204130][T14310] CPU: 0 PID: 14310 Comm: syz.4.2018 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
[  844.214437][T14310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  844.224543][T14310] Call Trace:
[  844.227864][T14310]  <TASK>
[  844.230825][T14310]  dump_stack_lvl+0x241/0x360
[  844.235558][T14310]  ? __pfx_dump_stack_lvl+0x10/0x10
[  844.240825][T14310]  ? __pfx__printk+0x10/0x10
[  844.245449][T14310]  ? sysfs_warn_dup+0x51/0xa0
[  844.250183][T14310]  ? kmalloc_trace_noprof+0x19c/0x2c0
[  844.255627][T14310]  sysfs_warn_dup+0x8e/0xa0
[  844.260191][T14310]  sysfs_do_create_link_sd+0xbe/0x110
[  844.265702][T14310]  device_add_class_symlinks+0x1c5/0x250
[  844.271397][T14310]  device_add+0x553/0xbf0
[  844.275780][T14310]  wiphy_register+0x1d3f/0x2b30
[  844.280711][T14310]  ? __pfx_wiphy_register+0x10/0x10
[  844.285941][T14310]  ? minstrel_ht_alloc+0x72b/0x860
[  844.291090][T14310]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  844.297184][T14310]  ieee80211_register_hw+0x3098/0x3d80
[  844.302709][T14310]  ? ieee80211_register_hw+0x11a1/0x3d80
[  844.308397][T14310]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  844.314249][T14310]  ? __asan_memset+0x23/0x50
[  844.318889][T14310]  ? __hrtimer_init+0x170/0x250
[  844.323793][T14310]  mac80211_hwsim_new_radio+0x2597/0x44c0
[  844.329665][T14310]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  844.335788][T14310]  ? kmalloc_node_track_caller_noprof+0x242/0x440
[  844.342258][T14310]  ? kstrndup+0x5c/0xb0
[  844.346442][T14310]  ? __asan_memcpy+0x40/0x70
[  844.351082][T14310]  hwsim_new_radio_nl+0xe4c/0x21d0
[  844.356278][T14310]  ? __pfx___nla_validate_parse+0x10/0x10
[  844.362060][T14310]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  844.367678][T14310]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  844.374034][T14310]  genl_rcv_msg+0xb14/0xec0
[  844.378578][T14310]  ? mark_lock+0x9a/0x350
[  844.382960][T14310]  ? __pfx_genl_rcv_msg+0x10/0x10
[  844.388070][T14310]  ? __pfx_lock_acquire+0x10/0x10
[  844.393118][T14310]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  844.398713][T14310]  ? __pfx___might_resched+0x10/0x10
[  844.404038][T14310]  netlink_rcv_skb+0x1e3/0x430
[  844.408853][T14310]  ? __pfx_genl_rcv_msg+0x10/0x10
[  844.413903][T14310]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  844.419402][T14310]  ? __netlink_deliver_tap+0x77e/0x7c0
[  844.424931][T14310]  genl_rcv+0x28/0x40
[  844.428947][T14310]  netlink_unicast+0x7ea/0x980
[  844.433769][T14310]  ? __pfx_netlink_unicast+0x10/0x10
[  844.439374][T14310]  ? __virt_addr_valid+0x183/0x520
[  844.444608][T14310]  ? __check_object_size+0x49c/0x900
[  844.449941][T14310]  ? bpf_lsm_netlink_send+0x9/0x10
[  844.455117][T14310]  netlink_sendmsg+0x8db/0xcb0
[  844.459933][T14310]  ? __pfx_netlink_sendmsg+0x10/0x10
[  844.465351][T14310]  ? __import_iovec+0x536/0x820
[  844.470250][T14310]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  844.475568][T14310]  ? security_socket_sendmsg+0x87/0xb0
[  844.481270][T14310]  ? __pfx_netlink_sendmsg+0x10/0x10
[  844.486595][T14310]  __sock_sendmsg+0x221/0x270
[  844.491415][T14310]  ____sys_sendmsg+0x525/0x7d0
[  844.496302][T14310]  ? __pfx_____sys_sendmsg+0x10/0x10
[  844.501682][T14310]  __sys_sendmsg+0x2b0/0x3a0
[  844.506313][T14310]  ? __pfx___sys_sendmsg+0x10/0x10
[  844.511499][T14310]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  844.517539][T14310]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  844.523941][T14310]  ? exc_page_fault+0x590/0x8c0
[  844.528863][T14310]  ? do_syscall_64+0xb6/0x230
[  844.533590][T14310]  do_syscall_64+0xf3/0x230
[  844.538127][T14310]  ? clear_bhb_loop+0x35/0x90
[  844.542867][T14310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  844.548809][T14310] RIP: 0033:0x7f0872b75ae9
[  844.553260][T14310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  844.572900][T14310] RSP: 002b:00007f087397c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  844.581366][T14310] RAX: ffffffffffffffda RBX: 00007f0872d04070 RCX: 00007f0872b75ae9
[  844.589363][T14310] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  844.597355][T14310] RBP: 00007f0872bf6746 R08: 0000000000000000 R09: 0000000000000000
[  844.605363][T14310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  844.613478][T14310] R13: 000000000000006e R14: 00007f0872d04070 R15: 00007ffd0470d848
[  844.621511][T14310]  </TASK>
[  844.643797][ T5140] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  844.658778][ T5140] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  844.667913][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.679436][ T5140] usb 2-1: config 0 descriptor??
[  844.702178][ T5140] gspca_main: vc032x-2.14.0 probing 046d:0892
[  844.704168][ T5139] usb 1-1: USB disconnect, device number 22
[  844.928158][   T25] isku 0003:1E7D:319C.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0
[  844.930804][T14310] loop4: detected capacity change from 0 to 16
[  845.010280][ T5139] usb 4-1: USB disconnect, device number 30
[  845.120578][   T25] isku 0003:1E7D:319C.001D: couldn't init struct isku_device
[  845.137772][   T25] isku 0003:1E7D:319C.001D: couldn't install keyboard
[  845.159179][   T25] isku 0003:1E7D:319C.001D: probe with driver isku failed with error -71
[  845.206832][   T25] usb 3-1: USB disconnect, device number 30
[  845.309481][ T5140] gspca_vc032x: reg_r err -32
[  845.330764][ T5140] vc032x 2-1:0.0: probe with driver vc032x failed with error -32
[  846.290410][T14335] block device autoloading is deprecated and will be removed.
[  846.308437][T14335] syz.2.2025: attempt to access beyond end of device
[  846.308437][T14335] loop16: rw=2048, sector=0, nr_sectors = 8 limit=0
[  846.772927][ T5139] usb 2-1: USB disconnect, device number 31
[  847.250528][T14357] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2033'.
[  847.286685][T14357] sysfs: cannot create duplicate filename '/class/ieee80211/ü!'
[  847.309873][T14357] CPU: 0 PID: 14357 Comm: syz.0.2033 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
[  847.320120][T14357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  847.330230][T14357] Call Trace:
[  847.333719][T14357]  <TASK>
[  847.336687][T14357]  dump_stack_lvl+0x241/0x360
[  847.341486][T14357]  ? __pfx_dump_stack_lvl+0x10/0x10
[  847.346745][T14357]  ? __pfx__printk+0x10/0x10
[  847.351386][T14357]  ? sysfs_warn_dup+0x51/0xa0
[  847.356150][T14357]  ? kmalloc_trace_noprof+0x19c/0x2c0
[  847.361581][T14357]  sysfs_warn_dup+0x8e/0xa0
[  847.366136][T14357]  sysfs_do_create_link_sd+0xbe/0x110
[  847.371562][T14357]  device_add_class_symlinks+0x1c5/0x250
[  847.377257][T14357]  device_add+0x553/0xbf0
[  847.381662][T14357]  wiphy_register+0x1d3f/0x2b30
[  847.385545][T14340] loop3: detected capacity change from 0 to 32768
[  847.386575][T14357]  ? __pfx_wiphy_register+0x10/0x10
[  847.386617][T14357]  ? minstrel_ht_alloc+0x72b/0x860
[  847.403593][T14357]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  847.409712][T14357]  ieee80211_register_hw+0x3098/0x3d80
[  847.415216][T14357]  ? ieee80211_register_hw+0x11a1/0x3d80
[  847.420877][T14357]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  847.426815][T14357]  ? __asan_memset+0x23/0x50
[  847.431441][T14357]  ? __hrtimer_init+0x170/0x250
[  847.436437][T14357]  mac80211_hwsim_new_radio+0x2597/0x44c0
[  847.442206][T14357]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  847.448312][T14357]  ? kmalloc_node_track_caller_noprof+0x242/0x440
[  847.454809][T14357]  ? kstrndup+0x5c/0xb0
[  847.458995][T14357]  ? __asan_memcpy+0x40/0x70
[  847.463610][T14357]  hwsim_new_radio_nl+0xe4c/0x21d0
[  847.468757][T14357]  ? __pfx___nla_validate_parse+0x10/0x10
[  847.474495][T14357]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  847.480179][T14357]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  847.486529][T14357]  genl_rcv_msg+0xb14/0xec0
[  847.491064][T14357]  ? mark_lock+0x9a/0x350
[  847.495419][T14357]  ? __pfx_genl_rcv_msg+0x10/0x10
[  847.500496][T14357]  ? __pfx_lock_acquire+0x10/0x10
[  847.505532][T14357]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  847.511122][T14357]  ? __pfx___might_resched+0x10/0x10
[  847.516436][T14357]  netlink_rcv_skb+0x1e3/0x430
[  847.521244][T14357]  ? __pfx_genl_rcv_msg+0x10/0x10
[  847.526301][T14357]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  847.531619][T14357]  ? __netlink_deliver_tap+0x77e/0x7c0
[  847.537139][T14357]  genl_rcv+0x28/0x40
[  847.541137][T14357]  netlink_unicast+0x7ea/0x980
[  847.545928][T14357]  ? __pfx_netlink_unicast+0x10/0x10
[  847.551228][T14357]  ? __virt_addr_valid+0x183/0x520
[  847.556362][T14357]  ? __check_object_size+0x49c/0x900
[  847.561663][T14357]  ? bpf_lsm_netlink_send+0x9/0x10
[  847.566801][T14357]  netlink_sendmsg+0x8db/0xcb0
[  847.571601][T14357]  ? __pfx_netlink_sendmsg+0x10/0x10
[  847.576933][T14357]  ? __import_iovec+0x536/0x820
[  847.581805][T14357]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  847.587104][T14357]  ? security_socket_sendmsg+0x87/0xb0
[  847.592590][T14357]  ? __pfx_netlink_sendmsg+0x10/0x10
[  847.597895][T14357]  __sock_sendmsg+0x221/0x270
[  847.602695][T14357]  ____sys_sendmsg+0x525/0x7d0
[  847.607493][T14357]  ? __pfx_____sys_sendmsg+0x10/0x10
[  847.612825][T14357]  __sys_sendmsg+0x2b0/0x3a0
[  847.617457][T14357]  ? __pfx___sys_sendmsg+0x10/0x10
[  847.622797][T14357]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  847.628803][T14357]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  847.635164][T14357]  ? exc_page_fault+0x590/0x8c0
[  847.640048][T14357]  ? do_syscall_64+0xb6/0x230
[  847.644756][T14357]  do_syscall_64+0xf3/0x230
[  847.649285][T14357]  ? clear_bhb_loop+0x35/0x90
[  847.653982][T14357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.659895][T14357] RIP: 0033:0x7f5608375ae9
[  847.664319][T14357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  847.683935][T14357] RSP: 002b:00007f56090d8048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  847.692367][T14357] RAX: ffffffffffffffda RBX: 00007f5608504070 RCX: 00007f5608375ae9
[  847.700444][T14357] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  847.708428][T14357] RBP: 00007f56083f6746 R08: 0000000000000000 R09: 0000000000000000
[  847.716415][T14357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  847.724403][T14357] R13: 000000000000006e R14: 00007f5608504070 R15: 00007ffc8fe72ef8
[  847.732408][T14357]  </TASK>
[  847.757693][ T5139] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  847.793689][T14357] loop0: detected capacity change from 0 to 16
[  847.967604][ T5139] usb 3-1: Using ep0 maxpacket: 8
[  847.974687][ T5139] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  847.985885][ T5139] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  847.997818][ T5139] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  848.007948][ T5139] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  848.025320][ T5139] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  848.034557][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.099848][T14340] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names
[  848.157904][T14340] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  848.251910][ T5139] usb 3-1: GET_CAPABILITIES returned 0
[  848.261406][T14340] bcachefs (loop3): alloc_read... done
[  848.267007][T14340] bcachefs (loop3): stripes_read... done
[  848.277597][ T5139] usbtmc 3-1:16.0: can't read capabilities
[  848.300885][T14340] bcachefs (loop3): snapshots_read... done
[  848.312489][T14340] bcachefs (loop3): journal_replay... done
[  848.337669][T14340] bcachefs (loop3): resume_logged_ops... done
[  848.370479][T14340] bcachefs (loop3): going read-write
[  848.396395][T14340] bcachefs (loop3): done starting filesystem
[  848.525717][T14350] loop1: detected capacity change from 0 to 32768
[  848.528162][ T5139] usb 3-1: USB disconnect, device number 31
[  848.672734][T12706] bcachefs (loop3): shutting down
[  848.705420][T12706] bcachefs (loop3): going read-only
[  848.723098][T12706] bcachefs (loop3): finished waiting for writes to stop
[  848.759619][T12706] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13
[  848.824739][T12706] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 14
[  848.867367][T12706] bcachefs (loop3): shutdown complete, journal seq 15
[  848.884448][T12706] bcachefs (loop3): marking filesystem clean
[  848.985946][T12706] bcachefs (loop3): shutdown complete
[  849.266607][T14393] loop2: detected capacity change from 0 to 16
[  849.317362][T14393] erofs: (device loop2): erofs_read_inode: unsupported datalayout 5 of nid 36
[  849.409749][  T113] read_mapping_page failed!
[  849.705107][T14400] loop4: detected capacity change from 0 to 512
[  849.727679][T12215] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  849.747653][ T5140] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  849.764390][T14400] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  849.841836][T14400] EXT4-fs (loop4): orphan cleanup on readonly fs
[  849.907392][T14400] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  849.947716][ T5140] usb 3-1: Using ep0 maxpacket: 32
[  849.953826][T12215] usb 1-1: Using ep0 maxpacket: 8
[  849.980948][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  849.993134][T12215] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  850.007992][T14400] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  850.026796][T12215] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  850.036332][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  850.038902][T14400] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2042: bg 0: block 40: padding at end of block bitmap is not set
[  850.053791][T12215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.094825][ T5140] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  850.106277][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.134698][T12215] usb 1-1: config 0 descriptor??
[  850.142396][ T5140] usb 3-1: config 0 descriptor??
[  850.152339][T14397] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  850.155924][T14400] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  850.161760][ T5140] hub 3-1:0.0: USB hub found
[  850.189247][T12215] gspca_main: vc032x-2.14.0 probing 046d:0892
[  850.217954][   T29] kauditd_printk_skb: 28 callbacks suppressed
[  850.217976][   T29] audit: type=1800 audit(1719375564.839:1029): pid=14409 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2044" name="bus" dev="sda1" ino=2095 res=0 errno=0
[  850.255042][T14400] EXT4-fs (loop4): 1 truncate cleaned up
[  850.270792][T14407] loop1: detected capacity change from 0 to 4096
[  850.291044][T14400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  850.315040][T14407] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  850.337247][T14407] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  850.395649][ T5140] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  850.421781][T14412] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  850.469041][T14400] netlink: 'syz.4.2042': attribute type 6 has an invalid length.
[  850.649725][   T29] audit: type=1800 audit(1719375565.269:1030): pid=14416 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2046" name="bus" dev="sda1" ino=2095 res=0 errno=0
[  850.685070][ T5140] hid-generic 0003:046D:C314.001E: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.2-1/input0
[  850.837993][T12215] gspca_vc032x: reg_r err -32
[  850.851237][T12215] vc032x 1-1:0.0: probe with driver vc032x failed with error -32
[  850.890702][T14393] loop2: detected capacity change from 0 to 1024
[  851.034585][ T7940] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  851.049619][T14393] xt_hashlimit: overflow, try lower: 3/0
[  851.324056][ T5138] usb 3-1: USB disconnect, device number 32
[  851.829310][ T1563] hfsplus: b-tree write err: -5, ino 8
[  852.007796][ T5140] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  852.214587][ T5140] usb 4-1: Using ep0 maxpacket: 8
[  852.242536][ T5140] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  852.276673][ T5140] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  852.300411][ T5140] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  852.326661][ T5140] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  852.358332][ T5140] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  852.384433][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.499088][   T25] usb 1-1: USB disconnect, device number 23
[  852.610771][ T5140] usb 4-1: GET_CAPABILITIES returned 0
[  852.629728][ T5140] usbtmc 4-1:16.0: can't read capabilities
[  852.880075][ T5095] usb 4-1: USB disconnect, device number 31
[  852.948033][T14419] loop4: detected capacity change from 0 to 32768
[  852.975981][T14419] btrfs: Unknown parameter 'fsuuid'
[  853.057863][   T25] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  853.250807][   T25] usb 1-1: Using ep0 maxpacket: 16
[  853.270309][   T25] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  853.312213][   T25] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  853.332716][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.357981][   T25] usb 1-1: Product: syz
[  853.373232][   T25] usb 1-1: Manufacturer: а
[  853.386075][   T25] usb 1-1: SerialNumber: syz
[  853.841185][   T25] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  854.002187][   T25] usb 1-1: USB disconnect, device number 24
[  854.614947][T14459] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-all": -EINTR
[  854.769296][   T29] audit: type=1800 audit(1719375569.369:1031): pid=14469 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2058" name="bus" dev="sda1" ino=2086 res=0 errno=0
[  854.843461][T14453] loop2: detected capacity change from 0 to 8192
[  854.928590][T14453]  loop2: p2 p4[EZD]
[  854.933000][T14453] loop2: p2 size 2130706432 extends beyond EOD, truncated
[  854.971065][T14453] loop2: p4 size 65536 extends beyond EOD, truncated
[  855.384789][T14477] loop0: detected capacity change from 0 to 8
[  855.409436][ T5138] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  855.627703][ T5138] usb 4-1: Using ep0 maxpacket: 8
[  855.679008][ T5138] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  855.740547][ T5138] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  855.968250][T14489] loop4: detected capacity change from 0 to 32768
[  855.990593][T14489] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2064 (14489)
[  856.023734][T14489] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  856.034115][T14489] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  856.042858][T14489] BTRFS info (device loop4): using free-space-tree
[  856.050611][ T5138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.149462][ T5138] usb 4-1: config 0 descriptor??
[  856.216215][ T5138] gspca_main: vc032x-2.14.0 probing 046d:0892
[  857.055685][ T5138] gspca_vc032x: reg_r err -32
[  857.060635][ T5138] vc032x 4-1:0.0: probe with driver vc032x failed with error -32
[  857.180287][ T7940] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  857.661234][T14519] fuse: Bad value for 'user_id'
[  857.817124][T14523] loop2: detected capacity change from 0 to 1024
[  857.847348][T14523] EXT4-fs: Ignoring removed oldalloc option
[  857.921325][T14523] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  858.048393][T14523] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.2069: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  858.084889][T14526] loop1: detected capacity change from 0 to 4096
[  858.098353][ T5138] usb 4-1: USB disconnect, device number 32
[  858.140916][T14523] EXT4-fs error (device loop2): ext4_quota_enable:7037: comm syz.2.2069: Bad quota inode: 4, type: 1
[  858.168557][T14523] EXT4-fs warning (device loop2): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  858.212467][T14523] EXT4-fs (loop2): mount failed
[  858.287755][T14526] ntfs3: loop1: Failed to load $Extend (-22).
[  858.314365][T14526] ntfs3: loop1: Failed to initialize $Extend.
[  858.344002][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'.
[  858.678851][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies.
[  858.798505][T14544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2074'.
[  858.877186][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2074'.
[  859.197790][ T5138] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  859.366231][T14532] loop3: detected capacity change from 0 to 32768
[  859.377800][ T5138] usb 2-1: device descriptor read/64, error -71
[  859.616952][T14552] loop2: detected capacity change from 0 to 32768
[  859.642291][T14552] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2077 (14552)
[  859.688568][T14552] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  859.701033][T14552] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  859.709895][T14552] BTRFS info (device loop2): using free-space-tree
[  859.803963][ T5138] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  859.999686][T14532] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names
[  860.122189][ T5138] usb 2-1: device descriptor read/64, error -71
[  860.134199][T14532] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  860.259146][ T5138] usb usb2-port1: attempt power cycle
[  860.645554][ T9202] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  860.668836][T14532] bcachefs (loop3): alloc_read... done
[  860.674476][T14532] bcachefs (loop3): stripes_read... done
[  860.737691][T14532] bcachefs (loop3): snapshots_read... done
[  860.740420][T14534] loop4: detected capacity change from 0 to 4096
[  860.767200][T14532] bcachefs (loop3): journal_replay... done
[  860.779713][T14534] ntfs3: Unknown parameter 'iochars
'
[  860.813540][T14532] bcachefs (loop3): resume_logged_ops... done
[  860.847005][T14532] bcachefs (loop3): going read-write
[  860.886373][T14532] bcachefs (loop3): done starting filesystem
[  860.937749][ T5138] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  861.036992][ T5138] usb 2-1: device descriptor read/8, error -71
[  861.056445][T12706] bcachefs (loop3): shutting down
[  861.073743][T12706] bcachefs (loop3): going read-only
[  861.079250][T12706] bcachefs (loop3): finished waiting for writes to stop
[  861.137456][T12706] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12
[  861.215028][T12706] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13
[  861.262164][T12706] bcachefs (loop3): shutdown complete, journal seq 14
[  861.274936][T12706] bcachefs (loop3): marking filesystem clean
[  861.347642][ T5138] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  861.388031][T12706] bcachefs (loop3): shutdown complete
[  861.388448][ T5138] usb 2-1: device descriptor read/8, error -71
[  861.404643][   T58] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  861.588245][ T5138] usb usb2-port1: unable to enumerate USB device
[  861.618493][   T58] usb 1-1: Using ep0 maxpacket: 8
[  861.637921][   T58] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  861.677626][   T58] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  861.727690][   T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.775520][   T58] usb 1-1: config 0 descriptor??
[  861.812575][   T58] gspca_main: vc032x-2.14.0 probing 046d:0892
[  862.094616][T14598] fuse: Bad value for 'user_id'
[  862.402706][T14600] loop1: detected capacity change from 0 to 1024
[  862.417140][   T58] gspca_vc032x: reg_r err -32
[  862.521389][T14600] EXT4-fs: Ignoring removed oldalloc option
[  862.527709][   T58] vc032x 1-1:0.0: probe with driver vc032x failed with error -32
[  862.589435][T14600] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  863.117187][T14609] netlink: 'syz.3.2083': attribute type 12 has an invalid length.
[  863.125543][T14609] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2083'.
[  863.784790][T14600] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.2084: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  863.817980][T14600] EXT4-fs error (device loop1): ext4_quota_enable:7037: comm syz.1.2084: Bad quota inode: 4, type: 1
[  863.956765][T14600] EXT4-fs warning (device loop1): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  864.031565][T14600] EXT4-fs (loop1): mount failed
[  864.127423][ T5138] usb 1-1: USB disconnect, device number 25
[  864.230539][T14615] bond0: Unable to set up delay as MII monitoring is disabled
[  864.317896][ T5139] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  864.568225][ T5139] usb 4-1: config index 0 descriptor too short (expected 65129, got 72)
[  864.618457][ T5139] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  864.649911][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.678625][ T5139] usb 4-1: Product: syz
[  864.684845][ T5139] usb 4-1: Manufacturer: syz
[  864.690024][ T5139] usb 4-1: SerialNumber: syz
[  864.716732][ T5139] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  864.754408][ T5138] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  864.797087][T14620] 9pnet_fd: Insufficient options for proto=fd
[  865.073304][T14630] loop4: detected capacity change from 0 to 1024
[  865.128680][T14630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  865.195021][ T5140] usb 4-1: USB disconnect, device number 33
[  865.372021][T14634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2094'.
[  865.393728][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2094'.
[  865.697753][ T5129] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  865.860811][ T5138] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  865.877956][ T5129] usb 1-1: device descriptor read/64, error -71
[  865.881449][ T5138] ath9k_htc: Failed to initialize the device
[  865.919884][ T5140] usb 4-1: ath9k_htc: USB layer deinitialized
[  865.994235][T14626] loop1: detected capacity change from 0 to 32768
[  866.080629][T14632] loop2: detected capacity change from 0 to 32768
[  866.081130][T14638] Cannot find add_set index 0 as target
[  866.188932][ T5129] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  866.347729][ T5129] usb 1-1: device descriptor read/64, error -71
[  866.433234][T14632] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,background_compression=zstd,nojournal_transaction_names
[  866.486075][T14632] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  866.494834][ T5129] usb usb1-port1: attempt power cycle
[  866.608935][T14632] bcachefs (loop2): alloc_read... done
[  866.642090][T14632] bcachefs (loop2): stripes_read... done
[  866.655543][T14632] bcachefs (loop2): snapshots_read... done
[  866.678378][T14632] bcachefs (loop2): journal_replay... done
[  866.716645][T14632] bcachefs (loop2): resume_logged_ops... done
[  866.764902][T14632] bcachefs (loop2): going read-write
[  866.796187][T14632] bcachefs (loop2): done starting filesystem
[  866.879303][  T112] read_mapping_page failed!
[  866.919358][ T9202] bcachefs (loop2): shutting down
[  866.924461][ T9202] bcachefs (loop2): going read-only
[  866.934353][ T5129] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  866.957630][ T9202] bcachefs (loop2): finished waiting for writes to stop
[  866.982819][ T5129] usb 1-1: device descriptor read/8, error -71
[  867.000971][ T9202] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13
[  867.037689][ T9202] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 14
[  867.070303][ T9202] bcachefs (loop2): shutdown complete, journal seq 15
[  867.152570][ T9202] bcachefs (loop2): marking filesystem clean
[  867.345628][ T9202] bcachefs (loop2): shutdown complete
[  867.485609][T14657] netlink: 'syz.3.2096': attribute type 12 has an invalid length.
[  867.493721][T14657] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2096'.
[  868.064844][ T5129] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  868.209740][ T5129] usb 1-1: device descriptor read/8, error -71
[  868.332911][ T5129] usb usb1-port1: unable to enumerate USB device
[  868.748421][T14674] loop3: detected capacity change from 0 to 64
[  868.787851][ T5140] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  868.935260][T14676] 9pnet_fd: Insufficient options for proto=fd
[  868.937736][ T5138] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  869.047623][ T5140] usb 5-1: Using ep0 maxpacket: 8
[  869.054848][ T5140] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  869.070369][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  869.107758][ T5139] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  869.143820][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  869.153932][ T5138] usb 2-1: Using ep0 maxpacket: 8
[  869.155988][ T5138] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  869.172614][ T5138] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  869.182410][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.220162][ T5138] usb 2-1: config 0 descriptor??
[  869.226233][ T5140] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  869.240079][ T5138] gspca_main: vc032x-2.14.0 probing 046d:0892
[  869.270107][ T5140] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  869.315412][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.317682][ T5139] usb 4-1: Using ep0 maxpacket: 32
[  869.358793][ T5139] usb 4-1: New USB device found, idVendor=0403, idProduct=cff8, bcdDevice=ac.64
[  869.391803][ T5139] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.426870][ T5139] usb 4-1: Product: syz
[  869.446263][ T5139] usb 4-1: Manufacturer: syz
[  869.463857][ T5139] usb 4-1: SerialNumber: syz
[  869.483183][ T5139] usb 4-1: config 0 descriptor??
[  869.500058][ T5139] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG
[  869.571199][ T5140] usb 5-1: usb_control_msg returned -71
[  869.576855][ T5140] usbtmc 5-1:16.0: can't read capabilities
[  869.611816][ T5140] usb 5-1: USB disconnect, device number 16
[  869.814498][ T5139] usb 4-1: USB disconnect, device number 34
[  869.837043][ T5138] gspca_vc032x: reg_r err -32
[  869.845675][ T5138] vc032x 2-1:0.0: probe with driver vc032x failed with error -32
[  869.871083][T14682] Cannot find add_set index 0 as target
[  870.019317][T14685] loop2: detected capacity change from 0 to 512
[  870.043353][T14685] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  870.371395][T14685] pimreg: entered allmulticast mode
[  870.399160][T14685] pimreg: left allmulticast mode
[  870.544004][T14688] loop2: detected capacity change from 0 to 1024
[  870.583990][T14688] hfsplus: invalid btree flag
[  870.593728][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[  870.593799][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  870.621015][T14688] hfsplus: failed to load attributes file
[  871.149586][T14694] loop4: detected capacity change from 0 to 64
[  871.392441][T14700] netlink: 'syz.0.2111': attribute type 12 has an invalid length.
[  871.400590][T14700] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2111'.
[  872.310361][ T5139] usb 2-1: USB disconnect, device number 36
[  872.451808][T14706] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2112'.
[  872.489564][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2112'.
[  872.634647][T14691] loop3: detected capacity change from 0 to 32768
[  872.729574][T14691] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  872.827846][ T5129] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  872.850316][T14727] 9pnet_fd: Insufficient options for proto=fd
[  873.001110][ T5129] usb 1-1: device descriptor read/64, error -71
[  873.027833][T14691] XFS (loop3): Ending clean mount
[  873.054973][T14691] XFS (loop3): Quotacheck needed: Please wait.
[  873.141675][T14730] loop4: detected capacity change from 0 to 4096
[  873.256037][T14691] XFS (loop3): Quotacheck: Done.
[  873.268842][T14730] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  873.326063][T14730] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096)
[  873.368836][ T5129] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  873.468407][T14733] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  873.537878][ T5129] usb 1-1: device descriptor read/64, error -71
[  873.658972][ T5129] usb usb1-port1: attempt power cycle
[  874.237353][T14738] netlink: 'syz.1.2119': attribute type 12 has an invalid length.
[  874.245421][T14738] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2119'.
[  874.997744][ T5129] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  875.060207][ T5129] usb 1-1: device descriptor read/8, error -71
[  875.187308][T14691] syz.3.2109 (14691): drop_caches: 2
[  875.269053][T14745] Cannot find add_set index 0 as target
[  875.357893][ T5129] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  875.448176][ T5129] usb 1-1: device descriptor read/8, error -71
[  875.482818][T12706] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  875.814034][ T5129] usb usb1-port1: unable to enumerate USB device
[  876.584153][T14750] netlink: 'syz.0.2123': attribute type 12 has an invalid length.
[  876.593849][T14750] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2123'.
[  877.378806][T14743] loop2: detected capacity change from 0 to 32768
[  877.396725][T14743] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2120 (14743)
[  877.437301][T14754] overlayfs: missing 'workdir'
[  877.450521][T14743] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  877.461227][T14743] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  877.539787][T14743] BTRFS info (device loop2): using free-space-tree
[  877.679776][T14761] loop4: detected capacity change from 0 to 1764
[  877.711639][T14761] iso9660: Bad value for 'gid'
[  878.349354][ T9202] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  878.437368][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'.
[  878.517988][T12215] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  878.687747][T14784] loop1: detected capacity change from 0 to 1024
[  878.721725][T14784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  878.753980][T12215] usb 1-1: Using ep0 maxpacket: 8
[  878.775845][T12215] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  878.802639][T12215] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  878.840741][T12215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.871160][T12215] usb 1-1: config 0 descriptor??
[  878.881692][T12215] gspca_main: vc032x-2.14.0 probing 046d:0892
[  878.891321][T14787] netlink: 'syz.3.2131': attribute type 4 has an invalid length.
[  879.078707][T14789] loop4: detected capacity change from 0 to 256
[  879.421813][T14792] 9pnet_fd: Insufficient options for proto=fd
[  879.521666][T12215] gspca_vc032x: reg_r err -32
[  879.526526][T12215] vc032x 1-1:0.0: probe with driver vc032x failed with error -32
[  879.623274][T14797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2133'.
[  879.659234][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'.
[  879.822176][T14799] loop3: detected capacity change from 0 to 4096
[  879.862735][T14799] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  879.908720][T14799] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  880.037791][T14805] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  880.421744][T14819] overlayfs: missing 'workdir'
[  880.669606][ T5139] usb 1-1: USB disconnect, device number 34
[  881.638625][T14831] loop1: detected capacity change from 0 to 8
[  881.845178][T14829] loop4: detected capacity change from 0 to 1764
[  881.864508][T14829] iso9660: Bad value for 'gid'
[  881.974748][T14841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2145'.
[  882.098757][T14840] loop2: detected capacity change from 0 to 512
[  882.264693][   T29] audit: type=1804 audit(1719375596.879:1032): pid=14844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.2147" name="/root/syzkaller.MDsBrw/188/bus" dev="sda1" ino=2097 res=1 errno=0
[  882.345815][   T29] audit: type=1804 audit(1719375596.879:1033): pid=14844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.2147" name="/root/syzkaller.MDsBrw/188/bus" dev="sda1" ino=2097 res=1 errno=0
[  882.409974][   T29] audit: type=1804 audit(1719375596.889:1034): pid=14843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.2147" name="/root/syzkaller.MDsBrw/188/bus" dev="sda1" ino=2097 res=1 errno=0
[  882.798225][T14853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2150'.
[  882.801352][T14852] loop4: detected capacity change from 0 to 1024
[  882.826367][T14854] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0
[  882.864853][T14852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  882.926967][T14856] overlayfs: missing 'lowerdir'
[  883.292669][ T5139] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  883.540331][ T5139] usb 3-1: Using ep0 maxpacket: 8
[  883.649781][ T5139] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  883.789918][ T5139] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  883.839813][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.948572][ T5139] usb 3-1: config 0 descriptor??
[  883.991307][ T5139] gspca_main: vc032x-2.14.0 probing 046d:0892
[  884.218546][T14863] dvmrp0: entered allmulticast mode
[  884.286460][T14863] pimreg: entered allmulticast mode
[  884.329254][T14863] pimreg: left allmulticast mode
[  884.522287][T14865] loop3: detected capacity change from 0 to 1024
[  884.596119][ T5139] gspca_vc032x: reg_r err -32
[  884.602314][ T5139] vc032x 3-1:0.0: probe with driver vc032x failed with error -32
[  885.195868][T14878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2157'.
[  889.114375][ T5095] usb 3-1: USB disconnect, device number 33
[  889.276317][T14898] overlayfs: missing 'lowerdir'
[  890.770382][T14905] loop1: detected capacity change from 0 to 4096
[  890.834402][T14905] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  890.978251][T14905] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  891.089201][T14908] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  891.114952][T14903] loop2: detected capacity change from 0 to 512
[  891.162242][   T12] hfsplus: b-tree write err: -5, ino 4
[  891.165735][T14909] loop4: detected capacity change from 0 to 256
[  891.564004][T14915] syzkaller0: entered allmulticast mode
[  891.921388][T14924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2169'.
[  892.157203][T14926] loop3: detected capacity change from 0 to 64
[  899.207635][ T5095] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  899.457709][ T5095] usb 3-1: Using ep0 maxpacket: 8
[  899.465186][ T5095] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  899.475616][ T5095] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  899.492531][T14940] 9pnet_fd: Insufficient options for proto=fd
[  899.507654][ T5095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  899.542655][ T5095] usb 3-1: config 0 descriptor??
[  899.571015][ T5095] gspca_main: vc032x-2.14.0 probing 046d:0892
[  900.213550][ T5095] gspca_vc032x: reg_r err -32
[  900.218646][ T5095] vc032x 3-1:0.0: probe with driver vc032x failed with error -32
[  902.120626][T12215] usb 3-1: USB disconnect, device number 34
[  902.439775][T14961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2180'.
[  903.223831][ T5086] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  903.239751][ T5086] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  903.256479][ T5086] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  903.310786][ T9231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  903.324355][ T9231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  903.333418][T14977] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  903.345389][T14977] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  903.357711][T14977] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  903.392095][T14977] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  903.430925][ T5091] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  903.440474][ T5091] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  903.461726][ T5091] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  903.713703][ T5091] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  903.741058][ T5091] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  903.764958][ T5091] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  903.786076][ T5091] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  903.812810][ T5091] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  903.834571][ T5091] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  905.457818][ T5086] Bluetooth: hci8: command tx timeout
[  905.537766][ T5086] Bluetooth: hci9: command tx timeout
[  905.947440][ T5086] Bluetooth: hci10: command tx timeout
[  906.032108][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2170'.
[  906.047731][T14927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2170'.
[  906.318452][T14969] bridge0: port 1(bridge_slave_0) entered blocking state
[  906.325652][T14969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  906.712186][T14984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2184'.
[  906.732868][T14982] loop2: detected capacity change from 0 to 4096
[  906.772998][T14982] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  906.828557][T14982] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096)
[  906.894584][T14988] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  907.219300][   T29] audit: type=1800 audit(1719375621.839:1035): pid=14991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2186" name="bus" dev="sda1" ino=2098 res=0 errno=0
[  907.470882][   T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  907.537947][ T5086] Bluetooth: hci8: command tx timeout
[  907.618713][ T5086] Bluetooth: hci9: command tx timeout
[  907.858676][   T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.018385][ T5086] Bluetooth: hci10: command tx timeout
[  908.122276][   T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.266342][   T29] audit: type=1326 audit(1719375622.879:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14998 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686af75ae9 code=0x7ffc0000
[  908.339980][   T29] audit: type=1326 audit(1719375622.909:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14998 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f686af75ae9 code=0x7ffc0000
[  908.356973][T14999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2188'.
[  908.407587][   T29] audit: type=1326 audit(1719375622.909:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14998 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f686af75b23 code=0x7ffc0000
[  908.457893][   T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  908.494272][   T29] audit: type=1326 audit(1719375622.909:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14998 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f686af75b23 code=0x7ffc0000
[  908.579382][   T29] audit: type=1326 audit(1719375622.909:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14998 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686af75ae9 code=0x7ffc0000
[  908.701395][   T29] audit: type=1326 audit(1719375622.909:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14998 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686af75ae9 code=0x7ffc0000
[  908.760672][   T29] audit: type=1326 audit(1719375622.909:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14998 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686af75ae9 code=0x7ffc0000
[  908.782958][   T29] audit: type=1326 audit(1719375622.909:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14998 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686af75ae9 code=0x7ffc0000
[  908.836832][   T29] audit: type=1326 audit(1719375622.909:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14998 comm="syz.1.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f686af75ae9 code=0x7ffc0000
[  908.894952][T14979] chnl_net:caif_netlink_parms(): no params data found
[  909.618727][ T5086] Bluetooth: hci8: command tx timeout
[  909.697999][ T5086] Bluetooth: hci9: command tx timeout
[  910.101784][ T5086] Bluetooth: hci10: command tx timeout
[  910.224260][T14975] chnl_net:caif_netlink_parms(): no params data found
[  911.288061][   T62] bridge_slave_1: left allmulticast mode
[  911.325120][   T62] bridge_slave_1: left promiscuous mode
[  911.371524][   T62] bridge0: port 2(bridge_slave_1) entered disabled state
[  911.418508][   T62] bridge_slave_0: left allmulticast mode
[  911.424264][   T62] bridge_slave_0: left promiscuous mode
[  911.440579][   T62] bridge0: port 1(bridge_slave_0) entered disabled state
[  911.700970][ T5086] Bluetooth: hci8: command tx timeout
[  911.777665][ T5086] Bluetooth: hci9: command tx timeout
[  912.199547][ T5086] Bluetooth: hci10: command tx timeout
[  913.182945][T15040] loop2: detected capacity change from 0 to 512
[  914.192292][ T5139] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  914.386589][   T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  914.408036][ T5139] usb 2-1: config index 0 descriptor too short (expected 65129, got 72)
[  914.441794][ T5139] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  914.444030][T15044] loop2: detected capacity change from 0 to 32768
[  914.458273][   T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  914.464665][T15044] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2196 (15044)
[  914.477159][ T5139] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.494639][T15044] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  914.505002][T15044] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  914.510964][ T5139] usb 2-1: Product: syz
[  914.514155][T15044] BTRFS info (device loop2): using free-space-tree
[  914.521146][   T62] bond0 (unregistering): Released all slaves
[  914.537551][ T5139] usb 2-1: Manufacturer: syz
[  914.552508][ T5139] usb 2-1: SerialNumber: syz
[  914.568314][ T5139] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  914.595960][    T8] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  914.627261][T14979] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.649605][T14979] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.657021][T14979] bridge_slave_0: entered allmulticast mode
[  914.670962][T14979] bridge_slave_0: entered promiscuous mode
[  914.995055][T14979] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.074643][T14979] bridge0: port 2(bridge_slave_1) entered disabled state
[  915.164714][T14979] bridge_slave_1: entered allmulticast mode
[  915.327900][T14979] bridge_slave_1: entered promiscuous mode
[  916.044471][ T9202] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  916.086619][T14972] chnl_net:caif_netlink_parms(): no params data found
[  916.362438][T14975] bridge0: port 1(bridge_slave_0) entered blocking state
[  916.388140][T14975] bridge0: port 1(bridge_slave_0) entered disabled state
[  916.412370][T14975] bridge_slave_0: entered allmulticast mode
[  916.442811][T14975] bridge_slave_0: entered promiscuous mode
[  916.488994][T14975] bridge0: port 2(bridge_slave_1) entered blocking state
[  916.515180][T14975] bridge0: port 2(bridge_slave_1) entered disabled state
[  916.533595][T14975] bridge_slave_1: entered allmulticast mode
[  916.587703][T14975] bridge_slave_1: entered promiscuous mode
[  917.041159][T14975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  917.088883][T14975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  917.552273][T14975] team0: Port device team_slave_0 added
[  917.599278][T14975] team0: Port device team_slave_1 added
[  917.900094][T14975] batman_adv: batadv0: Adding interface: batadv_slave_0
[  917.907093][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  918.049946][T14975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  918.121858][T14975] batman_adv: batadv0: Adding interface: batadv_slave_1
[  918.156858][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  918.247767][T14975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  918.751965][T14975] hsr_slave_0: entered promiscuous mode
[  918.802481][T14975] hsr_slave_1: entered promiscuous mode
[  918.857776][T14975] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  918.865396][T14975] Cannot create hsr debugfs directory
[  920.967315][T14975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.662767][T14975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  923.260930][T14975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  924.593451][T14975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  925.637344][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  925.658475][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  925.669123][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  925.678644][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  925.686499][ T5091] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  925.694088][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  926.631435][T15064] chnl_net:caif_netlink_parms(): no params data found
[  927.369109][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  927.389038][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  927.398765][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  927.409369][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  927.417241][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  927.427820][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  927.778271][ T5091] Bluetooth: hci0: command tx timeout
[  928.339538][T15064] bridge0: port 1(bridge_slave_0) entered blocking state
[  928.346769][T15064] bridge0: port 1(bridge_slave_0) entered disabled state
[  928.387906][T15064] bridge_slave_0: entered allmulticast mode
[  928.396440][T15064] bridge_slave_0: entered promiscuous mode
[  928.442846][T15064] bridge0: port 2(bridge_slave_1) entered blocking state
[  928.477139][T15064] bridge0: port 2(bridge_slave_1) entered disabled state
[  928.498178][T15064] bridge_slave_1: entered allmulticast mode
[  928.505853][T15064] bridge_slave_1: entered promiscuous mode
[  929.049757][T15064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  929.101519][T15064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  929.538266][ T5091] Bluetooth: hci2: command tx timeout
[  929.563013][T15064] team0: Port device team_slave_0 added
[  929.629050][T15064] team0: Port device team_slave_1 added
[  929.868097][ T5091] Bluetooth: hci0: command tx timeout
[  930.239367][T15064] batman_adv: batadv0: Adding interface: batadv_slave_0
[  930.246379][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  930.355102][T15064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  930.391754][T15064] batman_adv: batadv0: Adding interface: batadv_slave_1
[  930.417783][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  930.505076][T15064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  931.602750][T15064] hsr_slave_0: entered promiscuous mode
[  931.620619][ T5091] Bluetooth: hci2: command tx timeout
[  931.704218][T15064] hsr_slave_1: entered promiscuous mode
[  931.797891][T15064] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  931.805620][T15064] Cannot create hsr debugfs directory
[  931.937907][ T5091] Bluetooth: hci0: command tx timeout
[  932.108411][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[  932.114902][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  933.698065][ T5091] Bluetooth: hci2: command tx timeout
[  934.017766][ T5091] Bluetooth: hci0: command tx timeout
[  935.780153][ T5091] Bluetooth: hci2: command tx timeout
[  963.919948][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  963.947446][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  963.963085][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  963.975134][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  963.986156][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  963.993676][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  965.389332][ T5091] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  965.403477][ T5091] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  965.412901][ T5091] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  965.421355][ T5091] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  965.438361][ T5091] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  965.445835][ T5091] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  965.505673][T15078] chnl_net:caif_netlink_parms(): no params data found
[  965.595396][ T5086] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  965.611068][ T5086] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  965.620731][ T5086] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  965.629359][ T5086] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  965.637321][ T5086] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  965.645055][ T5086] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  966.107671][ T5086] Bluetooth: hci4: command tx timeout
[  966.884856][T15078] bridge0: port 1(bridge_slave_0) entered blocking state
[  966.905615][T15078] bridge0: port 1(bridge_slave_0) entered disabled state
[  966.928147][T15078] bridge_slave_0: entered allmulticast mode
[  966.996208][T15078] bridge_slave_0: entered promiscuous mode
[  967.018415][T15078] bridge0: port 2(bridge_slave_1) entered blocking state
[  967.025689][T15078] bridge0: port 2(bridge_slave_1) entered disabled state
[  967.068204][T15078] bridge_slave_1: entered allmulticast mode
[  967.085502][T15078] bridge_slave_1: entered promiscuous mode
[  967.537714][ T5086] Bluetooth: hci5: command tx timeout
[  967.667123][T15078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  967.700026][ T5086] Bluetooth: hci11: command tx timeout
[  967.730472][T15078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  968.177752][ T5086] Bluetooth: hci4: command tx timeout
[  968.244661][T15078] team0: Port device team_slave_0 added
[  968.299138][T15078] team0: Port device team_slave_1 added
[  968.811492][T15078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  968.837729][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  968.937742][T15078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  969.010845][T15078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  969.028998][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  969.109592][T15078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  969.617655][ T5086] Bluetooth: hci5: command tx timeout
[  969.778245][ T5086] Bluetooth: hci11: command tx timeout
[  969.819200][T15078] hsr_slave_0: entered promiscuous mode
[  969.893919][T15078] hsr_slave_1: entered promiscuous mode
[  970.120154][T15078] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  970.141291][T15078] Cannot create hsr debugfs directory
[  970.257882][ T5086] Bluetooth: hci4: command tx timeout
[  971.697990][ T5086] Bluetooth: hci5: command tx timeout
[  971.857645][ T5086] Bluetooth: hci11: command tx timeout
[  972.338078][ T5086] Bluetooth: hci4: command tx timeout
[  973.779519][ T5086] Bluetooth: hci5: command tx timeout
[  973.938017][ T5086] Bluetooth: hci11: command tx timeout
[  986.540367][ T5091] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  986.565130][ T5091] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  986.579055][ T5091] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  986.587581][ T5091] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  986.595488][ T5091] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  986.610090][ T5091] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  987.788797][T15091] chnl_net:caif_netlink_parms(): no params data found
[  988.306594][ T5086] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  988.322930][ T5086] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  988.332563][ T5086] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  988.345435][T14977] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  988.361270][T14977] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  988.377726][T14977] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  988.657747][T14977] Bluetooth: hci12: command tx timeout
[  988.667193][T15091] bridge0: port 1(bridge_slave_0) entered blocking state
[  988.709733][T15091] bridge0: port 1(bridge_slave_0) entered disabled state
[  988.717114][T15091] bridge_slave_0: entered allmulticast mode
[  988.753395][T15091] bridge_slave_0: entered promiscuous mode
[  988.801047][T15091] bridge0: port 2(bridge_slave_1) entered blocking state
[  988.837820][T15091] bridge0: port 2(bridge_slave_1) entered disabled state
[  988.845274][T15091] bridge_slave_1: entered allmulticast mode
[  988.908139][T15091] bridge_slave_1: entered promiscuous mode
[  989.525557][T15091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  989.582514][T15091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  990.130016][T15091] team0: Port device team_slave_0 added
[  990.162648][T15091] team0: Port device team_slave_1 added
[  990.498163][T14977] Bluetooth: hci13: command tx timeout
[  990.747803][T14977] Bluetooth: hci12: command tx timeout
[  991.047824][T15091] batman_adv: batadv0: Adding interface: batadv_slave_0
[  991.054839][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  991.185633][T15091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  991.247889][T15091] batman_adv: batadv0: Adding interface: batadv_slave_1
[  991.254892][T15091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  991.367770][T15091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  991.980951][T15091] hsr_slave_0: entered promiscuous mode
[  992.080666][T15091] hsr_slave_1: entered promiscuous mode
[  992.125491][T15091] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  992.151418][T15091] Cannot create hsr debugfs directory
[  992.577989][T14977] Bluetooth: hci13: command tx timeout
[  992.818568][T14977] Bluetooth: hci12: command tx timeout
[  993.462696][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[  993.470661][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  994.658614][T14977] Bluetooth: hci13: command tx timeout
[  994.899405][T14977] Bluetooth: hci12: command tx timeout
[  996.738101][T14977] Bluetooth: hci13: command tx timeout
[  998.187548][    C0] hrtimer: interrupt took 10960634 ns
[ 1024.741468][T15108] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[ 1024.790561][T15108] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[ 1024.807801][T15108] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[ 1024.816375][T15108] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[ 1024.825099][T15108] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[ 1024.837896][T15108] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[ 1025.699813][T14978] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[ 1025.713658][T14978] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[ 1025.722491][T14978] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[ 1025.748529][T14978] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[ 1025.764558][T14978] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[ 1025.782621][T14978] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[ 1025.881249][T15108] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[ 1025.899804][T15108] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[ 1025.910976][T15108] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[ 1025.922551][T15108] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[ 1025.931294][T15108] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[ 1025.945242][T15108] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[ 1026.220548][T15107] chnl_net:caif_netlink_parms(): no params data found
[ 1026.267927][T14978] Bluetooth: hci8: command 0x0406 tx timeout
[ 1026.274213][T14978] Bluetooth: hci9: command 0x0406 tx timeout
[ 1026.280520][T15108] Bluetooth: hci10: command 0x0406 tx timeout
[ 1026.897723][ T5086] Bluetooth: hci14: command tx timeout
[ 1027.713686][T15107] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1027.737627][T15107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1027.745427][T15107] bridge_slave_0: entered allmulticast mode
[ 1027.789442][T15107] bridge_slave_0: entered promiscuous mode
[ 1027.829383][T15107] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1027.857977][ T5086] Bluetooth: hci15: command tx timeout
[ 1027.874588][T15107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1027.901368][T15107] bridge_slave_1: entered allmulticast mode
[ 1027.944423][T15107] bridge_slave_1: entered promiscuous mode
[ 1028.018247][ T5086] Bluetooth: hci16: command tx timeout
[ 1028.710470][T15107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1028.787718][T15107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1028.977735][ T5086] Bluetooth: hci14: command tx timeout
[ 1029.814432][T15107] team0: Port device team_slave_0 added
[ 1029.908914][T15107] team0: Port device team_slave_1 added
[ 1029.937863][ T5086] Bluetooth: hci15: command tx timeout
[ 1030.097965][ T5086] Bluetooth: hci16: command tx timeout
[ 1030.212364][T15107] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1030.237810][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1030.344277][T15107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1030.410071][T15107] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1030.417165][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1030.537548][T15107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1031.057604][ T5086] Bluetooth: hci14: command tx timeout
[ 1031.399464][T15107] hsr_slave_0: entered promiscuous mode
[ 1031.499764][T15107] hsr_slave_1: entered promiscuous mode
[ 1031.577633][T15107] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1031.585264][T15107] Cannot create hsr debugfs directory
[ 1032.028108][ T5086] Bluetooth: hci15: command tx timeout
[ 1032.177727][ T5086] Bluetooth: hci16: command tx timeout
[ 1033.137880][ T5086] Bluetooth: hci14: command tx timeout
[ 1034.100118][ T5086] Bluetooth: hci15: command tx timeout
[ 1034.267834][ T5086] Bluetooth: hci16: command tx timeout
[ 1048.401225][T14977] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[ 1048.414136][T14977] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[ 1048.447650][T14977] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[ 1048.456108][T14977] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[ 1048.464355][T14977] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[ 1048.473920][T14977] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[ 1048.559225][ T5086] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[ 1048.571380][ T5086] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[ 1048.590479][ T5086] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[ 1048.603081][ T5086] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[ 1048.612752][ T5086] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[ 1048.620616][ T5086] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[ 1049.515635][T15126] chnl_net:caif_netlink_parms(): no params data found
[ 1050.577741][T14978] Bluetooth: hci17: command tx timeout
[ 1050.717932][T15126] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1050.725134][T15126] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1050.747813][T14978] Bluetooth: hci18: command tx timeout
[ 1050.775652][T15126] bridge_slave_0: entered allmulticast mode
[ 1050.817053][T15126] bridge_slave_0: entered promiscuous mode
[ 1050.859362][T15126] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1050.866963][T15126] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1050.929387][T15126] bridge_slave_1: entered allmulticast mode
[ 1050.951560][T15126] bridge_slave_1: entered promiscuous mode
[ 1051.453635][T15126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1051.495318][T15126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1051.865829][T14978] Bluetooth: hci0: command 0x0406 tx timeout
[ 1051.872435][ T5091] Bluetooth: hci2: command 0x0406 tx timeout
[ 1052.097885][T15126] team0: Port device team_slave_0 added
[ 1052.152300][T15126] team0: Port device team_slave_1 added
[ 1052.662372][ T5086] Bluetooth: hci17: command tx timeout
[ 1052.815428][T15126] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1052.836191][ T5086] Bluetooth: hci18: command tx timeout
[ 1052.868114][T15126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1052.977841][T15126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1053.037608][T15126] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1053.044617][T15126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1053.154427][T15126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1053.909309][T15126] hsr_slave_0: entered promiscuous mode
[ 1054.014033][T15126] hsr_slave_1: entered promiscuous mode
[ 1054.075845][T15126] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1054.117606][T15126] Cannot create hsr debugfs directory
[ 1054.737737][ T5086] Bluetooth: hci17: command tx timeout
[ 1054.902199][ T5086] Bluetooth: hci18: command tx timeout
[ 1054.914692][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.926383][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.828390][ T5086] Bluetooth: hci17: command tx timeout
[ 1056.977664][ T5086] Bluetooth: hci18: command tx timeout
[ 1060.026301][   T30] INFO: task kworker/1:6:5140 blocked for more than 143 seconds.
[ 1060.057767][   T30]       Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
[ 1060.065479][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1060.107101][   T30] task:kworker/1:6     state:D stack:21392 pid:5140  tgid:5140  ppid:2      flags:0x00004000
SYZFAIL: failed to recv rpc
fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)
[ 1060.152517][   T30] Workqueue: events linkwatch_event
[ 1060.175479][   T30] Call Trace:
[ 1060.183244][   T30]  <TASK>
[ 1060.186271][   T30]  __schedule+0x1796/0x49d0
[ 1060.237549][   T30]  ? __pfx___schedule+0x10/0x10
[ 1060.242525][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1060.287725][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1060.292950][   T30]  ? kick_pool+0x1bd/0x620
[ 1060.340292][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1060.345593][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[ 1060.387691][   T30]  ? schedule+0x90/0x320
[ 1060.392041][   T30]  schedule+0x14b/0x320
[ 1060.427042][   T30]  schedule_preempt_disabled+0x13/0x30
[ 1060.457530][   T30]  __mutex_lock+0x6a4/0xd70
[ 1060.462144][   T30]  ? __mutex_lock+0x527/0xd70
[ 1060.466974][   T30]  ? linkwatch_event+0xe/0x60
[ 1060.527659][   T30]  ? __pfx___mutex_lock+0x10/0x10
[ 1060.532803][   T30]  ? process_scheduled_works+0x945/0x1830
[ 1060.578139][   T30]  linkwatch_event+0xe/0x60
[ 1060.582741][   T30]  process_scheduled_works+0xa2c/0x1830
[ 1060.627653][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1060.633736][   T30]  ? assign_work+0x364/0x3d0
[ 1060.669740][   T30]  worker_thread+0x86d/0xd70
[ 1060.674455][   T30]  ? __kthread_parkme+0x169/0x1d0
[ 1060.729443][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1060.754340][   T30]  kthread+0x2f0/0x390
[ 1060.767684][   T30]  ? __pfx_worker_thread+0x10/0x10
[ 1060.772975][   T30]  ? __pfx_kthread+0x10/0x10
[ 1060.817700][   T30]  ret_from_fork+0x4b/0x80
[ 1060.827745][   T30]  ? __pfx_kthread+0x10/0x10
[ 1060.832408][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1060.837234][   T30]  </TASK>
[ 1060.889933][   T30] INFO: task syz-executor:9202 blocked for more than 144 seconds.
[ 1060.917640][   T30]       Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0
[ 1060.925431][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.