last executing test programs:

24m31.246423086s ago: executing program 32 (id=78):
syz_open_dev$tty1(0xc, 0x4, 0x2)
openat$audio1(0xffffffffffffff9c, 0x0, 0x123201, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1, 0x7, 0x2, 0x12)
timer_create(0x0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xd, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e21, 0x4, @mcast2, 0x6}, 0x1c)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x40)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)

22m21.824243489s ago: executing program 33 (id=400):
prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
getpid()
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x40)
connect(r1, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x4, {0xa, 0x4e23, 0xe, @remote, 0xc5}}}, 0x80)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], 0x1, 0x5505, &(0x7f0000002480)="$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")
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x9, 0x1, 0x0, r4, &(0x7f0000000000), 0x4000000}])
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r6 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00')
pread64(r7, &(0x7f0000000bc0)=""/102397, 0x18ffd, 0x30c)
recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
geteuid()

10m33.07961031s ago: executing program 34 (id=3033):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff}, 0xdf2090133c5169c2)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
rt_tgsigqueueinfo(0x0, 0x0, 0x9, &(0x7f0000000140)={0x39, 0xffffffff, 0x4})
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r4, 0x2285, 0x0)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}, {&(0x7f0000000240)="ca00544d5c3deaafed19faf7015f627bb161f8aa71ede93e77c44220ffc8b961623f0d87cf159b5fb09d03ec5e1630657526cb38c1f8baaef2fc59", 0x3b}], 0x3)

8m23.502512094s ago: executing program 7 (id=3388):
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)=@in={0x10, 0x2}, 0x10)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002000)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

8m22.278522193s ago: executing program 4 (id=3391):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
io_setup(0x8, &(0x7f00000008c0)=<r2=>0x0)
r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0)
r4 = eventfd(0x0)
io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r4}])

8m21.95986144s ago: executing program 4 (id=3392):
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000540)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r1, r0, 0x0, 0x100000002)

8m21.685350224s ago: executing program 4 (id=3393):
pipe2$9p(&(0x7f0000001900), 0x0)
r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x3c8, 0xffffffff, 0x228, 0x0, 0x228, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x138, 0x0, {}, [@common=@unspec=@mark={{0x30}}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428)

8m20.249669115s ago: executing program 7 (id=3395):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@setneightbl={0x24, 0x43, 0x701, 0x0, 0x0, {0x2}, [@NDTA_THRESH3={0x8, 0x4, 0x7}, @NDTA_THRESH2={0x8, 0x3, 0x6}]}, 0x24}}, 0x0)
iopl(0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x1, 0x0)
mkdir(0x0, 0x0)
r4 = getpid()
getpriority(0x0, r1)
process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r5 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
syz_open_dev$vim2m(&(0x7f0000000e40), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000180)={0x1, 0x2})
r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000000)=0x2)
ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f0000000080)=0x3200e0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[])
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc0585609, 0x0)
open(0x0, 0x0, 0x0)

8m17.237000206s ago: executing program 7 (id=3404):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f0000001c00)={0x0, 0x0, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m16.278132882s ago: executing program 4 (id=3408):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x40, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

8m15.442728539s ago: executing program 4 (id=3410):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000311000/0x1000)=nil, 0x1000}, 0x3})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})

8m15.290932948s ago: executing program 4 (id=3411):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = gettid()
rt_sigprocmask(0x2, &(0x7f0000000040)={[0x6]}, 0x0, 0x8)
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
prlimit64(0xffffffffffffffff, 0xa, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@local, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x0, "ea02cefa5c8008535d47000000504fffff00", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000140)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecd816800", r5, <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0x40103e05, &(0x7f0000000080)={"000c00816800df00"})

8m13.666140807s ago: executing program 7 (id=3419):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
getpid()
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x4}}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x6, @local, 'veth0_to_bridge\x00'}}, 0x1e)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c)
ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x40047452, &(0x7f0000000380)={0x18, 0x0, {0x0, @multicast, 'ip6erspan0\x00'}})

8m7.818112214s ago: executing program 7 (id=3429):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f0000001c00)={0x0, 0x0, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m4.460525526s ago: executing program 7 (id=3435):
bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080))
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)

7m59.748197707s ago: executing program 35 (id=3411):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = gettid()
rt_sigprocmask(0x2, &(0x7f0000000040)={[0x6]}, 0x0, 0x8)
timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
prlimit64(0xffffffffffffffff, 0xa, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@local, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x4c}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x0, "ea02cefa5c8008535d47000000504fffff00", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000140)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecd816800", r5, <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0x40103e05, &(0x7f0000000080)={"000c00816800df00"})

7m48.663530322s ago: executing program 36 (id=3435):
bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000140)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080))
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)

7m40.391295535s ago: executing program 5 (id=3459):
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x401, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000001340), 0x100, 0x0)

7m38.425038403s ago: executing program 5 (id=3463):
socket(0x25, 0x3, 0x0)

7m37.552900522s ago: executing program 5 (id=3466):
bpf$MAP_CREATE(0x4000000000000, 0x0, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='signal_generate\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080))
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)

7m35.611593001s ago: executing program 5 (id=3470):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_io_uring_setup(0x2fe4, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cd4e84})
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0)

7m30.07145342s ago: executing program 5 (id=3477):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@oldalloc}, {@usrjquota}, {@nodiscard}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x564, &(0x7f0000002240)="$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")
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x1f)

7m28.207838595s ago: executing program 5 (id=3480):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x283fe, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*z', 0x0)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='logon\x00', &(0x7f0000000000)='i\b\x00c\x00\x00e')
add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)

7m12.48154451s ago: executing program 37 (id=3480):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x283fe, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='#$*z', 0x0)
keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='logon\x00', &(0x7f0000000000)='i\b\x00c\x00\x00e')
add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)

6m18.525285201s ago: executing program 1 (id=3634):
socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', <r0=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r0, @ANYBLOB="140006"], 0x48}}, 0x0)

6m16.986778857s ago: executing program 1 (id=3637):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x0)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r1, 0x1)
ppoll(&(0x7f00000002c0)=[{r1}], 0x1, 0x0, 0x0, 0xfffffffffffffd4c)

6m15.726557039s ago: executing program 1 (id=3641):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@oldalloc}, {@usrjquota}, {@nodiscard}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x564, &(0x7f0000002240)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f)

6m13.736238712s ago: executing program 1 (id=3645):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
tkill(r1, 0xb)

6m11.270869488s ago: executing program 1 (id=3652):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r3}, &(0x7f0000001e40)=0xca00, &(0x7f0000001e80)=r2}, 0x20)

6m9.850207982s ago: executing program 1 (id=3656):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e)

5m54.476284629s ago: executing program 38 (id=3656):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e)

5m23.968540014s ago: executing program 3 (id=3760):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)={0x40, 0x15, 0x4, 'sk\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0xd, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a00)={0x0, 0x30, 0x4, "1b2ee791"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5m19.726964393s ago: executing program 3 (id=3769):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="3e1874", 0x3}], 0x1}}], 0x1, 0x24000000)

5m18.176168662s ago: executing program 3 (id=3773):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0)

5m16.768109513s ago: executing program 3 (id=3776):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10)
tkill(r1, 0xb)

5m15.169288525s ago: executing program 3 (id=3780):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$inet(r0, &(0x7f00000005c0), 0x0, 0x8882)

5m14.252571123s ago: executing program 3 (id=3783):
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x2004c800}, 0xc804)
socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'macvlan0\x00'}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)

4m58.755493381s ago: executing program 39 (id=3783):
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x2004c800}, 0xc804)
socket$inet6(0xa, 0x40000080806, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'macvlan0\x00'}, 0x18)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)

15.066719762s ago: executing program 8 (id=4761):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb7, 0x31, 0x98, 0x8, 0x3f0, 0x3524, 0x56c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xd2, 0x0, 0x0, 0x9d, 0xbe, 0x94}}]}}]}}, 0x0)

12.430667627s ago: executing program 8 (id=4770):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x20)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='./file1\x00')
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0x11}, 0x2, 0x0)

10.459364308s ago: executing program 6 (id=4774):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000005800)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
lsetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000700)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000180)='\x00\x83\x1b\x80\xbe\xb8\xdd\x16v@\xc6x\xec\xfbrF#\x88h?\fD\x1a\x1d\x00\x00\x00\x00\x00\x00\x00Q\x00', 0x21, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)

9.390144316s ago: executing program 6 (id=4776):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)={0x40, 0x15, 0x4, 'sk\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0xd, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

8.678997296s ago: executing program 8 (id=4778):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x20000000009, 0x0)

6.390630724s ago: executing program 0 (id=4783):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000002000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000de9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

6.203494066s ago: executing program 0 (id=4784):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000780)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

6.154555665s ago: executing program 8 (id=4785):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x0, 0x84)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000007000000000000000000000b00000000001cc45662aab048dd00000000000000020000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T1(r1, 0x103, 0x4, &(0x7f0000000000), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a07, 0x1700)
close(0xffffffffffffffff)
close(r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000001200)={'wlan1\x00', @random="e1fffffffdfd"})

6.069697155s ago: executing program 2 (id=4786):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000005800)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
lsetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000700)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000180)='\x00\x83\x1b\x80\xbe\xb8\xdd\x16v@\xc6x\xec\xfbrF#\x88h?\fD\x1a\x1d\x00\x00\x00\x00\x00\x00\x00Q\x00', 0x21, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)

5.414069966s ago: executing program 2 (id=4787):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$rxrpc(0x21, 0x2, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000200, 0x2)
socket$kcm(0x10, 0x2, 0x10)
socket$inet6(0xa, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00050007000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

5.160252804s ago: executing program 0 (id=4789):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000180)={0x2, 0x5, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="bf4d7f1944a2687b1555ed110b6857b88916aeec6662f780c6ba5fed9787aa7f47adaec5d8744afd937ebf3fa434f20ee3d179da528269d64beab81fcff641f2", 0x40}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="c249665f2d4483406642aafe9e93bb983101bc224da6311abd0eca4cf5e3db395e8c4c834033b446469faf0783b231686df33ee9ae83bdfbdd87e6efedaafc948d2ad7fff3ffd7f119d7696bf18d81379f84387aa36296b1e739a56dcb46ec14f392a006073df8d61cd1734beb0f1339186e3bc138a191a6b1830662504174808ad17a56abd1e41c5430cc675b30cff2b5184a5b85c6097b029b476306d74d1a43eebada353af77804ea2a321bb5ddaf2ca2f677ae666d12bd7ae63013c8817aad8fa9", 0xc3}, {&(0x7f0000000480)="95c19cf62c91e4def9a4fcf3c5c982319a92c8b3c05edf0a389e53f9e2d22fb664acc00a4631c144b4e52dd3167194bd62c92401080a40ac89b8fd90ed75a4417627c7177c7d565235c8ea24d1", 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000005c0)="01a7fdfdd6dfac71da5be991c1dc99e592da6cfe280cd2394aa9b97238acb9079e8ebc0fb320b3c5293d1fbd4c08b13b37ee2c034f1c364700e58c21b311f4009fbd5574ce473919fa9212ec81a395e94c50ee337230f79fe58f8293e6e42e85e569605f5493ca832bd0c4f231eec44698a9f82e0997cace857a2cb3fae9ab60288d1230ff64ac6f9a86fdb75e1bae6aa934019ce879a6decfb05f3825e760be377584a97fcb83e2c0fd82f2f28a3385a09cb150df035726ba24f2477f1d27afdd6639e8bc0ecd7a06b1ce81166cef040be3155065cfad6cd901e6ceafa468eb69ec3119c3353d65c0558959f02c2078", 0xf0}, {&(0x7f00000006c0)="b54cdf7f7fa0932c43b897c06aea8b5aaa133f9f46478bd0e2d90603258380663ca10ad2ba54abd4c3e4444670317c928bcd1f4ec5dbd08bf7be7bb45e367564811433869f6577a722810f51179a6433af44b65fe0469f7848b9e512b022ed63868f8b", 0x63}, {&(0x7f0000000740)="ef75ed25e030e26d8d83a379b8d0a7a76841b4fb54d76d6e93ec1e5b311ab072187ac187bf199b468ba8cf1f236e343a7607aeea9a6de4dbccf0a8e1e79e52dd66cdeacb52ad4f71b172fa73044a1929babf72713d569c806f161650304f8944113ff7737d", 0x65}, {&(0x7f00000007c0)="4c6d966c3434238d1654c1393436720a632d4263beaa15dd0d891b9c5a5ba9df401d0dc86abad89ef5b7c37edb465e6318529e2c81af2395d41e0bd49dbbca4f8490f977e9d5ab11857126e7b58b85336cbcf43cdbf260a4279609802cffe5f7b237cae9621518ec16f088a811185ce1c53af455f22056cf1b7c15b0bc0ca1d4dab7daa9dc4a031dbccaddeb6b33221257dfeba50ab63e0263a00a01e1d5145820ea3a663c", 0xa5}, {&(0x7f00000008c0)="0da13141bef01b0098e4ef524e8e613bfa9f5fe4e42a6ba42fa8ac4da656a0c23b06e1cf6aa91bb47a59090370e538c4f457d37a772d3703b99dbac94eabe5955eff1d932da7102e459bdbc5e8364bc504dee1dd06866f498988fe2ddcabde9a7dd3e7c2d26aaf63702118c7109607235c6601d470fcce108fcf03ccf0440f6469ec6d5578030a56f91273a9ad7570310bc90d039c9a96ceef1a", 0x9a}, {&(0x7f0000000980)="2d11fd814912defd2a9258e1ab58756d41d135b2e4379004b9285beb964aff8274abd61ead6d01f32a4551fec9d246791104075894be5c8c4538f751dd3412667c102ef73f4e655acbfd12cdebdc5899f5141391eb5facb7d3c5af5cbb96b558d61b5094b4be22d2ae4b36b00f920f519fd28fbdfa05b7d04a472066885add772ebe43a98823025e9cfb124b98ea6048fa2e0e31cef2ff2b9bc4cc2793d4cb", 0x9f}], 0x6}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b40)="e818c9712aefc6741446630bab68c5903ae49a36b550db510bd188734347709f1a017b1aedeafd1203b939a881600f3a8ef2b6fea9d49740a430f29da623c506257a816ecc1ab0b937ad1f33079c8e4507d019114be71bcc07556e6de4d195627b746f609a9cb10b7edab6edb5c964490bfd9b8536753007ed8ed46c700870e638ff31098b6a623ecf1da5f62560dbc7a511eafe0bcb8946ee5a51e368cdbdbb78946c10bc", 0xa5}], 0x1}}], 0x4, 0x24048844)

4.783053988s ago: executing program 8 (id=4790):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0)
r2 = eventfd2(0x45, 0x0)
dup2(r2, r1)
write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/37, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0xffffffff)

4.679961468s ago: executing program 0 (id=4791):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4098, 0x1002}], 0x1}, 0x40010100)

4.665696094s ago: executing program 6 (id=4792):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)

4.382960209s ago: executing program 2 (id=4793):
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7)

3.714824537s ago: executing program 9 (id=4796):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00103}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
close_range(r1, 0xffffffffffffffff, 0x0)

3.499382326s ago: executing program 2 (id=4797):
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000005800)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
creat(&(0x7f0000000340)='./file0/file0\x00', 0x0)
lsetxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000700)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000180)='\x00\x83\x1b\x80\xbe\xb8\xdd\x16v@\xc6x\xec\xfbrF#\x88h?\fD\x1a\x1d\x00\x00\x00\x00\x00\x00\x00Q\x00', 0x21, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)

3.451122008s ago: executing program 8 (id=4798):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x231, &(0x7f0000000000)="$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")
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28}, 0x28)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x80007, 0x0, r3}}}, 0x28)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x20000000)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x70ad30, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048086}, 0x20000810)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4400c054}, 0x800)

3.330530679s ago: executing program 0 (id=4799):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x6, &(0x7f0000000780)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2.927595763s ago: executing program 6 (id=4800):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x0, 0x84)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)}], 0x2}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000007000000000000000000000b00000000001cc45662aab048dd00000000000000020000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T1(r1, 0x103, 0x4, &(0x7f0000000000), 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a07, 0x1700)
close(0xffffffffffffffff)
close(r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000001200)={'wlan1\x00', @random="e1fffffffdfd"})

2.633538677s ago: executing program 9 (id=4801):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000002180)=[{{&(0x7f0000000180)={0x2, 0x5, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="bf4d7f1944a2687b1555ed110b6857b88916aeec6662f780c6ba5fed9787aa7f47adaec5d8744afd937ebf3fa434f20ee3d179da528269d64beab81fcff641f2", 0x40}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="c249665f2d4483406642aafe9e93bb983101bc224da6311abd0eca4cf5e3db395e8c4c834033b446469faf0783b231686df33ee9ae83bdfbdd87e6efedaafc948d2ad7fff3ffd7f119d7696bf18d81379f84387aa36296b1e739a56dcb46ec14f392a006073df8d61cd1734beb0f1339186e3bc138a191a6b1830662504174808ad17a56abd1e41c5430cc675b30cff2b5184a5b85c6097b029b476306d74d1a43eebada353af77804ea2a321bb5ddaf2ca2f677ae666d12bd7ae63013c8817aad8fa9", 0xc3}, {&(0x7f0000000480)="95c19cf62c91e4def9a4fcf3c5c982319a92c8b3c05edf0a389e53f9e2d22fb664acc00a4631c144b4e52dd3167194bd62c92401080a40ac89b8fd90ed75a4417627c7177c7d565235c8ea24d1", 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000005c0)="01a7fdfdd6dfac71da5be991c1dc99e592da6cfe280cd2394aa9b97238acb9079e8ebc0fb320b3c5293d1fbd4c08b13b37ee2c034f1c364700e58c21b311f4009fbd5574ce473919fa9212ec81a395e94c50ee337230f79fe58f8293e6e42e85e569605f5493ca832bd0c4f231eec44698a9f82e0997cace857a2cb3fae9ab60288d1230ff64ac6f9a86fdb75e1bae6aa934019ce879a6decfb05f3825e760be377584a97fcb83e2c0fd82f2f28a3385a09cb150df035726ba24f2477f1d27afdd6639e8bc0ecd7a06b1ce81166cef040be3155065cfad6cd901e6ceafa468eb69ec3119c3353d65c0558959f02c2078", 0xf0}, {&(0x7f00000006c0)="b54cdf7f7fa0932c43b897c06aea8b5aaa133f9f46478bd0e2d90603258380663ca10ad2ba54abd4c3e4444670317c928bcd1f4ec5dbd08bf7be7bb45e367564811433869f6577a722810f51179a6433af44b65fe0469f7848b9e512b022ed63868f8b", 0x63}, {&(0x7f0000000740)="ef75ed25e030e26d8d83a379b8d0a7a76841b4fb54d76d6e93ec1e5b311ab072187ac187bf199b468ba8cf1f236e343a7607aeea9a6de4dbccf0a8e1e79e52dd66cdeacb52ad4f71b172fa73044a1929babf72713d569c806f161650304f8944113ff7737d", 0x65}, {&(0x7f00000007c0)="4c6d966c3434238d1654c1393436720a632d4263beaa15dd0d891b9c5a5ba9df401d0dc86abad89ef5b7c37edb465e6318529e2c81af2395d41e0bd49dbbca4f8490f977e9d5ab11857126e7b58b85336cbcf43cdbf260a4279609802cffe5f7b237cae9621518ec16f088a811185ce1c53af455f22056cf1b7c15b0bc0ca1d4dab7daa9dc4a031dbccaddeb6b33221257dfeba50ab63e0263a00a01e1d5145820ea3a663c", 0xa5}, {&(0x7f00000008c0)="0da13141bef01b0098e4ef524e8e613bfa9f5fe4e42a6ba42fa8ac4da656a0c23b06e1cf6aa91bb47a59090370e538c4f457d37a772d3703b99dbac94eabe5955eff1d932da7102e459bdbc5e8364bc504dee1dd06866f498988fe2ddcabde9a7dd3e7c2d26aaf63702118c7109607235c6601d470fcce108fcf03ccf0440f6469ec6d5578030a56f91273a9ad7570310bc90d039c9a96ceef1a", 0x9a}, {&(0x7f0000000980)="2d11fd814912defd2a9258e1ab58756d41d135b2e4379004b9285beb964aff8274abd61ead6d01f32a4551fec9d246791104075894be5c8c4538f751dd3412667c102ef73f4e655acbfd12cdebdc5899f5141391eb5facb7d3c5af5cbb96b558d61b5094b4be22d2ae4b36b00f920f519fd28fbdfa05b7d04a472066885add772ebe43a98823025e9cfb124b98ea6048fa2e0e31cef2ff2b9bc4cc2793d4cb", 0x9f}], 0x6}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b40)="e818c9712aefc6741446630bab68c5903ae49a36b550db510bd188734347709f1a017b1aedeafd1203b939a881600f3a8ef2b6fea9d49740a430f29da623c506257a816ecc1ab0b937ad1f33079c8e4507d019114be71bcc07556e6de4d195627b746f609a9cb10b7edab6edb5c964490bfd9b8536753007ed8ed46c700870e638ff31098b6a623ecf1da5f62560dbc7a511eafe0bcb8946ee5a51e368cdbdbb78946c10bc", 0xa5}], 0x1}}], 0x4, 0x24048844)

2.339047498s ago: executing program 0 (id=4802):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000080)={0x40, 0x15, 0x4, 'sk\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0xd, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.30336289s ago: executing program 2 (id=4803):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000083c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0xd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x60}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
acct(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.637611348s ago: executing program 9 (id=4804):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(r0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

1.518665049s ago: executing program 6 (id=4805):
socket$caif_seqpacket(0x25, 0x5, 0x3)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

942.758622ms ago: executing program 9 (id=4806):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast}}}})

894.046621ms ago: executing program 2 (id=4807):
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
r0 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x18, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2, 0x8, 0x46, 0x0, 0x4})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ppoll(&(0x7f00000000c0)=[{r1, 0x1007}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046})

537.057746ms ago: executing program 9 (id=4808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000001e0a0000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="00000000000000ecfe0000000000000085000000a500000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

214.170076ms ago: executing program 6 (id=4809):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="20e1eb000000baac9ada94"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 9 (id=4810):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x43, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb1"}}}}}, 0x51)

kernel console output (not intermixed with test programs):

oth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1422.396656][T16910] Bluetooth: hci7: link tx timeout
[ 1422.404893][T16910] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1423.188804][ T1841] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1423.400869][ T1841] usb 4-1: device descriptor read/64, error -71
[ 1423.422815][T16919] Process accounting resumed
[ 1423.574212][T14000] Bluetooth: hci7: command 0x0406 tx timeout
[ 1423.718338][ T1841] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1423.964626][ T1841] usb 4-1: device descriptor read/64, error -71
[ 1424.108656][ T1841] usb usb4-port1: attempt power cycle
[ 1424.373166][T16932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3640'.
[ 1424.590466][ T1841] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[ 1424.700130][ T1841] usb 4-1: device descriptor read/8, error -71
[ 1424.923574][T16935] loop1: detected capacity change from 0 to 1024
[ 1425.001538][ T1841] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1425.059998][T16935] EXT4-fs: Ignoring removed oldalloc option
[ 1425.122495][ T1841] usb 4-1: device descriptor read/8, error -71
[ 1425.260931][ T1841] usb usb4-port1: unable to enumerate USB device
[ 1425.320056][T16935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1425.557892][   T29] audit: type=1800 audit(1730188093.485:210): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3641" name="bus" dev="loop1" ino=18 res=0 errno=0
[ 1426.091762][T16475] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1427.235580][T16952] vlan2: entered promiscuous mode
[ 1427.240937][T16952] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode
[ 1427.465864][ T1841] libceph: connect (1)[c::]:6789 error -101
[ 1427.472521][ T1841] libceph: mon0 (1)[c::]:6789 connect error
[ 1427.548305][T16957] ceph: No mds server is up or the cluster is laggy
[ 1427.611069][T16952] mac80211_hwsim hwsim26 wlan0: left promiscuous mode
[ 1427.819721][ T1841] libceph: connect (1)[c::]:6789 error -101
[ 1427.826181][ T1841] libceph: mon0 (1)[c::]:6789 connect error
[ 1428.727173][T16967] Process accounting resumed
[ 1430.542666][T16982] loop8: detected capacity change from 0 to 1024
[ 1430.551028][T16982] EXT4-fs: Ignoring removed oldalloc option
[ 1430.824869][T16986] syzkaller0: entered promiscuous mode
[ 1430.830808][T16986] syzkaller0: entered allmulticast mode
[ 1431.098815][T16982] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1431.301708][   T29] audit: type=1800 audit(1730188099.215:211): pid=16982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3655" name="bus" dev="loop8" ino=18 res=0 errno=0
[ 1431.772495][T16188] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1433.335700][T17010] Process accounting resumed
[ 1436.255974][T17034] loop9: detected capacity change from 0 to 1024
[ 1436.376855][T17037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3672'.
[ 1436.388911][T17034] EXT4-fs: Ignoring removed oldalloc option
[ 1436.572865][T17034] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1436.891891][   T29] audit: type=1800 audit(1730188104.795:212): pid=17034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3671" name="bus" dev="loop9" ino=18 res=0 errno=0
[ 1437.334826][T16240] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1437.522758][T17048] netlink: 'syz.3.3674': attribute type 1 has an invalid length.
[ 1438.264296][T17050] Process accounting resumed
[ 1438.719671][T17056] netlink: 'syz.3.3677': attribute type 1 has an invalid length.
[ 1438.947451][T17056] vlan2: entered promiscuous mode
[ 1439.264211][T17059] netlink: 'syz.0.3678': attribute type 15 has an invalid length.
[ 1439.583979][ T3493] bond0: (slave netdevsim3): Releasing backup interface
[ 1439.667514][ T3493] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1440.079746][ T3493] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1440.471542][ T3493] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1440.765740][ T3493] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1441.626588][T17081] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3684'.
[ 1441.881179][ T3493] bridge_slave_1: left allmulticast mode
[ 1441.886995][ T3493] bridge_slave_1: left promiscuous mode
[ 1441.894053][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1442.125864][ T3493] bridge_slave_0: left allmulticast mode
[ 1442.133771][ T3493] bridge_slave_0: left promiscuous mode
[ 1442.140027][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1442.529997][T17084] loop3: detected capacity change from 0 to 1024
[ 1442.591879][T17084] EXT4-fs: Ignoring removed oldalloc option
[ 1442.917174][T17084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1443.182953][   T29] audit: type=1800 audit(1730188111.095:213): pid=17084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3685" name="bus" dev="loop3" ino=18 res=0 errno=0
[ 1443.705375][T13999] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1443.725676][T17097] Process accounting resumed
[ 1444.231801][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1444.371878][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1444.512851][ T3493] bond0 (unregistering): Released all slaves
[ 1445.824751][ T3493] hsr_slave_0: left promiscuous mode
[ 1445.891752][ T3493] hsr_slave_1: left promiscuous mode
[ 1445.981316][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1445.989044][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1446.183944][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1446.191859][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1446.229578][ T5850] libceph: connect (1)[c::]:6789 error -101
[ 1446.235926][ T5850] libceph: mon0 (1)[c::]:6789 connect error
[ 1446.295744][T17118] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3697'.
[ 1446.466534][T17114] ceph: No mds server is up or the cluster is laggy
[ 1446.491210][ T3493] veth1_macvtap: left promiscuous mode
[ 1446.496860][ T3493] veth0_macvtap: left promiscuous mode
[ 1446.502891][ T3493] veth1_vlan: left promiscuous mode
[ 1446.508318][ T3493] veth0_vlan: left promiscuous mode
[ 1446.562322][ T5850] libceph: connect (1)[c::]:6789 error -101
[ 1446.568548][ T5850] libceph: mon0 (1)[c::]:6789 connect error
[ 1447.184070][T16910] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1447.252632][T16910] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1447.262291][T16910] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1447.274352][T16910] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1447.284444][T16910] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1447.298828][T16910] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1448.461925][T11878] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1448.849286][ T3493] team0 (unregistering): Port device team_slave_1 removed
[ 1448.861138][T11878] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1448.871065][T11878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1448.879324][T11878] usb 9-1: Product: syz
[ 1448.884468][T11878] usb 9-1: Manufacturer: syz
[ 1448.889294][T11878] usb 9-1: SerialNumber: syz
[ 1449.015122][ T3493] team0 (unregistering): Port device team_slave_0 removed
[ 1449.445159][T14000] Bluetooth: hci0: command tx timeout
[ 1449.667006][T11878] usb 9-1: config 0 descriptor??
[ 1449.978859][T14000] Bluetooth: hci5: command 0x0406 tx timeout
[ 1451.215586][T17157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3708'.
[ 1451.493709][T16910] Bluetooth: hci0: command tx timeout
[ 1451.963478][T17125] chnl_net:caif_netlink_parms(): no params data found
[ 1452.112322][T11878] usb-storage 9-1:0.0: USB Mass Storage device detected
[ 1452.476545][ T1841] libceph: connect (1)[c::]:6789 error -101
[ 1452.483373][ T1841] libceph: mon0 (1)[c::]:6789 connect error
[ 1452.516718][T17166] ceph: No mds server is up or the cluster is laggy
[ 1453.066610][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1453.074154][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1453.571112][T16910] Bluetooth: hci0: command tx timeout
[ 1454.525623][T17125] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1454.535087][T17125] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1454.542985][T17125] bridge_slave_0: entered allmulticast mode
[ 1454.551253][T17125] bridge_slave_0: entered promiscuous mode
[ 1454.772194][T17125] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1454.779770][T17125] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1454.787817][T17125] bridge_slave_1: entered allmulticast mode
[ 1454.796146][T17125] bridge_slave_1: entered promiscuous mode
[ 1455.182904][T17125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1455.247378][T17125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1455.444809][T17125] team0: Port device team_slave_0 added
[ 1455.548313][T17125] team0: Port device team_slave_1 added
[ 1455.658963][T16910] Bluetooth: hci0: command tx timeout
[ 1455.857071][T17125] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1455.864515][T17125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1455.891136][T17125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1456.169898][T17125] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1456.177124][T17125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1456.207213][T17125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1456.642983][T11878] usb 9-1: USB disconnect, device number 3
[ 1456.980948][T17125] hsr_slave_0: entered promiscuous mode
[ 1456.994042][T17125] hsr_slave_1: entered promiscuous mode
[ 1457.072043][T17125] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1457.080089][T17125] Cannot create hsr debugfs directory
[ 1457.271784][ T3493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1457.527697][ T3493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1457.971513][T17209] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3720'.
[ 1458.077038][ T3493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.466473][ T3493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1458.969572][ T1841] libceph: connect (1)[c::]:6789 error -101
[ 1458.975987][ T1841] libceph: mon0 (1)[c::]:6789 connect error
[ 1459.230842][T17218] ceph: No mds server is up or the cluster is laggy
[ 1459.301492][ T1841] libceph: connect (1)[c::]:6789 error -101
[ 1459.307818][ T1841] libceph: mon0 (1)[c::]:6789 connect error
[ 1459.754002][ T3493] bridge_slave_1: left allmulticast mode
[ 1459.759861][ T3493] bridge_slave_1: left promiscuous mode
[ 1459.766281][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1459.968365][ T3493] bridge_slave_0: left allmulticast mode
[ 1459.977222][ T3493] bridge_slave_0: left promiscuous mode
[ 1459.983768][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1462.112987][T17244] overlayfs: failed to resolve './file1': -2
[ 1462.222417][T17244] Invalid ELF header magic: != ELF
[ 1462.382838][ T3493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1462.400537][ T5850] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1462.553538][ T3493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1462.625165][ T5850] usb 4-1: Using ep0 maxpacket: 8
[ 1462.680421][ T3493] bond0 (unregistering): Released all slaves
[ 1462.706951][ T5850] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1462.718726][ T5850] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1462.729085][ T5850] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1462.739315][ T5850] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1462.756140][ T5850] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1462.766444][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1463.539925][ T5850] usb 4-1: GET_CAPABILITIES returned 0
[ 1463.546515][ T5850] usbtmc 4-1:16.0: can't read capabilities
[ 1463.803832][ T5850] usb 4-1: USB disconnect, device number 124
[ 1464.086603][ T3493] hsr_slave_0: left promiscuous mode
[ 1464.157546][ T3493] hsr_slave_1: left promiscuous mode
[ 1464.245086][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1464.252941][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1464.439503][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1464.447551][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1464.673663][ T5850] libceph: connect (1)[c::]:6789 error -101
[ 1464.680029][ T5850] libceph: mon0 (1)[c::]:6789 connect error
[ 1464.739969][T17256] ceph: No mds server is up or the cluster is laggy
[ 1464.777127][ T3493] veth1_macvtap: left promiscuous mode
[ 1464.783166][ T3493] veth0_macvtap: left promiscuous mode
[ 1464.788960][ T3493] veth1_vlan: left promiscuous mode
[ 1464.794557][ T3493] veth0_vlan: left promiscuous mode
[ 1465.195079][ T1841] libceph: connect (1)[c::]:6789 error -101
[ 1465.201600][ T1841] libceph: mon0 (1)[c::]:6789 connect error
[ 1467.072532][T17277] overlayfs: failed to resolve './file1': -2
[ 1467.326967][T17279] Invalid ELF header magic: != ELF
[ 1467.489615][ T3493] team0 (unregistering): Port device team_slave_1 removed
[ 1467.790188][ T3493] team0 (unregistering): Port device team_slave_0 removed
[ 1469.881463][ T1841] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1470.056890][ T1841] usb 4-1: Using ep0 maxpacket: 8
[ 1470.117536][ T1841] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1470.131962][ T1841] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1470.143408][ T1841] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1470.153724][ T1841] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1470.167036][ T1841] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1470.176340][ T1841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1470.905972][ T1841] usb 4-1: GET_CAPABILITIES returned 2f
[ 1470.912570][ T1841] usbtmc 4-1:16.0: can't read capabilities
[ 1471.010650][T17125] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1471.107492][T11878] usb 4-1: USB disconnect, device number 125
[ 1471.145706][T17125] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1471.305852][T17125] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1471.446566][T17125] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1472.954129][ T5850] libceph: connect (1)[c::]:6789 error -101
[ 1472.961022][ T5850] libceph: mon0 (1)[c::]:6789 connect error
[ 1473.042196][T17307] ceph: No mds server is up or the cluster is laggy
[ 1473.278103][ T1841] libceph: connect (1)[c::]:6789 error -101
[ 1473.285244][ T1841] libceph: mon0 (1)[c::]:6789 connect error
[ 1473.667522][T17125] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1474.278076][T17318] Invalid ELF header magic: != ELF
[ 1474.313575][T17125] 8021q: adding VLAN 0 to HW filter on device team0
[ 1474.431793][T16851] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1474.439457][T16851] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1474.545191][   T75] bond0: (slave netdevsim3): Releasing backup interface
[ 1474.618093][   T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1474.801165][T16851] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1474.808885][T16851] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1474.920897][   T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1475.168854][   T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1475.395681][   T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1475.831441][ T5850] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1476.100826][ T5850] usb 10-1: Using ep0 maxpacket: 8
[ 1476.127590][ T5850] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1476.140483][ T5850] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1476.151512][ T5850] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1476.162011][ T5850] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1476.177395][ T5850] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1476.187582][ T5850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1476.346976][   T75] bridge_slave_1: left allmulticast mode
[ 1476.352957][   T75] bridge_slave_1: left promiscuous mode
[ 1476.359286][   T75] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1476.457016][   T75] bridge_slave_0: left allmulticast mode
[ 1476.463346][   T75] bridge_slave_0: left promiscuous mode
[ 1476.470150][   T75] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1476.805221][ T5850] usb 10-1: GET_CAPABILITIES returned 2f
[ 1476.811331][ T5850] usbtmc 10-1:16.0: can't read capabilities
[ 1476.821964][T16864] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1477.013796][ T5850] usb 10-1: USB disconnect, device number 2
[ 1477.400794][T16864] usb 4-1: Using ep0 maxpacket: 32
[ 1477.491891][T16864] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1477.500987][T16864] usb 4-1: config 0 has no interface number 0
[ 1477.553521][T16864] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1477.563854][T16864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.572350][T16864] usb 4-1: Product: syz
[ 1477.576795][T16864] usb 4-1: Manufacturer: syz
[ 1477.581828][T16864] usb 4-1: SerialNumber: syz
[ 1477.681721][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1477.700883][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1477.826509][T16864] usb 4-1: config 0 descriptor??
[ 1477.856419][   T75] bond0 (unregistering): Released all slaves
[ 1477.874398][   T75] bond1 (unregistering): Released all slaves
[ 1477.907330][T16864] smsc95xx v2.0.0
[ 1477.911381][T16864] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1477.922467][T16864] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22
[ 1478.559416][    T8] libceph: connect (1)[c::]:6789 error -101
[ 1478.566099][    T8] libceph: mon0 (1)[c::]:6789 connect error
[ 1478.591553][T17359] ceph: No mds server is up or the cluster is laggy
[ 1479.585030][T16864] usb 4-1: USB disconnect, device number 126
[ 1479.697050][   T75] hsr_slave_0: left promiscuous mode
[ 1479.968674][   T75] hsr_slave_1: left promiscuous mode
[ 1480.031535][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1480.039449][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1480.071415][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1480.079386][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1480.265455][   T75] veth1_macvtap: left promiscuous mode
[ 1480.271485][   T75] veth0_macvtap: left promiscuous mode
[ 1480.277518][   T75] veth1_vlan: left promiscuous mode
[ 1480.283263][   T75] veth0_vlan: left promiscuous mode
[ 1481.383699][   T75] team0 (unregistering): Port device team_slave_1 removed
[ 1481.513100][   T75] team0 (unregistering): Port device team_slave_0 removed
[ 1482.302966][T17401] tc_dump_action: action bad kind
[ 1482.374280][T17125] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1482.873549][T17125] veth0_vlan: entered promiscuous mode
[ 1482.936983][T17125] veth1_vlan: entered promiscuous mode
[ 1483.055076][T17125] veth0_macvtap: entered promiscuous mode
[ 1483.076506][T17125] veth1_macvtap: entered promiscuous mode
[ 1483.127954][T17125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1483.143942][T17125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1483.155626][T17125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1483.167723][T17125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1483.191773][T17125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1483.203904][T17125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1483.214560][T17125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1483.225878][T17125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1483.247323][T17125] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1483.276467][T17125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1483.287919][T17125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1483.298153][T17125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1483.308980][T17125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1483.324015][T17125] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1483.350865][T17125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.359974][T17125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.369404][T17125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1483.378966][T17125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1484.006534][ T5850] libceph: connect (1)[c::]:6789 error -101
[ 1484.013258][ T5850] libceph: mon0 (1)[c::]:6789 connect error
[ 1484.189072][T17407] ceph: No mds server is up or the cluster is laggy
[ 1484.448800][T11878] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1484.643817][T11878] usb 10-1: Using ep0 maxpacket: 32
[ 1484.707612][T11878] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[ 1484.716371][T11878] usb 10-1: config 0 has no interface number 0
[ 1484.838988][T11878] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1484.848868][T11878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.857984][T11878] usb 10-1: Product: syz
[ 1484.862622][T11878] usb 10-1: Manufacturer: syz
[ 1484.867579][T11878] usb 10-1: SerialNumber: syz
[ 1484.989522][T11878] usb 10-1: config 0 descriptor??
[ 1485.093813][T11878] smsc95xx v2.0.0
[ 1485.097676][T11878] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1485.108624][T11878] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22
[ 1486.833271][T17462] tc_dump_action: action bad kind
[ 1486.955736][T16864] usb 10-1: USB disconnect, device number 3
[ 1488.374438][T17474] netdevsim netdevsim9: Direct firmware load for À/ failed with error -2
[ 1488.384969][T17474] netdevsim netdevsim9: Falling back to sysfs fallback for: À/
[ 1488.499979][T16864] libceph: connect (1)[c::]:6789 error -101
[ 1488.506764][T16864] libceph: mon0 (1)[c::]:6789 connect error
[ 1488.553900][T17476] ceph: No mds server is up or the cluster is laggy
[ 1490.930713][T16910] Bluetooth: hci6: command 0x0405 tx timeout
[ 1491.536158][ T4050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1491.544349][ T4050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1491.639160][T17506] tc_dump_action: action bad kind
[ 1491.792260][T17507] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3794'.
[ 1491.873493][T17507] bond_slave_0: entered promiscuous mode
[ 1491.879706][T17507] bond_slave_1: entered promiscuous mode
[ 1491.885998][T17507] macvtap2: entered promiscuous mode
[ 1491.891626][T17507] bond0: entered promiscuous mode
[ 1491.899481][T17507] macvtap2: entered allmulticast mode
[ 1491.905224][T17507] bond0: entered allmulticast mode
[ 1491.910669][T17507] bond_slave_0: entered allmulticast mode
[ 1491.916614][T17507] bond_slave_1: entered allmulticast mode
[ 1491.927391][T17507] 8021q: adding VLAN 0 to HW filter on device macvtap2
[ 1491.991371][T17510] bond0: left allmulticast mode
[ 1491.996613][T17510] bond_slave_0: left allmulticast mode
[ 1492.002624][T17510] bond_slave_1: left allmulticast mode
[ 1492.008374][T17510] bond0: left promiscuous mode
[ 1492.016097][T17510] bond_slave_0: left promiscuous mode
[ 1492.021841][T17510] bond_slave_1: left promiscuous mode
[ 1492.029841][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1492.038482][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1493.703042][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3694'.
[ 1493.712421][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3694'.
[ 1493.736508][T17522] bridge1: entered promiscuous mode
[ 1493.742090][T17522] bridge1: entered allmulticast mode
[ 1494.532379][T17522] Bluetooth: MGMT ver 1.23
[ 1495.819258][T17529] ceph: No mds server is up or the cluster is laggy
[ 1495.829993][T11878] libceph: connect (1)[c::]:6789 error -101
[ 1495.836485][T11878] libceph: mon0 (1)[c::]:6789 connect error
[ 1496.152647][T16853] bond0: (slave netdevsim3): Releasing backup interface
[ 1496.478353][T16853] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1497.092908][T16853] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1498.558006][T16853] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1498.669312][T17569] netlink: 'syz.9.3809': attribute type 10 has an invalid length.
[ 1499.192150][T17569] 8021q: adding VLAN 0 to HW filter on device team0
[ 1499.211668][T17569] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1499.496851][T16853] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1501.787604][T16864] libceph: connect (1)[c::]:6789 error -101
[ 1501.794132][T16864] libceph: mon0 (1)[c::]:6789 connect error
[ 1501.850145][T17583] ceph: No mds server is up or the cluster is laggy
[ 1502.062244][T11878] libceph: connect (1)[c::]:6789 error -101
[ 1502.068715][T11878] libceph: mon0 (1)[c::]:6789 connect error
[ 1502.099099][T16853] bridge_slave_1: left allmulticast mode
[ 1502.105143][T16853] bridge_slave_1: left promiscuous mode
[ 1502.111906][T16853] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1502.148166][T16853] bridge_slave_0: left allmulticast mode
[ 1502.154277][T16853] bridge_slave_0: left promiscuous mode
[ 1502.161095][T16853] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1502.961693][T16910] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1503.045774][T16910] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1503.055467][T16910] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1503.068829][T16910] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1503.094431][T16910] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1503.106041][T16910] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1503.618374][T17598] overlayfs: failed to resolve './file0': -2
[ 1503.693044][T17600] Invalid ELF header magic: != ELF
[ 1503.762213][T16853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1503.831398][T16853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1503.973819][T16853] bond0 (unregistering): Released all slaves
[ 1504.895597][T16853] hsr_slave_0: left promiscuous mode
[ 1504.940639][T16853] hsr_slave_1: left promiscuous mode
[ 1504.993318][T16853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1505.001378][T16853] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1505.034027][T16853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1505.042057][T16853] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1505.151691][T16853] veth1_macvtap: left promiscuous mode
[ 1505.157446][T16853] veth0_macvtap: left promiscuous mode
[ 1505.164074][T16853] veth1_vlan: left promiscuous mode
[ 1505.169593][T16853] veth0_vlan: left promiscuous mode
[ 1505.358756][T16864] libceph: connect (1)[c::]:6789 error -101
[ 1505.365313][T16864] libceph: mon0 (1)[c::]:6789 connect error
[ 1505.451717][T17625] ceph: No mds server is up or the cluster is laggy
[ 1505.520507][T16910] Bluetooth: hci3: command tx timeout
[ 1505.691664][T16864] libceph: connect (1)[c::]:6789 error -101
[ 1505.698095][T16864] libceph: mon0 (1)[c::]:6789 connect error
[ 1506.448269][T16853] team0 (unregistering): Port device team_slave_1 removed
[ 1506.549893][T16853] team0 (unregistering): Port device team_slave_0 removed
[ 1506.952676][T17637] netlink: 'syz.2.3829': attribute type 29 has an invalid length.
[ 1507.066275][T17638] netlink: 'syz.2.3829': attribute type 29 has an invalid length.
[ 1507.109086][T17639] netlink: 'syz.2.3829': attribute type 29 has an invalid length.
[ 1507.233234][T17640] netlink: 'syz.2.3829': attribute type 29 has an invalid length.
[ 1507.571308][T16910] Bluetooth: hci3: command tx timeout
[ 1507.961218][ T4050] bond0: (slave netdevsim3): Releasing backup interface
[ 1508.005214][ T4050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.258896][ T4050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.353528][T17656] overlayfs: failed to resolve './file0': -2
[ 1508.408844][T17656] Invalid ELF header magic: != ELF
[ 1508.496184][ T4050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.582588][T17592] chnl_net:caif_netlink_parms(): no params data found
[ 1508.702148][ T4050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1508.821007][T11878] IPVS: starting estimator thread 0...
[ 1508.911166][T17661] IPVS: using max 240 ests per chain, 12000 per kthread
[ 1509.571033][ T4050] bridge_slave_1: left allmulticast mode
[ 1509.576936][ T4050] bridge_slave_1: left promiscuous mode
[ 1509.583874][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1509.650660][T16910] Bluetooth: hci3: command tx timeout
[ 1509.675342][ T4050] bridge_slave_0: left allmulticast mode
[ 1509.682150][ T4050] bridge_slave_0: left promiscuous mode
[ 1509.688761][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1509.887418][ T1841] libceph: connect (1)[c::]:6789 error -101
[ 1509.897489][ T1841] libceph: mon0 (1)[c::]:6789 connect error
[ 1510.046687][T17669] ceph: No mds server is up or the cluster is laggy
[ 1510.751680][ T4050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1510.806094][ T4050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1510.831944][ T4050] bond0 (unregistering): Released all slaves
[ 1511.507261][ T4050] hsr_slave_0: left promiscuous mode
[ 1511.545468][ T4050] hsr_slave_1: left promiscuous mode
[ 1511.660999][ T4050] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1511.668726][ T4050] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1511.727440][ T4050] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1511.735462][ T4050] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1511.744789][T16910] Bluetooth: hci3: command tx timeout
[ 1511.941381][ T4050] veth1_macvtap: left promiscuous mode
[ 1511.947153][ T4050] veth0_macvtap: left promiscuous mode
[ 1511.953348][ T4050] veth1_vlan: left promiscuous mode
[ 1511.959132][ T4050] veth0_vlan: left promiscuous mode
[ 1511.993181][T17706] overlayfs: failed to resolve './file0': -2
[ 1512.180864][ T5850] IPVS: starting estimator thread 0...
[ 1512.297813][T17706] Invalid ELF header magic: != ELF
[ 1512.340780][T17711] IPVS: using max 240 ests per chain, 12000 per kthread
[ 1513.218407][ T4050] team0 (unregistering): Port device team_slave_1 removed
[ 1513.274178][ T4050] team0 (unregistering): Port device team_slave_0 removed
[ 1514.063320][T17592] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1514.071157][T17592] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1514.078919][T17592] bridge_slave_0: entered allmulticast mode
[ 1514.088023][T17592] bridge_slave_0: entered promiscuous mode
[ 1514.246238][T17592] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1514.254970][T17592] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1514.265645][T17592] bridge_slave_1: entered allmulticast mode
[ 1514.274894][T17592] bridge_slave_1: entered promiscuous mode
[ 1514.516952][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1514.524139][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1514.863387][T17592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1515.061503][T17592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1515.627339][T17592] team0: Port device team_slave_0 added
[ 1515.717206][T17592] team0: Port device team_slave_1 added
[ 1516.317092][T17761] Invalid ELF header magic: != ELF
[ 1517.108737][ T5850] IPVS: starting estimator thread 0...
[ 1517.222655][T17770] IPVS: using max 240 ests per chain, 12000 per kthread
[ 1517.605096][T17592] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1517.613052][T17592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1517.643367][T17592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1517.825571][T17592] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1517.833125][T17592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1517.863347][T17592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1519.111967][T17592] hsr_slave_0: entered promiscuous mode
[ 1519.273330][T17592] hsr_slave_1: entered promiscuous mode
[ 1520.105630][T17804] Invalid ELF header magic: != ELF
[ 1522.696272][T17592] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1522.812674][T17592] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1522.909761][T17592] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1523.010022][T17592] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1524.006870][T17856] Invalid ELF header magic: != ELF
[ 1524.189908][T17592] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1524.259563][T17592] 8021q: adding VLAN 0 to HW filter on device team0
[ 1524.468168][ T4357] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1524.475912][ T4357] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1524.496465][ T4357] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1524.504237][ T4357] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1524.668993][T17592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1526.679847][T17892] Invalid ELF header magic: != ELF
[ 1526.934012][T17592] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1528.161089][    T8] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1528.406351][    T8] usb 10-1: Using ep0 maxpacket: 8
[ 1528.475346][    T8] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1528.487420][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1528.501151][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1528.512702][    T8] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1528.526291][    T8] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1528.537398][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1529.151887][T17592] veth0_vlan: entered promiscuous mode
[ 1529.185265][T17592] veth1_vlan: entered promiscuous mode
[ 1529.276254][T17592] veth0_macvtap: entered promiscuous mode
[ 1529.297652][T17592] veth1_macvtap: entered promiscuous mode
[ 1529.350648][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1529.361425][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1529.371567][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1529.382321][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1529.392835][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1529.403740][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1529.421237][T17592] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1529.439926][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1529.450700][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1529.465639][T17592] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1529.487547][T17592] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1529.496867][T17592] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1529.506030][T17592] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1529.520136][T17592] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1530.063424][    T8] usb 10-1: GET_CAPABILITIES returned 0
[ 1530.069471][    T8] usbtmc 10-1:16.0: can't read capabilities
[ 1530.284501][    T8] usb 10-1: USB disconnect, device number 4
[ 1530.394296][T17935] Invalid ELF header magic: != ELF
[ 1532.769833][T17968] Invalid ELF header magic: != ELF
[ 1534.053916][T11878] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1534.242763][T11878] usb 9-1: Using ep0 maxpacket: 8
[ 1534.300529][T11878] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1534.312327][T11878] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1534.323032][T11878] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1534.335244][T11878] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1534.349142][T11878] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1534.358648][T11878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1534.851780][T11878] usb 9-1: GET_CAPABILITIES returned 2f
[ 1534.857702][T11878] usbtmc 9-1:16.0: can't read capabilities
[ 1535.049419][T11878] usb 9-1: USB disconnect, device number 4
[ 1536.064662][ T4050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1536.075950][ T4050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1536.577440][T18010] Invalid ELF header magic: != ELF
[ 1536.624852][ T4357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1536.633320][ T4357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1537.750657][    T8] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[ 1537.930694][    T8] usb 7-1: Using ep0 maxpacket: 32
[ 1537.967143][    T8] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1537.975884][    T8] usb 7-1: config 0 has no interface number 0
[ 1538.142081][    T8] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1538.152743][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1538.161832][    T8] usb 7-1: Product: syz
[ 1538.166231][    T8] usb 7-1: Manufacturer: syz
[ 1538.171321][    T8] usb 7-1: SerialNumber: syz
[ 1538.296512][    T8] usb 7-1: config 0 descriptor??
[ 1538.397374][    T8] smsc95xx v2.0.0
[ 1538.401422][    T8] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1538.412291][    T8] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22
[ 1539.926207][T18035] netlink: 'syz.0.3942': attribute type 27 has an invalid length.
[ 1540.040785][T18042] netlink: 'syz.0.3942': attribute type 27 has an invalid length.
[ 1540.181566][ T1841] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1540.468138][ T1841] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1540.483945][ T1841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1540.496680][ T1841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1540.507031][ T1841] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1540.520471][ T1841] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1540.534944][ T1841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1540.638379][ T1841] usb 3-1: config 0 descriptor??
[ 1540.749537][    T8] usb 7-1: USB disconnect, device number 98
[ 1541.245456][ T1841] plantronics 0003:047F:FFFF.0027: No inputs registered, leaving
[ 1541.432588][ T1841] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1542.116048][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3953'.
[ 1542.128077][T18072] veth0_macvtap: left promiscuous mode
[ 1542.165896][    T8] usb 3-1: USB disconnect, device number 28
[ 1542.304002][T16910] Bluetooth: hci5: unexpected event for opcode 0x040e
[ 1543.570976][T11878] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1543.769329][T11878] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1543.780951][T11878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1543.793162][T16864] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1543.882402][T11878] usb 9-1: config 0 descriptor??
[ 1543.921478][T11878] cp210x 9-1:0.0: cp210x converter detected
[ 1543.970740][T16864] usb 10-1: Using ep0 maxpacket: 32
[ 1543.990756][T16864] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[ 1543.999477][T16864] usb 10-1: config 0 has no interface number 0
[ 1544.062671][T16864] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1544.072569][T16864] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1544.081352][T16864] usb 10-1: Product: syz
[ 1544.086015][T16864] usb 10-1: Manufacturer: syz
[ 1544.091191][T16864] usb 10-1: SerialNumber: syz
[ 1544.230820][T16864] usb 10-1: config 0 descriptor??
[ 1544.306589][T16864] smsc95xx v2.0.0
[ 1544.311371][T16864] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1544.323123][T16864] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22
[ 1544.471382][T11878] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1544.555958][T11878] cp210x 9-1:0.0: failed to get vendor val 0x3711 size 2: -32
[ 1544.565194][T11878] cp210x 9-1:0.0: GPIO initialisation failed: -32
[ 1544.637182][T11878] usb 9-1: cp210x converter now attached to ttyUSB0
[ 1544.819984][T11878] usb 9-1: USB disconnect, device number 5
[ 1544.968756][    C1] Unknown status report in ack skb
[ 1545.059825][T11878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1545.072576][T11878] cp210x 9-1:0.0: device disconnected
[ 1545.858080][T18127] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode
[ 1546.126867][T14295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1546.135457][T14295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1547.142912][T16864] usb 10-1: USB disconnect, device number 5
[ 1547.443474][    T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1547.618851][    T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1547.630911][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1547.646939][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1547.658425][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1547.673059][    T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1547.682970][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1548.059918][    T8] usb 3-1: config 0 descriptor??
[ 1548.736328][    T8] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving
[ 1548.788344][    T8] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1549.426382][T18188] fuse: Bad value for 'fd'
[ 1549.686019][T18188] Process accounting resumed
[ 1550.501323][    T8] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1550.531620][ T1841] usb 3-1: reset high-speed USB device number 29 using dummy_hcd
[ 1550.681124][    T8] usb 10-1: Using ep0 maxpacket: 32
[ 1550.698708][    T8] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[ 1550.707663][    T8] usb 10-1: config 0 has no interface number 0
[ 1550.837295][    T8] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1550.847556][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1550.856093][    T8] usb 10-1: Product: syz
[ 1550.860749][    T8] usb 10-1: Manufacturer: syz
[ 1550.865665][    T8] usb 10-1: SerialNumber: syz
[ 1550.894245][    T8] usb 10-1: config 0 descriptor??
[ 1550.989124][    T8] smsc95xx v2.0.0
[ 1551.584826][    T8] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1551.596142][    T8] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1551.724586][ T5850] usb 3-1: USB disconnect, device number 29
[ 1551.817375][    T8] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1551.832091][    T8] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -32
[ 1552.422853][T18228] fuse: Invalid rootmode
[ 1552.709484][T18228] Process accounting resumed
[ 1553.318541][T16864] usb 10-1: USB disconnect, device number 6
[ 1554.006412][T18258] mkiss: ax0: crc mode is auto.
[ 1554.972462][T16864] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1555.080501][T18273] fuse: Invalid rootmode
[ 1555.138070][T18273] Process accounting resumed
[ 1555.599905][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4012'.
[ 1555.840535][T16864] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1555.850006][T16864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1555.895671][T16864] usb 3-1: config 0 descriptor??
[ 1555.926683][T16864] cp210x 3-1:0.0: cp210x converter detected
[ 1556.432924][T16864] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1556.444216][T16864] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -121
[ 1556.454542][T16864] cp210x 3-1:0.0: GPIO initialisation failed: -121
[ 1556.506383][T16864] usb 3-1: cp210x converter now attached to ttyUSB0
[ 1556.665663][T16864] usb 3-1: USB disconnect, device number 30
[ 1556.716202][T16864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1556.727143][T16864] cp210x 3-1:0.0: device disconnected
[ 1559.011007][T18315] fuse: Invalid rootmode
[ 1559.322257][T18315] Process accounting resumed
[ 1561.564384][ T5850] usb 7-1: new high-speed USB device number 99 using dummy_hcd
[ 1561.795237][ T5850] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1561.805251][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.830683][    T8] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1561.874302][T18355] fuse: Bad value for 'rootmode'
[ 1561.885714][ T5850] usb 7-1: config 0 descriptor??
[ 1561.948483][ T5850] cp210x 7-1:0.0: cp210x converter detected
[ 1562.019139][    T8] usb 9-1: Using ep0 maxpacket: 32
[ 1562.056944][    T8] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1562.065593][    T8] usb 9-1: config 0 has no interface number 0
[ 1562.152849][    T8] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1562.163907][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.172845][    T8] usb 9-1: Product: syz
[ 1562.177376][    T8] usb 9-1: Manufacturer: syz
[ 1562.182436][    T8] usb 9-1: SerialNumber: syz
[ 1562.283522][T18355] Process accounting resumed
[ 1562.291073][    T8] usb 9-1: config 0 descriptor??
[ 1562.340912][    T8] smsc95xx v2.0.0
[ 1562.351126][ T5850] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1562.411471][ T5850] cp210x 7-1:0.0: failed to get vendor val 0x3711 size 2: -121
[ 1562.419474][ T5850] cp210x 7-1:0.0: GPIO initialisation failed: -121
[ 1562.480688][ T5850] usb 7-1: cp210x converter now attached to ttyUSB0
[ 1562.582783][ T5850] usb 7-1: USB disconnect, device number 99
[ 1562.646231][ T5850] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1562.657345][ T5850] cp210x 7-1:0.0: device disconnected
[ 1562.768812][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1562.780280][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1563.006185][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1563.019538][    T8] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32
[ 1564.716265][    T8] usb 9-1: USB disconnect, device number 6
[ 1566.021612][T18402] fuse: Bad value for 'rootmode'
[ 1566.264976][T18402] Process accounting resumed
[ 1566.951053][    T8] usb 7-1: new high-speed USB device number 100 using dummy_hcd
[ 1567.141355][    T8] usb 7-1: Using ep0 maxpacket: 32
[ 1567.168574][    T8] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1567.177463][    T8] usb 7-1: config 0 has no interface number 0
[ 1567.248046][    T8] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1567.257773][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1567.266329][    T8] usb 7-1: Product: syz
[ 1567.270907][    T8] usb 7-1: Manufacturer: syz
[ 1567.275739][    T8] usb 7-1: SerialNumber: syz
[ 1567.280678][T16864] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1567.385276][    T8] usb 7-1: config 0 descriptor??
[ 1567.459744][    T8] smsc95xx v2.0.0
[ 1567.473124][T16864] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1567.482872][T16864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1567.571850][T16864] usb 3-1: config 0 descriptor??
[ 1567.603024][T16864] cp210x 3-1:0.0: cp210x converter detected
[ 1567.891630][    T8] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1567.903174][    T8] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1568.039989][T16864] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1568.080950][T16864] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -121
[ 1568.088940][T16864] cp210x 3-1:0.0: GPIO initialisation failed: -121
[ 1568.162103][    T8] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1568.174224][    T8] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32
[ 1568.178593][T16864] usb 3-1: cp210x converter now attached to ttyUSB0
[ 1568.311198][T16864] usb 3-1: USB disconnect, device number 31
[ 1568.888275][T16864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1568.898899][T16864] cp210x 3-1:0.0: device disconnected
[ 1570.046853][T16864] usb 7-1: USB disconnect, device number 100
[ 1571.068733][T18457] fuse: Bad value for 'rootmode'
[ 1571.426065][T18457] Process accounting resumed
[ 1572.262566][T18474] netlink: 'syz.0.4066': attribute type 10 has an invalid length.
[ 1572.328701][T18474] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1572.647713][T18483] vlan2: entered promiscuous mode
[ 1572.653273][T18483] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[ 1572.721195][    T8] usb 7-1: new high-speed USB device number 101 using dummy_hcd
[ 1572.970457][    T8] usb 7-1: Using ep0 maxpacket: 32
[ 1573.042914][    T8] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1573.051510][    T8] usb 7-1: config 0 has no interface number 0
[ 1573.130915][    T8] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1573.146155][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1573.156698][    T8] usb 7-1: Product: syz
[ 1573.161886][    T8] usb 7-1: Manufacturer: syz
[ 1573.166717][    T8] usb 7-1: SerialNumber: syz
[ 1573.203742][    T8] usb 7-1: config 0 descriptor??
[ 1573.218383][    T8] smsc95xx v2.0.0
[ 1573.642699][T18495] fuse: Unknown parameter 'use00000000000000000000'
[ 1573.680752][    T8] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1573.692075][    T8] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1573.920666][    T8] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1573.932951][    T8] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32
[ 1574.007477][T18495] Process accounting resumed
[ 1574.052454][T11878] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1574.264530][T11878] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1574.276171][T11878] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1574.285906][T11878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1574.413391][T11878] usb 10-1: config 0 descriptor??
[ 1574.459259][T11878] pwc: Askey VC010 type 2 USB webcam detected.
[ 1574.502321][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4075'.
[ 1574.600909][T18500] veth0_macvtap: left promiscuous mode
[ 1574.797364][T11878] pwc: send_video_command error -71
[ 1574.803399][T11878] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1574.812926][T11878] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71
[ 1574.892961][T11878] usb 10-1: USB disconnect, device number 7
[ 1575.549796][T18525] vlan2: entered promiscuous mode
[ 1575.555404][T18525] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[ 1575.940526][T11878] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1576.051797][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1576.058450][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1576.322521][T18539] fuse: Unknown parameter 'use00000000000000000000'
[ 1576.387769][T16864] usb 7-1: USB disconnect, device number 101
[ 1576.456210][T11878] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1576.466953][T11878] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1576.476676][T11878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1576.529314][T11878] usb 10-1: config 0 descriptor??
[ 1576.558319][T18539] Process accounting resumed
[ 1576.577330][T11878] pwc: Askey VC010 type 2 USB webcam detected.
[ 1576.838610][T11878] pwc: send_video_command error -71
[ 1576.844493][T11878] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1576.852918][T11878] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71
[ 1576.887748][T11878] usb 10-1: USB disconnect, device number 8
[ 1577.710835][T11878] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1577.714099][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4090'.
[ 1578.220811][T11878] usb 3-1: Using ep0 maxpacket: 8
[ 1578.690700][T11878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1578.702384][T11878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1578.712938][T11878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1578.723511][T11878] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1578.736989][T11878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1578.746523][T11878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1579.416259][T11878] usb 3-1: GET_CAPABILITIES returned 70
[ 1579.422547][T11878] usbtmc 3-1:16.0: can't read capabilities
[ 1579.510965][T18584] Process accounting resumed
[ 1579.629542][    T8] usb 3-1: USB disconnect, device number 32
[ 1580.038126][T18598] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[ 1581.454571][T18616] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1581.731837][T18616] Process accounting resumed
[ 1582.638027][T11878] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1582.831037][T11878] usb 3-1: Using ep0 maxpacket: 8
[ 1582.857036][T11878] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1582.869412][T11878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1582.879996][T11878] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1582.890431][T11878] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1582.903918][T11878] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1582.913523][T11878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1583.219868][T11878] usb 3-1: GET_CAPABILITIES returned 2f
[ 1583.226180][T11878] usbtmc 3-1:16.0: can't read capabilities
[ 1583.430502][    T8] usb 3-1: USB disconnect, device number 33
[ 1583.932774][T18655] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode
[ 1583.940946][T18655] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode
[ 1584.215657][T18660] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1584.484407][T18660] Process accounting resumed
[ 1584.808503][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4129'.
[ 1584.897441][T18662] veth0_macvtap: left promiscuous mode
[ 1584.994283][T16910] Bluetooth: hci6: unexpected event for opcode 0x040e
[ 1585.794659][T18686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4136'.
[ 1586.460667][    T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1586.621025][    T8] usb 9-1: Using ep0 maxpacket: 8
[ 1586.636971][    T8] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1586.648963][    T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1586.664207][    T8] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1586.676301][    T8] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1586.689707][    T8] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1586.700604][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1587.240863][    T8] usb 9-1: GET_CAPABILITIES returned 0
[ 1587.246732][    T8] usbtmc 9-1:16.0: can't read capabilities
[ 1587.280651][T11878] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1587.344711][T18701] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1587.437081][    T8] usb 9-1: USB disconnect, device number 7
[ 1587.497199][T18701] Process accounting resumed
[ 1587.767584][T11878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1587.779078][T11878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1587.790134][T11878] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1587.799680][T11878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1587.927188][T11878] usb 3-1: config 0 descriptor??
[ 1588.505471][T11878] hid-steam 0003:28DE:1142.0029: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[ 1588.721003][T11878] hid-steam 0003:28DE:1142.0029: Steam wireless receiver connected
[ 1588.765365][T11878] hid-steam 0003:28DE:1142.002A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[ 1588.787769][T11878] usb 3-1: USB disconnect, device number 34
[ 1588.810063][T11878] hid-steam 0003:28DE:1142.0029: Steam wireless receiver disconnected
[ 1590.070302][T18740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4154'.
[ 1590.092283][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4152'.
[ 1590.125126][T18732] veth0_macvtap: left promiscuous mode
[ 1590.559468][T18742] netlink: 332 bytes leftover after parsing attributes in process `syz.8.4155'.
[ 1591.225252][ T5862] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1591.300476][T11878] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[ 1591.415283][ T5862] usb 9-1: Using ep0 maxpacket: 16
[ 1591.462029][ T5862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1591.474324][ T5862] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1591.484634][ T5862] usb 9-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[ 1591.494188][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1591.541270][T11878] usb 7-1: Using ep0 maxpacket: 8
[ 1591.564791][T11878] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1591.577165][T11878] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1591.587613][T11878] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1591.598014][T11878] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1591.611620][T11878] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1591.621054][T11878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1591.674434][ T5862] usb 9-1: config 0 descriptor??
[ 1592.110007][T11878] usb 7-1: GET_CAPABILITIES returned 0
[ 1592.116319][T11878] usbtmc 7-1:16.0: can't read capabilities
[ 1592.289405][ T5862] usbhid 9-1:0.0: can't add hid device: -71
[ 1592.296364][ T5862] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1592.356798][ T5862] usb 9-1: USB disconnect, device number 8
[ 1592.373521][T11878] usb 7-1: USB disconnect, device number 102
[ 1592.602751][T18756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4159'.
[ 1593.162825][T18763] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1594.533855][T18776] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4167'.
[ 1594.933286][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4170'.
[ 1597.534274][T18811] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1598.690933][T16864] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[ 1598.871703][T16864] usb 7-1: Using ep0 maxpacket: 32
[ 1598.887511][T16864] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1598.896280][T16864] usb 7-1: config 0 has no interface number 0
[ 1598.930033][T16864] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1598.941973][T16864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1598.950888][T16864] usb 7-1: Product: syz
[ 1598.955391][T16864] usb 7-1: Manufacturer: syz
[ 1598.960350][T16864] usb 7-1: SerialNumber: syz
[ 1599.000484][T16864] usb 7-1: config 0 descriptor??
[ 1599.022409][T16864] smsc95xx v2.0.0
[ 1599.462660][T16864] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1599.474064][T16864] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1599.703011][T16864] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1599.714895][T16864] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61
[ 1600.320480][T16864] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1600.451508][T18855] netlink: 'syz.9.4192': attribute type 7 has an invalid length.
[ 1600.650768][T16864] usb 3-1: Using ep0 maxpacket: 8
[ 1600.762463][T16864] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1600.771932][T16864] usb 3-1: config 179 has no interface number 0
[ 1600.778488][T16864] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1600.790891][T16864] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1600.802740][T16864] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1600.814407][T16864] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1600.826268][T16864] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1600.839936][T16864] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1600.849667][T16864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1601.023734][T18844] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1601.227130][T18865] fuse: Bad value for 'fd'
[ 1601.258017][ T5850] usb 7-1: USB disconnect, device number 103
[ 1601.400505][T16864] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input36
[ 1601.726958][ T5850] usb 3-1: USB disconnect, device number 35
[ 1601.730531][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1601.750360][    C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[ 1601.783323][ T5850] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1603.931654][ T5850] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1604.160504][ T5850] usb 3-1: Using ep0 maxpacket: 32
[ 1604.194276][ T5850] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1604.203226][ T5850] usb 3-1: config 0 has no interface number 0
[ 1604.280414][ T5850] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1604.289864][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1604.298798][ T5850] usb 3-1: Product: syz
[ 1604.303380][ T5850] usb 3-1: Manufacturer: syz
[ 1604.308231][ T5850] usb 3-1: SerialNumber: syz
[ 1604.423754][ T5850] usb 3-1: config 0 descriptor??
[ 1604.484059][ T5850] smsc95xx v2.0.0
[ 1604.901727][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1604.915096][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1605.129198][T18910] fuse: Bad value for 'fd'
[ 1605.134211][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1605.134897][ T5850] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61
[ 1607.042568][ T5850] usb 3-1: USB disconnect, device number 36
[ 1607.671561][T18952] fuse: Bad value for 'fd'
[ 1609.931038][T16864] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1610.071493][T11878] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1610.104720][T16864] usb 9-1: Using ep0 maxpacket: 32
[ 1610.127356][T16864] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1610.136133][T16864] usb 9-1: config 0 has no interface number 0
[ 1610.231354][T16864] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1610.241260][T16864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1610.249568][T16864] usb 9-1: Product: syz
[ 1610.254469][T16864] usb 9-1: Manufacturer: syz
[ 1610.259362][T16864] usb 9-1: SerialNumber: syz
[ 1610.303630][T11878] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1610.316634][T11878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1610.327982][T11878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1610.338295][T11878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1610.351756][T11878] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1610.361178][T11878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1610.438833][T16864] usb 9-1: config 0 descriptor??
[ 1610.454330][T16864] smsc95xx v2.0.0
[ 1610.544649][T11878] usb 3-1: config 0 descriptor??
[ 1610.904206][T16864] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1610.915636][T16864] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1611.766144][ T5850] usb 7-1: new high-speed USB device number 104 using dummy_hcd
[ 1612.182017][ T5850] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1612.192859][ T5850] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1612.206265][ T5850] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1612.215892][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1612.454350][ T5850] usb 7-1: config 0 descriptor??
[ 1612.549238][ T5850] hdpvr 7-1:0.0: Could not find bulk-in endpoint
[ 1612.556431][ T5850] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12
[ 1613.223387][T11878] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving
[ 1613.330802][T11878] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1613.384782][T16864] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1613.396652][T16864] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61
[ 1613.441237][T11878] usb 3-1: USB disconnect, device number 37
[ 1613.482034][ T5862] usb 7-1: USB disconnect, device number 104
[ 1613.581140][T16864] usb 9-1: USB disconnect, device number 9
[ 1614.238326][T19010] delete_channel: no stack
[ 1615.410702][ T5862] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1615.571683][ T5862] usb 9-1: Using ep0 maxpacket: 32
[ 1615.591958][ T5862] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1615.600600][ T5862] usb 9-1: config 0 has no interface number 0
[ 1615.940808][ T5862] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1615.950816][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1615.959070][ T5862] usb 9-1: Product: syz
[ 1615.963889][ T5862] usb 9-1: Manufacturer: syz
[ 1615.968717][ T5862] usb 9-1: SerialNumber: syz
[ 1616.462094][ T5850] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1616.579916][ T5862] usb 9-1: config 0 descriptor??
[ 1616.633612][ T5862] smsc95xx v2.0.0
[ 1616.673084][ T5850] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1616.685802][ T5850] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1616.697373][ T5850] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1616.707655][ T5850] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1616.721152][ T5850] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1616.730659][ T5850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1616.857615][T19042] netlink: 'syz.6.4248': attribute type 27 has an invalid length.
[ 1616.964242][ T5850] usb 10-1: config 0 descriptor??
[ 1617.042205][ T5862] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1617.054215][ T5862] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1617.312696][T19046] netlink: 'syz.6.4248': attribute type 27 has an invalid length.
[ 1617.592292][ T5862] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1617.604408][ T5862] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61
[ 1617.721335][ T5850] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving
[ 1617.785614][ T5850] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1619.423734][ T5850] usb 10-1: reset high-speed USB device number 9 using dummy_hcd
[ 1619.538849][T17343] usb 9-1: USB disconnect, device number 10
[ 1619.720535][ T1841] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1620.740438][T19077] bpf: Bad value for 'uid'
[ 1621.589796][ T1841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1621.600310][ T1841] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[ 1621.610606][ T1841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1621.620644][ T1841] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[ 1621.900522][ T1841] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[ 1621.909885][ T1841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1621.918387][ T1841] usb 3-1: Product: syz
[ 1621.922913][ T1841] usb 3-1: Manufacturer: syz
[ 1621.927858][ T1841] usb 3-1: SerialNumber: syz
[ 1622.005522][ T1841] usb 3-1: config 0 descriptor??
[ 1622.059383][ T1841] ums-isd200 3-1:0.0: USB Mass Storage device detected
[ 1622.466817][ T1841] scsi host1: usb-storage 3-1:0.0
[ 1622.581640][ T1841] usb 3-1: USB disconnect, device number 38
[ 1622.735222][    T8] usb 10-1: USB disconnect, device number 9
[ 1623.211785][    T8] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1623.441991][    T8] usb 10-1: Using ep0 maxpacket: 8
[ 1623.479101][    T8] usb 10-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1623.490288][    T8] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1623.502162][    T8] usb 10-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1623.664688][    T8] usb 10-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1623.676068][    T8] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1623.687796][    T8] usb 10-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1623.755001][    T8] usb 10-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[ 1623.766465][    T8] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1623.778283][    T8] usb 10-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1623.947595][    T8] usb 10-1: string descriptor 0 read error: -22
[ 1623.954814][    T8] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1623.964529][    T8] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1624.060477][ T5862] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1624.075049][    T8] adutux 10-1:168.0: interrupt endpoints not found
[ 1624.261068][ T5862] usb 3-1: Using ep0 maxpacket: 32
[ 1624.301078][ T5862] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1624.309565][ T5862] usb 3-1: config 0 has no interface number 0
[ 1624.394643][ T5862] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1624.404455][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1624.413792][ T5862] usb 3-1: Product: syz
[ 1624.418188][ T5862] usb 3-1: Manufacturer: syz
[ 1624.423268][ T5862] usb 3-1: SerialNumber: syz
[ 1624.445190][ T5862] usb 3-1: config 0 descriptor??
[ 1624.480077][ T5862] smsc95xx v2.0.0
[ 1624.698121][T16864] usb 10-1: USB disconnect, device number 10
[ 1624.950871][ T5862] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1624.963935][ T5862] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1625.185120][ T5862] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1625.197330][ T5862] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61
[ 1627.132670][ T5862] usb 3-1: USB disconnect, device number 39
[ 1627.591274][T16864] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1627.873032][T16864] usb 10-1: too many configurations: 65, using maximum allowed: 8
[ 1627.947216][T16864] usb 10-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[ 1627.957347][T16864] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1628.491325][T16864] usb 10-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[ 1628.498763][T16864] usb 10-1: No valid video chain found.
[ 1628.677533][    T8] usb 10-1: USB disconnect, device number 11
[ 1629.183402][T14000] Bluetooth: hci3: command 0x0406 tx timeout
[ 1629.346281][T19164] delete_channel: no stack
[ 1631.671711][T19196] ieee802154 phy0 wpan0: encryption failed: -22
[ 1631.982851][    T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1631.991455][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[ 1632.364536][    T8] usb 3-1: device descriptor read/64, error -32
[ 1632.774307][T19216] ieee802154 phy0 wpan0: encryption failed: -22
[ 1632.864681][    T8] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1633.527503][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4296'.
[ 1633.536823][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4296'.
[ 1633.845479][    T8] usb 3-1: Using ep0 maxpacket: 32
[ 1633.937753][    T8] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1633.946482][    T8] usb 3-1: config 0 has no interface number 0
[ 1634.006489][    T8] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1634.016233][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1634.024899][    T8] usb 3-1: Product: syz
[ 1634.029298][    T8] usb 3-1: Manufacturer: syz
[ 1634.034319][    T8] usb 3-1: SerialNumber: syz
[ 1634.231353][    T8] usb 3-1: config 0 descriptor??
[ 1634.253863][    T8] smsc95xx v2.0.0
[ 1634.721241][    T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1634.733021][    T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1634.956416][    T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1634.968991][    T8] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61
[ 1635.523392][T19245] block nbd9: shutting down sockets
[ 1636.400612][    T8] usb 3-1: USB disconnect, device number 41
[ 1637.384834][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1637.391621][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1638.312016][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4310'.
[ 1640.614244][T19307] (unnamed net_device) (uninitialized): option use_carrier: invalid value (10)
[ 1640.750522][T11878] usb 7-1: new high-speed USB device number 105 using dummy_hcd
[ 1640.926533][T11878] usb 7-1: Using ep0 maxpacket: 32
[ 1640.967415][T11878] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1640.976118][T11878] usb 7-1: config 0 has no interface number 0
[ 1641.053708][T11878] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1641.063511][T11878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1641.071977][T11878] usb 7-1: Product: syz
[ 1641.076398][T11878] usb 7-1: Manufacturer: syz
[ 1641.081357][T11878] usb 7-1: SerialNumber: syz
[ 1641.143047][T11878] usb 7-1: config 0 descriptor??
[ 1641.184217][T11878] smsc95xx v2.0.0
[ 1641.721027][T11878] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1641.732606][T11878] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1641.948621][T11878] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1641.963125][T11878] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -61
[ 1643.327126][    T8] usb 7-1: USB disconnect, device number 105
[ 1643.850274][   T29] audit: type=1326 audit(1730188311.765:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.2.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[ 1644.040546][   T29] audit: type=1326 audit(1730188311.855:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.2.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f05579 code=0x7ffc0000
[ 1644.063073][   T29] audit: type=1326 audit(1730188311.855:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19340 comm="syz.2.4324" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000
[ 1644.171510][T19343] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4323'.
[ 1648.661223][T11878] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1648.831855][T11878] usb 9-1: device descriptor read/64, error -71
[ 1649.095461][T11878] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1649.260575][T11878] usb 9-1: device descriptor read/64, error -71
[ 1649.374712][T11878] usb usb9-port1: attempt power cycle
[ 1649.801818][T11878] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1649.871722][T11878] usb 9-1: device descriptor read/8, error -71
[ 1650.131673][T11878] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1650.203850][T11878] usb 9-1: device descriptor read/8, error -71
[ 1650.336202][T11878] usb usb9-port1: unable to enumerate USB device
[ 1650.839057][T19421] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode
[ 1650.847209][T19421] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode
[ 1654.390590][    T8] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1654.581742][    T8] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1654.591329][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1654.704570][    T8] usb 9-1: config 0 descriptor??
[ 1654.794565][    T8] cp210x 9-1:0.0: cp210x converter detected
[ 1655.994423][ T5850] usb 7-1: new high-speed USB device number 106 using dummy_hcd
[ 1656.422215][    T8] usb 9-1: cp210x converter now attached to ttyUSB0
[ 1656.443932][ T5850] usb 7-1: Using ep0 maxpacket: 8
[ 1656.471027][ T5850] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1656.482028][ T5850] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1656.491740][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1656.681456][ T5850] usb 9-1: USB disconnect, device number 15
[ 1656.782751][ T5850] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1656.889387][ T5850] cp210x 9-1:0.0: device disconnected
[ 1658.800712][T16864] usb 7-1: USB disconnect, device number 106
[ 1663.712980][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4388'.
[ 1664.773409][    T8] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1665.190551][    T8] usb 10-1: Using ep0 maxpacket: 8
[ 1665.219492][    T8] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1665.230401][    T8] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1665.239844][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1665.540582][ T5850] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[ 1665.721344][ T5850] usb 7-1: Using ep0 maxpacket: 32
[ 1665.776907][ T5850] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1665.785450][ T5850] usb 7-1: config 0 has no interface number 0
[ 1665.877028][ T5850] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1665.887215][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1665.898718][ T5850] usb 7-1: Product: syz
[ 1665.903849][ T5850] usb 7-1: Manufacturer: syz
[ 1665.908678][ T5850] usb 7-1: SerialNumber: syz
[ 1665.999323][ T5850] usb 7-1: config 0 descriptor??
[ 1666.015924][ T5850] smsc95xx v2.0.0
[ 1666.407838][T11878] usb 10-1: USB disconnect, device number 12
[ 1666.584009][ T5850] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1666.595314][ T5850] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1668.134449][ T5850] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1668.146176][ T5850] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32
[ 1668.351041][T19621] loop2: detected capacity change from 0 to 7
[ 1668.401359][T19621] Dev loop2: unable to read RDB block 7
[ 1668.407345][T19621]  loop2: unable to read partition table
[ 1668.443064][T19621] loop2: partition table beyond EOD, truncated
[ 1668.449797][T19621] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1669.947622][ T5850] usb 7-1: USB disconnect, device number 107
[ 1670.172503][T19635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4402'.
[ 1676.720097][T19697] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4418'.
[ 1679.570778][ T5850] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1679.900786][ T5850] usb 3-1: Using ep0 maxpacket: 8
[ 1679.929471][ T5850] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1679.940413][ T5850] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1679.956802][ T5850] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1679.967435][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1680.082372][ T5850] usbtmc 3-1:16.0: bulk endpoints not found
[ 1681.877074][ T5850] usb 3-1: USB disconnect, device number 42
[ 1685.374593][ T5850] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1685.610651][ T5850] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1685.622849][ T5850] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1685.634493][ T5850] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1685.644640][ T5850] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1685.658035][ T5850] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1685.667605][ T5850] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1685.803044][ T5850] usb 9-1: config 0 descriptor??
[ 1685.872580][    T8] usb 7-1: new high-speed USB device number 108 using dummy_hcd
[ 1686.060640][    T8] usb 7-1: Using ep0 maxpacket: 8
[ 1686.092839][    T8] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1686.103845][    T8] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1686.117607][    T8] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1686.127293][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1686.292070][    T8] usbtmc 7-1:16.0: bulk endpoints not found
[ 1686.445879][ T5850] usbhid 9-1:0.0: can't add hid device: -71
[ 1686.452938][ T5850] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 1686.532039][ T5850] usb 9-1: USB disconnect, device number 16
[ 1688.815214][T11878] usb 7-1: USB disconnect, device number 108
[ 1689.529916][T19833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4459'.
[ 1689.582188][T19833] veth0_macvtap: left promiscuous mode
[ 1691.123112][T16864] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1691.654691][T16864] usb 9-1: Using ep0 maxpacket: 32
[ 1691.694511][T16864] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1691.703095][T16864] usb 9-1: config 0 has no interface number 0
[ 1691.751605][ T5850] usb 7-1: new high-speed USB device number 109 using dummy_hcd
[ 1691.838374][T16864] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1691.848237][T16864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1691.856719][T16864] usb 9-1: Product: syz
[ 1691.861241][T16864] usb 9-1: Manufacturer: syz
[ 1691.866096][T16864] usb 9-1: SerialNumber: syz
[ 1691.942679][ T5850] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1691.955305][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1691.966658][ T5850] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1691.971861][T16864] usb 9-1: config 0 descriptor??
[ 1691.976923][ T5850] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1691.995036][ T5850] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1692.004503][ T5850] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.048563][T16864] smsc95xx v2.0.0
[ 1692.058642][ T5850] usb 7-1: config 0 descriptor??
[ 1692.170549][    T8] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1692.331122][    T8] usb 3-1: Using ep0 maxpacket: 8
[ 1692.358127][    T8] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1692.369273][    T8] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1692.383174][    T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1692.393018][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.491645][T16864] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1692.503158][T16864] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1692.596385][    T8] usbtmc 3-1:16.0: bulk endpoints not found
[ 1692.742096][ T5850] usbhid 7-1:0.0: can't add hid device: -71
[ 1692.753669][ T5850] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1692.814062][ T5850] usb 7-1: USB disconnect, device number 109
[ 1693.348173][T16864] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1693.360873][T16864] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -32
[ 1694.091428][T19884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4472'.
[ 1694.183036][T14000] Bluetooth: hci3: unexpected event for opcode 0x040e
[ 1694.610555][T16864] usb 9-1: USB disconnect, device number 17
[ 1695.157138][T11878] usb 3-1: USB disconnect, device number 43
[ 1695.577945][T19906] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4479'.
[ 1697.544134][T19930] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4487'.
[ 1697.577598][T14000] Bluetooth: hci6: unexpected event for opcode 0x040e
[ 1697.720390][ T5850] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1697.890096][ T5850] usb 3-1: Using ep0 maxpacket: 32
[ 1697.912020][ T5850] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1697.920769][ T5850] usb 3-1: config 0 has no interface number 0
[ 1697.960771][ T5850] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1697.973419][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1697.983403][ T5850] usb 3-1: Product: syz
[ 1697.987844][ T5850] usb 3-1: Manufacturer: syz
[ 1697.993160][ T5850] usb 3-1: SerialNumber: syz
[ 1698.035073][ T5850] usb 3-1: config 0 descriptor??
[ 1698.090489][ T5850] smsc95xx v2.0.0
[ 1698.480818][T11878] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1698.511229][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1698.524704][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1698.664988][T11878] usb 10-1: Using ep0 maxpacket: 8
[ 1698.695978][T11878] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1698.706920][T11878] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1698.718688][T11878] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1698.729198][T11878] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1698.743046][T11878] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1698.752643][T11878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1698.796758][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1698.803801][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1698.904064][T11878] usbtmc 10-1:16.0: bulk endpoints not found
[ 1699.365510][ T5850] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1699.377504][ T5850] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32
[ 1700.711057][ T5850] usb 3-1: USB disconnect, device number 44
[ 1701.006794][T19971] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4495'.
[ 1701.589965][T11878] usb 10-1: USB disconnect, device number 13
[ 1702.887921][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4500'.
[ 1702.910901][    T8] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[ 1703.172467][    T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1703.183266][    T8] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1703.196905][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1703.209052][    T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1703.219126][    T8] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1703.434227][    T8] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1703.443808][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1703.452378][    T8] usb 9-1: Product: syz
[ 1703.456794][    T8] usb 9-1: Manufacturer: syz
[ 1703.461746][    T8] usb 9-1: SerialNumber: syz
[ 1703.535788][    T8] usb 9-1: config 0 descriptor??
[ 1703.921607][    T8] radio-si470x 9-1:0.0: DeviceID=0xac9a ChipID=0xda94
[ 1704.273432][    T8] radio-si470x 9-1:0.0: software version 172, hardware version 154
[ 1704.528762][    T8] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1704.537859][    T8] radio-si470x 9-1:0.0: submitting int urb failed (-90)
[ 1704.630949][    T8] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1704.641263][    T8] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22
[ 1704.672047][    T8] usb 9-1: USB disconnect, device number 18
[ 1706.782195][T20021] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode
[ 1707.220432][    T8] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1707.420770][    T8] usb 9-1: Using ep0 maxpacket: 32
[ 1707.530652][    T8] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1707.539049][    T8] usb 9-1: config 0 has no interface number 0
[ 1707.560651][T11878] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1707.626006][    T8] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1707.635984][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1707.644442][    T8] usb 9-1: Product: syz
[ 1707.648836][    T8] usb 9-1: Manufacturer: syz
[ 1707.653922][    T8] usb 9-1: SerialNumber: syz
[ 1707.702172][    T8] usb 9-1: config 0 descriptor??
[ 1707.771732][    T8] smsc95xx v2.0.0
[ 1708.011486][T11878] usb 10-1: Using ep0 maxpacket: 8
[ 1708.034575][T11878] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1708.045428][T11878] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1708.057663][T11878] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1708.068265][T11878] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1708.081735][T11878] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1708.091221][T11878] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1708.322629][T11878] usbtmc 10-1:16.0: bulk endpoints not found
[ 1708.349087][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1708.360480][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1709.199070][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1709.211654][    T8] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61
[ 1709.371659][T11878] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[ 1709.604022][T11878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1709.614577][T11878] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1709.626555][T11878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1709.638051][T11878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1709.648836][T11878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1709.741526][T11878] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1709.751287][T11878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1709.759637][T11878] usb 3-1: Product: syz
[ 1709.764237][T11878] usb 3-1: Manufacturer: syz
[ 1709.769075][T11878] usb 3-1: SerialNumber: syz
[ 1709.826049][T11878] usb 3-1: config 0 descriptor??
[ 1710.055703][T11878] radio-si470x 3-1:0.0: DeviceID=0xac9a ChipID=0xda94
[ 1710.202676][T20067] geneve2: entered promiscuous mode
[ 1710.208356][T20067] geneve2: entered allmulticast mode
[ 1710.377895][T11878] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71
[ 1710.386618][T11878] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[ 1710.396652][T11878] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[ 1710.437075][T11878] usb 3-1: USB disconnect, device number 45
[ 1710.558690][T16864] usb 9-1: USB disconnect, device number 19
[ 1710.712443][ T5862] usb 10-1: USB disconnect, device number 14
[ 1713.414549][T20114] loop9: detected capacity change from 0 to 256
[ 1713.720420][    T8] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1713.900437][    T8] usb 9-1: Using ep0 maxpacket: 32
[ 1713.916535][    T8] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1713.925243][    T8] usb 9-1: config 0 has no interface number 0
[ 1713.995574][    T8] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1714.005149][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1714.013774][    T8] usb 9-1: Product: syz
[ 1714.018186][    T8] usb 9-1: Manufacturer: syz
[ 1714.023230][    T8] usb 9-1: SerialNumber: syz
[ 1714.143767][    T8] usb 9-1: config 0 descriptor??
[ 1714.184428][    T8] smsc95xx v2.0.0
[ 1714.585966][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1714.597422][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1715.455283][    T8] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1715.467366][    T8] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61
[ 1717.114270][T16864] usb 9-1: USB disconnect, device number 20
[ 1718.816088][   T29] audit: type=1326 audit(1730188386.745:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20183 comm="syz.6.4553" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb0579 code=0x0
[ 1719.924499][T20199] loop2: detected capacity change from 0 to 16
[ 1720.058110][T20181] loop8: detected capacity change from 0 to 8192
[ 1720.107181][T20199] erofs: (device loop2): mounted with root inode @ nid 36.
[ 1720.140846][T16864] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1720.197619][T20181] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1720.211736][T20181] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal
[ 1720.238697][T20181] REISERFS (device loop8): using ordered data mode
[ 1720.247119][T20181] reiserfs: using flush barriers
[ 1720.278143][T20181] REISERFS (device loop8): journal params: device ram0, size 127, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30
[ 1720.312566][T16864] usb 10-1: Using ep0 maxpacket: 32
[ 1720.334519][T16864] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[ 1720.343404][T16864] usb 10-1: config 0 has no interface number 0
[ 1720.394583][T20181] REISERFS (device loop8): checking transaction log (ram0)
[ 1720.409966][T16864] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1720.419992][T16864] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1720.428828][T16864] usb 10-1: Product: syz
[ 1720.433444][T16864] usb 10-1: Manufacturer: syz
[ 1720.438388][T16864] usb 10-1: SerialNumber: syz
[ 1720.510639][T20181] REISERFS warning: reiserfs-5083 is_leaf: wrong item type for item *3.5*[0 2 0xfffffff9 DIRECT], item_len 32, item_location 4064, free_space(entry_count) 0
[ 1720.526922][T20181] REISERFS error (device loop8): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[ 1720.537844][T20181] REISERFS (device loop8): Remounting filesystem read-only
[ 1720.545773][T20181] REISERFS error (device loop8): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[ 1720.569246][T16864] usb 10-1: config 0 descriptor??
[ 1720.654390][T16864] smsc95xx v2.0.0
[ 1721.041091][T16864] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1721.053385][T16864] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1721.896212][T16864] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1721.908165][T16864] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -61
[ 1723.528212][ T5850] usb 10-1: USB disconnect, device number 15
[ 1723.931943][T20245] syz.2.4568[20245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1723.932350][T20245] syz.2.4568[20245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1723.970789][T20245] syz.2.4568[20245] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1725.048645][T20249] loop9: detected capacity change from 0 to 4096
[ 1725.083616][T20249] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[ 1725.547249][T20249] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[ 1726.702463][T20279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4578'.
[ 1726.860725][ T5850] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1727.176761][T20269] loop6: detected capacity change from 0 to 8192
[ 1727.200468][ T5850] usb 10-1: Using ep0 maxpacket: 32
[ 1727.206814][T20269] REISERFS warning (device loop6): jmacd-7 reiserfs_fill_super: resize option for remount only
[ 1727.232121][ T5850] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[ 1727.240721][ T5850] usb 10-1: config 0 has no interface number 0
[ 1727.289449][ T5850] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1727.299407][ T5850] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1727.307979][ T5850] usb 10-1: Product: syz
[ 1727.312579][ T5850] usb 10-1: Manufacturer: syz
[ 1727.317527][ T5850] usb 10-1: SerialNumber: syz
[ 1727.423075][ T5850] usb 10-1: config 0 descriptor??
[ 1727.486943][ T5850] smsc95xx v2.0.0
[ 1727.892667][ T5850] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1727.904039][ T5850] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1728.749682][ T5850] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 1728.762088][ T5850] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -61
[ 1729.684945][T20313] kvm: pic: non byte read
[ 1729.705032][T20313] kvm: pic: level sensitive irq not supported
[ 1729.705359][T20313] kvm: pic: non byte read
[ 1729.732507][T20313] kvm: pic: level sensitive irq not supported
[ 1729.732863][T20313] kvm: pic: non byte read
[ 1729.888621][T20320] loop6: detected capacity change from 0 to 16
[ 1729.977621][T20320] erofs: (device loop6): mounted with root inode @ nid 36.
[ 1729.991436][T20316] loop2: detected capacity change from 0 to 2048
[ 1730.038244][T20316] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1730.262493][T20325] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1730.318350][ T6151] udevd[6151]: incorrect nilfs2 checksum on /dev/loop2
[ 1730.479494][ T5850] usb 10-1: USB disconnect, device number 16
[ 1730.926916][T20316] syz.2.4590: attempt to access beyond end of device
[ 1730.926916][T20316] loop2: rw=0, sector=3120, nr_sectors = 2 limit=2048
[ 1730.946538][T20316] Buffer I/O error on dev loop2, logical block 1560, async page read
[ 1731.067814][   T29] audit: type=1800 audit(1730188399.015:218): pid=20316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4590" name="file2" dev="loop2" ino=16 res=0 errno=0
[ 1731.099854][T20332] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4592'.
[ 1731.157742][T14000] Bluetooth: hci6: unexpected event for opcode 0x040e
[ 1731.325131][T20316] syz.2.4590 (20316) used greatest stack depth: 4056 bytes left
[ 1734.034785][T20362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4594'.
[ 1736.422260][ T5850] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1737.415871][T20384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4606'.
[ 1737.594709][T14000] Bluetooth: hci3: unexpected event for opcode 0x040e
[ 1737.914481][T20389] loop9: detected capacity change from 0 to 8
[ 1738.076206][T20389] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1738.084862][T20389] SQUASHFS error: Failed to read block 0x9b: -5
[ 1738.091550][T20389] SQUASHFS error: Unable to read metadata cache entry [99]
[ 1738.099003][T20389] SQUASHFS error: Unable to read inode 0x127
[ 1738.498677][ T5850] usb 3-1: Using ep0 maxpacket: 32
[ 1738.602527][ T5850] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 1738.611168][ T5850] usb 3-1: config 0 has no interface number 0
[ 1738.868649][ T5850] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1738.878583][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1738.887195][ T5850] usb 3-1: Product: syz
[ 1738.891820][ T5850] usb 3-1: Manufacturer: syz
[ 1738.896649][ T5850] usb 3-1: SerialNumber: syz
[ 1739.256745][ T5850] usb 3-1: config 0 descriptor??
[ 1739.525735][    T8] IPVS: starting estimator thread 0...
[ 1739.976440][T20411] IPVS: using max 240 ests per chain, 12000 per kthread
[ 1740.010980][ T5850] usb 3-1: can't set config #0, error -71
[ 1740.120709][ T5850] usb 3-1: USB disconnect, device number 46
[ 1740.834121][T20427] loop9: detected capacity change from 0 to 1024
[ 1742.945057][T20452] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 1743.044964][T20452] hfsplus: xattr searching failed
[ 1745.440858][ T5850] usb 7-1: new high-speed USB device number 110 using dummy_hcd
[ 1745.629911][ T5850] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1745.639665][ T5850] usb 7-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config
[ 1745.650528][ T5850] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1745.659876][ T5850] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8
[ 1745.671837][ T5850] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8279, setting to 1024
[ 1746.297317][ T5850] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1746.310395][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1746.318671][ T5850] usb 7-1: Product: syz
[ 1746.325906][ T5850] usb 7-1: Manufacturer: syz
[ 1746.445132][ T5850] cdc_wdm 7-1:1.0: skipping garbage
[ 1746.450793][ T5850] cdc_wdm 7-1:1.0: skipping garbage
[ 1746.662205][ T5850] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[ 1746.668504][ T5850] cdc_wdm 7-1:1.0: Unknown control protocol
[ 1746.849019][T20485] loop2: detected capacity change from 0 to 1024
[ 1746.881733][T20485] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869)
[ 1746.892509][T20485] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1746.903472][T20485] EXT4-fs (loop2): can't mount with commit=7, fs mounted w/o journal
[ 1746.940538][T16864] usb 7-1: USB disconnect, device number 110
[ 1750.859365][T20541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4645'.
[ 1753.901542][T20580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4657'.
[ 1754.960809][T16864] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1755.094780][   T44] kworker/1:1 (44) used greatest stack depth: 3112 bytes left
[ 1755.161145][T16864] usb 10-1: Using ep0 maxpacket: 16
[ 1755.230563][T16864] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1755.330353][T16864] usb 10-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[ 1755.339922][T16864] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1755.348695][T16864] usb 10-1: Product: syz
[ 1755.353283][T16864] usb 10-1: Manufacturer: syz
[ 1755.358253][T16864] usb 10-1: SerialNumber: syz
[ 1755.450026][T16864] usb 10-1: config 0 descriptor??
[ 1755.479149][T20591] loop6: detected capacity change from 0 to 1024
[ 1755.494001][T20591] EXT4-fs: Ignoring removed oldalloc option
[ 1755.529683][T20591] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 1755.631908][T20591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1755.682787][T20588] netlink: 16166 bytes leftover after parsing attributes in process `syz.9.4659'.
[ 1755.740863][T16864] usb 10-1: USB disconnect, device number 17
[ 1756.073694][   T29] audit: type=1804 audit(1730188424.015:219): pid=20591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4660" name="/newroot/162/file1/file1" dev="loop6" ino=15 res=1 errno=0
[ 1756.096238][   T29] audit: type=1804 audit(1730188424.015:220): pid=20591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4660" name="/newroot/162/file1/file1" dev="loop6" ino=15 res=1 errno=0
[ 1756.310694][   T29] audit: type=1804 audit(1730188424.205:221): pid=20591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.4660" name="/newroot/162/file1/file1" dev="loop6" ino=15 res=1 errno=0
[ 1757.088221][T17592] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1757.638949][T20625] loop2: detected capacity change from 0 to 512
[ 1757.794905][T20625] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0
[ 1758.823971][T20635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4673'.
[ 1760.263823][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[ 1760.270595][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[ 1762.701671][T20686] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4685'.
[ 1763.831143][T20676] loop0: detected capacity change from 0 to 32768
[ 1763.872931][T20676] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4683 (20676)
[ 1764.300677][T20676] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1764.312108][T20676] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1764.327342][T20676] BTRFS info (device loop0): using free-space-tree
[ 1764.494470][T20676] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[ 1764.495593][T20676] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[ 1764.506615][T20676] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1764.516471][T20676] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[ 1764.527763][T20676] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1764.538714][T20676] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1764.550260][T20676] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1764.659602][T20676] BTRFS error (device loop0): open_ctree failed
[ 1764.726647][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1765.822254][ T5850] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[ 1766.977398][ T5850] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1767.033461][ T5850] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1767.043328][ T5850] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1767.051876][ T5850] usb 10-1: Product: syz
[ 1767.056392][ T5850] usb 10-1: Manufacturer: syz
[ 1767.061408][ T5850] usb 10-1: SerialNumber: syz
[ 1767.452841][T20742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4699'.
[ 1767.782224][ T5850] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 1769.082873][T20763] loop0: detected capacity change from 0 to 8
[ 1769.294832][T20763] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1769.303308][T20763] SQUASHFS error: Failed to read block 0x108: -5
[ 1769.309864][T20763] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1769.317835][T20763] SQUASHFS error: Unable to read inode 0x11f
[ 1770.000703][ T5850] usb 10-1: USB disconnect, device number 18
[ 1770.063051][ T5850] usblp0: removed
[ 1777.061673][ T5850] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1777.313784][ T5850] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1777.327833][ T5850] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1777.338846][ T5850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1777.440359][ T5850] usb 10-1: config 0 descriptor??
[ 1777.499387][ T5850] pwc: Askey VC010 type 2 USB webcam detected.
[ 1777.679421][ T5850] pwc: send_video_command error -71
[ 1777.685114][ T5850] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 1777.693739][ T5850] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71
[ 1777.785249][ T5850] usb 10-1: USB disconnect, device number 19
[ 1778.292604][ T5850] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1778.532647][ T5850] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1778.543586][ T5850] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1778.553493][ T5850] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1778.672980][ T5850] usb 10-1: config 0 descriptor??
[ 1778.719076][ T5850] pwc: Askey VC010 type 2 USB webcam detected.
[ 1779.112212][ T5850] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1779.175099][T20902] loop8: detected capacity change from 0 to 760
[ 1779.340647][ T5850] pwc: recv_control_msg error -71 req 02 val 2c00
[ 1779.368155][ T5850] pwc: recv_control_msg error -71 req 04 val 1000
[ 1779.425195][ T5850] pwc: recv_control_msg error -71 req 04 val 1300
[ 1779.458783][ T5850] pwc: recv_control_msg error -71 req 04 val 1400
[ 1779.502856][ T5850] pwc: recv_control_msg error -71 req 02 val 2000
[ 1779.543993][ T5850] pwc: recv_control_msg error -71 req 02 val 2100
[ 1779.590601][ T5850] pwc: recv_control_msg error -71 req 04 val 1500
[ 1779.617254][ T5850] pwc: recv_control_msg error -71 req 02 val 2500
[ 1779.677612][ T5850] pwc: recv_control_msg error -71 req 02 val 2400
[ 1779.753524][ T5850] pwc: recv_control_msg error -71 req 02 val 2600
[ 1779.803614][ T5850] pwc: recv_control_msg error -71 req 02 val 2900
[ 1779.815621][   T29] audit: type=1800 audit(1730188447.745:222): pid=20902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4741" name="file1" dev="loop8" ino=1925 res=0 errno=0
[ 1779.826762][ T5850] pwc: recv_control_msg error -71 req 02 val 2800
[ 1779.884461][ T5850] pwc: recv_control_msg error -71 req 04 val 1100
[ 1779.975559][ T5850] pwc: recv_control_msg error -71 req 04 val 1200
[ 1780.038038][ T5850] pwc: Registered as video103.
[ 1780.046616][ T5850] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input42
[ 1780.252054][ T5850] usb 10-1: USB disconnect, device number 20
[ 1781.910739][T20929] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4747'.
[ 1783.531208][T20948] loop9: detected capacity change from 0 to 1024
[ 1783.641823][T20948] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1783.716559][T20948] JBD2: no valid journal superblock found
[ 1783.722876][T20948] EXT4-fs (loop9): Could not load journal inode
[ 1785.131961][    T8] usb 9-1: new full-speed USB device number 21 using dummy_hcd
[ 1785.341640][    T8] usb 9-1: config 4 has an invalid interface number: 210 but max is 0
[ 1785.350629][    T8] usb 9-1: config 4 has no interface number 0
[ 1786.016214][    T8] usb 9-1: New USB device found, idVendor=03f0, idProduct=3524, bcdDevice=56.c6
[ 1786.026324][    T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1786.037456][    T8] usb 9-1: Product: syz
[ 1786.043343][    T8] usb 9-1: Manufacturer: syz
[ 1786.048212][    T8] usb 9-1: SerialNumber: syz
[ 1786.118876][    T8] pl2303 9-1:4.210: required endpoints missing
[ 1786.378370][ T5862] usb 9-1: USB disconnect, device number 21
[ 1787.231337][T20998] loop0: detected capacity change from 0 to 1024
[ 1789.837536][T21002] loop8: detected capacity change from 0 to 40427
[ 1789.857981][T21002] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[ 1789.866190][T21002] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 1790.102677][T21002] F2FS-fs (loop8): invalid crc value
[ 1790.255852][T21002] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-4)
[ 1791.340571][ T5862] usb 7-1: new high-speed USB device number 111 using dummy_hcd
[ 1791.577342][ T5862] usb 7-1: Using ep0 maxpacket: 32
[ 1791.597548][ T5862] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[ 1791.606803][ T5862] usb 7-1: config 0 has no interface number 0
[ 1791.746593][ T5862] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1791.756288][ T5862] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1791.765409][ T5862] usb 7-1: Product: syz
[ 1791.769813][ T5862] usb 7-1: Manufacturer: syz
[ 1791.774820][ T5862] usb 7-1: SerialNumber: syz
[ 1791.879639][ T5862] usb 7-1: config 0 descriptor??
[ 1791.952745][ T5862] smsc95xx v2.0.0
[ 1792.330353][ T5862] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1792.341551][ T5862] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1794.029272][ T5862] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1794.040987][ T5862] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32
[ 1794.072760][ T5862] usb 7-1: USB disconnect, device number 111
[ 1794.515744][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4787'.
[ 1794.525320][T21067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4787'.
[ 1794.644194][T14000] block nbd0: Receive control failed (result -11)
[ 1796.273121][   T29] audit: type=1326 audit(1730188464.225:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21091 comm="syz.9.4796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7fc00000
[ 1796.296863][   T29] audit: type=1326 audit(1730188464.225:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21091 comm="syz.9.4796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7eff579 code=0x7fc00000
[ 1796.319378][   T29] audit: type=1326 audit(1730188464.225:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21091 comm="syz.9.4796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7fc00000
[ 1796.341996][   T29] audit: type=1326 audit(1730188464.225:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21091 comm="syz.9.4796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7fc00000
[ 1796.364452][   T29] audit: type=1326 audit(1730188464.225:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21091 comm="syz.9.4796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7fc00000
[ 1796.387388][   T29] audit: type=1326 audit(1730188464.225:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21091 comm="syz.9.4796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7fc00000
[ 1796.405279][T21097] loop8: detected capacity change from 0 to 8
[ 1796.409866][   T29] audit: type=1326 audit(1730188464.225:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21091 comm="syz.9.4796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7fc00000
[ 1796.438394][   T29] audit: type=1326 audit(1730188464.225:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21091 comm="syz.9.4796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7fc00000
[ 1796.461000][   T29] audit: type=1326 audit(1730188464.225:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21091 comm="syz.9.4796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7fc00000
[ 1796.483964][   T29] audit: type=1326 audit(1730188464.225:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21091 comm="syz.9.4796" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7eff579 code=0x7fc00000
[ 1796.798134][T21097] SQUASHFS error: xz decompression failed, data probably corrupt
[ 1796.806500][T21097] SQUASHFS error: Failed to read block 0x108: -5
[ 1796.813383][T21097] SQUASHFS error: Unable to read metadata cache entry [106]
[ 1796.821308][T21097] SQUASHFS error: Unable to read inode 0x11f
[ 1799.993317][    T8] usb 7-1: new full-speed USB device number 112 using dummy_hcd
[ 1800.081216][T21142] =====================================================
[ 1800.088663][T21142] BUG: KMSAN: uninit-value in sctp_sf_ootb+0x82d/0xce0
[ 1800.095952][T21142]  sctp_sf_ootb+0x82d/0xce0
[ 1800.100793][T21142]  sctp_do_sm+0x181/0x93d0
[ 1800.105482][T21142]  sctp_endpoint_bh_rcv+0xc38/0xf90
[ 1800.111165][T21142]  sctp_inq_push+0x2ef/0x380
[ 1800.115983][T21142]  sctp_rcv+0x3831/0x3b20
[ 1800.120631][T21142]  sctp4_rcv+0x42/0x50
[ 1800.124888][T21142]  ip_protocol_deliver_rcu+0xb51/0x13d0
[ 1800.130811][T21142]  ip_local_deliver_finish+0x336/0x500
[ 1800.136492][T21142]  ip_local_deliver+0x21f/0x490
[ 1800.141653][T21142]  ip_rcv_finish+0x4a2/0x520
[ 1800.146431][T21142]  ip_rcv+0xcd/0x380
[ 1800.150618][T21142]  __netif_receive_skb+0x319/0xa00
[ 1800.156003][T21142]  netif_receive_skb+0x58/0x660
[ 1800.161203][T21142]  tun_rx_batched+0x3ee/0x980
[ 1800.166150][T21142]  tun_get_user+0x5783/0x6c60
[ 1800.171173][T21142]  tun_chr_write_iter+0x3ac/0x5d0
[ 1800.176485][T21142]  vfs_write+0xb2b/0x1540
[ 1800.181219][T21142]  ksys_write+0x24f/0x4c0
[ 1800.185789][T21142]  __ia32_sys_write+0x91/0xe0
[ 1800.190797][T21142]  ia32_sys_call+0x2e34/0x40d0
[ 1800.195822][T21142]  __do_fast_syscall_32+0xb0/0x110
[ 1800.201368][T21142]  do_fast_syscall_32+0x38/0x80
[ 1800.206428][T21142]  do_SYSENTER_32+0x1f/0x30
[ 1800.211278][T21142]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1800.217889][T21142] 
[ 1800.220445][T21142] Uninit was created at:
[ 1800.224968][T21142]  kmem_cache_alloc_node_noprof+0x6bf/0xb80
[ 1800.231208][T21142]  kmalloc_reserve+0x13d/0x4a0
[ 1800.236233][T21142]  __alloc_skb+0x363/0x7b0
[ 1800.240948][T21142]  alloc_skb_with_frags+0xc8/0xd00
[ 1800.246636][T21142]  sock_alloc_send_pskb+0xa81/0xbf0
[ 1800.252205][T21142]  tun_get_user+0x20f4/0x6c60
[ 1800.257077][T21142]  tun_chr_write_iter+0x3ac/0x5d0
[ 1800.262446][T21142]  vfs_write+0xb2b/0x1540
[ 1800.266999][T21142]  ksys_write+0x24f/0x4c0
[ 1800.271633][T21142]  __ia32_sys_write+0x91/0xe0
[ 1800.276509][T21142]  ia32_sys_call+0x2e34/0x40d0
[ 1800.281608][T21142]  __do_fast_syscall_32+0xb0/0x110
[ 1800.286959][T21142]  do_fast_syscall_32+0x38/0x80
[ 1800.292166][T21142]  do_SYSENTER_32+0x1f/0x30
[ 1800.296888][T21142]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1800.303640][T21142] 
[ 1800.306109][T21142] CPU: 0 UID: 0 PID: 21142 Comm: syz.9.4810 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[ 1800.317178][T21142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1800.327518][T21142] =====================================================
[ 1800.334703][T21142] Disabling lock debugging due to kernel taint
[ 1800.341071][T21142] Kernel panic - not syncing: kmsan.panic set ...
[ 1800.347635][T21142] CPU: 0 UID: 0 PID: 21142 Comm: syz.9.4810 Tainted: G    B              6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0
[ 1800.360075][T21142] Tainted: [B]=BAD_PAGE
[ 1800.364338][T21142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1800.374560][T21142] Call Trace:
[ 1800.377981][T21142]  <TASK>
[ 1800.381040][T21142]  dump_stack_lvl+0x216/0x2d0
[ 1800.385946][T21142]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1800.391992][T21142]  dump_stack+0x1e/0x30
[ 1800.396334][T21142]  panic+0x4e2/0xcf0
[ 1800.400473][T21142]  ? kmsan_get_metadata+0x121/0x1c0
[ 1800.405913][T21142]  kmsan_report+0x2c7/0x2d0
[ 1800.410609][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.416010][T21142]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1800.422041][T21142]  ? __msan_warning+0x95/0x120
[ 1800.426991][T21142]  ? sctp_sf_ootb+0x82d/0xce0
[ 1800.431899][T21142]  ? sctp_do_sm+0x181/0x93d0
[ 1800.436685][T21142]  ? sctp_endpoint_bh_rcv+0xc38/0xf90
[ 1800.442258][T21142]  ? sctp_inq_push+0x2ef/0x380
[ 1800.447169][T21142]  ? sctp_rcv+0x3831/0x3b20
[ 1800.451811][T21142]  ? sctp4_rcv+0x42/0x50
[ 1800.456217][T21142]  ? ip_protocol_deliver_rcu+0xb51/0x13d0
[ 1800.462106][T21142]  ? ip_local_deliver_finish+0x336/0x500
[ 1800.467914][T21142]  ? ip_local_deliver+0x21f/0x490
[ 1800.473104][T21142]  ? ip_rcv_finish+0x4a2/0x520
[ 1800.478053][T21142]  ? ip_rcv+0xcd/0x380
[ 1800.482281][T21142]  ? __netif_receive_skb+0x319/0xa00
[ 1800.487741][T21142]  ? netif_receive_skb+0x58/0x660
[ 1800.492977][T21142]  ? tun_rx_batched+0x3ee/0x980
[ 1800.498001][T21142]  ? tun_get_user+0x5783/0x6c60
[ 1800.503002][T21142]  ? tun_chr_write_iter+0x3ac/0x5d0
[ 1800.508426][T21142]  ? vfs_write+0xb2b/0x1540
[ 1800.513132][T21142]  ? ksys_write+0x24f/0x4c0
[ 1800.517820][T21142]  ? __ia32_sys_write+0x91/0xe0
[ 1800.522852][T21142]  ? ia32_sys_call+0x2e34/0x40d0
[ 1800.528017][T21142]  ? __do_fast_syscall_32+0xb0/0x110
[ 1800.533496][T21142]  ? do_fast_syscall_32+0x38/0x80
[ 1800.538728][T21142]  ? do_SYSENTER_32+0x1f/0x30
[ 1800.543601][T21142]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1800.550345][T21142]  ? __enqueue_entity+0xafa/0xbe0
[ 1800.555599][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.560993][T21142]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1800.567001][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.572394][T21142]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1800.578431][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.583832][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.589227][T21142]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1800.595232][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.600631][T21142]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1800.606644][T21142]  __msan_warning+0x95/0x120
[ 1800.611442][T21142]  sctp_sf_ootb+0x82d/0xce0
[ 1800.616237][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.621669][T21142]  sctp_do_sm+0x181/0x93d0
[ 1800.626250][T21142]  ? stack_depot_save_flags+0x2c/0x6e0
[ 1800.631979][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.637376][T21142]  ? stack_depot_save+0x12/0x20
[ 1800.642395][T21142]  ? kmsan_internal_chain_origin+0xb0/0xd0
[ 1800.648442][T21142]  ? kmsan_internal_chain_origin+0x57/0xd0
[ 1800.654436][T21142]  ? kmsan_internal_memmove_metadata+0x17b/0x230
[ 1800.660968][T21142]  ? __msan_memcpy+0x108/0x1c0
[ 1800.665919][T21142]  ? sctp_init_addrs+0x4b/0x60
[ 1800.670885][T21142]  ? sctp_rcv+0x3198/0x3b20
[ 1800.675530][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.681043][T21142]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1800.687071][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.692481][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.697920][T21142]  ? __pfx_sctp_sf_ootb+0x10/0x10
[ 1800.703230][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.708677][T21142]  sctp_endpoint_bh_rcv+0xc38/0xf90
[ 1800.714111][T21142]  ? __pfx_sctp_endpoint_bh_rcv+0x10/0x10
[ 1800.720043][T21142]  sctp_inq_push+0x2ef/0x380
[ 1800.724805][T21142]  sctp_rcv+0x3831/0x3b20
[ 1800.729273][T21142]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1800.735320][T21142]  ? __pfx_sctp4_rcv+0x10/0x10
[ 1800.740256][T21142]  sctp4_rcv+0x42/0x50
[ 1800.744487][T21142]  ip_protocol_deliver_rcu+0xb51/0x13d0
[ 1800.750224][T21142]  ip_local_deliver_finish+0x336/0x500
[ 1800.755872][T21142]  ip_local_deliver+0x21f/0x490
[ 1800.760892][T21142]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1800.767044][T21142]  ? __pfx_ip_local_deliver+0x10/0x10
[ 1800.772577][T21142]  ip_rcv_finish+0x4a2/0x520
[ 1800.777364][T21142]  ip_rcv+0xcd/0x380
[ 1800.781405][T21142]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1800.786676][T21142]  ? ip6_rcv_finish+0x8b0/0x970
[ 1800.791756][T21142]  ? __pfx_ip_rcv+0x10/0x10
[ 1800.796407][T21142]  __netif_receive_skb+0x319/0xa00
[ 1800.801699][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.807113][T21142]  netif_receive_skb+0x58/0x660
[ 1800.812144][T21142]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1800.818161][T21142]  ? tun_rx_batched+0x37c/0x980
[ 1800.823173][T21142]  tun_rx_batched+0x3ee/0x980
[ 1800.828024][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.833438][T21142]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1800.839510][T21142]  tun_get_user+0x5783/0x6c60
[ 1800.844334][T21142]  ? kmsan_get_metadata+0x13e/0x1c0
[ 1800.849729][T21142]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[ 1800.856262][T21142]  ? ref_tracker_alloc+0x490/0x7e0
[ 1800.861583][T21142]  tun_chr_write_iter+0x3ac/0x5d0
[ 1800.866958][T21142]  vfs_write+0xb2b/0x1540
[ 1800.871517][T21142]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1800.877273][T21142]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1800.883312][T21142]  ksys_write+0x24f/0x4c0
[ 1800.887855][T21142]  __ia32_sys_write+0x91/0xe0
[ 1800.892730][T21142]  ia32_sys_call+0x2e34/0x40d0
[ 1800.897729][T21142]  __do_fast_syscall_32+0xb0/0x110
[ 1800.903066][T21142]  ? irqentry_exit+0x16/0x60
[ 1800.907911][T21142]  do_fast_syscall_32+0x38/0x80
[ 1800.912962][T21142]  do_SYSENTER_32+0x1f/0x30
[ 1800.917690][T21142]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1800.924215][T21142] RIP: 0023:0xf7eff579
[ 1800.928416][T21142] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1800.948238][T21142] RSP: 002b:00000000f568655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 1800.956822][T21142] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000340
[ 1800.964923][T21142] RDX: 0000000000000051 RSI: 0000000000000000 RDI: 0000000000000000
[ 1800.973025][T21142] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1800.981137][T21142] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1800.989228][T21142] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1800.997334][T21142]  </TASK>
[ 1801.000800][T21142] Kernel Offset: disabled
[ 1801.005197][T21142] Rebooting in 86400 seconds..