last executing test programs:

3m16.025682566s ago: executing program 1 (id=866):
syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x1600008, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c63726561746f723d3e8bef9c2c666f7263652c747970653d726965722c747970653d05f2875e2c6e6c733d6370313235352c00"/73], 0x3, 0x646, &(0x7f0000000900)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0)

3m15.0670123s ago: executing program 1 (id=869):
syz_open_dev$vim2m(&(0x7f0000021a00), 0x800, 0x2)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setparam(r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2c41, 0x0)
write$sequencer(r3, 0x0, 0xfdef)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r4, 0x29, 0xce, 0x0, 0x0)

3m13.68497102s ago: executing program 1 (id=872):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="5001"], 0x150)
write$FUSE_OPEN(r2, &(0x7f0000000280)={0x20}, 0x20)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x9}}, 0x30)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[], 0x1f8)
getresuid(&(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000180)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3])
chdir(&(0x7f0000000080)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)

3m12.985560831s ago: executing program 1 (id=874):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$nci(r0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

3m8.95111333s ago: executing program 1 (id=884):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="5001"], 0x150)
write$FUSE_OPEN(r2, &(0x7f0000000280)={0x20}, 0x20)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x9}}, 0x30)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[], 0x1f8)
getresuid(&(0x7f0000000400), &(0x7f00000001c0), &(0x7f0000000180)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3])
chdir(&(0x7f0000000080)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)

3m7.882101445s ago: executing program 1 (id=887):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b00000000ff00f825ffff00ffff00"})
r6 = syz_open_pts(r5, 0x141601)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xe)
close_range(r4, 0xffffffffffffffff, 0x0)

2m52.544310831s ago: executing program 32 (id=887):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b00000000ff00f825ffff00ffff00"})
r6 = syz_open_pts(r5, 0x141601)
fcntl$setstatus(r6, 0x4, 0x102800)
write(r6, 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xe)
close_range(r4, 0xffffffffffffffff, 0x0)

2m41.465719394s ago: executing program 0 (id=934):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21404e, &(0x7f0000000bc0)={[], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_type={'subj_type', 0x3d, 'euid'}}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@euid_eq}, {@uid_eq}, {@euid_eq}, {@euid_lt}, {@dont_measure}]}, 0x1, 0x507, &(0x7f00000004c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="15000000"], 0x15)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a0000000c00078008001240000a000011000300686173683a6e65742c6e657400000000050004"], 0x58}}, 0x0)
r1 = dup(0xffffffffffffffff)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000180)=0x1, 0x4)
ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x2})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x4)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0x8000f28, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r6, 0x26, &(0x7f0000000080))
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0)
sendmsg$802154_dgram(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="9448ff5deadc9b8d628c8a93d7ccc79d93dcceb13499c5a34278c0b33c307f9e984e4ee14d822a6e2cd6fda168cb25d49cf457b18414fbc43335", 0x3a}, 0x1, 0x0, 0x0, 0x844}, 0x40000)
syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0)

2m36.801570993s ago: executing program 0 (id=944):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000002e7, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$watch_queue(0x0, 0x80)

2m35.6753743s ago: executing program 0 (id=946):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001600), 0x2a040, 0x0)
setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000380)=@in6={0xa, 0x4e21, 0xb, @dev={0xfe, 0x80, '\x00', 0x15}, 0xf7}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)="5b5a44ffcf00c054aa3ddf71a4c945e5b3d0c6118b2c5cbe90d219ab3e7c536a6b81c6fed44a63b07bd293f3693dcfb6655ac50627d7e922f60999928363a588e8d4cfd881cdcb36504559bc5d238d65c6660ce21e210336b75e8521d5b5cc124d73e912e4e5e2e2b90ad43bd45cbfb37756507b8de568e3411f7faf265b4dfc1657fb32ce4e4158b7dea35220fd9013e803448d1d46eb18a2a3f47cdde67130319d7c6cae3ab6303a786ea54e66102fed33", 0xb2}, {&(0x7f00000004c0)="04d4c2c8e7407cfcda23b746d3acf9627ef125", 0x13}, {&(0x7f0000000500)="edb023da205d94c777264d99a95b1acff00efb17df0b313c360f2589812fd79c84eec0715ad4bccce5dc1d3b6d3f3490e1f60f14245dedf48a882cdb261e3ef1c51919902a88bada11102c41ae0a0e82325a36107b9ed6f7800956de9f34d8e9aee6268ffd33e6adf5a5995c379d3e86020e73806a94e9702f20a67d6d2feb766cc1067e8448733f854f813ff6d89dce9c5b36679e2510176195e483b8ee19beb36f2deb29285bd4bee37284cbe783d79f8e9bf14a46e6cc37d75828dd18b4efc36365817f0844f33cb739d3ece54ec899087a1abdd17959afb785af674430f2ffc5cff9f5e1abb425", 0xe9}], 0x3, &(0x7f0000000640)=[{0xb8, 0xff, 0x5, "493a577ff72ca99557d5a1b4e47d3b899b7ae3c276723a39670b7a5fc0722b199e9ba56e45a0872ef430e9dff56f6d27fe1e8c1c3d1e969c5fd91612fd6bfe28112a23b55603b274b74f087928086ba660540e61da12ea2aef9d7aa34674a4e280178e0ebbefb8e6a7b186d4a8c09ce63550eb2f645b9afa139cd1ff2b6f7b641fcfde0fe284e758eb6728065cbcc85aa4c4670b4f19ae3046c29ea997b8d9df8d720e860fd5"}], 0xb8}}, {{&(0x7f0000000700)=@xdp={0x2c, 0x1, 0x0, 0x2b}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000780)="5aa9094622ff9e7a7740dc5d5157a50becf30fc07a1fe7b147732708ed6953d71c7409826f24313f0a26bc95e0e024de5c77d0babc67c6ca51c7b591e14768cabe990a18031b718478bde4226c2e27f6c4c83de8db6dc91507fbfc02e0949385ce483104ce2919dcba2b78efd45b2f5d2cb9eb595d422b22700ecf5125a00aa46bccc7d26e580e0b05287c232d593224b13e278919cb9ab4344be29ddf4f3f5259b78d520038c014dd4d9d7e67d139a9f83edba8644bd2b597c081ec87cbce236c6011b9e68b7196988b92708543383005abfb4b50c41ce9cd5d371b811ab54e2f4d93e67638ed210bdcb73ac14193", 0xef}, {&(0x7f0000000880)="3ac7bddff8b7ea69a9761cbbf2656c2bf86d91d7ed75b6ab23bfbfcb3d58e40043667ec03e247d85b45cc8e641163a0d9a8c2eaa0a5d1d0879a68d36dd925d6bf5497948c200db655d243305f13b40f15c5373aa81857dc0f5a0bb0aa23d89a20b8fe4ea9f48230658d66db315f32e9c2066c6f321b9d86a617e81e9d886c1868205f1", 0x83}, {&(0x7f0000000940)}, {0x0}], 0x4, &(0x7f0000000b80)=[{0x10, 0x3a, 0x6}, {0x80, 0x108, 0x7, "435935bfdefd29f966eecda6e39c3d5d2c916f2afa0e82ca8b458f0ac371a6a60085c5681e60f0148139eb23cfe865578c8b640dc4225d3012a5850de985d97883c9b3ec5bac63629ddae3f4c6130d4ef901790ef9035620e005e2b69c93cdd16cfacdf3b03f846d12afa1898c1d"}, {0x48, 0x117, 0x7, "80823178d8e5ef380ee2dc221cd6a69f94291e55215a545fc18af90e4f38d7cf77caec08d099e735bdce7a80b0f0efe971627e5d4542"}, {0x10, 0x10c, 0x8}], 0xe8}}], 0x2, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = syz_clone(0x200000, &(0x7f00000001c0)="d65f7fcc115d40eeb5644552e8914736b92326b9f7cab143764716943ae712a9c87a2b2ea7c511d4edc3b36f1a0a429ade8315691a7fa5840df46cd22e821adfc08b6ab676ff722ba24d89429ed94411bf4ab055", 0x54, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000240)="62b5b7615f2d4e57355d160e61d5d08d9ee904c9cccb52c6948b936f75e75bcb42753472d044b33f26310c2e9b40846a85aa8d96eaf6b65a1c2cbe91566a2967697c2c8e4e0a49f21383b17a17a8c87126b07f027019bd6a51c0775b075bdfe427d5d28eee6137e8a317d155a637c913f4491342349071104f51f84106ddf61e52ed8498161aeee6745547f3ec4fe52df80c1b30027a8e0fab8dce3d6e57cf7ae57707781b779831f9578102671ad652e50e03d15f89de2c5b13b8f75db4fcaac376379ca203")
timer_create(0x5, &(0x7f0000000140)={0x0, 0x3d, 0x1, @tid=r2}, &(0x7f0000000340))

2m35.246760696s ago: executing program 0 (id=948):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setitimer(0x2, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0)
syz_clone(0x89000, 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)="f4f84ee5b77be10928cc726640b9e7820d419258e9dd1c29a916bdfe2f39c5cedbf04356c27a999a76c2e0ba7f61e365677df52c1c74")

2m34.502162047s ago: executing program 0 (id=949):
mount$bpf(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x888000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'})
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m32.399861088s ago: executing program 0 (id=953):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000100)={0x2, &(0x7f0000003980)=[{@none}, {@fixed}]})
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
setgroups(0x0, 0x0)
memfd_create(0x0, 0x4)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4)
ioperm(0x0, 0x1, 0x1bf4)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

2m15.197065971s ago: executing program 33 (id=953):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000100)={0x2, &(0x7f0000003980)=[{@none}, {@fixed}]})
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
setgroups(0x0, 0x0)
memfd_create(0x0, 0x4)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4)
ioperm(0x0, 0x1, 0x1bf4)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

26.326731753s ago: executing program 2 (id=1260):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
keyctl$clear(0x3, 0xfffffffffffffffd)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './bus\x00'})
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x80, &(0x7f0000000100)=ANY=[], 0x5a, 0x223, &(0x7f0000000440)="$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")
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000000100)='./file0\x00')

23.610271053s ago: executing program 2 (id=1265):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$kcm(0x29, 0x0, 0x0)
iopl(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/meminfo\x00', 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)

19.908578167s ago: executing program 5 (id=1270):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, 0x0, 0x20000000)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="6d61703d6f66662c6d61703d61636f726e006e6f726f636b2c73657373696f6e3d307830203030303030303030332c636865636b3d72656c617865642c6e6f726f636b416e0400000000000000c86b2c6d6f44653d30783030303030303090cf5cee73e4fdbccf1ad8f6238d714830303030303030756e686964652c6d61703d61636f726e2c6f76657272696467726f636b706572916964652c00add51ea2b35249a135fa479f9069028397e9808a385f6e0c9ab44fb55e327ad812fe293a6347f7f50263af07e2638e5c5522fc046bdeb75ac5ae4dfa74f42b394b1587068ecfa5acd43d2ca29a5d67adb9bfb87ce6ccb85cb9ae05ac0000000000"], 0xfd, 0x6b1, &(0x7f0000001f80)="$eJzs3V1vG1kdx/Hf2E7iZFFVAapWVbc5bVkpFcW1nW2qqFzsMBknA7bHmnEgkZBWhSarqk6Btkg0NyU3PEjLG+Bub7jgRazE9b4LuAJpBXcgJDRoZjx+iB9St0m6D99P1Ho8c+ac/5zj+t+JPWcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABkORvlcsVS3Wtu75jJnI3Ab2RP8hrZntY2p5vpws1pbc7F7UpW/EfFot5OV7/9zX6RS/Ff13UlfXZFxfihqMO3Ll28941CLtt/SsCvQrNW+PT54aP7nc7ek5com9fM1b9Jyr1EoU236YW+17A3XeOFvllfWyvf3qqFpubV3XA3bLsN4wRuru0HZsW5aSrr66vGLe36283NDbvuZivvfqdaLq+Z7y+kAy2pFDpbXr3uNTeTMvHmuMxd89GP0wKu3TBm/2Fnb3Ugnhfj+jguVDnpSOJC1ZMKVcvVaqVSrVbW7qzfuVsuF0ZWlGNWuUcjJU79RYsvmNN9AwdeQy7O/3+1pLqKampbOzJjfxxtKJCvxoTtXVn+f/e2O7XdwfyfZfm5/ubLSvL/1fTZ1Un5f0IsRibZYdwWa8L62X7mkoiMnuq5DvVI99VRR3t6cgp1G5nlU6nlHH425aopT6F8eWrITtaY7hqjda1pTWV9oC3VFMqoJk91uQq1q1BtufEraj4eLVe22vIVyGhFjm7KqKJ1rWtVRq5K2pWvbTW1qQ3Z+ncURft6mPT7aj+m/PGRV1aoMuEgFlTIXnd7qk452kn5/ycv0r27+b9M/v+qSl8HC+nDp9PKAJ8DUff8f0bLZxMNAAAAAAA4C1by23cr+VT+HUmRal7dLb/psAAAAAAAwCmyFC3oiqz0W/l6Rxbn/wAAAAAAfNlYyTV2lqSl5Ev9Vv9yqZf5JUD+HEIEAAAAAACvKbny/+q8FCWTVizLmun8HwAAAAAAfAH8bmCO/UI2x26Ufayfk7T8twXrk38uKJizjlo737IO7HiLfdAtM/INgHbtsnWhO1Fv8jAvKXnmuFesbmvdSTB78w5+tn/SXP9WcCyA+fxgBRMCsOKW1wrdZ/pI19JdrnXnmX9wmFOyJW1lqebV3ZLj1+9VZNsXcm13p/3Lxw9/JQW949x/2Nkr/fRnnQdJLEfxqqODuNIXQ+HkxndGP5ZnyXwLyTUX4454UbWsyd83G0tW0m45O/687IPcYEPTBqDf5m90PR2z61FadumwN+O+JS0nkz9USsmQDR19MGf1o6gcP/JxAzEhimISxY20zI2VG+lDFl9cT84qfjsvVUujYzAURXUwipP7wvrXSF9Mi0JWMe6L1TiKv8QVHYviR5+kO6/OFsXIiADAm7Lfz0LJJOYjeTdLD9mb2ivlnZOz+/vD2f3ZH6M0Q+WlQveziamtFBW/o69YSR6aTyd0L1we845eLv0niiL7QlGD7+j/i1K9HPty2e0oiqLjx/rn/j2QumGPRPHfKIruVZJM8odjWfXjeIePJ7Yb1qv5uAtvPzv4eTIBfuzDvQ/3Hlerq2vl98rlO1XNJf9V6D7kRe4BAIw4+R47SYnclBLWe7qW1nHtwT/eTZeGMt7Xu18pyHT0QLeyWwgsj691aeBrCLfSs1bp+lL6uHRoLl28tygNlLUKyR1ebk08q0ty6UC91V7Z7L5Dx88A+2VXz3IIAAA4d9cn5GFpKP9rOP8Xh/L/La2kJVYujz3vHs7l3bPj3in9pLKVk4N//5Q7AwCArwg3+Mxaav/WCgKv9UFlfb1it7dcE/jOD0zgbWy6xmu23cDZspubrmkFftt3/LppBVrwFt3QhNutlh+0Tc0PTMsPvZ3kzu+me+v30G3YzbbnhK26a4eucfxm23baZsMLHdPa/l7dC7fcINk5bLmOV/Mcu+35TRP624HjlowJXXegoLfhNttezYsXm6YVeA072DU/9OvbDddsuKETeK22n1aYteU1a37QSKotKZr5RocAAHwZPX1++Oh+p7P35PjCYnxqnq450oQyowvzYypkjiAAAD5n+ul6hp2KZxgQAAAAAAAAAAAAAAAAAAAAAAAYcfIlfTMuzI27WFDqrfnFhe4a/Vr9SwxH6rF02oHNspCbda/skojDR59OKbzYW5N1/2CZo1ka1UXplQ/w71+T3krWKF1TOP0+XJwyuGex8N39tEcn95gm9NhCbywKp//PIV54/KcJm6IoiqbvvjDch/PTDnB4oSDpyfxrDMH5vxcBOF//DwAA//9wiz37")
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0)
r8 = memfd_create(0x0, 0x4)
dup(r8)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$video(0x0, 0xffffffffffffffff, 0x400400)
ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

17.427171104s ago: executing program 2 (id=1275):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
keyctl$clear(0x3, 0xfffffffffffffffd)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './bus\x00'})
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x80, &(0x7f0000000100)=ANY=[], 0x5a, 0x223, &(0x7f0000000440)="$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")
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000000100)='./file0\x00')

15.930353886s ago: executing program 2 (id=1277):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04e04020"], 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002)
write$binfmt_script(r0, &(0x7f0000000080), 0x10010)

15.749327379s ago: executing program 6 (id=1279):
socket$inet_dccp(0x2, 0x6, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_pidfd_open(0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
writev(r4, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$inet(0x2, 0x2, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$inet(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)="08006d2a81496b273dbcb4ca26a866c4017c0aedd4c6149ad2c86e70c755dc9255f7569222ecfbc0350068c65ffa5cc95c2ef0162481ead2cdaade00497aade45196b6f848423949f1a38a646c0feefc2e610aab6e3fc8347f24d81f445dfd1a5995f952c8fe90fd2a082b24ed30a75fd24200b98a14f3196475b30387459bd0ae47c4a142d3df0b77219469cab830bae022ab9ce8121a8bf8020a06f9b8c5a32fb04b4b28b7f8166c9bd6cf3430c81b28", 0xb1}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0)

14.913963601s ago: executing program 6 (id=1280):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x80, &(0x7f0000000100)=ANY=[], 0x5a, 0x223, &(0x7f0000000440)="$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")
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), 0x0)

14.845086062s ago: executing program 5 (id=1281):
getpgrp(0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@local})
mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10)

13.969355735s ago: executing program 6 (id=1282):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x1200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r3 = landlock_create_ruleset(&(0x7f0000000000)={0x118}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4002}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40800)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000005744000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r6, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0)
close(r7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100082020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000006040000850000002a0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
flistxattr(r3, &(0x7f00000004c0)=""/210, 0xd2)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000059c0)='./file0\x00')
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

13.052659638s ago: executing program 5 (id=1283):
socket$packet(0x11, 0x3, 0x300)
r0 = open(&(0x7f00000058c0)='./bus\x00', 0x109340, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000005840)={0x0, <r1=>0x0})
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
close(r5)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000180)={[{@whint_mode_fs}, {@quota}, {@acl}, {@fastboot}, {@inline_xattr}, {@noextent_cache}, {@noextent_cache}, {@whint_mode_fs}, {@checkpoint_diasble}, {@inlinecrypt}, {}, {@whint_mode_user}, {@noacl}, {@noinline_dentry}]}, 0xfd, 0x552a, &(0x7f0000000280)="$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")
socket$nl_audit(0x10, 0x3, 0x9)

9.868594255s ago: executing program 6 (id=1287):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000010200)='./file0\x00', 0x8010, &(0x7f00000002c0)={[{@discard}, {@nombcache}, {@journal_ioprio}, {@debug}, {@user_xattr}, {@noinit_itable}, {@jqfmt_vfsv0}, {@user_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x1, 0x3ec, &(0x7f0000010280)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d7)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x34b2, &(0x7f0000000340), &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000080)=ANY=[@ANYRES64=r2], 0xc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer)
io_uring_enter(r3, 0x2, 0x0, 0x0, 0x0, 0x0)

9.754591317s ago: executing program 4 (id=1288):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
keyctl$clear(0x3, 0xfffffffffffffffd)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './bus\x00'})
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x80, &(0x7f0000000100)=ANY=[], 0x5a, 0x223, &(0x7f0000000440)="$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")
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000000100)='./file0\x00')

9.709133107s ago: executing program 3 (id=1289):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSTI(r6, 0x5412, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0))
ioctl$TCSETA(r6, 0x5406, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x38f, 0x0, "a0590469a322d928"})

9.451498821s ago: executing program 2 (id=1290):
socket$inet_dccp(0x2, 0x6, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_pidfd_open(0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
writev(r4, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$inet(0x2, 0x2, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
sendmsg$inet(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000700)="08006d2a81496b273dbcb4ca26a866c4017c0aedd4c6149ad2c86e70c755dc9255f7569222ecfbc0350068c65ffa5cc95c2ef0162481ead2cdaade00497aade45196b6f848423949f1a38a646c0feefc2e610aab6e3fc8347f24d81f445dfd1a5995f952c8fe90fd2a082b24ed30a75fd24200b98a14f3196475b30387459bd0ae47c4a142d3df0b77219469cab830bae022ab9ce8121a8bf8020a06f9b8c5a32fb04b4b28b7f8166c9bd6cf3430c81b28", 0xb1}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0)

8.535891775s ago: executing program 3 (id=1291):
r0 = io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x4003b2e, 0x1000, 0x8000002, 0x128})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1)
sendto$inet6(r2, &(0x7f0000000100)="b8", 0xfef4, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000015c0)={0x4c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xb8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4014)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000300)=0x4, 0x4)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f00000005c0)=""/4096, &(0x7f0000000040)=0x1000)
io_setup(0x2, &(0x7f0000000340)=<r6=>0x0)
r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder-control\x00', 0x2, 0x0)
r8 = eventfd2(0x2, 0x800)
io_submit(r6, 0x6, &(0x7f0000001cc0)=[&(0x7f0000001740)={0x0, 0x0, 0x0, 0x6, 0x9, r7, &(0x7f00000004c0)="85b2581a2a3238125338e655ceceeef57b7cfcdabb9b20d0af875a3e3522b43f6eeeaf1a95432a5377873438574c3ef4983645065d61f09d07ea369b54a5abc441eb7e9c430494114eb6412343b859e3fdc8e4e6e7f256a1f50cce1072d26f23c6a55ee249006e88ed03ed66856bcb0b9588fa17404e596d877bb0e9b96146f6a60fef3ceee6ee19e73122ab2c281575b7f9bc9977d93fa5c497c2bf2a1917bb3aab35808fb15475d0348084c23af9d4f9", 0xb1, 0x22fc, 0x0, 0x3}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x8, r3, &(0x7f0000001780)="7245d6cb4269bdda241bc0749757e89aac7caaa6d2e37dd9aa4214a248cc76c0c83dd3353c46113d8f29ad40dd182821e7cf2b953aee6200fb2944619f5e8e8aff22aef52de23f3f69dacab196cd48c31988d719bc54dc1741128e74fdad1e70a92abcaddc4d5cd9150336971d63acb4d60b6718df7d5dcefe25625512e102bc8e1ffa8071785535b10be3c67d8d0b6c7f262b6bb2a747be36fee4dd388304090ee7ae425b7ed22df77c024d1364af1bcaa9bab7e286b1a8ff423b74d460aa7a6ed5309392486d607f253a34f0dfb271a5166ca66c329c53c0ef0f212434486d9ec0836c0247f1112f", 0xe9, 0x3, 0x0, 0x1}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x2, 0x5, r5, &(0x7f00000018c0)="825719ebd05bffa4ed9f94fefdab2a699c489aef", 0x14, 0x7, 0x0, 0x2, r8}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x1, 0x8, r3, &(0x7f0000001940)="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", 0xff, 0x7, 0x0, 0x3}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000001a80)="b99382f26911f230b92a0abf79691e4c9931c9c86267725713cc6f19e7571929782c652bdf2c8af7f9f6f0190bc0521bcbb52c5e2dda1e3dd1dff02eee82cf05358738d70867403ebc5021b463ff13113a94cdca1b6aecfb5797cf24f11e372ee3d9f27055a79858b188dfa50b98320002ccc5c25d2a2c951ee1536ca8ae849c8211f10df919e82801af1b471e826688cd4ac5c7682abd68ecaaf2de", 0x9c, 0x100000001, 0x0, 0x1}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0x9, r4, &(0x7f0000001b80)="3de2d2eb6c2051a67acedc28ab5cad5d35401ecae8d26f9deffc42209dc03285dbf4966df2f38e95b9fdec34226e05cebcaac04ce7ab829e75776a01053f9a6f9c2e30e7450ba389d13958262303b889a4d9446b0c7946900d83d34c30d6d5955ddfda3648410b18e257c79c6438da90ede13e2105bc831d7ab858e5ae7daf3527f055f488b28bb79d7352339d73cd87fc9564904989affba9e0a70193128fda99ae4200becb70f102f980a8edf71ed530042ec3c23347fe21f08f30bd1808cbd93a2819d80ce75ead526f9d7c8262f91b461ea8833b90a9fd040ce8d9fa809874bff8244ec0", 0xe6, 0x0, 0x0, 0x3}])
syz_open_dev$usbmon(&(0x7f0000000000), 0xf4, 0x8800)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0)

8.435781356s ago: executing program 5 (id=1292):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
close(r1)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)

8.296402618s ago: executing program 6 (id=1293):
getpgrp(0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@local})
mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @local}, 0x10)

8.286957898s ago: executing program 4 (id=1294):
r0 = io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x4003b2e, 0x1000, 0x8000002, 0x128})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1)
sendto$inet6(r2, &(0x7f0000000100)="b8", 0x1, 0x2000c851, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, <r3=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000015c0)={0x15c, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x99}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x18}}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xb8}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x4014)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000300)=0x4, 0x4)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f00000005c0)=""/4096, &(0x7f0000000040)=0x1000)
io_setup(0x2, &(0x7f0000000340)=<r7=>0x0)
r8 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/binder-control\x00', 0x2, 0x0)
r9 = eventfd2(0x2, 0x800)
io_submit(r7, 0x6, &(0x7f0000001cc0)=[&(0x7f0000001740)={0x0, 0x0, 0x0, 0x6, 0x9, r8, &(0x7f00000004c0)="85b2581a2a3238125338e655ceceeef57b7cfcdabb9b20d0af875a3e3522b43f6eeeaf1a95432a5377873438574c3ef4983645065d61f09d07ea369b54a5abc441eb7e9c430494114eb6412343b859e3fdc8e4e6e7f256a1f50cce1072d26f23c6a55ee249006e88ed03ed66856bcb0b9588fa17404e596d877bb0e9b96146f6a60fef3ceee6ee19e73122ab2c281575b7f9bc9977d93fa5c497c2bf2a1917bb3aab35808fb15475d0348084c23af9d4f9", 0xb1, 0x22fc, 0x0, 0x3, r3}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x8, r4, &(0x7f0000001780)="7245d6cb4269bdda241bc0749757e89aac7caaa6d2e37dd9aa4214a248cc76c0c83dd3353c46113d8f29ad40dd182821e7cf2b953aee6200fb2944619f5e8e8aff22aef52de23f3f69dacab196cd48c31988d719bc54dc1741128e74fdad1e70a92abcaddc4d5cd9150336971d63acb4d60b6718df7d5dcefe25625512e102bc8e1ffa8071785535b10be3c67d8d0b6c7f262b6bb2a747be36fee4dd388304090ee7ae425b7ed22df77c024d1364af1bcaa9bab7e286b1a8ff423b74d460aa7a6ed5309392486d607f253a34f0dfb271a5166ca66c329c53c0ef0f212434486d9ec0836c0247f1112f", 0xe9, 0x3, 0x0, 0x1, r3}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x2, 0x5, r6, &(0x7f00000018c0)="825719ebd05bffa4ed9f94fefdab2a699c489aef", 0x14, 0x7, 0x0, 0x2, r9}, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000001940)="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", 0xff, 0x7, 0x0, 0x3, r3}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000001a80)="b99382f26911f230b92a0abf79691e4c9931c9c86267725713cc6f19e7571929782c652bdf2c8af7f9f6f0190bc0521bcbb52c5e2dda1e3dd1dff02eee82cf05358738d70867403ebc5021b463ff13113a94cdca1b6aecfb5797cf24f11e372ee3d9f27055a79858b188dfa50b98320002ccc5c25d2a2c951ee1536ca8ae849c8211f10df919e82801af1b471e826688cd4ac5c7682abd68ecaaf2de", 0x9c, 0x100000001, 0x0, 0x1}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0x9, r5, &(0x7f0000001b80)="3de2d2eb6c2051a67acedc28ab5cad5d35401ecae8d26f9deffc42209dc03285dbf4966df2f38e95b9fdec34226e05cebcaac04ce7ab829e75776a01053f9a6f9c2e30e7450ba389d13958262303b889a4d9446b0c7946900d83d34c30d6d5955ddfda3648410b18e257c79c6438da90ede13e2105bc831d7ab858e5ae7daf3527f055f488b28bb79d7352339d73cd87fc9564904989affba9e0a70193128fda99ae4200becb70f102f980a8edf71ed530042ec3c23347fe21f08f30bd1808cbd93a2819d80ce75ead526f9d7c8262f91b461ea8833b90a9fd040ce8d9fa809874bff8244ec0", 0xe6, 0x0, 0x0, 0x3, r3}])
syz_open_dev$usbmon(&(0x7f0000000000), 0xf4, 0x8800)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0)

6.10054877s ago: executing program 3 (id=1295):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000b40), 0x0, 0x40010083, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
pipe(&(0x7f0000000d00))
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xb99ad000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0)
write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120)
write$UHID_INPUT(r2, &(0x7f0000002800)={0xc, {"8f2b8b71f071378505516f44879315d20f7a0508eed827fa6d3776a8ad2e8ac1b4e77b4cf8ef894ca3cf2dd79343bf47a6e49cbec30899345ccf3dc7ab954c77f18cee87f2413ea25ca9b5b2dacd4838f77445d662be02f669a97c3786b245c6d7371e5da8fd779dd3660823ae2f222b4328cfd5983b129955444ffa57c23637e7e45e680dc0dae016a5005d1635aa8d6536da6fc90c434b869881fd76713bc31d4b1ccb6fa02eec688175f2e7282de029e8c7f32da3281c0a3f2fce4334e5d0b2a91f2dcc398c191e24b95798de7138065b06a599b4af56abfab368eef37cde18ab7815d732f2a55928a769df16e06bcb907f289cd54a60b68ee0657c71d0288f14bb8599ac4c8e315241810998a475e4df852483074d5dc16922f280e5840ff4dede9ed5557718b03d6a6863279cd00c84c398a79b0a564cca7dba22ba5ef0a22a70b193fbcdf0e92face4df6a8f7a7a520a7b499a0878e4995bddab5602e96a5b580bbf22e92114152489af5749b562889bf2747877f40dd2aae02b86dd48bcf59f7020e85f4f95b7bb3ba154aa221475768072781af7ff6c471284ee2244c75414f0bd66829d436b2958c3e7b0971a51a640ac6fa4192d2c7c8aa027484fe3a7823b924079e4afe63a3ca1e710f921db2002afec440aa2422529091fd5a59885fd71b84201909d51d54f6e987a63990dc83459c2c63cfe52c970d760d7201ba80a2c36fca29a3d985109a5c049ec4df1e05783a6c15d0ce416cb81356382d961a99ece8ee4fd82a51a59eb3676a3edd24c57099681b4d928bd7e6340af57a9d89b008bcb793c5a510dfe1455e4a0533abb5faca4bfe065999f103b14fe1fa505c4fbed80200dc953dde370c12911636f6347e3e71c56588abdd2b73a18fe9dddd493e2fdc41ac33aaa3d23ebce832c59b46378b91dbb1ed27f66d1edcc9caf02fc68c1b11b76a1b41f22dfcc261ab80c2a76aec05deb47bfa3b00a09ad88ce38af4f3e240c777f35502abac2528b78b37c1b77a4dace28fee192ffd81ef8de7f442ec38acd5aafa3a03c5fb3ad3bdc73f4c77dfc8d87291e4e4cc0aa5b97aeb6d838d487af2ebd7444b09805410109e29b38d05f18acda6c66953d8b91fc966c1eac9010c0e082c53bafa9f36e69dde00742527de48ff8350e094c68148f4f66e72489fc3cdadd81929d9544ac7be8280137d5d62c30ca3ab68a6fe47e74b40ebf550bf833f033a61aa8a8df8ae3fe2b2a47023adde177eb465ec9f5d11df0420d399c5bffcd94c2f320fa530a258261767b2eec5411e440f5cdf781dc71ae9c0a485f46aa06ebcbb75ed1606746eeb97e4503ca29ff10fd92ca79e2b690751117e99997e171016b49520854bf0f106a2b23c7b519194a29167cb1970a0f8117239c04d6f36f86e33982e6aafb326d54ffb6a7de82cdc6f7b6242a82f7748ff063b12d009ad1f352771233704275e954f685a778a0dc5b39fee5d8e05425a88c1e2d784943c79315a9087d4e84b2d7b76fce99d41a6222a8ef45cf7f9906efdb51c084540e81e0cd857da1c6cbae9c189a41e74f383a2da6f169fd6d64c723f3553833777169c81c445c4bb9d1cb65946543fbcd563fd549729cde0c616344a8c9f8d5e7386087924431943f98bef03d9917cf1d0fd9f652405761a9abb4fe1d620247a828af62f13f0922dc2230ab69fbb6ed1e260f9f8adcf273cf7f0d4cb2b46bc523d8f352eee0038ca2f31900d958fbd0b6ee3afbbe3e008c21525cede4fd0d218bcfdc54f46739677f1b3668367b9c5621911242054a0a6fb247aa3569bdc168c2552381e61995f1509cb080b96711728bece1909603821be0f911ae99a334a9b4f02012ab63b9a72b6ccdd825a795d253186cc574a7a9e09b4663311be53358672fc905c3e44ef87cba7579e3a2cfbc12dc37a02f194527fd5e7a6475506fc8967ef5ae7257896f3f6e6daabf2b26974b244cd62eb281e8dcb567388441f653bbadd90511f91b8f4c763f434ceb1c76b9773096969b919aa9cee825d76122130bf8ec5b88efd69b0d2593ddff5537d873d8f3ea197cafeda151d63e6bbe07af200e5ab6ba3384d2fdb37e3877f9b7a6a3054fde994da9f85dc0e45b0d12f456d08383fdeedf38549746d4be64602cfa769db31d49c25fbb44f0c9d3737edae200277dddf9641b6bd7f83563b4afc08b91c1652014b19377a7e112c198a300a853fced4dd9e80bd6daf0097bdabd6ae9c2ce3a4a28271451b23beee5fcc1ac6bc5c39e50fff68d54dcceb3b731d28d11db34f6c0bce80ed0f0f04a65dc95d0cf56e3cf8a17424db66a7348ce5bfaf7e76972d92fad57306ac46416f9c8eda46fda13b76180362fcf6d8e8d1ea853dbca6d1ed081f556c89a2853651b950c7070853b58fe1b133d5866576b01bf1848724b4525934cf2ed4300d54886333788af4adda1102e76c768be6db76ba4aebad40660e4a3285711913461f727016fce9ede048de223cbe1e8911cb021f425e11166aa79d63e4541e2ff4b45f22066a8d4222500a55d52e53cdd749c32cf2a6bf80910c708b9ecd7ebebe445e8182075e36384145401173d366bc1e1ec199474b7978ef7ac8bda752c2837deee78e8dff6b99f222fb1628f946ce9a424609818cdfdd805a49a0a66409b86041d74f23a5066feb6dcda51da5f6da07104cdee075bbc3774658d995e2eaf7b21e2728fa4acd88a84859267ff5bd7913d3ca15dbff78847d92b092917cb16d0c0a904dbac42fa36249465434f44559ecc48be65c8824cbddc8718603b3ab7e0bbe1512ee1def041f498ebd6612db16d7f08b259ced4d396b4cfc2af5ea31e26a53bad9a017582df66f59d44e75e0774a543121de688160f9a237db4658ab7794188831738ed0a530502c514e14f0793294447583f1cad150f1a210c40868db4b208f1d6d98b0763c6823b3ebfd59e6a1cbce2cfc619e9b363aea1aa0f9af6501defff0deb453b1a8be68bc32e0c72fcf6424ea5e255946dbc6cf2111dd38536bc17a23a7b19f57ab5ff09b6753d38d1eab8cd357ecc11cb1fca8d6ec9824180610aa8ce975b58a9844e4e996f381fb8f7fc9fdd79677a12d4adada7b8b297c5763afe4ec885ba2697d922967df49aca88f17c91ed8776f0f7e07c74143f359f04a9de8e351e661c48f3ca6516a5ad00af16db49164b51c970a2ef1b402591c86747f557c8a9e88bf73406f27fcc31ac444e8f88656f9452605b4b65de0fb16c8f3a50828e6cc46e0db536bb0dcbe2237a01a1cc8984332fe751f4b357e1244f1a5c7cd00789f94e253e90e874fff344010000000000000007efd94dcff33696911e2cb16ea51d769686798293a0b6a7711214e01f52efb4f0c92ccda62d58b8ef17a9f67a057b941219bfd74dfa4722698c420e328429bd836fece1a261217eb902d84319e151262020e1cba43543226c7b9f1c852ee94f551028c4c59770fda76fe47fd333069c42860f3c3b259b3bead7d2161bc55dc0cb32e388d6197a9fe8fde4b7e153852dccd23256d482e0a7a3d197e5eaf156da82d68d2893c620cfe221a680f5eed5d64e0309ef7718b6cf0409a4b44f50f0c1b7005e1ebe959cf255482a3bcb5fa6b8e6c59f9aa933ae7db54da01805da29a0f6251571f5c4ac9d04cc2f82ab79c627c7d32856e0084fa357ccb54aa5db1fad1ee8eeef8c93259980ccf2b9212ebf52e0a433c0abd768dbdaa43b133a84b4b899133bde0d4b1af72ff5294dce29a6f5b7b6dd0d1cadc182fc366fe813271b8bae3426ff5edaaefa2a5a631c9a39e8f03fbeadabb641cb3e3a9cd29f5c0295b4d4c1cbf0659b8561126c888b62c0497436e1d457d13894673ff615c7d567a0c30935972c10c05b58538d114e30114013c0d4e859c60fea6557b5326283f31fa5f75a41fcd8150242b24c9f2f41429ada28d06ffc60b37f18cb82fe20e76f01a983fbaac1a10fdd2d0902586d3a0a77889bd997dc12586024e4d2d917c242509d99633ab3dadfd3b22793dcd5376bf77194c08b2c16a3c45bb4e01546cefc4336c9b7ef697b72d0b7eb4d247ef48e6617e225db6dbbbe3f6ae80f555828b5801fae2c0912d05c44f7162a27c97ffef3c26dcfcf48aaef6e95f9d0c1b3d101598d47ab6a34ef41fddbde780777710c7641c93f1d9bff511fce51e2050efc8624efe0180c7d9fedd75d5c674d40457a792b3b4d445e911c42f773264ca8dd51753a3e63ae7a852af0837ee8ed8fcc50fcb3ddc80ce52757e3c4e4959b44d25acec382acb68bbae88ea46730f84b44d51a3fc5d925e5311c376fbd5168255d2a92f0ea51943494d1b02688b001d153ed0c44309338e6e73c4ac805dc19733398ca43ba7e626ef58df84821c889bb6a486f1c70cbb90e35ba867783bf79c7c68d45794821e81ff33773a77c5b600b35a3d2923ad3a666813242d5c1900273cfe5501d184044990357b095b2134b20b8ce6e67e54dc6b3457edafa45b6432ca4a99fe9e78341c50d568d736129536c2c972921606f024b3c3ee555a894c3ad5291ba9529b72ea92e25eba09a449b263dbbd9059413d8b75507c9b201977a87c5f932123f772c51aaab1472ec9d731bd183472cf11b71cb2746acecbaeed100b7e7dbabe703c86ac0d5520d1e47b1367dbb4a0d8230576ccc8626c94039d0554eda8aef0091ca8b81b77d4adb45dccbe5a79fc9d1bfa8666c2938f01c9d77d639f4b11679c8c048a742949d55162a498573ab8b17a3d7297edff24ffd542b0dae89ed6777b1c7922338fd38c323eeba0a61676e49b71e49d272503e297a7c477b364d568ee59448755f604bd719fd3c7d466debf7af1d57f2637c94678c2a0d62086c07cb1f01a1931830018d218c7a979b1b33a972b05868d1b24253776f21696fcef3d850d87ebd0df5d0a2cc12b83bb9a89dbb0525e9676e8fd3b0f09cc4dcbedb87319d25a81399fedfdd2861fa86b8bb9fe20ebfd74118410d42ae50451c2a118ed85b4f600c24218a65c265430c2d28a5ea059ec7bcdfa4a4f02456adbca2aa2b268eaef75aa4e382308e7a15cfc705c53d44ef5ba7c3aef17028eeba1d5be1dd2c80392d905cacb7d9092c442736a78ede86ade7a08a077932f15bfda354372e37ce2e92110c835a80f69f6fe2c8c9b3409c97f9ae5ba7ba8a2c484ce59c5152c0deebb31a8298d8ef2b4cd035887a7deac6cc7b85c0276528f18d30d4488a28695a1e12e4eaab9e5df1479556d225ddd2852e365b1a90b4c107e85207dd1563549191a390db792e9eb483a4c43b0208c67fb659b000e2b660a43fe19d8bd7c0ddff9f2841180342e6fb1054934a26c1d4f8516b27ee944396205506a325a1a32323d4cd2ecf8ca236961a7ddc454c72fddaa78c9ff179c91f296fb8d4c7c3525c18aecdeda77f3fe88c4a936996a83e3efe4603fe2357e51aaa163f0e01d9453c69969a07bb359b8fe443bf3e6488d2f89e4c61743c4967a5aa09e32c03e18f91a6f06dbdf29825c1e427d9b8ee61ba5f8f3afa1937d5c494504bee496cb7c9440a2718b02ca5830067f72ef384652312694558dc5372b475670286c4e69ef446aa0f73be195e7d7c523b12a480d3a2cb41839cf2d73aa9f288fef61f44399c8f9a17516f595353d7afc1f2b36f4c5e1a73da6315e01aa2a91bfbfedb129290ee5bc72cb8114bbad05ee1bd280b76cf70fa56918cbdad6bce1109735cff51f1e1d599e58457f02265229beda2be584a16d37b3c9ee011df1aa5b883edab3824c2d558649a95c21c95", 0x1000}}, 0x1006)

5.835289964s ago: executing program 4 (id=1296):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x29}}, './file0\x00'})
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r3 = socket(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000040018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000ccbc008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
recvfrom(0xffffffffffffffff, &(0x7f0000000b00)=""/28, 0x1c, 0x101, &(0x7f0000000b40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, {0xa, 0x4e21, 0x9ae, @ipv4={'\x00', '\xff\xff', @remote}, 0x329}}}, 0x80)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000900)=r5, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x6, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x7f)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x8400, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a010200fdffffff000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000001800018004000200636f6e6e6c696d6974000000040002800900010073797a30"], 0xfc}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r8)
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
openat2(r10, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x517002, 0x0, 0xc}, 0x18)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000001c0)={0x10200, 0x2, 0xdddd0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000fffffff300000014000600776c61af87c186dc1f43238b46c46e31000000000000000000000014000300fc02000000000000000000000000000114000200ff02000000000000000000000000000108000400ac1e0101"], 0x58}}, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000680)={'syz0\x00', {}, 0x3b, [0x0, 0x0, 0x0, 0x10000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], [0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000000, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x4, 0x0, 0x0, 0x0, 0xfffffff8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xede9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x9)
ioctl$UI_DEV_CREATE(r0, 0x5501)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="000004000000a7210c77"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.612691177s ago: executing program 6 (id=1297):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = open(&(0x7f00000058c0)='./bus\x00', 0x109340, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078)
fcntl$getownex(r1, 0x10, &(0x7f0000005840))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
r5 = socket$packet(0x11, 0x2, 0x300)
close(r5)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000005900)=ANY=[@ANYBLOB="7768696e746a6d6f64653d66732d62617365642c71756f74612c61636c2c66617374626f6f742c696e6c696e655f78617474722c6e6f657874656e745f63616368652c6e6f657874656e745f63616368652c7768696e745f6d6f64653d66732d62617365642c636865636b706f696e743d64697361626c652c696e6c696e6563727970742c6261636b67726f756e645f67633d73796e632c7768696e745f6d6f64653d757365722d62617365642c6e6f61636c2c6e6f696e6c696e655f64656e7472792c0060f68e9887fb84d2cd3494f40881e4591e6d77a83bbafa4a85c1"], 0xfd, 0x552a, &(0x7f0000000280)="$eJzs3L1vG2UYAPDHSdNvSoQY2HpShZRItVWnH4ItQCs+RKqowMAEju1Ybm1fFDtOyNSBEXXgP0FUYmLkD2BiYGZDDCA2JJDvLtBAUZHi2CT5/aTrc+97r597XquK9NxFCeDEmk9+/bkUl+JcRMxGxMWI7LxUHJnlPLwUEZcjYuaJo1TM/zlxOiLOR8SlUfI8Z6m49PnV4ZWbP73zy9ffnTl14Yuvvp/eroFpezkiuhv5+XY3j2krj/eL+dqwncXujWER8wuds/n1bprPbzfXsgzbtb11tSxeb+Xr042t/iiud2r1UWy117P5jV5+w/6wtZcn+8D92mY2bjTXstjup1ls7eb33dnNf7bt9gd5nkaR75MsfQwGezGfb+408/1sPMhivTco5vO8aaO5M4rDIha3i3raaWR1rB3gi/6fe7fd29pJhs3NfjvtJTcr1Vcq1Vvl6mbaaA6aN8q1buPWjWSh1RktKw+ate5yK01bnWalnnYXk4VWvV6uVpOF2821dq2XVKuV65Vr5ZuLxdnV5M27HySdRrIwiq+3e1uDdqefrKebSf6JxWSpcv3VxeRKNXlvZTVZvXfnzsrq+x/d/vDuaytvv1Es+kdZycLStaWlcvVaeam6eIL2/2lR9Bj3DwdSeuaKbydSB8ARov8HpuEg/X/3QTF+av+/eS/i8Pv/0P+PxZHqf096/38I+4cDeXb/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAMfXD3JdvZSfz+fhCMf9cMfVCMS5FxExE/P4Us3F6X87ZIs/cv6yf+1sN35QiyzC6x5niOB8Ry8Xx2/OH/S0AAADA8fX44eVHs/lpFuanXA8TlT+0mbn48ZjylSJibv7HMWWbGf3z4piSZf+/T8XOmLJlD7DOjilZ/sjt1Liy/Sez+8LZJ0IpDzMTLQcAAJiI/Z3AZLsQAAAAJumzaRfAdJRi71Xm3rvg7Dfv/3oheG7fCAAAADiCStMuAAAAADh0Wf/v7/8BAADA8fb44eVH064BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9i5n9vEgSgOwM8GL+w/LVrtfVvJDcpICTnmGFFAmqCAHKghDVADuaWECCI8DoGIQyQPtoK+T3ImY5kfbxAcZkYaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0j1Vyyru/t+3zdls28kzGgAAAOCUdbWc1f9MUv9nc/93c+tv0y8iooyIU3P3QXw7yhw0OdX78w+Hz1cfaniMqBN27zFqrh8RcdVcL3/O/SkAAADA5VrNF9M0W09/Jn0XRJfSok356zpTXhER1eQ5U1q5y/uXKaz+fg/jNlNavYA1zhSWltyGudI+pf6571ftxgdNkZry5Mv2RWYbOwAA0KHBUdPtLAQAAIAu3fRdAP0o4m0rc78VOEpNs733/agHAAAAfEFF3wUAAAAAZ1fP/zs6/2/r/D8AAADoRzr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHNaV8vZar6Yts3ZbNvJMxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4ZX/eUSAEwiAM9q7vTOb+h5UGTU1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnft5jaOKAwD+ZmZna6tijJJDRBQ86MWm29ram3hQggf/BCGk2xq79Uebgy1FzMWb5NyL6FFEVOKt/0PPLfRSbz3kUEE8rrz5sRlr0ETozDT5fODN+87sMO/7ZiHkO28SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAattv78RZ3MyVcVodu/3g+mrs7zzURzc37y7GFuOkzaQfDy82d5KF7hIBAADg8Mjq+j6EcC/fWo59OlfU/3l9Tqz5v326jOt6/uG6v+7r2j+2X3+5//xsoLlynHjR82uT8Yl/pjJ4dLPst2f+84xBceeLZy9Z8YWk7208t50X9zP5+tatd4ZFeKSNbAGA/+N43VdB/ftQ7EddJgbAoTFoFN51/Z/NdZsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBu2N8KTIfw0218clH1S7d95cH11t/7m5t3Fup25cWMzfLlzzXiJPIRwfm0yPtHmZHruytVrF1cmk/Hl9oOXQghdjf5WNf2LH+zh5BA6uT/7D/7sRxp9C9Lqy+5LPo9H0OEPJQAADqS8arGuv5dvLcdjyXwI0+9i/V+Kn73aiMMe6//7H5653RyrWf+PWpth/y2tX/p06crVa6+vXVq5ML4w/viNk6M3R6fOnj59dql4VrLkiQkAAAD7Np1Op7OdYdWa9X86X6//l+Jnxxpx2GP9/9k3oy+aA2fq/13tLPp1nQkAAMDh9uzLf/ye7HI8GQ7D5yvr65dH5Xa2f7LcdpDqvh2pWrP+z+a7zgoAAABow/ZG8rf1/3ONOOxx/f+p71/4sXnNLIRwtFr/P776yeRce9PptTb+nLjrOQIAANCto1Vrrv/nxfv/6eyVhzSE8NorZVz9G8B/rf/zqv7P3v3qh+ZYzff/T7U3xV5KF8r7UfQLIQwWus4IAACAg+yJqsVi/7d8a/mjn4+9P/T+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDb/goAAP//RlZCAw==")

5.45160726s ago: executing program 3 (id=1298):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x1200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r3 = landlock_create_ruleset(&(0x7f0000000000)={0x118}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4002}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40800)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000005744000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
getsockopt$ax25_int(r6, 0x101, 0x5, 0x0, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90624fc60", 0x14}], 0x1}, 0x0)
close(r7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100082020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000800008500000006040000850000002a0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
flistxattr(r3, &(0x7f00000004c0)=""/210, 0xd2)
symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000059c0)='./file0\x00')
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

4.80194554s ago: executing program 4 (id=1299):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$kcm(0x29, 0x0, 0x0)
iopl(0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xce)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/meminfo\x00', 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)

4.683988102s ago: executing program 2 (id=1300):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
syz_open_dev$tty1(0xc, 0x4, 0x1)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04e04020"], 0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002)
write$binfmt_script(r0, &(0x7f0000000080), 0x10010)

3.749119075s ago: executing program 4 (id=1301):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.sched_load_balance\x00', 0x2, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"})
r6 = syz_open_pts(r5, 0x0)
ioctl$TIOCSTI(r6, 0x5412, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0))
ioctl$TCSETA(r6, 0x5406, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x38f, 0x0, "a0590469a322d928"})

2.589986472s ago: executing program 3 (id=1302):
openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fanotify_init(0x0, 0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0)

2.522907983s ago: executing program 4 (id=1303):
socket$packet(0x11, 0x3, 0x300)
r0 = open(&(0x7f00000058c0)='./bus\x00', 0x109340, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000005840)={0x0, <r1=>0x0})
prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
close(r5)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000180)={[{@whint_mode_fs}, {@quota}, {@acl}, {@fastboot}, {@inline_xattr}, {@noextent_cache}, {@noextent_cache}, {@whint_mode_fs}, {@checkpoint_diasble}, {@inlinecrypt}, {}, {@whint_mode_user}, {@noacl}, {@noinline_dentry}]}, 0xfd, 0x552a, &(0x7f0000000280)="$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")
socket$nl_audit(0x10, 0x3, 0x9)

1.768393384s ago: executing program 5 (id=1304):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
keyctl$clear(0x3, 0xfffffffffffffffd)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './bus\x00'})
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x80, &(0x7f0000000100)=ANY=[], 0x5a, 0x223, &(0x7f0000000440)="$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")
syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r4, &(0x7f0000000100)='./file0\x00')

964.638496ms ago: executing program 3 (id=1305):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, 0x0, 0x20000000)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000001f80)="$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")
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0)
r7 = memfd_create(0x0, 0x4)
dup(r7)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$video(0x0, 0xffffffffffffffff, 0x400400)
ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

0s ago: executing program 5 (id=1306):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000200)='./bus\x00', 0x0, 0xc000, r0}, 0x18)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x20800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000100018110000e9442dc28012b188e1d1bfbafd41ff07000012aa67c8e41c7becb4dc8dce4b776b4a8fc63ff133235494f029805032fa80109856f00125ec789bd0fba4eb86aaa0fce2ac8d79a60106845160645fa7fe5b768be127615fda98e60625eac60a5f7dd48056ec270324c900b9dc047ed9e19a448e032423cb5a2b534b5e68fb71ad72156d28c0d9d4a55426de62d8fa7e49ad57a102b88904cca8790f92e08409914e65b5b29ca1457cf3e07762443a2ff266f68d7a12557ce69e709d264467", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095", @ANYRES32=r2, @ANYRES8=0x0, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='f2fs_gc_begin\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x8000}, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
chdir(0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}, 0x0)
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x10)
splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x2e1ea86a9a469dc5, 0x1, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r11, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/fscaps', 0x169a82, 0x11)
sendfile(r12, r12, 0x0, 0x7)

kernel console output (not intermixed with test programs):

5875][ T4860] F2FS-fs (loop0): invalid crc value
[  130.855024][ T4860] F2FS-fs (loop0): Found nat_bits in checkpoint
[  130.925492][ T4860] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  130.932822][ T4860] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  132.643954][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.650335][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  133.173311][ T4894] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  137.079908][ T4932] syz.3.198 (4932): drop_caches: 3
[  141.028139][ T4982] syz.2.212 (4982): drop_caches: 3
[  141.298416][ T4990] loop3: detected capacity change from 0 to 1024
[  141.302581][ T4992] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  141.311527][ T4992] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  141.352719][ T4992] vhci_hcd vhci_hcd.0: Device attached
[  141.370810][ T4993] vhci_hcd: connection closed
[  141.371819][    T9] vhci_hcd: stop threads
[  141.383645][    T9] vhci_hcd: release socket
[  141.388096][    T9] vhci_hcd: disconnect device
[  141.448507][ T5002] process 'syz.0.217' launched '/dev/fd/11' with NULL argv: empty string added
[  142.609760][ T5013] loop2: detected capacity change from 0 to 256
[  142.678300][ T4990] EXT4-fs (loop3): Test dummy encryption mode enabled
[  142.690833][ T4990] EXT4-fs (loop3): inline encryption not supported
[  142.719023][ T4990] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,inlinecrypt,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  142.795088][ T5013] FAT-fs (loop2): Directory bread(block 64) failed
[  142.802360][ T5013] FAT-fs (loop2): Directory bread(block 65) failed
[  142.809118][ T5013] FAT-fs (loop2): Directory bread(block 66) failed
[  142.816900][ T5013] FAT-fs (loop2): Directory bread(block 67) failed
[  142.827015][ T5013] FAT-fs (loop2): Directory bread(block 68) failed
[  142.834534][ T5013] FAT-fs (loop2): Directory bread(block 69) failed
[  142.841456][ T5013] FAT-fs (loop2): Directory bread(block 70) failed
[  142.851487][ T5013] FAT-fs (loop2): Directory bread(block 71) failed
[  142.859726][ T5013] FAT-fs (loop2): Directory bread(block 72) failed
[  142.866708][ T5013] FAT-fs (loop2): Directory bread(block 73) failed
[  145.371396][ T5029] syz.0.226 (5029): drop_caches: 3
[  146.840510][ T5056] loop0: detected capacity change from 0 to 1024
[  147.653464][ T5036] hfsplus: b-tree write err: -5, ino 4
[  149.009375][ T5077] Device name cannot be null; rc = [-22]
[  150.628531][ T5077] loop0: detected capacity change from 0 to 32768
[  151.004651][ T5085] loop2: detected capacity change from 0 to 128
[  151.096200][ T5077] XFS (loop0): Mounting V5 Filesystem
[  151.593775][ T5077] XFS (loop0): Ending clean mount
[  151.624795][ T5077] XFS (loop0): Quotacheck needed: Please wait.
[  151.785297][ T5077] XFS (loop0): Quotacheck: Done.
[  151.949165][ T4175] XFS (loop0): Unmounting Filesystem
[  154.641703][ T5115] loop1: detected capacity change from 0 to 8
[  154.680919][ T5093] syz.2.240 (5093): drop_caches: 3
[  154.706751][ T5115] squashfs: Unknown parameter 'RŽôzÜ6'
[  155.032246][ T5125] loop0: detected capacity change from 0 to 64
[  156.034977][ T5132] loop1: detected capacity change from 0 to 128
[  156.086699][ T5129] loop0: detected capacity change from 0 to 1024
[  156.950395][ T5139] loop2: detected capacity change from 0 to 256
[  157.410228][ T5142] loop3: detected capacity change from 0 to 256
[  157.616700][ T5142] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  159.751627][ T5155] serio: Serial port ptm0
[  161.040021][ T5168] loop1: detected capacity change from 0 to 128
[  161.622668][ T5159] syz.0.258 (5159): drop_caches: 3
[  161.893143][ T5177] loop4: detected capacity change from 0 to 512
[  161.933130][ T5181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.265'.
[  161.971901][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'.
[  162.139978][ T5177] EXT4-fs error (device loop4): ext4_quota_enable:6388: inode #3: comm syz.4.262: iget: bogus i_mode (0)
[  162.179100][ T5177] EXT4-fs error (device loop4): ext4_quota_enable:6391: comm syz.4.262: Bad quota inode: 3, type: 0
[  162.236479][ T5177] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  162.373404][ T5177] EXT4-fs (loop4): mount failed
[  162.799280][ T5196] loop0: detected capacity change from 0 to 1024
[  164.265792][ T5214] loop2: detected capacity change from 0 to 64
[  165.427349][ T5220] netlink: 28 bytes leftover after parsing attributes in process `syz.1.275'.
[  166.414698][ T5233] loop1: detected capacity change from 0 to 512
[  166.466996][ T5218] syz.2.274 (5218): drop_caches: 3
[  167.004142][ T5233] EXT4-fs error (device loop1): ext4_quota_enable:6388: inode #3: comm syz.1.277: iget: bogus i_mode (0)
[  167.237309][ T5233] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.277: Bad quota inode: 3, type: 0
[  167.320592][ T5233] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  167.482837][ T5233] EXT4-fs (loop1): mount failed
[  167.636426][ T5258] loop3: detected capacity change from 0 to 64
[  169.729977][ T5272] netlink: 'syz.1.288': attribute type 1 has an invalid length.
[  171.337280][ T5289] 9pnet: Insufficient options for proto=fd
[  171.961478][ T5291] syz.3.292 (5291): drop_caches: 3
[  173.288489][ T5315] loop3: detected capacity change from 0 to 512
[  173.988566][ T5315] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #3: comm syz.3.297: iget: bogus i_mode (0)
[  174.021987][ T5315] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.297: Bad quota inode: 3, type: 0
[  174.029766][ T5328] 9pnet: Insufficient options for proto=fd
[  174.266938][ T5315] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  174.369082][ T5315] EXT4-fs (loop3): mount failed
[  176.467496][ T5353] loop1: detected capacity change from 0 to 256
[  176.587395][ T5353] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  177.838636][ T5346] syz.4.306 (5346): drop_caches: 3
[  178.200763][ T5366] loop0: detected capacity change from 0 to 64
[  179.098471][ T5370] 9pnet: Insufficient options for proto=fd
[  180.424600][   T26] audit: type=1326 audit(1743554649.481:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cffcf169 code=0x7ffc0000
[  181.136892][ T5378] loop0: detected capacity change from 0 to 512
[  181.147460][ T5381] loop2: detected capacity change from 0 to 256
[  181.186618][   T26] audit: type=1326 audit(1743554649.481:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cffcf169 code=0x7ffc0000
[  181.299819][ T5386] loop1: detected capacity change from 0 to 128
[  181.606210][   T26] audit: type=1326 audit(1743554649.631:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa2cffcf169 code=0x7ffc0000
[  181.856670][ T5378] EXT4-fs error (device loop0): ext4_quota_enable:6388: inode #3: comm syz.0.314: iget: bogus i_mode (0)
[  181.880343][   T26] audit: type=1326 audit(1743554649.631:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cffcf169 code=0x7ffc0000
[  181.891129][ T5378] EXT4-fs error (device loop0): ext4_quota_enable:6391: comm syz.0.314: Bad quota inode: 3, type: 0
[  181.903272][   T26] audit: type=1326 audit(1743554649.631:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cffcf169 code=0x7ffc0000
[  181.979893][   T26] audit: type=1326 audit(1743554649.831:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fa2cffcf169 code=0x7ffc0000
[  182.008559][   T26] audit: type=1326 audit(1743554649.831:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cffcf169 code=0x7ffc0000
[  182.061707][   T26] audit: type=1326 audit(1743554649.831:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5374 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2cffcf169 code=0x7ffc0000
[  182.076637][ T5378] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  182.093802][   T26] audit: type=1804 audit(1743554650.851:10): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.316" name="/newroot/60/file1/file0" dev="loop2" ino=1048632 res=1 errno=0
[  182.893213][ T5378] EXT4-fs (loop0): mount failed
[  183.043856][   T26] audit: type=1800 audit(1743554650.851:11): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.316" name="file0" dev="loop2" ino=1048632 res=0 errno=0
[  183.512622][ T5398] syz.2.320 (5398): drop_caches: 3
[  185.747146][ T5423] loop0: detected capacity change from 0 to 128
[  185.956007][ T4209] Bluetooth: hci4: command 0x0406 tx timeout
[  185.966834][ T4209] Bluetooth: hci2: command 0x0406 tx timeout
[  186.792776][ T4251] Bluetooth: hci1: command 0x0406 tx timeout
[  186.798865][ T4251] Bluetooth: hci3: command 0x0406 tx timeout
[  187.356968][ T5449] loop0: detected capacity change from 0 to 512
[  187.516633][ T5449] EXT4-fs error (device loop0): ext4_quota_enable:6388: inode #3: comm syz.0.334: iget: bogus i_mode (0)
[  187.548061][ T5449] EXT4-fs error (device loop0): ext4_quota_enable:6391: comm syz.0.334: Bad quota inode: 3, type: 0
[  187.681973][ T5449] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  187.702935][ T5449] EXT4-fs (loop0): mount failed
[  188.670174][ T5457] syz.0.336 (5457): drop_caches: 3
[  190.104359][ T5484] loop3: detected capacity change from 0 to 128
[  190.362814][ T5483] loop1: detected capacity change from 0 to 512
[  190.710577][ T5482] loop0: detected capacity change from 0 to 8192
[  190.741465][ T5483] EXT4-fs error (device loop1): ext4_quota_enable:6388: inode #3: comm syz.1.345: iget: bogus i_mode (0)
[  190.768343][ T5483] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.345: Bad quota inode: 3, type: 0
[  190.915669][ T5483] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  190.976250][ T5483] EXT4-fs (loop1): mount failed
[  191.082638][ T5482] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  191.107305][ T5482] REISERFS (device loop0): using ordered data mode
[  191.135176][ T5482] reiserfs: using flush barriers
[  191.143431][ T5482] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  191.179631][ T5482] REISERFS (device loop0): checking transaction log (loop0)
[  191.609417][ T5482] REISERFS (device loop0): Using tea hash to sort names
[  191.630513][ T5482] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  192.405284][ T5505] syz.4.350 (5505): drop_caches: 3
[  194.049662][ T5525] loop0: detected capacity change from 0 to 128
[  194.083902][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.090262][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  195.390327][ T5540] loop4: detected capacity change from 0 to 512
[  195.580379][ T5540] EXT4-fs error (device loop4): ext4_quota_enable:6388: inode #3: comm syz.4.361: iget: bogus i_mode (0)
[  196.381787][ T5540] EXT4-fs error (device loop4): ext4_quota_enable:6391: comm syz.4.361: Bad quota inode: 3, type: 0
[  196.422501][ T5540] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  196.622388][ T5540] EXT4-fs (loop4): mount failed
[  197.590074][ T5556] loop2: detected capacity change from 0 to 47
[  197.928226][ T5562] loop1: detected capacity change from 0 to 128
[  198.727768][ T5551] syz.3.364 (5551): drop_caches: 3
[  198.749039][ T4230] attempt to access beyond end of device
[  198.749039][ T4230] loop2: rw=1, want=50, limit=47
[  198.840033][ T4230] Buffer I/O error on dev loop2, logical block 24, lost async page write
[  198.879848][ T4230] attempt to access beyond end of device
[  198.879848][ T4230] loop2: rw=1, want=52, limit=47
[  198.921503][ T4230] Buffer I/O error on dev loop2, logical block 25, lost async page write
[  198.930341][ T4230] attempt to access beyond end of device
[  198.930341][ T4230] loop2: rw=1, want=54, limit=47
[  199.165737][ T4230] Buffer I/O error on dev loop2, logical block 26, lost async page write
[  199.186716][ T4230] attempt to access beyond end of device
[  199.186716][ T4230] loop2: rw=1, want=56, limit=47
[  199.300398][ T4230] Buffer I/O error on dev loop2, logical block 27, lost async page write
[  200.970653][ T4230] attempt to access beyond end of device
[  200.970653][ T4230] loop2: rw=1, want=50, limit=47
[  200.995775][ T5577] input: syz0 as /devices/virtual/input/input7
[  201.018330][ T4230] Buffer I/O error on dev loop2, logical block 24, lost async page write
[  202.016528][ T4230] attempt to access beyond end of device
[  202.016528][ T4230] loop2: rw=1, want=52, limit=47
[  202.036394][ T4230] Buffer I/O error on dev loop2, logical block 25, lost async page write
[  202.045747][ T4230] attempt to access beyond end of device
[  202.045747][ T4230] loop2: rw=1, want=54, limit=47
[  202.056247][ T4230] Buffer I/O error on dev loop2, logical block 26, lost async page write
[  202.064808][ T4230] attempt to access beyond end of device
[  202.064808][ T4230] loop2: rw=1, want=56, limit=47
[  202.075317][ T4230] Buffer I/O error on dev loop2, logical block 27, lost async page write
[  202.170969][ T5590] dlm: no local IP address has been set
[  202.176953][ T5590] dlm: cannot start dlm midcomms -107
[  202.254974][ T5591] loop1: detected capacity change from 0 to 8
[  204.009057][ T5591] SQUASHFS error: zstd decompression failed, data probably corrupt
[  204.017617][ T5591] SQUASHFS error: Failed to read block 0x4ec: -5
[  204.024546][ T5591] SQUASHFS error: Unable to read metadata cache entry [4ea]
[  204.031963][ T5591] SQUASHFS error: Unable to read inode 0x2011f
[  205.177564][ T5600] loop3: detected capacity change from 0 to 128
[  205.858604][ T5603] loop2: detected capacity change from 0 to 64
[  207.793080][ T5611] loop4: detected capacity change from 0 to 1024
[  208.662033][ T4210] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  209.043718][ T5629] loop0: detected capacity change from 0 to 1024
[  209.101824][ T4210] usb 5-1: Using ep0 maxpacket: 32
[  209.573238][ T4210] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  209.650955][ T4210] usb 5-1: config 0 has no interface number 0
[  209.698029][ T4210] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  209.901198][ T4210] usb 5-1: config 0 interface 85 has no altsetting 0
[  210.432232][ T4210] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  210.450511][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.471669][ T4210] usb 5-1: Product: syz
[  210.488646][ T4210] usb 5-1: Manufacturer: syz
[  210.508457][ T4210] usb 5-1: SerialNumber: syz
[  210.625513][ T4210] usb 5-1: config 0 descriptor??
[  210.702309][ T4210] usb 5-1: can't set config #0, error -71
[  210.729285][ T5642] loop1: detected capacity change from 0 to 128
[  210.874626][ T4210] usb 5-1: USB disconnect, device number 3
[  211.289988][ T5651] loop4: detected capacity change from 0 to 64
[  212.269609][ T5658] loop2: detected capacity change from 0 to 512
[  212.969824][ T5658] EXT4-fs error (device loop2): ext4_quota_enable:6388: inode #3: comm syz.2.395: iget: bogus i_mode (0)
[  213.012470][ T5658] EXT4-fs error (device loop2): ext4_quota_enable:6391: comm syz.2.395: Bad quota inode: 3, type: 0
[  213.018909][ T5661] loop0: detected capacity change from 0 to 8192
[  213.048953][ T5658] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  213.071461][ T5658] EXT4-fs (loop2): mount failed
[  213.121447][ T5661] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  213.131928][ T5661] REISERFS (device loop0): using ordered data mode
[  213.155390][ T5661] reiserfs: using flush barriers
[  213.253662][ T5661] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  213.455718][ T5661] REISERFS (device loop0): checking transaction log (loop0)
[  214.184619][ T5684] loop2: detected capacity change from 0 to 64
[  215.190153][ T5686] loop4: detected capacity change from 0 to 1024
[  215.485884][ T5661] REISERFS (device loop0): Using tea hash to sort names
[  215.508139][ T5661] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  215.731618][ T4251] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  215.891170][ T5698] loop2: detected capacity change from 0 to 64
[  216.731796][ T4251] usb 5-1: Using ep0 maxpacket: 32
[  216.882008][ T4251] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  216.896749][ T4251] usb 5-1: config 0 has no interface number 0
[  216.911304][ T5709] loop1: detected capacity change from 0 to 512
[  216.930183][ T4251] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  216.971674][ T4251] usb 5-1: config 0 interface 85 has no altsetting 0
[  217.068404][ T5709] EXT4-fs error (device loop1): ext4_quota_enable:6388: inode #3: comm syz.1.411: iget: bogus i_mode (0)
[  217.090914][ T5709] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.411: Bad quota inode: 3, type: 0
[  217.117378][ T5709] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  217.139767][ T5709] EXT4-fs (loop1): mount failed
[  217.181980][ T4251] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  217.213784][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.230486][ T4251] usb 5-1: Product: syz
[  217.253623][ T4251] usb 5-1: Manufacturer: syz
[  217.261002][ T4251] usb 5-1: SerialNumber: syz
[  217.393551][ T4251] usb 5-1: config 0 descriptor??
[  217.976275][ T5722] loop3: detected capacity change from 0 to 64
[  218.482566][ T4251] appletouch 5-1:0.85: Geyser mode initialized.
[  218.492119][ T4251] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input8
[  218.559828][ T4251] usb 5-1: USB disconnect, device number 4
[  218.565855][    C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  218.751480][ T5729] loop2: detected capacity change from 0 to 256
[  219.689799][ T5729] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  219.724779][ T4251] appletouch 5-1:0.85: input: appletouch disconnected
[  220.135518][ T5732] loop0: detected capacity change from 0 to 128
[  220.135524][ T5739] loop3: detected capacity change from 0 to 64
[  221.412710][ T5759] loop0: detected capacity change from 0 to 512
[  224.259633][ T5759] EXT4-fs: error -4 creating inode table initialization thread
[  225.070599][ T5759] EXT4-fs (loop0): mount failed
[  225.195450][ T5778] loop2: detected capacity change from 0 to 1024
[  225.214427][ T5782] loop4: detected capacity change from 0 to 256
[  225.357538][ T5785] loop1: detected capacity change from 0 to 128
[  225.411733][ T5782] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  225.929547][ T4241] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  226.771725][ T4241] usb 3-1: Using ep0 maxpacket: 32
[  227.102743][ T4241] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  227.591636][ T4241] usb 3-1: config 0 has no interface number 0
[  227.764423][ T4241] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  228.889794][ T4241] usb 3-1: config 0 interface 85 has no altsetting 0
[  229.891728][ T4241] usb 3-1: string descriptor 0 read error: -71
[  229.898514][ T4241] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  229.922010][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.933063][ T4241] usb 3-1: config 0 descriptor??
[  229.968732][ T4241] usb 3-1: can't set config #0, error -71
[  229.986716][ T4241] usb 3-1: USB disconnect, device number 2
[  232.402250][ T5835] ptrace attach of "./syz-executor exec"[4166] was attempted by ""[5835]
[  232.411776][ T5835] netlink: 'syz.3.446': attribute type 1 has an invalid length.
[  232.608983][ T5846] loop2: detected capacity change from 0 to 512
[  233.443944][ T5846] EXT4-fs error (device loop2): ext4_quota_enable:6388: inode #3: comm syz.2.443: iget: bogus i_mode (0)
[  233.486396][ T5846] EXT4-fs error (device loop2): ext4_quota_enable:6391: comm syz.2.443: Bad quota inode: 3, type: 0
[  233.588577][ T5846] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  234.452796][ T5846] EXT4-fs (loop2): mount failed
[  236.398754][ T5874] loop4: detected capacity change from 0 to 1024
[  241.310224][ T5916] loop0: detected capacity change from 0 to 64
[  242.050175][ T5917] loop3: detected capacity change from 0 to 512
[  242.241213][ T5917] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #3: comm syz.3.464: iget: bogus i_mode (0)
[  242.300073][ T5917] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.464: Bad quota inode: 3, type: 0
[  242.377949][ T5917] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  242.420166][ T5917] EXT4-fs (loop3): mount failed
[  242.535442][ T5928] loop0: detected capacity change from 0 to 64
[  242.987798][ T5933] dlm: no local IP address has been set
[  242.993777][ T5933] dlm: cannot start dlm midcomms -107
[  243.067432][ T5934] loop2: detected capacity change from 0 to 8
[  243.148202][ T5934] SQUASHFS error: zstd decompression failed, data probably corrupt
[  243.156395][ T5934] SQUASHFS error: Failed to read block 0x4ec: -5
[  243.162961][ T5934] SQUASHFS error: Unable to read metadata cache entry [4ea]
[  243.170372][ T5934] SQUASHFS error: Unable to read inode 0x2011f
[  244.624103][ T5944] loop0: detected capacity change from 0 to 1024
[  244.678528][ T5946] ax25_connect(): syz.3.471 uses autobind, please contact jreuter@yaina.de
[  247.853992][ T5961] loop1: detected capacity change from 0 to 1024
[  250.103714][ T5971] loop0: detected capacity change from 0 to 64
[  250.669120][ T5977] loop4: detected capacity change from 0 to 512
[  250.956469][ T4230] hfsplus: b-tree write err: -5, ino 4
[  251.576785][ T5977] EXT4-fs error (device loop4): ext4_quota_enable:6388: inode #3: comm syz.4.479: iget: bogus i_mode (0)
[  251.752881][ T5977] EXT4-fs error (device loop4): ext4_quota_enable:6391: comm syz.4.479: Bad quota inode: 3, type: 0
[  251.778375][ T5977] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  253.180028][ T5977] EXT4-fs (loop4): mount failed
[  253.293868][ T6003] loop3: detected capacity change from 0 to 1024
[  253.577051][ T6012] loop2: detected capacity change from 0 to 1024
[  253.721812][ T4210] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  254.021831][ T4210] usb 4-1: Using ep0 maxpacket: 32
[  254.162638][ T4210] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  254.385533][ T4210] usb 4-1: config 0 has no interface number 0
[  254.404853][ T4625] hfsplus: b-tree write err: -5, ino 4
[  254.539437][ T4210] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  254.560496][ T4210] usb 4-1: config 0 interface 85 has no altsetting 0
[  254.690150][ T6021] loop1: detected capacity change from 0 to 512
[  254.768906][ T6021] EXT4-fs (loop1): Ignoring removed nobh option
[  254.775331][ T6021] EXT4-fs (loop1): Ignoring removed nobh option
[  254.782524][ T6021] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  255.431957][ T4210] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  255.523591][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.530109][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.740547][ T4210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.760050][ T4210] usb 4-1: Product: syz
[  255.769768][ T4210] usb 4-1: Manufacturer: syz
[  255.779653][ T6021] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  255.788611][ T6021] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.502: invalid indirect mapped block 2683928664 (level 1)
[  255.807978][ T6021] EXT4-fs (loop1): 1 truncate cleaned up
[  255.813671][ T6021] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,nobh,minixdf,nobh,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback.
[  255.834367][ T4210] usb 4-1: SerialNumber: syz
[  255.849354][ T4210] usb 4-1: config 0 descriptor??
[  256.040868][ T6032] loop2: detected capacity change from 0 to 64
[  256.680414][   T13] Bluetooth: hci1: command 0x0406 tx timeout
[  256.951812][ T4210] appletouch 4-1:0.85: Geyser mode initialized.
[  256.967737][ T4210] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input9
[  257.363610][ T4210] usb 4-1: USB disconnect, device number 3
[  257.410848][ T4210] appletouch 4-1:0.85: input: appletouch disconnected
[  259.226156][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.503'.
[  259.255813][ T6061] loop4: detected capacity change from 0 to 512
[  259.261778][ T6058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.503'.
[  259.945424][ T6061] EXT4-fs error (device loop4): ext4_quota_enable:6388: inode #3: comm syz.4.501: iget: bogus i_mode (0)
[  259.971202][ T6064] team0 (unregistering): Port device team_slave_0 removed
[  259.988204][ T6061] EXT4-fs error (device loop4): ext4_quota_enable:6391: comm syz.4.501: Bad quota inode: 3, type: 0
[  260.024363][ T6061] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  260.075453][ T6064] team0 (unregistering): Port device team_slave_1 removed
[  260.083303][ T6061] EXT4-fs (loop4): mount failed
[  263.051155][ T6104] loop3: detected capacity change from 0 to 40427
[  263.341640][ T6104] F2FS-fs (loop3): invalid crc value
[  264.193407][ T6104] F2FS-fs (loop3): Found nat_bits in checkpoint
[  264.291714][ T6104] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  264.887663][ T6123] attempt to access beyond end of device
[  264.887663][ T6123] loop3: rw=2049, want=53504, limit=40427
[  265.924406][ T6130] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  265.933879][ T6130] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  268.319543][ T6138] loop1: detected capacity change from 0 to 512
[  269.442470][ T6138] EXT4-fs error (device loop1): ext4_quota_enable:6388: inode #3: comm syz.1.525: iget: bogus i_mode (0)
[  269.612701][ T6138] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.525: Bad quota inode: 3, type: 0
[  269.642162][ T6138] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  269.673363][ T6138] EXT4-fs (loop1): mount failed
[  271.881834][   T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  272.641597][   T23] usb 4-1: Using ep0 maxpacket: 8
[  272.674438][ T6172] loop1: detected capacity change from 0 to 64
[  272.734937][ T6175] loop0: detected capacity change from 0 to 64
[  273.571842][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  273.616295][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  274.272829][ T6185] netlink: 'syz.1.536': attribute type 4 has an invalid length.
[  274.402299][   T23] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[  275.065969][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.075124][   T23] usb 4-1: Product: syz
[  275.080326][   T23] usb 4-1: Manufacturer: syz
[  275.087541][   T23] usb 4-1: SerialNumber: syz
[  275.102619][   T23] usb 4-1: config 0 descriptor??
[  275.131751][   T23] usb 4-1: can't set config #0, error -71
[  275.155225][   T23] usb 4-1: USB disconnect, device number 4
[  277.804242][ T6200] loop3: detected capacity change from 0 to 512
[  277.967344][ T6202] loop0: detected capacity change from 0 to 128
[  278.174393][ T6200] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #3: comm syz.3.541: iget: bogus i_mode (0)
[  279.537538][ T6200] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.541: Bad quota inode: 3, type: 0
[  279.572147][ T6200] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  279.684173][ T6200] EXT4-fs (loop3): mount failed
[  279.889631][ T6210] loop0: detected capacity change from 0 to 256
[  279.946133][ T6210] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  279.978688][ T6210] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  280.051729][ T6210] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  280.185202][ T6210] exFAT-fs (loop0): hint_cluster is invalid (17)
[  281.466721][ T6231] loop2: detected capacity change from 0 to 128
[  284.549965][ T6260] loop1: detected capacity change from 0 to 512
[  285.214968][ T6260] EXT4-fs error (device loop1): ext4_quota_enable:6388: inode #3: comm syz.1.556: iget: bogus i_mode (0)
[  285.245304][ T6260] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.556: Bad quota inode: 3, type: 0
[  285.272139][ T6260] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  285.354525][ T6260] EXT4-fs (loop1): mount failed
[  285.992071][ T6282] loop4: detected capacity change from 0 to 64
[  288.866650][ T6304] loop3: detected capacity change from 0 to 764
[  289.174254][   T26] audit: type=1326 audit(1743554758.231:12): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6307 comm="syz.0.568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe48951169 code=0x0
[  289.255477][ T6304] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  289.566917][ T6315] loop2: detected capacity change from 0 to 512
[  289.590737][ T6298] overlayfs: unrecognized mount option "ÇÔÁÞ^Ïb"ÎE3£³1Õ¢–‹q©Øïg®k×=ß~êÏüñý7»ÓׂÊ[t$é~˜ëýc‹ é~xþ|Ø!ÿÒ蟳v¿[§n¸e+Eþ½ÝÍ" or missing value
[  289.942704][ T6315] EXT4-fs error (device loop2): ext4_quota_enable:6388: inode #3: comm syz.2.570: iget: bogus i_mode (0)
[  290.098558][ T6315] EXT4-fs error (device loop2): ext4_quota_enable:6391: comm syz.2.570: Bad quota inode: 3, type: 0
[  290.332204][ T6315] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  290.391286][ T6315] EXT4-fs (loop2): mount failed
[  290.653674][ T6327] loop1: detected capacity change from 0 to 64
[  293.597768][ T6341] loop3: detected capacity change from 0 to 512
[  293.629392][ T6341] EXT4-fs (loop3): Unrecognized mount option "dont_hash" or missing value
[  294.067746][ T6341] loop3: detected capacity change from 0 to 32768
[  296.202914][ T6341] XFS (loop3): Mounting V5 Filesystem
[  297.008936][ T6341] XFS (loop3): AIL initialisation failed: error -12
[  297.092153][ T6341] XFS (loop3): log mount failed
[  297.328490][ T6369] loop4: detected capacity change from 0 to 1024
[  297.415133][ T6375] loop1: detected capacity change from 0 to 512
[  297.467810][ T6369] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  297.709047][ T6375] EXT4-fs error (device loop1): ext4_quota_enable:6388: inode #3: comm syz.1.584: iget: bogus i_mode (0)
[  297.889529][ T6375] EXT4-fs error (device loop1): ext4_quota_enable:6391: comm syz.1.584: Bad quota inode: 3, type: 0
[  298.321357][ T6375] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  298.865807][ T6366] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  298.882864][ T6366] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28
[  298.895513][ T6366] EXT4-fs (loop4): This should not happen!! Data will be lost
[  298.895513][ T6366] 
[  298.905253][ T6366] EXT4-fs (loop4): Total free blocks count 0
[  298.911257][ T6366] EXT4-fs (loop4): Free/Dirty block details
[  298.913251][ T6375] EXT4-fs (loop1): mount failed
[  298.917305][ T6366] EXT4-fs (loop4): free_blocks=68451041280
[  298.917400][ T6366] EXT4-fs (loop4): dirty_blocks=32
[  298.917416][ T6366] EXT4-fs (loop4): Block reservation details
[  298.917430][ T6366] EXT4-fs (loop4): i_reserved_data_blocks=2
[  299.172885][ T6389] loop2: detected capacity change from 0 to 64
[  299.700508][ T6392] loop1: detected capacity change from 0 to 256
[  299.814140][ T6392] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  299.900512][ T6392] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  300.022587][ T6392] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  301.953961][ T6408] input: syz0 as /devices/virtual/input/input10
[  305.226355][ T6430] loop4: detected capacity change from 0 to 512
[  305.255055][ T6438] loop3: detected capacity change from 0 to 64
[  306.858454][ T6430] EXT4-fs error (device loop4): ext4_quota_enable:6388: inode #3: comm syz.4.599: iget: bogus i_mode (0)
[  306.879360][ T6448] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  306.930643][ T6430] EXT4-fs error (device loop4): ext4_quota_enable:6391: comm syz.4.599: Bad quota inode: 3, type: 0
[  306.998549][ T6430] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  306.999192][ T6449] tipc: Enabled bearer <eth:team0>, priority 0
[  307.017553][ T6430] EXT4-fs (loop4): mount failed
[  310.713589][ T6466] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  312.935497][ T6494] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  312.983040][ T6494] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  313.339312][ T6502] loop3: detected capacity change from 0 to 512
[  314.933089][ T6502] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #3: comm syz.3.620: iget: bogus i_mode (0)
[  315.088994][ T6502] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.620: Bad quota inode: 3, type: 0
[  315.367161][ T6519] loop2: detected capacity change from 0 to 128
[  315.410653][ T6502] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  315.628859][ T6502] EXT4-fs (loop3): mount failed
[  316.436340][ T6523] loop2: detected capacity change from 0 to 64
[  316.953786][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  316.983474][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.128935][ T6533] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  317.200452][ T6533] tipc: Enabled bearer <eth:team0>, priority 0
[  317.210965][ T6536] loop3: detected capacity change from 0 to 16
[  317.390970][ T6536] erofs: (device loop3): mounted with root inode @ nid 36.
[  317.468728][ T4173] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000]
[  317.996623][ T6549] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  318.005620][ T6549] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  318.850699][ T6551] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  319.988283][ T6536] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192]
[  320.023675][   T26] audit: type=1800 audit(1743554789.081:13): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.631" name="file2" dev="loop3" ino=89 res=0 errno=0
[  320.210926][ T6560] loop4: detected capacity change from 0 to 128
[  321.790282][ T6566] loop2: detected capacity change from 0 to 512
[  321.962053][ T6572] loop0: detected capacity change from 0 to 512
[  322.131773][ T6572] EXT4-fs (loop0): Ignoring removed nobh option
[  322.183344][   T26] audit: type=1326 audit(1743554791.241:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6580 comm="syz.3.644" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e83764169 code=0x0
[  322.209387][ T6566] EXT4-fs error (device loop2): ext4_quota_enable:6388: inode #3: comm syz.2.639: iget: bogus i_mode (0)
[  322.242438][ T6572] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.641: invalid indirect mapped block 256 (level 2)
[  322.388534][ T6566] EXT4-fs error (device loop2): ext4_quota_enable:6391: comm syz.2.639: Bad quota inode: 3, type: 0
[  322.402920][ T6572] EXT4-fs (loop0): 2 truncates cleaned up
[  322.453792][ T6572] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  322.548190][ T6566] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  322.782199][ T6584] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  322.832808][ T6566] EXT4-fs (loop2): mount failed
[  322.985584][ T6590] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  323.034463][ T6590] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  323.153087][ T6595] IPVS: length: 156 != 24
[  323.210654][ T6597] loop3: detected capacity change from 0 to 256
[  323.258415][ T6597] exfat: Unknown parameter 'keep_last_dots'
[  323.720043][ T6609] loop0: detected capacity change from 0 to 8
[  326.033381][ T6609] SQUASHFS error: lzo decompression failed, data probably corrupt
[  326.041298][ T6609] SQUASHFS error: Failed to read block 0x91: -5
[  326.047715][ T6609] SQUASHFS error: Unable to read metadata cache entry [8f]
[  326.055538][ T6609] SQUASHFS error: Unable to read inode 0x11f
[  326.456856][ T6618] loop2: detected capacity change from 0 to 2048
[  326.519833][ T6618] NILFS (loop2): invalid segment: Checksum error in segment payload
[  326.545785][ T6618] NILFS (loop2): trying rollback from an earlier position
[  326.609791][ T6618] NILFS (loop2): recovery complete
[  326.650044][ T6622] netlink: 'syz.0.656': attribute type 10 has an invalid length.
[  326.702692][ T6623] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  326.716390][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.663926][ T6622] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  327.734503][ T6629] loop3: detected capacity change from 0 to 256
[  327.823245][ T6633] tipc: Started in network mode
[  327.828344][ T6633] tipc: Node identity 7f000001, cluster identity 4711
[  327.842667][ T6633] tipc: Enabled bearer <udp:syz2>, priority 10
[  327.850450][ T6633] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  328.927750][ T6629] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  329.036915][ T6645] loop2: detected capacity change from 0 to 512
[  329.094049][ T5250] tipc: Node number set to 2130706433
[  330.402949][ T6645] EXT4-fs error (device loop2): ext4_quota_enable:6388: inode #3: comm syz.2.660: iget: bogus i_mode (0)
[  330.476024][ T6645] EXT4-fs error (device loop2): ext4_quota_enable:6391: comm syz.2.660: Bad quota inode: 3, type: 0
[  330.561216][ T6645] EXT4-fs warning (device loop2): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  330.647925][ T6645] EXT4-fs (loop2): mount failed
[  331.897858][ T6673] loop4: detected capacity change from 0 to 512
[  332.050684][ T6675] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  332.116497][ T6675] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  332.134966][ T6673] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  332.419631][ T6673] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,dioread_lock,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  332.685315][ T6673] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  333.934009][ T6696] loop0: detected capacity change from 0 to 256
[  334.884486][ T6696] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  336.216839][ T6714] netlink: 'syz.4.683': attribute type 4 has an invalid length.
[  337.428735][ T6716] loop2: detected capacity change from 0 to 1024
[  337.791596][ T6716] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  339.024640][ T6733] loop4: detected capacity change from 0 to 256
[  339.304237][ T6733] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  340.842452][ T6748] loop2: detected capacity change from 0 to 256
[  341.015548][ T6748] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  344.446490][ T6779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.702'.
[  347.120840][ T6791] loop0: detected capacity change from 0 to 40427
[  347.179366][ T6791] F2FS-fs (loop0): invalid crc value
[  347.204229][ T6791] F2FS-fs (loop0): Found nat_bits in checkpoint
[  347.296527][ T6791] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  347.341082][ T6802] loop2: detected capacity change from 0 to 256
[  347.610484][ T6802] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  348.541202][ T4175] attempt to access beyond end of device
[  348.541202][ T4175] loop0: rw=2049, want=45104, limit=40427
[  349.431711][   T13] Bluetooth: hci5: command 0x1003 tx timeout
[  349.437965][ T4169] Bluetooth: hci5: sending frame failed (-49)
[  349.591423][ T6804] loop3: detected capacity change from 0 to 32768
[  351.588222][ T4210] Bluetooth: hci5: command 0x1001 tx timeout
[  351.611682][ T4169] Bluetooth: hci5: sending frame failed (-49)
[  353.353718][ T6847] netlink: 'syz.0.722': attribute type 4 has an invalid length.
[  354.293028][ T4210] Bluetooth: hci5: command 0x1009 tx timeout
[  357.800027][ T6901] loop0: detected capacity change from 0 to 256
[  357.905436][ T6901] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  362.343575][ T6934] loop0: detected capacity change from 0 to 32768
[  362.932087][ T6934] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.745 (6934)
[  363.094412][ T6934] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  363.104042][ T6934] BTRFS info (device loop0): enabling disk space caching
[  363.111203][ T6934] BTRFS info (device loop0): force clearing of disk cache
[  363.118938][ T6934] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  363.129689][ T6934] BTRFS info (device loop0): use zstd compression, level 3
[  363.137500][ T6934] BTRFS info (device loop0): disk space caching is enabled
[  363.144827][ T6934] BTRFS info (device loop0): has skinny extents
[  367.645147][ T6934] BTRFS error (device loop0): open_ctree failed: -12
[  367.796993][ T4160] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by udevd (4160)
[  368.820833][ T7028] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  370.919325][ T7045] loop2: detected capacity change from 0 to 2048
[  373.171808][ T7045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  373.939147][ T7070] loop2: detected capacity change from 0 to 256
[  374.814077][ T7070] exfat: Unknown parameter 'keep_last_dots'
[  375.454370][ T7077] 8021q: adding VLAN 0 to HW filter on device batadv1
[  378.523713][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.530054][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  378.665992][ T7088] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  379.105199][ T7092] netlink: 96 bytes leftover after parsing attributes in process `syz.2.771'.
[  379.599874][ T7098] loop2: detected capacity change from 0 to 1764
[  382.667072][ T7134] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  383.746191][ T7141] syz.3.788 uses obsolete (PF_INET,SOCK_PACKET)
[  387.202505][ T7167] loop2: detected capacity change from 0 to 256
[  387.309993][ T7167] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  389.524204][ T7188] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  395.195392][ T7217] loop2: detected capacity change from 0 to 1024
[  396.168475][ T7224] xt_CT: No such helper "snmp"
[  396.483979][ T7236] loop4: detected capacity change from 0 to 64
[  396.730445][ T7240] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  397.630501][ T6997] hfsplus: b-tree write err: -5, ino 4
[  400.786098][ T7256] loop3: detected capacity change from 0 to 256
[  400.921911][ T7260] loop2: detected capacity change from 0 to 256
[  400.933388][ T7256] FAT-fs (loop3): Directory bread(block 64) failed
[  400.960007][ T7256] FAT-fs (loop3): Directory bread(block 65) failed
[  400.997229][ T7256] FAT-fs (loop3): Directory bread(block 66) failed
[  401.021424][ T7260] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  401.069044][ T7256] FAT-fs (loop3): Directory bread(block 67) failed
[  401.079590][ T7256] FAT-fs (loop3): Directory bread(block 68) failed
[  401.287057][ T7256] FAT-fs (loop3): Directory bread(block 69) failed
[  401.333163][ T7256] FAT-fs (loop3): Directory bread(block 70) failed
[  401.339755][ T7256] FAT-fs (loop3): Directory bread(block 71) failed
[  401.351962][ T7256] FAT-fs (loop3): Directory bread(block 72) failed
[  401.358549][ T7256] FAT-fs (loop3): Directory bread(block 73) failed
[  402.265804][ T7272] bridge0: port 2(vlan2) entered blocking state
[  402.312074][ T7272] bridge0: port 2(vlan2) entered disabled state
[  402.383569][ T7272] device vlan2 entered promiscuous mode
[  402.411703][ T7272] device bond0 entered promiscuous mode
[  402.417392][ T7272] device bond_slave_0 entered promiscuous mode
[  402.518874][ T7272] device bond_slave_1 entered promiscuous mode
[  402.539637][ T7272] bridge0: port 2(vlan2) entered blocking state
[  402.546334][ T7272] bridge0: port 2(vlan2) entered forwarding state
[  402.761204][ T7279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  403.618949][ T4157] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  403.673630][ T4157] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  405.940561][ T7304] loop4: detected capacity change from 0 to 256
[  406.485982][ T7304] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  408.394352][ T7325] syz.4.840 (7325): drop_caches: 2
[  408.779864][ T7328] loop2: detected capacity change from 0 to 64
[  409.615949][ T4157] hid-generic 0000:0000:0000.0002: item fetching failed at offset 0/2
[  409.789564][ T4157] hid-generic: probe of 0000:0000:0000.0002 failed with error -22
[  411.012859][ T7357] loop0: detected capacity change from 0 to 256
[  411.189168][ T7357] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  411.660738][   T26] audit: type=1326 audit(1743554880.581:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e83764169 code=0x7ffc0000
[  413.925790][ T7368] netlink: 'syz.3.855': attribute type 1 has an invalid length.
[  413.933511][ T7368] netlink: 'syz.3.855': attribute type 8 has an invalid length.
[  415.101573][   T26] audit: type=1326 audit(1743554880.581:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e83764169 code=0x7ffc0000
[  415.242440][   T26] audit: type=1326 audit(1743554880.581:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f1e83764169 code=0x7ffc0000
[  415.347220][   T26] audit: type=1326 audit(1743554880.591:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e83764169 code=0x7ffc0000
[  415.460482][   T26] audit: type=1326 audit(1743554880.591:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e83764169 code=0x7ffc0000
[  415.968165][   T26] audit: type=1326 audit(1743554880.591:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e83766087 code=0x7ffc0000
[  416.440879][   T26] audit: type=1326 audit(1743554880.591:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1e83765ffc code=0x7ffc0000
[  416.463043][   T26] audit: type=1326 audit(1743554880.591:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1e83765f34 code=0x7ffc0000
[  416.713104][   T26] audit: type=1326 audit(1743554880.591:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1e83765f34 code=0x7ffc0000
[  416.948117][   T26] audit: type=1326 audit(1743554880.591:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1e83762dca code=0x7ffc0000
[  417.255727][   T26] audit: type=1326 audit(1743554880.591:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e83764169 code=0x7ffc0000
[  417.278322][   T26] audit: type=1326 audit(1743554880.601:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e83764169 code=0x7ffc0000
[  418.268893][ T7413] loop3: detected capacity change from 0 to 128
[  419.662191][ T4265] attempt to access beyond end of device
[  419.662191][ T4265] loop3: rw=1, want=233, limit=128
[  419.881477][ T7420] ubi31: attaching mtd0
[  420.022804][ T4265] attempt to access beyond end of device
[  420.022804][ T4265] loop3: rw=1, want=234, limit=128
[  420.034373][ T4265] Buffer I/O error on dev loop3, logical block 233, lost async page write
[  420.080230][ T4265] attempt to access beyond end of device
[  420.080230][ T4265] loop3: rw=1, want=235, limit=128
[  420.111019][ T7420] ubi31: scanning is finished
[  420.114549][ T4265] Buffer I/O error on dev loop3, logical block 234, lost async page write
[  420.128398][ T4265] attempt to access beyond end of device
[  420.128398][ T4265] loop3: rw=1, want=236, limit=128
[  420.139380][ T7420] ubi31: empty MTD device detected
[  420.182618][ T4265] Buffer I/O error on dev loop3, logical block 235, lost async page write
[  420.191407][ T4265] attempt to access beyond end of device
[  420.191407][ T4265] loop3: rw=1, want=237, limit=128
[  420.222805][ T4265] Buffer I/O error on dev loop3, logical block 236, lost async page write
[  420.251646][ T4265] attempt to access beyond end of device
[  420.251646][ T4265] loop3: rw=1, want=238, limit=128
[  420.263674][ T4265] Buffer I/O error on dev loop3, logical block 237, lost async page write
[  420.276397][ T4265] attempt to access beyond end of device
[  420.276397][ T4265] loop3: rw=1, want=239, limit=128
[  420.351902][ T7420] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  420.359635][ T7420] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  420.369576][ T7420] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  420.381418][ T4265] Buffer I/O error on dev loop3, logical block 238, lost async page write
[  420.392559][ T4265] attempt to access beyond end of device
[  420.392559][ T4265] loop3: rw=1, want=240, limit=128
[  420.405057][ T7420] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  420.408463][ T4265] Buffer I/O error on dev loop3, logical block 239, lost async page write
[  420.421531][ T7420] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  420.441745][ T7420] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  420.486418][ T7420] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3551487152
[  420.701232][ T7420] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  420.725300][ T7432] ubi31: background thread "ubi_bgt31d" started, PID 7432
[  424.112729][ T4251] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  424.120722][ T4251] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  424.151308][ T4251] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  426.454846][ T7480] loop2: detected capacity change from 0 to 256
[  426.882486][ T7480] exfat: Deprecated parameter 'utf8'
[  426.888316][ T7480] exfat: Unknown parameter 'keep_last_dots'
[  427.375115][ T7478] loop3: detected capacity change from 0 to 2048
[  427.776305][ T7478] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none.
[  427.892231][ T7478] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  428.931888][ T7013] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm kworker/u4:18: bg 0: block 345: padding at end of block bitmap is not set
[  428.970197][ T7013] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 905 with error 117
[  429.001514][ T7013] EXT4-fs (loop3): This should not happen!! Data will be lost
[  429.001514][ T7013] 
[  429.032169][ T7494] loop0: detected capacity change from 0 to 64
[  429.590461][ T7500] loop2: detected capacity change from 0 to 256
[  429.878026][ T7500] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  432.779136][ T7514] netlink: 'syz.4.897': attribute type 3 has an invalid length.
[  432.794362][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.897'.
[  433.503270][ T7526] loop3: detected capacity change from 0 to 256
[  434.646899][ T7526] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  437.196451][ T7560] loop3: detected capacity change from 0 to 164
[  439.844061][ T7570] loop3: detected capacity change from 0 to 40427
[  439.865247][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  439.871601][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  440.007349][ T7570] F2FS-fs (loop3): inline encryption not supported
[  440.061282][ T7570] F2FS-fs (loop3): invalid crc value
[  440.510284][ T7570] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  440.568432][ T7570] F2FS-fs (loop3): Start checkpoint disabled!
[  440.681758][ T7570] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  443.634101][ T7604] loop0: detected capacity change from 0 to 512
[  443.796632][ T7604] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_WRITE" or missing value
[  443.988988][ T7595] chnl_net:caif_netlink_parms(): no params data found
[  444.276763][ T7604] 9pnet: Insufficient options for proto=fd
[  445.449598][ T4251] Bluetooth: hci5: command 0x0409 tx timeout
[  446.632723][ T7595] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.661536][ T7595] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.670105][ T7595] device bridge_slave_0 entered promiscuous mode
[  446.693911][ T7595] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.701081][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.731672][ T6358] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  446.753671][ T7595] device bridge_slave_1 entered promiscuous mode
[  446.843665][ T7595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  446.875673][ T7595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  446.971770][ T6358] usb 3-1: Using ep0 maxpacket: 16
[  447.092222][ T6358] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  447.206386][ T6358] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  447.531906][ T6358] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  447.551391][ T6358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.559994][ T6358] usb 3-1: Product: syz
[  447.584759][ T6358] usb 3-1: Manufacturer: syz
[  447.608004][ T6358] usb 3-1: SerialNumber: syz
[  447.683276][ T6358] r8152-cfgselector 3-1: config 0 descriptor??
[  447.732531][ T7636] netlink: 'syz.4.926': attribute type 3 has an invalid length.
[  447.780302][ T7636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.926'.
[  448.113925][ T7640] netlink: 'syz.2.923': attribute type 3 has an invalid length.
[  448.135676][ T7640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.923'.
[  448.399979][ T4251] Bluetooth: hci5: command 0x041b tx timeout
[  448.434242][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.917'.
[  448.470549][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'.
[  448.491982][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.917'.
[  448.507214][ T7595] team0: Port device team_slave_0 added
[  448.549803][ T7595] team0: Port device team_slave_1 added
[  448.738312][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.756574][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.801382][ T7595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.943821][ T7595] batman_adv: batadv0: Adding interface: batadv_slave_1
[  448.968610][ T7595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  449.054330][ T7595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  449.213063][ T7595] device hsr_slave_0 entered promiscuous mode
[  449.225230][ T7595] device hsr_slave_1 entered promiscuous mode
[  449.241995][ T7595] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  449.264247][ T7595] Cannot create hsr debugfs directory
[  450.188384][ T7651] loop0: detected capacity change from 0 to 40427
[  450.207898][ T7651] F2FS-fs (loop0): inline encryption not supported
[  450.216985][ T7651] F2FS-fs (loop0): invalid crc value
[  450.272958][ T7651] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  450.327345][ T7651] F2FS-fs (loop0): Start checkpoint disabled!
[  450.350080][ T7651] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  450.543560][ T4251] Bluetooth: hci5: command 0x040f tx timeout
[  450.582354][ T6358] r8152-cfgselector 3-1: Unknown version 0x0000
[  451.065210][ T6358] r8152-cfgselector 3-1: USB disconnect, device number 3
[  451.937076][ T7595] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  452.317972][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'.
[  453.212712][   T13] Bluetooth: hci5: command 0x0419 tx timeout
[  453.219973][ T7595] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  453.469920][ T7595] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  453.511311][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'.
[  453.571733][ T7681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.936'.
[  453.580852][ T7682] netlink: 'syz.4.937': attribute type 4 has an invalid length.
[  453.591738][ T7595] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  453.696421][ T7689] loop0: detected capacity change from 0 to 512
[  454.035069][ T7694] loop3: detected capacity change from 0 to 40427
[  454.135676][ T7689] EXT4-fs (loop0): Unrecognized mount option "mask=MAY_WRITE" or missing value
[  454.146696][ T7694] F2FS-fs (loop3): Unrecognized mount option "whintjmode=fs-based" or missing value
[  454.288497][ T7701] netlink: 'syz.2.940': attribute type 3 has an invalid length.
[  454.306224][ T7701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.940'.
[  454.626994][ T7595] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.646498][ T7595] 8021q: adding VLAN 0 to HW filter on device team0
[  454.677183][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  454.692731][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  454.727669][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  454.758200][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  454.795628][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.802836][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.826006][ T7689] 9pnet: Insufficient options for proto=fd
[  454.882538][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  454.906114][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  455.367680][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.374904][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.875530][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  456.237817][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  456.339714][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  456.555338][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  456.611233][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  456.640291][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  456.672251][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  456.711967][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  456.769257][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  456.790283][ T7595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  456.817854][ T7595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  457.648605][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  457.657720][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  457.666378][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  457.940328][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  457.968789][ T7722] loop2: detected capacity change from 0 to 512
[  457.991908][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  458.026478][ T7595] 8021q: adding VLAN 0 to HW filter on device batadv0
[  458.212247][ T7722] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002]
[  458.220490][ T7722] System zones: 0-5
[  458.302621][ T7722] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none.
[  458.861586][   T26] audit: type=1800 audit(1743554927.881:27): pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.947" name="file1" dev="loop2" ino=15 res=0 errno=0
[  459.168818][ T7738] loop3: detected capacity change from 0 to 256
[  459.380836][ T7745] netlink: 'syz.4.950': attribute type 4 has an invalid length.
[  460.419202][ T7753] loop2: detected capacity change from 0 to 40427
[  460.773659][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  460.932681][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  460.968961][ T7595] device veth0_vlan entered promiscuous mode
[  461.013088][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  461.025880][ T7753] F2FS-fs (loop2): Unrecognized mount option "whintjmode=fs-based" or missing value
[  461.037106][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  461.086655][ T7595] device veth1_vlan entered promiscuous mode
[  461.108066][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  461.138602][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  461.164145][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  461.382208][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  461.420935][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  461.441208][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  461.470802][ T7595] device veth0_macvtap entered promiscuous mode
[  461.500118][ T7595] device veth1_macvtap entered promiscuous mode
[  461.581937][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.621524][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.667225][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.721040][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.756278][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.777804][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.817189][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.858359][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.911312][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.941473][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.978111][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_0
[  461.997780][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  462.016930][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  462.039432][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  462.079637][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  462.120890][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.164185][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.201715][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.251506][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.291702][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.331501][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.361498][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.401540][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.441521][ T7595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  462.461506][ T7595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  462.484980][ T7595] batman_adv: batadv0: Interface activated: batadv_slave_1
[  462.512274][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  462.521992][ T4264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  462.543309][ T7595] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  462.553695][ T7595] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  462.572086][ T7595] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  462.580961][ T7595] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  462.977380][ T1201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.052337][ T1201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  463.742185][ T7002] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  463.906344][ T4266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  463.932947][ T4266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.010674][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  464.401609][ T6358] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  464.765101][ T6358] usb 4-1: Using ep0 maxpacket: 16
[  465.022281][ T6358] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.035276][ T6358] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  465.103647][ T7785] loop4: detected capacity change from 0 to 164
[  465.222383][ T6358] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  465.265316][ T6358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.340786][ T6358] usb 4-1: Product: syz
[  465.379020][ T6358] usb 4-1: Manufacturer: syz
[  465.424556][ T6358] usb 4-1: SerialNumber: syz
[  465.493159][ T6358] r8152-cfgselector 4-1: config 0 descriptor??
[  465.796634][ T7785] rock: directory entry would overflow storage
[  465.803353][ T7785] rock: sig=0x4f50, size=4, remaining=3
[  465.808940][ T7785] iso9660: Corrupted directory entry in block 4 of inode 1792
[  466.001746][ T7773] netlink: 'syz.3.957': attribute type 3 has an invalid length.
[  466.009496][ T7773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.957'.
[  467.426135][ T6358] r8152-cfgselector 4-1: Unknown version 0x0000
[  467.884840][ T7805] loop4: detected capacity change from 0 to 256
[  468.315892][ T7803] loop5: detected capacity change from 0 to 40427
[  468.371212][ T6358] r8152-cfgselector 4-1: USB disconnect, device number 6
[  468.387485][ T7803] F2FS-fs (loop5): Unrecognized mount option "whintjmode=fs-based" or missing value
[  470.901199][ T7825] loop4: detected capacity change from 0 to 64
[  472.102133][ T7838] loop3: detected capacity change from 0 to 128
[  472.641448][    C1] hrtimer: interrupt took 50870 ns
[  472.778876][ T5825] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  473.651759][ T5825] usb 6-1: Using ep0 maxpacket: 16
[  473.968733][ T5825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  473.987711][ T5825] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  474.142344][ T7864] loop4: detected capacity change from 0 to 256
[  474.532474][ T5825] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  474.560026][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.569488][ T5825] usb 6-1: Product: syz
[  474.590095][ T5825] usb 6-1: Manufacturer: syz
[  474.706862][ T5825] usb 6-1: SerialNumber: syz
[  474.730989][ T5825] r8152-cfgselector 6-1: config 0 descriptor??
[  474.873685][ T7870] loop4: detected capacity change from 0 to 512
[  474.950640][ T7870] EXT4-fs (loop4): Unrecognized mount option "mask=MAY_WRITE" or missing value
[  474.984812][ T7870] 9pnet: Insufficient options for proto=fd
[  475.720828][ T7840] netlink: 'syz.5.975': attribute type 3 has an invalid length.
[  476.002075][   T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  476.092356][ T7840] netlink: 16 bytes leftover after parsing attributes in process `syz.5.975'.
[  478.179261][ T7879] loop4: detected capacity change from 0 to 128
[  478.241858][ T5825] r8152-cfgselector 6-1: Unknown version 0x0000
[  478.252884][ T5825] r8152-cfgselector 6-1: USB disconnect, device number 2
[  478.417255][ T7883] loop2: detected capacity change from 0 to 256
[  478.530225][ T7883] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  480.992226][ T5825] Bluetooth: hci6: command 0x0409 tx timeout
[  481.142669][ T7887] chnl_net:caif_netlink_parms(): no params data found
[  482.049139][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state
[  482.056425][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.066636][ T7887] device bridge_slave_0 entered promiscuous mode
[  482.076245][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state
[  482.083778][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.092425][ T7887] device bridge_slave_1 entered promiscuous mode
[  482.145702][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.163479][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.198196][ T7887] team0: Port device team_slave_0 added
[  482.418797][ T7887] team0: Port device team_slave_1 added
[  483.702838][ T4179] Bluetooth: hci6: command 0x041b tx timeout
[  484.899931][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.958847][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  484.984861][    C1] vkms_vblank_simulate: vblank timer overrun
[  485.177536][ T7948] loop5: detected capacity change from 0 to 64
[  485.185771][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.212988][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.220002][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.314338][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.922986][   T13] Bluetooth: hci6: command 0x040f tx timeout
[  486.013210][ T7887] device hsr_slave_0 entered promiscuous mode
[  486.043018][ T7887] device hsr_slave_1 entered promiscuous mode
[  486.052588][ T7887] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  486.062669][ T7887] Cannot create hsr debugfs directory
[  488.412388][ T5825] Bluetooth: hci6: command 0x0419 tx timeout
[  488.606675][ T4157] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  489.191414][ T7984] loop5: detected capacity change from 0 to 40427
[  489.509067][ T7984] F2FS-fs (loop5): Unrecognized mount option "whintjmode=fs-based" or missing value
[  489.729321][ T7887] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  489.771974][ T4157] usb 4-1: Using ep0 maxpacket: 16
[  489.782764][ T7887] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  489.812746][ T7887] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  489.830544][ T7887] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  490.024925][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.041704][ T4157] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  490.061629][ T4157] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  490.097956][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  490.114553][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  490.128978][ T7887] 8021q: adding VLAN 0 to HW filter on device team0
[  490.145938][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  490.164444][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  490.206488][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.213759][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.234197][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  490.242980][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  490.252471][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  490.261217][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.268337][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.281004][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  490.331732][ T4157] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  490.340821][ T4157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.352878][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  490.374661][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  490.390133][ T4157] usb 4-1: Product: syz
[  490.409294][ T4157] usb 4-1: Manufacturer: syz
[  490.414259][ T4157] usb 4-1: SerialNumber: syz
[  490.424512][ T4157] r8152-cfgselector 4-1: config 0 descriptor??
[  490.435654][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  490.448727][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  490.462545][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1020'.
[  490.494223][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  490.512682][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  490.544157][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'.
[  490.581605][ T4157] r8152-cfgselector 4-1: Unknown version 0x0000
[  490.601699][ T4157] r8152-cfgselector 4-1: USB disconnect, device number 7
[  490.618010][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  490.653276][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  490.695424][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  490.717909][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  491.624711][ T7887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  492.895779][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  492.904720][ T6022] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  492.952667][ T7887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  493.623326][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  493.635980][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  493.717561][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  493.732726][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  493.772645][ T7887] device veth0_vlan entered promiscuous mode
[  493.792179][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  493.818622][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  493.866748][ T7887] device veth1_vlan entered promiscuous mode
[  493.931578][ T5250] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  493.978152][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  493.996521][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  494.059873][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  494.114891][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  494.200787][ T5250] usb 5-1: Using ep0 maxpacket: 16
[  494.231800][ T7887] device veth0_macvtap entered promiscuous mode
[  494.263590][ T7887] device veth1_macvtap entered promiscuous mode
[  494.342290][ T5250] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  494.420222][ T5250] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  494.482632][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.567659][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.679665][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.692383][ T5250] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  494.736165][ T5250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.812505][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  494.834876][ T5250] usb 5-1: Product: syz
[  494.873335][ T5250] usb 5-1: Manufacturer: syz
[  494.941482][ T5250] usb 5-1: SerialNumber: syz
[  494.946309][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  494.967912][ T5250] r8152-cfgselector 5-1: config 0 descriptor??
[  494.987912][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.028464][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.059807][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.089315][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.100287][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.111374][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  495.133140][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  495.152483][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  495.163466][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  495.177892][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  495.385766][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  495.416413][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  496.077371][ T8047] netlink: 'syz.4.1031': attribute type 3 has an invalid length.
[  496.098046][ T8047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1031'.
[  496.180975][ T8062] loop3: detected capacity change from 0 to 4096
[  496.359083][ T8062] NILFS (loop3): unrecognized mount option "barriard"
[  496.414654][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.431035][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.441116][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.454897][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.674682][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  496.800874][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  496.900460][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.009992][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.120555][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.270962][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.427667][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.460897][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.484103][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  497.511720][ T5250] r8152-cfgselector 5-1: Unknown version 0x0000
[  497.545594][ T5250] r8152-cfgselector 5-1: USB disconnect, device number 7
[  497.560370][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  497.587985][ T1201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  497.645160][ T8079] netlink: 'syz.4.1040': attribute type 3 has an invalid length.
[  497.659425][ T7887] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.674471][ T7887] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.691535][ T7887] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.707961][ T7887] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.792600][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1040'.
[  497.895891][ T8077] input: syz0 as /devices/virtual/input/input18
[  498.162804][ T1207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.192315][ T1207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.284603][ T5036] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  498.327590][ T5036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.359696][ T5036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.377765][ T1207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  498.622158][ T8088] netlink: 'syz.6.988': attribute type 3 has an invalid length.
[  498.639080][ T8088] netlink: 16 bytes leftover after parsing attributes in process `syz.6.988'.
[  501.364362][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  501.370767][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  502.140466][ T8117] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  502.411102][ T8127] loop2: detected capacity change from 0 to 256
[  502.876851][ T4179] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  504.263882][ T4179] usb 7-1: Using ep0 maxpacket: 16
[  504.402717][ T4179] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  504.455039][ T4179] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  504.600683][ T8146] netlink: 'syz.5.1059': attribute type 3 has an invalid length.
[  504.641753][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1059'.
[  504.745047][ T4179] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  504.761466][ T4179] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.769860][ T4179] usb 7-1: Product: syz
[  504.782065][ T4179] usb 7-1: Manufacturer: syz
[  504.788455][ T4179] usb 7-1: SerialNumber: syz
[  504.813145][ T4179] r8152-cfgselector 7-1: config 0 descriptor??
[  505.231761][ T4179] r8152-cfgselector 7-1: Unknown version 0x0000
[  505.276552][ T8161] loop4: detected capacity change from 0 to 256
[  505.283131][ T4179] r8152-cfgselector 7-1: USB disconnect, device number 2
[  505.382873][ T8161] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  507.530469][ T4215] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  507.923800][ T8183] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  508.911992][ T4215] usb 6-1: device not accepting address 3, error -71
[  510.748004][ T8214] netlink: 'syz.4.1077': attribute type 3 has an invalid length.
[  510.802492][ T8214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1077'.
[  511.151646][ T4179] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  511.426830][ T4179] usb 6-1: Using ep0 maxpacket: 16
[  511.571992][ T4179] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  511.799475][ T8230] loop4: detected capacity change from 0 to 164
[  512.126001][ T8229] rock: directory entry would overflow storage
[  512.132360][ T8229] rock: sig=0x4f50, size=4, remaining=3
[  512.138042][ T8229] iso9660: Corrupted directory entry in block 4 of inode 1792
[  512.286454][ T4179] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  513.022953][ T4179] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  513.129375][ T4179] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.140123][ T4179] usb 6-1: Product: syz
[  513.144407][ T4179] usb 6-1: Manufacturer: syz
[  513.149111][ T4179] usb 6-1: SerialNumber: syz
[  513.215219][ T4179] r8152-cfgselector 6-1: config 0 descriptor??
[  513.531515][ T4210] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  513.637200][ T8221] netlink: 'syz.5.1079': attribute type 3 has an invalid length.
[  513.658623][ T8221] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1079'.
[  513.781472][ T4210] usb 5-1: Using ep0 maxpacket: 16
[  513.901709][ T4210] usb 5-1: config 0 has an invalid interface number: 194 but max is 0
[  513.910209][ T4210] usb 5-1: config 0 has no interface number 0
[  514.073263][ T4210] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25
[  514.087279][ T4210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.182205][ T4210] usb 5-1: Product: syz
[  514.186772][ T4210] usb 5-1: Manufacturer: syz
[  514.217069][ T4210] usb 5-1: SerialNumber: syz
[  514.313791][ T4210] usb 5-1: config 0 descriptor??
[  514.410953][ T4210] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now attached
[  514.670882][ T8248] device wlan0 entered promiscuous mode
[  514.800585][ T8269] loop6: detected capacity change from 0 to 128
[  514.811697][ T4179] r8152-cfgselector 6-1: Unknown version 0x0000
[  514.822441][ T8248] device macvtap1 entered promiscuous mode
[  515.012312][ T6358] usb 5-1: USB disconnect, device number 8
[  515.202650][   T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  515.523551][ T6358] cypress_cy7c63 5-1:0.194: Cypress CY7C63xxx device now disconnected
[  515.761552][   T23] usb 3-1: Using ep0 maxpacket: 16
[  515.892918][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  515.924728][   T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  515.965145][ T4179] r8152-cfgselector 6-1: USB disconnect, device number 5
[  516.384973][ T8286] loop3: detected capacity change from 0 to 256
[  516.703115][   T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  516.849089][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.230876][   T23] usb 3-1: Product: syz
[  517.407375][   T23] usb 3-1: Manufacturer: syz
[  518.211039][   T23] usb 3-1: SerialNumber: syz
[  518.232442][   T23] r8152-cfgselector 3-1: config 0 descriptor??
[  518.272590][   T23] r8152-cfgselector 3-1: can't set config #0, error -71
[  518.301582][   T23] r8152-cfgselector 3-1: Unknown version 0x0000
[  518.331551][   T23] r8152-cfgselector 3-1: USB disconnect, device number 4
[  518.841513][   T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  519.081589][   T23] usb 3-1: Using ep0 maxpacket: 16
[  519.201941][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  519.253814][   T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  519.962282][ T8319] loop3: detected capacity change from 0 to 40427
[  520.202077][   T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  520.459794][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.492229][   T23] usb 3-1: Product: syz
[  520.497423][   T23] usb 3-1: Manufacturer: syz
[  520.532323][   T23] usb 3-1: SerialNumber: syz
[  520.652411][   T23] r8152-cfgselector 3-1: config 0 descriptor??
[  520.683776][ T8324] loop5: detected capacity change from 0 to 128
[  520.869242][ T8319] F2FS-fs (loop3): Unrecognized mount option "whintjmode=fs-based" or missing value
[  520.987043][ T8324] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1106'.
[  522.181141][ T8306] netlink: 'syz.2.1103': attribute type 3 has an invalid length.
[  522.292458][ T8306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1103'.
[  522.350861][ T8334] loop6: detected capacity change from 0 to 512
[  522.441647][ T8334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002]
[  522.449737][ T8334] System zones: 0-5
[  522.477560][ T8334] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none.
[  522.514060][   T26] audit: type=1800 audit(1743554991.571:28): pid=8334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1109" name="file1" dev="loop6" ino=15 res=0 errno=0
[  522.744827][ T4179] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  522.961568][ T4179] usb 6-1: device descriptor read/64, error -71
[  522.982214][ T8342] loop6: detected capacity change from 0 to 164
[  523.271705][ T4179] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  523.283508][ T8346] netlink: 'syz.3.1108': attribute type 3 has an invalid length.
[  523.456744][ T8346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1108'.
[  523.469800][ T8349] input: syz0 as /devices/virtual/input/input24
[  523.491737][   T23] r8152-cfgselector 3-1: Unknown version 0x0000
[  523.510251][   T23] r8152-cfgselector 3-1: USB disconnect, device number 5
[  523.591713][ T4179] usb 6-1: device descriptor read/64, error -71
[  523.721809][ T4179] usb usb6-port1: attempt power cycle
[  524.141845][ T4179] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  524.261883][ T4179] usb 6-1: device descriptor read/8, error -71
[  524.571974][ T4179] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  524.701744][ T4179] usb 6-1: device descriptor read/8, error -71
[  524.907836][ T4179] usb usb6-port1: unable to enumerate USB device
[  525.444219][ T8375] loop2: detected capacity change from 0 to 512
[  525.540971][ T8375] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002]
[  525.631676][ T8375] System zones: 0-5
[  525.692813][ T8375] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none.
[  525.729588][ T8380] loop3: detected capacity change from 0 to 164
[  526.361027][   T26] audit: type=1800 audit(1743554995.411:29): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1121" name="file1" dev="loop2" ino=15 res=0 errno=0
[  526.734062][ T8380] rock: directory entry would overflow storage
[  526.740307][ T8380] rock: sig=0x4f50, size=4, remaining=3
[  526.746025][ T8380] iso9660: Corrupted directory entry in block 4 of inode 1792
[  527.012316][ T7019] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  527.291776][ T7019] usb 6-1: Using ep0 maxpacket: 16
[  527.511904][ T7019] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  527.575508][ T7019] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  527.812304][ T7019] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  527.864567][ T7019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.613505][ T7019] usb 6-1: Product: syz
[  528.623737][ T7019] usb 6-1: Manufacturer: syz
[  528.695033][ T7019] usb 6-1: SerialNumber: syz
[  528.733450][ T7019] r8152-cfgselector 6-1: config 0 descriptor??
[  528.792517][ T7019] r8152-cfgselector 6-1: can't set config #0, error -71
[  528.811626][ T7019] r8152-cfgselector 6-1: Unknown version 0x0000
[  528.851214][ T7019] r8152-cfgselector 6-1: USB disconnect, device number 10
[  528.972123][ T8408] loop6: detected capacity change from 0 to 256
[  529.188123][ T8408] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  529.674365][ T8408] capability: warning: `syz.6.1130' uses 32-bit capabilities (legacy support in use)
[  531.115420][ T8426] loop6: detected capacity change from 0 to 64
[  531.177589][ T8425] loop5: detected capacity change from 0 to 512
[  531.333422][ T8425] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002]
[  531.377895][ T8425] System zones: 0-5
[  531.423794][ T8425] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none.
[  531.536343][   T26] audit: type=1800 audit(1743555000.591:30): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1135" name="file1" dev="loop5" ino=15 res=0 errno=0
[  531.591673][ T4215] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  531.881654][ T4215] usb 7-1: Using ep0 maxpacket: 32
[  532.014668][ T4215] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  532.043478][ T4215] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  532.072850][ T4215] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  532.117552][ T4215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.204461][ T4215] usb 7-1: config 0 descriptor??
[  532.267104][ T4215] hub 7-1:0.0: bad descriptor, ignoring hub
[  532.283384][ T4215] hub: probe of 7-1:0.0 failed with error -5
[  532.292378][   T13] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  532.330091][ T4215] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  532.571698][   T13] usb 6-1: Using ep0 maxpacket: 16
[  532.721738][   T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  532.740274][   T13] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  532.931871][   T13] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  533.773587][   T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.785199][   T13] usb 6-1: Product: syz
[  533.789473][   T13] usb 6-1: Manufacturer: syz
[  533.795287][   T13] usb 6-1: SerialNumber: syz
[  533.803845][   T13] r8152-cfgselector 6-1: config 0 descriptor??
[  534.324972][ T8454] netlink: 'syz.5.1139': attribute type 3 has an invalid length.
[  534.355083][ T8454] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1139'.
[  535.488411][ T8465] loop4: detected capacity change from 0 to 256
[  535.529319][ T4179] usb 7-1: USB disconnect, device number 3
[  536.626927][   T13] r8152-cfgselector 6-1: Unknown version 0x0000
[  536.662444][   T13] r8152-cfgselector 6-1: USB disconnect, device number 11
[  537.013992][ T8478] loop4: detected capacity change from 0 to 512
[  537.763668][ T8478] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002]
[  537.785801][ T8478] System zones: 0-5
[  537.795489][ T8478] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none.
[  538.154180][   T26] audit: type=1800 audit(1743555007.211:31): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1149" name="file1" dev="loop4" ino=15 res=0 errno=0
[  538.561662][ T7020] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  539.069289][ T8507] loop6: detected capacity change from 0 to 512
[  539.200447][ T8507] EXT4-fs (loop6): Unrecognized mount option "mask=MAY_WRITE" or missing value
[  540.013225][ T8507] 9pnet: Insufficient options for proto=fd
[  542.291531][ T7020] usb 4-1: Using ep0 maxpacket: 32
[  542.381630][ T7020] usb 4-1: device descriptor read/all, error -71
[  547.221154][ T8566] loop3: detected capacity change from 0 to 128
[  547.376084][ T8570] loop2: detected capacity change from 0 to 64
[  548.634579][ T8575] loop5: detected capacity change from 0 to 512
[  549.163113][ T8581] loop3: detected capacity change from 0 to 164
[  549.352516][ T8575] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002]
[  549.689600][ T8575] System zones: 0-5
[  549.768263][ T8575] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none.
[  550.333861][   T26] audit: type=1800 audit(1743555019.391:32): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1167" name="file1" dev="loop5" ino=15 res=0 errno=0
[  555.678184][ T8614] loop3: detected capacity change from 0 to 128
[  555.709383][ T8617] loop2: detected capacity change from 0 to 64
[  556.824777][ T8624] loop4: detected capacity change from 0 to 256
[  556.994708][ T8624] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  557.018731][ T8628] loop3: detected capacity change from 0 to 512
[  557.253569][ T8632] loop6: detected capacity change from 0 to 512
[  557.377438][ T8628] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #3: comm syz.3.1188: iget: bogus i_mode (0)
[  557.419803][ T8628] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.1188: Bad quota inode: 3, type: 0
[  557.441168][ T8632] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002]
[  557.450094][ T8628] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  557.469073][ T8628] EXT4-fs (loop3): mount failed
[  557.521088][ T8632] System zones: 0-5
[  557.725224][ T8632] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none.
[  558.131600][   T26] audit: type=1800 audit(1743555027.161:33): pid=8632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1190" name="file1" dev="loop6" ino=15 res=0 errno=0
[  558.640291][ T8652] loop2: detected capacity change from 0 to 40427
[  558.771673][ T8652] F2FS-fs (loop2): inline encryption not supported
[  558.794830][ T8652] F2FS-fs (loop2): invalid crc value
[  558.866834][ T8652] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  559.127955][ T8652] F2FS-fs (loop2): Start checkpoint disabled!
[  559.188588][ T8652] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  559.961516][ T6358] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  560.211679][ T6358] usb 4-1: Using ep0 maxpacket: 16
[  560.285704][ T8670] loop6: detected capacity change from 0 to 128
[  560.331753][ T6358] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.361557][ T6358] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  560.561812][ T6358] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  560.601692][ T6358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.647047][ T6358] usb 4-1: Product: syz
[  560.661514][ T6358] usb 4-1: Manufacturer: syz
[  560.666162][ T6358] usb 4-1: SerialNumber: syz
[  561.423861][ T8675] loop5: detected capacity change from 0 to 128
[  561.463973][ T6358] r8152-cfgselector 4-1: config 0 descriptor??
[  561.707820][ T8677] loop6: detected capacity change from 0 to 64
[  561.833880][ T8667] netlink: 'syz.3.1197': attribute type 3 has an invalid length.
[  561.895324][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1197'.
[  562.717660][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  562.724499][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  563.588576][ T8691] loop2: detected capacity change from 0 to 128
[  563.605770][ T8690] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1204'.
[  563.726253][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'.
[  563.765426][ T8695] loop4: detected capacity change from 0 to 512
[  564.001613][ T6358] r8152-cfgselector 4-1: Unknown version 0x0000
[  564.865640][ T4179] Bluetooth: hci5: command 0x0406 tx timeout
[  564.988935][ T6358] r8152-cfgselector 4-1: USB disconnect, device number 10
[  565.000407][ T8705] netlink: 'syz.6.1206': attribute type 4 has an invalid length.
[  565.035648][ T8695] EXT4-fs error (device loop4): ext4_quota_enable:6388: inode #3: comm syz.4.1205: iget: bogus i_mode (0)
[  565.055006][ T8695] EXT4-fs error (device loop4): ext4_quota_enable:6391: comm syz.4.1205: Bad quota inode: 3, type: 0
[  565.067362][ T8695] EXT4-fs warning (device loop4): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  565.089045][ T8695] EXT4-fs (loop4): mount failed
[  565.573533][ T8716] loop4: detected capacity change from 0 to 128
[  565.801521][ T6358] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  566.751512][ T6358] usb 4-1: Using ep0 maxpacket: 16
[  566.871977][ T6358] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  566.971864][ T6358] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  567.292120][ T6358] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  567.349821][ T6358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.491087][ T6358] usb 4-1: Product: syz
[  567.503734][ T8725] loop4: detected capacity change from 0 to 128
[  567.522901][ T6358] usb 4-1: Manufacturer: syz
[  567.527542][ T6358] usb 4-1: SerialNumber: syz
[  567.587235][ T6358] r8152-cfgselector 4-1: config 0 descriptor??
[  567.857092][ T8731] loop2: detected capacity change from 0 to 164
[  568.411917][ T6358] r8152-cfgselector 4-1: Unknown version 0x0000
[  568.428307][ T6358] r8152-cfgselector 4-1: USB disconnect, device number 11
[  570.740120][ T8749] loop3: detected capacity change from 0 to 40427
[  570.796808][ T8749] F2FS-fs (loop3): Unrecognized mount option "whintjmode=fs-based" or missing value
[  572.054371][ T8756] loop6: detected capacity change from 0 to 40427
[  572.193352][ T8759] loop3: detected capacity change from 0 to 512
[  572.332384][ T8756] F2FS-fs (loop6): Unrecognized mount option "whintjmode=fs-based" or missing value
[  572.389263][ T8759] EXT4-fs error (device loop3): ext4_quota_enable:6388: inode #3: comm syz.3.1220: iget: bogus i_mode (0)
[  572.467826][ T8759] EXT4-fs error (device loop3): ext4_quota_enable:6391: comm syz.3.1220: Bad quota inode: 3, type: 0
[  572.581286][ T8759] EXT4-fs warning (device loop3): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  572.665608][ T8759] EXT4-fs (loop3): mount failed
[  573.625985][ T8774] loop4: detected capacity change from 0 to 256
[  573.907729][ T8777] loop2: detected capacity change from 0 to 64
[  574.111701][ T4215] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  574.201607][   T13] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  574.511514][ T4215] usb 4-1: Using ep0 maxpacket: 16
[  574.526481][ T8784] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  574.641504][   T13] usb 6-1: Using ep0 maxpacket: 16
[  575.391806][ T4215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  575.405298][ T4215] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  575.948204][   T13] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  575.959185][   T13] usb 6-1: config 0 has no interfaces?
[  576.081927][ T8795] netlink: 'syz.2.1228': attribute type 4 has an invalid length.
[  576.121749][ T4215] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  576.133105][ T4215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.145428][ T4215] usb 4-1: Product: syz
[  576.154016][ T4215] usb 4-1: Manufacturer: syz
[  576.163959][ T4215] usb 4-1: SerialNumber: syz
[  576.172148][   T13] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  576.184376][   T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.194005][ T4215] r8152-cfgselector 4-1: config 0 descriptor??
[  576.205812][   T13] usb 6-1: Product: syz
[  576.210010][   T13] usb 6-1: Manufacturer: syz
[  576.238384][   T13] usb 6-1: SerialNumber: syz
[  576.269985][   T13] r8152-cfgselector 6-1: config 0 descriptor??
[  576.451644][ T4215] r8152-cfgselector 4-1: Unknown version 0x0000
[  576.469898][ T4215] r8152-cfgselector 4-1: USB disconnect, device number 12
[  576.571662][   T13] r8152-cfgselector 6-1: Unknown version 0x0000
[  576.590931][   T13] r8152-cfgselector 6-1: USB disconnect, device number 12
[  576.680283][ T8803] loop3: detected capacity change from 0 to 164
[  577.485511][ T8806] loop5: detected capacity change from 0 to 512
[  577.970806][ T8806] EXT4-fs error (device loop5): ext4_quota_enable:6388: inode #3: comm syz.5.1234: iget: bogus i_mode (0)
[  578.020470][ T8806] EXT4-fs error (device loop5): ext4_quota_enable:6391: comm syz.5.1234: Bad quota inode: 3, type: 0
[  578.080175][ T8806] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  578.128242][ T8806] EXT4-fs (loop5): mount failed
[  578.504082][ T8819] loop5: detected capacity change from 0 to 64
[  579.061519][ T4215] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  580.081744][ T4215] usb 6-1: Using ep0 maxpacket: 16
[  580.731592][ T4215] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  580.850416][ T4215] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  580.913362][ T8836] loop3: detected capacity change from 0 to 256
[  580.919960][ T8842] loop2: detected capacity change from 0 to 128
[  581.241289][ T4215] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  581.282000][ T4215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.603697][ T4215] usb 6-1: Product: syz
[  582.104650][ T4215] usb 6-1: Manufacturer: syz
[  582.109308][ T4215] usb 6-1: SerialNumber: syz
[  582.172091][ T4215] r8152-cfgselector 6-1: config 0 descriptor??
[  582.241713][ T4215] r8152-cfgselector 6-1: can't set config #0, error -71
[  582.282169][ T4215] r8152-cfgselector 6-1: Unknown version 0x0000
[  582.313649][ T4215] r8152-cfgselector 6-1: USB disconnect, device number 13
[  582.491599][ T4157] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  582.571577][ T4179] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  582.666548][ T8866] loop3: detected capacity change from 0 to 64
[  582.831625][ T4179] usb 7-1: Using ep0 maxpacket: 16
[  582.851700][ T4215] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  582.951758][ T4179] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.967373][ T4179] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  583.112031][ T4215] usb 6-1: Using ep0 maxpacket: 16
[  583.121457][ T4157] usb 5-1: Using ep0 maxpacket: 32
[  583.161770][ T4179] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  583.242354][ T4157] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  583.262127][ T4157] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  583.307152][ T4157] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  583.349252][ T4157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.513668][ T4157] usb 5-1: config 0 descriptor??
[  583.552979][ T4157] hub 5-1:0.0: bad descriptor, ignoring hub
[  583.564747][ T4157] hub: probe of 5-1:0.0 failed with error -5
[  583.600717][ T4157] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  583.671942][ T4179] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.679979][ T4179] usb 7-1: Product: syz
[  583.684270][ T4179] usb 7-1: Manufacturer: syz
[  583.689508][ T4179] usb 7-1: SerialNumber: syz
[  583.699765][ T4179] r8152-cfgselector 7-1: config 0 descriptor??
[  583.758792][ T8871] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1250'.
[  583.779015][ T4215] usb 6-1: config 0 has an invalid interface number: 194 but max is 0
[  583.788166][ T4215] usb 6-1: config 0 has no interface number 0
[  583.911735][ T7020] usb 5-1: USB disconnect, device number 9
[  583.981921][ T4215] usb 6-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25
[  584.029120][ T4215] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.117922][ T4215] usb 6-1: Product: syz
[  584.156616][ T4215] usb 6-1: Manufacturer: syz
[  584.199497][ T4215] usb 6-1: SerialNumber: syz
[  584.374147][ T4215] usb 6-1: config 0 descriptor??
[  584.392716][ T8849] netlink: 'syz.6.1244': attribute type 3 has an invalid length.
[  584.519908][ T4215] cypress_cy7c63 6-1:0.194: Cypress CY7C63xxx device now attached
[  584.531512][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1244'.
[  584.811636][ T8879] input: syz0 as /devices/virtual/input/input27
[  584.855738][ T8884] loop4: detected capacity change from 0 to 64
[  584.867579][ T8851] device wlan0 entered promiscuous mode
[  584.892795][ T4179] usbip-host 7-1: 7-1 is not in match_busid table... skip!
[  584.933306][ T4266] usb 7-1: config 0 descriptor??
[  584.954099][ T8851] device macvtap1 entered promiscuous mode
[  585.033889][ T7020] usb 6-1: USB disconnect, device number 14
[  585.040600][ T7020] cypress_cy7c63 6-1:0.194: Cypress CY7C63xxx device now disconnected
[  585.482941][ T7018] usb 7-1: USB disconnect, device number 4
[  585.501755][ T4266] usb 7-1: can't set config #0, error -71
[  585.803831][ T8892] loop2: detected capacity change from 0 to 128
[  585.891506][ T6358] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  586.141708][ T6358] usb 5-1: Using ep0 maxpacket: 16
[  587.431819][ T6358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.905123][ T8898] loop6: detected capacity change from 0 to 40427
[  587.934209][ T6358] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  588.191045][ T8911] loop3: detected capacity change from 0 to 164
[  588.397508][ T6358] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  588.439535][ T6358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.516240][ T8898] F2FS-fs (loop6): Unrecognized mount option "whintjmode=fs-based" or missing value
[  588.800613][ T6358] usb 5-1: Product: syz
[  588.851692][ T6358] usb 5-1: Manufacturer: syz
[  588.856369][ T6358] usb 5-1: SerialNumber: syz
[  588.932540][ T6358] r8152-cfgselector 5-1: config 0 descriptor??
[  588.977131][ T8918] loop2: detected capacity change from 0 to 64
[  589.004801][ T6358] r8152-cfgselector 5-1: can't set config #0, error -71
[  589.061579][ T6358] r8152-cfgselector 5-1: Unknown version 0x0000
[  589.100700][ T6358] r8152-cfgselector 5-1: USB disconnect, device number 10
[  589.501560][ T6358] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  589.759618][ T6358] usb 5-1: Using ep0 maxpacket: 32
[  589.901887][ T6358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  589.943779][ T6358] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  590.186966][ T6358] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  590.241486][ T6358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.265567][ T6358] usb 5-1: config 0 descriptor??
[  590.306143][ T6358] hub 5-1:0.0: bad descriptor, ignoring hub
[  590.317718][ T6358] hub: probe of 5-1:0.0 failed with error -5
[  590.326488][ T6358] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  590.641782][ T6358] usb 5-1: USB disconnect, device number 11
[  593.531218][ T8943] loop3: detected capacity change from 0 to 40427
[  593.606771][ T8943] F2FS-fs (loop3): inline encryption not supported
[  593.615631][ T8943] F2FS-fs (loop3): invalid crc value
[  593.658228][ T8943] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  593.713643][ T8943] F2FS-fs (loop3): Start checkpoint disabled!
[  593.740493][ T8943] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  593.755907][ T8957] loop5: detected capacity change from 0 to 164
[  595.039769][ T8969] loop4: detected capacity change from 0 to 164
[  596.019750][ T8974] loop4: detected capacity change from 0 to 128
[  596.070416][ T8975] loop2: detected capacity change from 0 to 64
[  596.132278][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'.
[  597.599240][ T8979] loop2: detected capacity change from 0 to 256
[  597.712260][ T8979] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  598.554862][ T8992] loop6: detected capacity change from 0 to 64
[  599.411488][ T7020] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  599.671506][ T7020] usb 4-1: Using ep0 maxpacket: 16
[  599.951563][ T4215] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  600.241438][ T4215] usb 7-1: Using ep0 maxpacket: 16
[  600.301593][ T7020] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  600.317129][ T7020] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  600.491647][ T7020] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  600.514982][ T7020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.616938][ T7020] usb 4-1: Product: syz
[  600.703568][ T7020] usb 4-1: Manufacturer: syz
[  600.772908][ T7020] usb 4-1: SerialNumber: syz
[  600.931992][ T7020] r8152-cfgselector 4-1: config 0 descriptor??
[  601.320996][ T8988] netlink: 'syz.3.1273': attribute type 3 has an invalid length.
[  601.351648][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1273'.
[  601.497661][ T4215] usb 7-1: config 0 has an invalid interface number: 194 but max is 0
[  601.505995][ T4215] usb 7-1: config 0 has no interface number 0
[  601.681568][ T4215] usb 7-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25
[  601.690656][ T4215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.711756][ T4215] usb 7-1: Product: syz
[  601.715964][ T4215] usb 7-1: Manufacturer: syz
[  601.720573][ T4215] usb 7-1: SerialNumber: syz
[  601.746640][ T4215] usb 7-1: config 0 descriptor??
[  601.803157][ T4215] cypress_cy7c63 7-1:0.194: Cypress CY7C63xxx device now attached
[  602.095660][ T9006] loop5: detected capacity change from 0 to 40427
[  602.110669][ T8999] device wlan0 entered promiscuous mode
[  602.210240][ T9006] F2FS-fs (loop5): inline encryption not supported
[  602.251935][ T8999] device macvtap1 entered promiscuous mode
[  602.324003][ T9006] F2FS-fs (loop5): invalid crc value
[  602.436197][ T4179] usb 7-1: USB disconnect, device number 5
[  602.456160][ T9006] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  602.468551][ T4179] cypress_cy7c63 7-1:0.194: Cypress CY7C63xxx device now disconnected
[  602.501712][ T7020] r8152-cfgselector 4-1: Unknown version 0x0000
[  602.528425][ T7020] r8152-cfgselector 4-1: USB disconnect, device number 13
[  602.618903][ T9006] F2FS-fs (loop5): Start checkpoint disabled!
[  602.634786][ T9006] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  602.688789][ T9022] loop4: detected capacity change from 0 to 64
[  603.578123][ T9026] loop6: detected capacity change from 0 to 512
[  603.871977][ T9026] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=6842c019, mo2=0002]
[  603.880108][ T9026] System zones: 0-5
[  604.110593][ T9037] loop4: detected capacity change from 0 to 64
[  604.118657][ T9026] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,nombcache,journal_ioprio=0x0000000000000000,debug,user_xattr,noinit_itable,jqfmt=vfsv0,user_xattr,auto_da_alloc=0x0000000000000007,,errors=continue. Quota mode: none.
[  604.630878][   T26] audit: type=1800 audit(1743555073.681:34): pid=9026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1287" name="file1" dev="loop6" ino=15 res=0 errno=0
[  605.975465][ T7020] Bluetooth: hci6: command 0x0406 tx timeout
[  607.646437][ T5250] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  607.671546][ T5250] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  607.700240][ T5250] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  607.714249][ T9062] netlink: 'syz.4.1296': attribute type 3 has an invalid length.
[  607.731613][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1296'.
[  607.889272][ T9066] input: syz0 as /devices/virtual/input/input29
[  608.191591][ T7020] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  608.441498][ T7020] usb 4-1: Using ep0 maxpacket: 16
[  608.561957][ T7020] usb 4-1: config 0 has an invalid interface number: 194 but max is 0
[  608.570356][ T7020] usb 4-1: config 0 has no interface number 0
[  608.601745][ T4157] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  608.741768][ T7020] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25
[  608.770739][ T9079] loop2: detected capacity change from 0 to 256
[  608.781569][ T7020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.789596][ T7020] usb 4-1: Product: syz
[  608.812832][ T7020] usb 4-1: Manufacturer: syz
[  608.841610][ T4157] usb 6-1: Using ep0 maxpacket: 32
[  608.850206][ T7020] usb 4-1: SerialNumber: syz
[  608.946530][ T7020] usb 4-1: config 0 descriptor??
[  608.962073][ T4157] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  609.016822][ T4157] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  609.051160][ T7020] cypress_cy7c63 4-1:0.194: Cypress CY7C63xxx device now attached
[  609.119373][ T4157] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  609.222031][ T4157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.360944][ T9079] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  609.432910][ T4157] usb 6-1: config 0 descriptor??
[  609.461774][ T9069] device wlan0 entered promiscuous mode
[  609.491931][ T4157] hub 6-1:0.0: USB hub found
[  609.499419][ T9069] device macvtap1 entered promiscuous mode
[  609.633663][ T7020] usb 4-1: USB disconnect, device number 14
[  609.640394][ T7020] cypress_cy7c63 4-1:0.194: Cypress CY7C63xxx device now disconnected
[  609.905908][ T9070] loop6: detected capacity change from 0 to 40427
[  610.547854][ T9070] F2FS-fs (loop6): Unrecognized mount option "whintjmode=fs-based" or missing value
[  610.791566][ T4157] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  611.441583][ T4157] usbhid 6-1:0.0: can't add hid device: -71
[  611.447603][ T4157] usbhid: probe of 6-1:0.0 failed with error -71
[  611.495460][ T4157] usb 6-1: USB disconnect, device number 15
[  612.266339][ T9090] loop4: detected capacity change from 0 to 40427
[  612.392347][ T9103] loop5: detected capacity change from 0 to 64
[  612.414939][ T9090] F2FS-fs (loop4): inline encryption not supported
[  612.424041][ T9090] F2FS-fs (loop4): invalid crc value
[  612.533960][ T9106] loop3: detected capacity change from 0 to 164
[  612.984286][ T9090] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  613.058945][ T9090] F2FS-fs (loop4): Start checkpoint disabled!
[  613.285187][   T27] INFO: task syz.0.953:7756 blocked for more than 144 seconds.
[  613.330759][   T27]       Not tainted 5.15.179-syzkaller #0
[  613.348255][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  613.366100][   T27] task:syz.0.953       state:D stack:25952 pid: 7756 ppid:  4175 flags:0x00404004
[  613.375699][ T9090] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  613.412949][   T27] Call Trace:
[  613.416361][   T27]  <TASK>
[  613.419386][   T27]  __schedule+0x12c4/0x45b0
[  613.426196][   T27]  ? release_firmware_map_entry+0x190/0x190
[  613.432696][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  613.438781][   T27]  ? print_irqtrace_events+0x210/0x210
[  613.444342][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[  613.449555][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  613.454876][   T27]  schedule+0x11b/0x1f0
[  613.459147][   T27]  schedule_preempt_disabled+0xf/0x20
[  613.464666][   T27]  rwsem_down_read_slowpath+0x605/0xb40
[  613.470350][   T27]  ? down_write_killable_nested+0x90/0x90
[  613.476210][   T27]  ? __lock_acquire+0x1ff0/0x1ff0
[  613.481332][   T27]  ? do_raw_spin_lock+0x14a/0x370
[  613.486568][   T27]  down_read+0x9a/0x2e0
[  613.491506][   T27]  iterate_supers+0xac/0x1e0
[  613.496220][   T27]  ? do_quotactl+0x6c0/0x6c0
[  613.500915][   T27]  __se_sys_quotactl+0x347/0x770
[  613.554045][   T27]  ? __lock_acquire+0x1ff0/0x1ff0
[  613.569823][   T27]  ? __x64_sys_quotactl+0xa0/0xa0
[  613.575013][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  613.581021][   T27]  ? print_irqtrace_events+0x210/0x210
[  613.586681][   T27]  ? vtime_user_exit+0x2d1/0x400
[  613.592385][   T27]  ? syscall_enter_from_user_mode+0x2e/0x240
[  613.598411][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  613.603727][   T27]  ? syscall_enter_from_user_mode+0x2e/0x240
[  613.609741][   T27]  do_syscall_64+0x3b/0xb0
[  613.614251][   T27]  ? clear_bhb_loop+0x15/0x70
[  613.618958][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  613.624964][   T27] RIP: 0033:0x7efe48951169
[  613.629488][   T27] RSP: 002b:00007efe467ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  613.638134][   T27] RAX: ffffffffffffffda RBX: 00007efe48b69fa0 RCX: 00007efe48951169
[  613.646261][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000101
[  613.654466][   T27] RBP: 00007efe489d22a0 R08: 0000000000000000 R09: 0000000000000000
[  613.662622][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  613.670838][   T27] R13: 0000000000000000 R14: 00007efe48b69fa0 R15: 00007ffeabf5bae8
[  613.681222][   T27]  </TASK>
[  613.684491][   T27] 
[  613.684491][   T27] Showing all locks held in the system:
[  613.765153][   T27] 2 locks held by kworker/u4:0/9:
[  613.770239][   T27] 1 lock held by khungtaskd/27:
[  613.799336][   T27]  #0: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  613.828925][   T27] 1 lock held by udevd/3545:
[  613.839434][   T27] 2 locks held by getty/3931:
[  613.916056][   T27]  #0: ffff88814c31c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  613.926162][   T27]  #1: ffffc90002ce32e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0
[  613.987599][   T27] 2 locks held by kworker/1:3/4157:
[  614.002433][   T27]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  614.019971][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1306'.
[  614.024223][   T27]  #1: ffffc90002effd20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  614.064464][   T27] 1 lock held by syz-executor/4167:
[  614.078111][   T27]  #0: ffff88802432e0e0 (&type->s_umount_key#87){++++}-{3:3}, at: deactivate_super+0xa9/0xe0
[  614.108158][   T27] 2 locks held by kworker/1:6/4210:
[  614.121105][   T27]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  614.143523][   T27]  #1: ffffc9000451fd20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  614.172785][   T27] 3 locks held by kworker/0:9/5250:
[  614.202920][   T27]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  614.218145][   T27]  #1: ffffc900037bfd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  614.236937][   T27]  #2: ffffffff8cb23aa8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740
[  614.259995][   T27] 2 locks held by kworker/1:9/6358:
[  614.267930][   T27]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  614.288429][   T27]  #1: ffffc9000356fd20 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  614.300748][   T27] 2 locks held by kworker/1:17/7018:
[  614.313496][   T27]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  614.333306][   T27]  #1: ffffc9000382fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  614.353398][   T27] 3 locks held by kworker/1:19/7020:
[  614.358724][   T27]  #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  614.378601][   T27]  #1: ffffc9000383fd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  614.395275][   T27]  #2: ffffffff8cb23aa8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740
[  614.415912][   T27] 1 lock held by syz.0.953/7756:
[  614.420903][   T27]  #0: ffff88802432e0e0 (&type->s_umount_key#87){++++}-{3:3}, at: iterate_supers+0xac/0x1e0
[  614.436241][   T27] 1 lock held by syz-executor/7887:
[  614.444767][   T27]  #0: ffff888021ca3468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xbe0
[  614.457311][   T27] 1 lock held by syz.4.1303/9093:
[  614.465736][   T27]  #0: ffff8880608f1410 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x98/0x230
[  614.476304][   T27] 1 lock held by dhcpcd/9112:
[  614.481027][   T27]  #0: ffff8880569dc120 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd60
[  614.491020][   T27] 
[  614.493625][   T27] =============================================
[  614.493625][   T27] 
[  614.502730][   T27] NMI backtrace for cpu 1
[  614.507088][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0
[  614.515088][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  614.525166][   T27] Call Trace:
[  614.528473][   T27]  <TASK>
[  614.531415][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  614.536115][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  614.541775][   T27]  ? panic+0x860/0x860
[  614.545869][   T27]  ? nmi_cpu_backtrace+0x23b/0x4a0
[  614.551006][   T27]  nmi_cpu_backtrace+0x46a/0x4a0
[  614.555959][   T27]  ? __wake_up_klogd+0xd5/0x100
[  614.560829][   T27]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  614.567002][   T27]  ? _printk+0xd1/0x120
[  614.571177][   T27]  ? panic+0x860/0x860
[  614.575261][   T27]  ? __wake_up_klogd+0xcc/0x100
[  614.580174][   T27]  ? panic+0x860/0x860
[  614.584265][   T27]  ? __rcu_read_unlock+0x92/0x100
[  614.589306][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  614.595393][   T27]  nmi_trigger_cpumask_backtrace+0x181/0x2a0
[  614.601397][   T27]  watchdog+0xe72/0xeb0
[  614.605584][   T27]  kthread+0x3f6/0x4f0
[  614.609667][   T27]  ? hungtask_pm_notify+0x50/0x50
[  614.614712][   T27]  ? kthread_blkcg+0xd0/0xd0
[  614.619324][   T27]  ret_from_fork+0x1f/0x30
[  614.623771][   T27]  </TASK>
[  614.628357][   T27] Sending NMI from CPU 1 to CPUs 0:
[  614.634081][    C0] NMI backtrace for cpu 0
[  614.634107][    C0] CPU: 0 PID: 4263 Comm: kworker/u4:7 Not tainted 5.15.179-syzkaller #0
[  614.634126][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  614.634137][    C0] Workqueue: phy8 ieee80211_iface_work
[  614.634159][    C0] RIP: 0010:__sanitizer_cov_trace_switch+0x6/0xe0
[  614.634181][    C0] Code: 44 11 08 07 00 00 00 48 89 7c 11 10 48 89 74 11 18 4c 89 44 11 20 49 ff c2 4c 89 12 c3 0f 1f 80 00 00 00 00 41 57 41 56 41 54 <53> 48 8b 46 08 48 83 c0 f8 48 c1 c0 3d 48 83 f8 07 0f 87 ac 00 00
[  614.634202][    C0] RSP: 0018:ffffc9000466f460 EFLAGS: 00000293
[  614.634215][    C0] RAX: ffffffff89d9062e RBX: ffff88806195008a RCX: ffff888024ac0000
[  614.634228][    C0] RDX: 0000000000000000 RSI: ffffffff8de846e0 RDI: 0000000000000006
[  614.634239][    C0] RBP: ffffc9000466f7e8 R08: ffffffff89d905db R09: fffff520008cdeeb
[  614.634252][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000
[  614.634263][    C0] R13: 0000000000000006 R14: 0000000000000004 R15: ffff888061950089
[  614.634273][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  614.634288][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  614.634299][    C0] CR2: 000055f0c7bce600 CR3: 0000000075d93000 CR4: 00000000003506f0
[  614.634314][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  614.634324][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  614.634334][    C0] Call Trace:
[  614.634339][    C0]  <NMI>
[  614.634344][    C0]  ? nmi_cpu_backtrace+0x39f/0x4a0
[  614.634369][    C0]  ? read_lock_is_recursive+0x10/0x10
[  614.634388][    C0]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  614.634406][    C0]  ? unknown_nmi_error+0xd0/0xd0
[  614.634431][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  614.634449][    C0]  ? nmi_handle+0xf7/0x370
[  614.634466][    C0]  ? __sanitizer_cov_trace_switch+0x6/0xe0
[  614.634484][    C0]  ? default_do_nmi+0x62/0x150
[  614.634504][    C0]  ? exc_nmi+0xa8/0x100
[  614.634521][    C0]  ? end_repeat_nmi+0x16/0x31
[  614.634541][    C0]  ? _ieee802_11_parse_elems_crc+0x54b/0x3020
[  614.634560][    C0]  ? _ieee802_11_parse_elems_crc+0x59e/0x3020
[  614.634581][    C0]  ? __sanitizer_cov_trace_switch+0x6/0xe0
[  614.634600][    C0]  ? __sanitizer_cov_trace_switch+0x6/0xe0
[  614.634619][    C0]  ? __sanitizer_cov_trace_switch+0x6/0xe0
[  614.634638][    C0]  </NMI>
[  614.634642][    C0]  <TASK>
[  614.634647][    C0]  _ieee802_11_parse_elems_crc+0x5ad/0x3020
[  614.634697][    C0]  ? ieee802_11_parse_elems_crc+0x1130/0x1130
[  614.634726][    C0]  ? cfg80211_find_elem_match+0x170/0x1a0
[  614.634749][    C0]  ieee802_11_parse_elems_crc+0xc6a/0x1130
[  614.634770][    C0]  ? __mutex_lock_common+0x444/0x25a0
[  614.634791][    C0]  ? mark_lock+0x98/0x340
[  614.634809][    C0]  ? __lock_acquire+0x1295/0x1ff0
[  614.634824][    C0]  ? mutex_lock_io_nested+0x60/0x60
[  614.634846][    C0]  ? ieee80211_queue_delayed_work+0x160/0x160
[  614.634865][    C0]  ? __lock_acquire+0x1295/0x1ff0
[  614.634884][    C0]  ieee80211_ibss_rx_queued_mgmt+0x380/0x2af0
[  614.634906][    C0]  ? mark_lock+0x98/0x340
[  614.634924][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  614.634942][    C0]  ? print_irqtrace_events+0x210/0x210
[  614.634961][    C0]  ? ieee80211_ibss_rx_no_sta+0x720/0x720
[  614.634981][    C0]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  614.634997][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  614.635017][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  614.635033][    C0]  ? _raw_spin_unlock+0x40/0x40
[  614.635050][    C0]  ? kcov_remote_start+0x6f/0x480
[  614.635070][    C0]  ? kcov_remote_start+0xf2/0x480
[  614.635089][    C0]  ieee80211_iface_work+0x78f/0xcc0
[  614.635110][    C0]  process_one_work+0x8a1/0x10c0
[  614.635137][    C0]  ? worker_detach_from_pool+0x260/0x260
[  614.635158][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  614.635174][    C0]  ? kthread_data+0x4e/0xc0
[  614.635190][    C0]  ? wq_worker_running+0x97/0x170
[  614.635208][    C0]  worker_thread+0xaca/0x1280
[  614.635238][    C0]  kthread+0x3f6/0x4f0
[  614.635253][    C0]  ? rcu_lock_release+0x20/0x20
[  614.635270][    C0]  ? kthread_blkcg+0xd0/0xd0
[  614.635286][    C0]  ret_from_fork+0x1f/0x30
[  614.635311][    C0]  </TASK>
[  614.866422][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  614.866441][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.179-syzkaller #0
[  614.866464][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  614.866477][   T27] Call Trace:
[  614.866484][   T27]  <TASK>
[  614.866494][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  614.866526][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  614.866551][   T27]  ? panic+0x860/0x860
[  614.866584][   T27]  panic+0x318/0x860
[  614.866604][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  614.866631][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  614.866656][   T27]  ? fb_is_primary_device+0xd0/0xd0
[  614.866679][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  614.866708][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  614.866731][   T27]  ? nmi_trigger_cpumask_backtrace+0x281/0x2a0
[  614.866757][   T27]  ? nmi_trigger_cpumask_backtrace+0x286/0x2a0
[  614.866784][   T27]  watchdog+0xeb0/0xeb0
[  614.866819][   T27]  kthread+0x3f6/0x4f0
[  614.866847][   T27]  ? hungtask_pm_notify+0x50/0x50
[  614.866869][   T27]  ? kthread_blkcg+0xd0/0xd0
[  614.866892][   T27]  ret_from_fork+0x1f/0x30
[  614.866927][   T27]  </TASK>
[  614.867227][   T27] Kernel Offset: disabled
[  615.312800][   T27] Rebooting in 86400 seconds..