last executing test programs:

16m39.81747757s ago: executing program 32 (id=1683):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
socket(0x2a, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x76, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x29a83a768e447add)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

11m22.867318771s ago: executing program 33 (id=3208):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000020", @ANYRES32=0x0, @ANYBLOB="431f07004f40020008000a00", @ANYRES32, @ANYBLOB="08ed0500", @ANYRES32, @ANYBLOB="140012800b0001006d6163736563000004000280"], 0x44}, 0x1, 0x0, 0x0, 0x2004d848}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

7m20.378407633s ago: executing program 6 (id=4009):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x2, 0x5004)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x2f7e, 0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xaf4, 0x0)

7m14.899633072s ago: executing program 34 (id=3997):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
time(0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x3, 0x401, 0x25, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x23f63ef5816d2e48, 0x80, 0x5}})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000480)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@shortname_win95}, {@rodir}, {@utf8no}, {@shortname_winnt}, {@shortname_win95}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8}, {@numtail}, {@rodir}, {@shortname_lower}, {@utf8no}, {@rodir}]}, 0x1, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40000002)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

7m14.810371626s ago: executing program 6 (id=4011):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000e80)=ANY=[@ANYBLOB="400b02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000000c0)={0x0, 0x12, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

7m10.540555609s ago: executing program 6 (id=4017):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xb, 0x8001, 0x3, 0xffffffff}, {0x70, 0x0, 0x86b, 0x7, 0x8, 0x8}, 0x3, 0x7, 0xbbf}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14)

7m9.709885943s ago: executing program 6 (id=4018):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)

7m9.120548391s ago: executing program 35 (id=4002):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x402, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_io_uring_setup(0x328, &(0x7f0000000240)={0x0, 0x6faa, 0x1000, 0x4, 0x2}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r1, 0x2, 0x10a5, 0x3, 0x0, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x0)

7m7.269539409s ago: executing program 6 (id=4022):
r0 = getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x20040044}}], 0x1, 0x4)

7m5.921061784s ago: executing program 6 (id=4024):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
setresgid(0xee00, 0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x200000)

6m49.467390443s ago: executing program 36 (id=4024):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
setresgid(0xee00, 0xee01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r1, r1, 0x0, 0x200000)

6m15.589084873s ago: executing program 1 (id=4068):
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bond0\x00', 0xc02})

6m14.706256434s ago: executing program 1 (id=4069):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008800)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

6m11.402556616s ago: executing program 1 (id=4070):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)

6m10.553473625s ago: executing program 1 (id=4073):
r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000002a00)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]})
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000"], 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]})

6m6.625923394s ago: executing program 1 (id=4077):
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bond0\x00', 0xc02})

6m5.985852607s ago: executing program 1 (id=4079):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0)
munlockall()
madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180))
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000008010104000000000000000002000008240001801400018008000100000000001800020001010000000800000b00010000000000240002800c0002800500010000000001800200e000000208000740000000001800068008000200ac1414000d000380060002004e220000bb4482a942ccdb2cab7201906a69dfad7f38de314b3702b8ee000000"], 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0)
write$dsp(r3, &(0x7f00000001c0), 0x0)
close(r3)
fcntl$setsig(r2, 0xa, 0x21)
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

5m54.358090841s ago: executing program 7 (id=4090):
socket$nl_generic(0x10, 0x3, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r1 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0)
r2 = eventfd(0x401)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r2, 0x1)

5m51.704608531s ago: executing program 7 (id=4094):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40)

5m50.965377328s ago: executing program 7 (id=4096):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r1, 0x0, &(0x7f0000000000)="05", 0x1, 0xfffffffd})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ae1000/0x4000)=nil, 0x4000, 0x3})

5m49.706946823s ago: executing program 37 (id=4079):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0)
munlockall()
madvise(&(0x7f0000597000/0x1000)=nil, 0x1000, 0x13)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180))
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c00000008010104000000000000000002000008240001801400018008000100000000001800020001010000000800000b00010000000000240002800c0002800500010000000001800200e000000208000740000000001800068008000200ac1414000d000380060002004e220000bb4482a942ccdb2cab7201906a69dfad7f38de314b3702b8ee000000"], 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0)
write$dsp(r3, &(0x7f00000001c0), 0x0)
close(r3)
fcntl$setsig(r2, 0xa, 0x21)
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

5m49.62640332s ago: executing program 7 (id=4098):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000}, 0x80)

5m46.719191765s ago: executing program 7 (id=4101):
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

5m39.988110622s ago: executing program 7 (id=4108):
r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220500000083c94ffb0076"], 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

5m22.981760842s ago: executing program 38 (id=4108):
r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220500000083c94ffb0076"], 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

5m9.944862534s ago: executing program 9 (id=4142):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0)
r1 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, 0x0)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="7b87f20f", @ANYBLOB="ba2d"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)

5m8.341840465s ago: executing program 9 (id=4146):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x13)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xfff, 0x200400, 0xfbfffffd, 0xc6cd, 0x91, "0000080100", 0x23fff9, 0x1fd})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xa)

5m7.678727301s ago: executing program 9 (id=4149):
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0)

4m59.738265604s ago: executing program 9 (id=4161):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000}, 0x80)

4m55.790496068s ago: executing program 9 (id=4164):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)

4m54.877971645s ago: executing program 9 (id=4166):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x16c)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast1, 0x4e24, 0x4, 'wrr\x00', 0x15, 0x7ff, 0x22}, 0x2c)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
read(r1, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
close_range(r3, 0xffffffffffffffff, 0x0)

4m38.433516293s ago: executing program 39 (id=4166):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x87, &(0x7f0000000080)=ANY=[], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x16c)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000740)={0x11, @multicast1, 0x4e24, 0x4, 'wrr\x00', 0x15, 0x7ff, 0x22}, 0x2c)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
read(r1, 0x0, 0x0)
add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
close_range(r3, 0xffffffffffffffff, 0x0)

3m26.373768434s ago: executing program 3 (id=4406):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, 0x0, 0x0, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

3m25.998140111s ago: executing program 3 (id=4407):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)

3m25.633049918s ago: executing program 3 (id=4409):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008041}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000)
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad330fb", 0x4, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

3m20.589758741s ago: executing program 3 (id=4414):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@data_err_ignore}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42, 0x0)

3m18.369327625s ago: executing program 3 (id=4421):
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111}}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xfa0, 0x30, 0xffff, 0x70bd2d, 0x20000000, {}, [{0xf8c, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0xf1c, 0x3, 0x0, 0x0, {{0x8}, {0xef4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xeed, 0x6, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xfa0}}, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
listen(r1, 0x3)
accept4(r1, 0x0, 0x0, 0x0)

3m17.23259498s ago: executing program 3 (id=4427):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x1, 0x5, 0xfffffffd, 0x7fffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x61}, 0x4010004)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3m15.184880456s ago: executing program 40 (id=4427):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x1, 0x5, 0xfffffffd, 0x7fffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x61}, 0x4010004)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

9.325294751s ago: executing program 8 (id=5103):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r8 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0)

8.834363367s ago: executing program 0 (id=5106):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

8.831783285s ago: executing program 8 (id=5107):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)

7.50597977s ago: executing program 8 (id=5115):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x20, 0x6, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000dc0)={0x0, 0x2, 0x0, 0x0})

5.3408757s ago: executing program 0 (id=5129):
socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0xd0256000)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r2, 0x400448e6, 0x0)
ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
readv(r5, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {0x0}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/238, 0xee}], 0x4)

4.917863601s ago: executing program 0 (id=5132):
r0 = socket$inet(0x2b, 0x801, 0x0)
listen(r0, 0x9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28)
shutdown(r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendfile(r1, r2, 0x0, 0xffffffff004)
accept$inet(r0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000140)={0x3, 0x8}, 0x2)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x6b, 0x78, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

4.750493808s ago: executing program 8 (id=5135):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x4002, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)

4.351332979s ago: executing program 5 (id=5136):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

4.287879851s ago: executing program 0 (id=5137):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4.087155728s ago: executing program 4 (id=5138):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x94, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x6a, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x94}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
r3 = accept4(r2, 0x0, 0x0, 0x80000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x78, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x8}}}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, [{0x36, 0x1}, {0x6c, 0x1}, {0x60, 0x1}, {0x5, 0x1}, {0xc, 0x1}, {0x16}, {0x3f}, {0x1b, 0x1}, {0x60}, {0x1b, 0x1}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1b1}], @NL80211_ATTR_MESH_SETUP={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040004)

3.850885968s ago: executing program 8 (id=5139):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000004c0)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

3.615243076s ago: executing program 0 (id=5140):
r0 = socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)

3.27734101s ago: executing program 4 (id=5141):
r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

3.004186473s ago: executing program 0 (id=5142):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c)

2.86812974s ago: executing program 5 (id=5143):
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
getdents64(r0, 0x0, 0x0)

2.229783598s ago: executing program 5 (id=5144):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)

1.653368582s ago: executing program 2 (id=5145):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.468855878s ago: executing program 2 (id=5146):
r0 = dup(0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x5d96}], 0x1c)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r1 = dup(r0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)
shutdown(0xffffffffffffffff, 0x1)

1.309046423s ago: executing program 4 (id=5147):
r0 = socket$inet(0x2b, 0x801, 0x0)
listen(r0, 0x9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "b4003a00"}, 0x28)
shutdown(r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendfile(r1, r2, 0x0, 0xffffffff004)
accept$inet(r0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000140)={0x3, 0x8}, 0x2)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x6b, 0x78, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
connect$bt_rfcomm(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

1.181834973s ago: executing program 2 (id=5148):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x1000000, &(0x7f0000000440)="9771"})

1.119206767s ago: executing program 5 (id=5149):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x4002, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)

914.981228ms ago: executing program 2 (id=5150):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

718.214337ms ago: executing program 4 (id=5151):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x1, 0x0}, &(0x7f00000002c0)=0x40)

639.746723ms ago: executing program 5 (id=5152):
r0 = socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)

503.992746ms ago: executing program 2 (id=5153):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff)
sendfile(r1, r1, 0x0, 0x9)

437.966317ms ago: executing program 4 (id=5154):
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
getdents64(r0, 0x0, 0x0)

213.348077ms ago: executing program 5 (id=5155):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
io_setup(0x8, &(0x7f0000000300)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0)
timer_gettime(r4, &(0x7f0000000080))

182.313388ms ago: executing program 8 (id=5156):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0})

6.002467ms ago: executing program 2 (id=5157):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6103020201603752ac9d03851923f701f3133308e71a8bc224292f88"], 0x1c)

0s ago: executing program 4 (id=5158):
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x54}, 0x28)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0xfffffffe)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000200)={0x1c, 0xc, 0x1, 0x7, 0x0, [@mcast2, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @loopback]}, 0x68)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4)
r3 = socket(0x2a, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x28, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x326e9854e346bda0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0xc880)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0)

kernel console output (not intermixed with test programs):

sb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1434.031768][ T6983] usb 9-1: config 0 descriptor??
[ 1434.083798][ T6983] pwc: Askey VC010 type 2 USB webcam detected.
[ 1434.114932][T18493] syzkaller0: entered promiscuous mode
[ 1434.120916][T18493] syzkaller0: entered allmulticast mode
[ 1434.496370][ T6983] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1434.515425][ T6983] pwc: recv_control_msg error -32 req 02 val 2700
[ 1434.525389][ T6983] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1434.535082][ T6983] pwc: recv_control_msg error -32 req 04 val 1000
[ 1434.539709][T18495] loop5: detected capacity change from 0 to 4096
[ 1434.559630][ T6983] pwc: recv_control_msg error -32 req 04 val 1300
[ 1434.575727][ T6983] pwc: recv_control_msg error -32 req 04 val 1400
[ 1434.621711][ T6983] pwc: recv_control_msg error -32 req 02 val 2000
[ 1434.647754][ T6983] pwc: recv_control_msg error -32 req 02 val 2100
[ 1434.658701][ T6983] pwc: recv_control_msg error -32 req 04 val 1500
[ 1434.688103][T18501] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1434.886334][ T6983] pwc: recv_control_msg error -71 req 02 val 2400
[ 1434.901161][ T6983] pwc: recv_control_msg error -71 req 02 val 2600
[ 1434.951857][ T6983] pwc: recv_control_msg error -71 req 02 val 2900
[ 1434.999938][ T6983] pwc: recv_control_msg error -71 req 02 val 2800
[ 1435.083286][ T6983] pwc: recv_control_msg error -71 req 04 val 1100
[ 1435.266411][ T6983] pwc: recv_control_msg error -71 req 04 val 1200
[ 1435.522521][ T6983] pwc: Registered as video103.
[ 1435.530536][ T6983] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input23
[ 1435.579666][ T6983] usb 9-1: USB disconnect, device number 4
[ 1439.927669][T18528] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1439.939375][T18528] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1441.210002][T18541] syzkaller0: entered promiscuous mode
[ 1441.215991][T18541] syzkaller0: entered allmulticast mode
[ 1444.930201][T18564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1444.942029][T18564] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1445.542676][T18575] loop5: detected capacity change from 0 to 256
[ 1445.575351][T18575] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1445.586431][T18575] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[ 1445.818847][T18575] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[ 1445.849566][T18575] exFAT-fs (loop5): failed to load alloc-bitmap
[ 1445.860881][T18575] exFAT-fs (loop5): failed to recognize exfat type
[ 1446.106947][T18581] syzkaller0: entered promiscuous mode
[ 1446.113013][T18581] syzkaller0: entered allmulticast mode
[ 1446.729037][T17509] usb 9-1: new low-speed USB device number 5 using dummy_hcd
[ 1446.949361][T17509] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1446.962483][T17509] usb 9-1: config 0 has no interface number 0
[ 1446.970550][T17509] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1446.982529][T17509] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1446.993902][T17509] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1447.003401][T17509] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1447.240826][T17509] usb 9-1: config 0 descriptor??
[ 1447.249666][T18577] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1447.332889][T17509] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1447.520430][T17509] usb 9-1: USB disconnect, device number 5
[ 1447.559833][T18597] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1447.572872][T18597] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1449.645166][T18617] syzkaller0: entered promiscuous mode
[ 1449.650894][T18617] syzkaller0: entered allmulticast mode
[ 1450.178580][T18627] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1450.190399][T18627] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 1452.073250][T18654] syzkaller0: entered promiscuous mode
[ 1452.079297][T18654] syzkaller0: entered allmulticast mode
[ 1453.463902][T18631] loop5: detected capacity change from 0 to 32768
[ 1453.509089][T18631] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1453.542937][T18631] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop5": -EINTR
[ 1453.550571][T18631] XFS (loop5): log mount failed
[ 1458.913117][ T6983] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1459.256860][ T6983] usb 9-1: Using ep0 maxpacket: 16
[ 1459.296367][ T6983] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1459.306800][ T6983] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1459.317289][ T6983] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1459.334975][ T6983] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1459.655639][ T6983] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1459.665361][ T6983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.674038][ T6983] usb 9-1: Product: syz
[ 1459.678424][ T6983] usb 9-1: Manufacturer: syz
[ 1459.683550][ T6983] usb 9-1: SerialNumber: syz
[ 1459.973686][ T6983] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[ 1461.827696][ T6983] usb 9-1: USB disconnect, device number 6
[ 1461.853374][ T6983] usblp0: removed
[ 1462.239168][T18757] overlayfs: failed to resolve './file1': -2
[ 1468.582257][T16730] Bluetooth: hci4: Received unexpected HCI Event 0x00
[ 1469.354005][T18785] loop3: detected capacity change from 0 to 512
[ 1469.485433][T18785] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1469.543076][T18785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[ 1469.656798][T18785] System zones: 1-12
[ 1469.736806][T18785] EXT4-fs (loop3): 1 truncate cleaned up
[ 1469.745573][T18785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1470.164609][   T30] audit: type=1800 audit(2000000545.908:1115): pid=18785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4414" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 1470.728049][T18793] loop3: detected capacity change from 512 to 0
[ 1470.741777][T18785] EXT4-fs warning (device loop3): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 38)
[ 1470.753500][T18785] Buffer I/O error on device loop3, logical block 38
[ 1470.760378][T18785] Buffer I/O error on device loop3, logical block 39
[ 1470.767341][T18785] Buffer I/O error on device loop3, logical block 40
[ 1470.774228][T18785] Buffer I/O error on device loop3, logical block 41
[ 1470.781516][T18785] Buffer I/O error on device loop3, logical block 42
[ 1470.788382][T18785] Buffer I/O error on device loop3, logical block 43
[ 1470.795254][T18785] Buffer I/O error on device loop3, logical block 44
[ 1470.802127][T18785] Buffer I/O error on device loop3, logical block 45
[ 1470.809439][T18785] Buffer I/O error on device loop3, logical block 46
[ 1470.816312][T18785] Buffer I/O error on device loop3, logical block 47
[ 1470.896335][   T30] audit: type=1800 audit(2000000546.675:1116): pid=18794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4414" name="file1" dev="loop3" ino=15 res=0 errno=0
[ 1471.525509][T18151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1471.614190][T18151] buffer_io_error: 61 callbacks suppressed
[ 1471.614283][T18151] Buffer I/O error on dev loop3, logical block 1, lost sync page write
[ 1471.629290][T18151] EXT4-fs (loop3): I/O error while writing superblock
[ 1471.927694][T16730] Bluetooth: hci4: Received unexpected HCI Event 0x00
[ 1472.208170][ T4329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1472.484781][ T4329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1472.732351][T18822] loop5: detected capacity change from 0 to 64
[ 1472.741425][ T4329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1472.986423][ T4329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1473.378333][ T4329] bridge_slave_1: left allmulticast mode
[ 1473.384250][ T4329] bridge_slave_1: left promiscuous mode
[ 1473.391208][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1473.453563][ T4329] bridge_slave_0: left allmulticast mode
[ 1473.459454][ T4329] bridge_slave_0: left promiscuous mode
[ 1473.466852][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1474.046792][ T4329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1474.070516][ T4329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1474.094116][ T4329] bond0 (unregistering): Released all slaves
[ 1474.712366][ T4329] hsr_slave_0: left promiscuous mode
[ 1474.734437][ T4329] hsr_slave_1: left promiscuous mode
[ 1474.742956][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1474.751271][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1474.807118][ T4329] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1474.818995][ T4329] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1474.907567][ T4329] veth1_macvtap: left promiscuous mode
[ 1474.913527][ T4329] veth0_macvtap: left promiscuous mode
[ 1474.919744][ T4329] veth1_vlan: left promiscuous mode
[ 1474.925318][ T4329] veth0_vlan: left promiscuous mode
[ 1475.190711][T11028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1475.204460][T11028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1475.363389][T11028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1475.378694][T11028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1475.391293][T11028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1475.755291][ T4329] team0 (unregistering): Port device team_slave_1 removed
[ 1475.851093][ T4329] team0 (unregistering): Port device team_slave_0 removed
[ 1476.049229][ T6983] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[ 1476.286709][ T6983] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1476.298143][ T6983] usb 5-1: config 0 has no interface number 0
[ 1476.305564][ T6983] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1476.317209][ T6983] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1476.328478][ T6983] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1476.338020][ T6983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1476.383798][ T6983] usb 5-1: config 0 descriptor??
[ 1476.392872][T18843] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1476.472198][ T6983] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1476.692496][ T6983] usb 5-1: USB disconnect, device number 20
[ 1477.622828][T11028] Bluetooth: hci3: command tx timeout
[ 1477.696366][T18860] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4444'.
[ 1477.705788][T18860] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4444'.
[ 1478.267289][T17509] IPVS: starting estimator thread 0...
[ 1478.433768][T18867] IPVS: using max 192 ests per chain, 9600 per kthread
[ 1480.594413][T16730] Bluetooth: hci4: command 0x0406 tx timeout
[ 1480.600675][T16730] Bluetooth: hci3: command tx timeout
[ 1482.193523][T18837] chnl_net:caif_netlink_parms(): no params data found
[ 1482.442991][T18895] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4455'.
[ 1482.456478][T18895] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4455'.
[ 1482.840503][T11028] Bluetooth: hci3: command tx timeout
[ 1484.782599][T18837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1484.793608][T18837] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1484.801634][T18837] bridge_slave_0: entered allmulticast mode
[ 1484.814680][T18837] bridge_slave_0: entered promiscuous mode
[ 1484.862513][T18837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1484.872735][T18837] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1484.880840][T18837] bridge_slave_1: entered allmulticast mode
[ 1484.890819][T18837] bridge_slave_1: entered promiscuous mode
[ 1485.083803][T11028] Bluetooth: hci3: command tx timeout
[ 1485.161172][T18837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1485.322121][T18837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1486.545883][T18926] syzkaller0: entered promiscuous mode
[ 1486.554154][T18926] syzkaller0: entered allmulticast mode
[ 1486.604071][T18930] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4467'.
[ 1486.617857][T18930] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4467'.
[ 1487.040860][T18837] team0: Port device team_slave_0 added
[ 1487.135395][T18837] team0: Port device team_slave_1 added
[ 1487.528017][T18837] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1487.535628][T18837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1487.563472][T18837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1487.679334][T18837] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1487.686783][T18837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1487.713865][T18837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1488.192243][T18837] hsr_slave_0: entered promiscuous mode
[ 1488.203145][T18837] hsr_slave_1: entered promiscuous mode
[ 1488.212323][T18837] debugfs: 'hsr0' already exists in 'hsr'
[ 1488.218562][T18837] Cannot create hsr debugfs directory
[ 1488.887972][T18976] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4478'.
[ 1488.898115][T18976] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4478'.
[ 1490.087674][T18837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1490.136205][T18837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1490.191147][T18837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1490.244692][T18837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1490.308116][T18991] binder_alloc: 18990: binder_alloc_buf, no vma
[ 1490.899694][T19001] syzkaller1: entered promiscuous mode
[ 1490.905421][T19001] syzkaller1: entered allmulticast mode
[ 1491.460875][T18837] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1491.580833][T18837] 8021q: adding VLAN 0 to HW filter on device team0
[ 1491.655343][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1491.663047][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1491.801034][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1491.808757][ T4329] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1491.853841][T19014] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4488'.
[ 1491.863407][T19014] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4488'.
[ 1492.038013][T19016] binder: 19015:19016 ioctl c0306201 200000000240 returned -14
[ 1493.216980][T19033] binder_alloc: 19031: binder_alloc_buf, no vma
[ 1494.078634][T18837] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1494.252579][T19040] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4497'.
[ 1494.262174][T19040] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4497'.
[ 1494.271547][T19040] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4497'.
[ 1494.281123][T19040] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4497'.
[ 1494.659740][T18837] veth0_vlan: entered promiscuous mode
[ 1494.943795][T18837] veth1_vlan: entered promiscuous mode
[ 1495.326998][T18837] veth0_macvtap: entered promiscuous mode
[ 1495.381316][T18837] veth1_macvtap: entered promiscuous mode
[ 1495.573500][T18837] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1495.691200][T18837] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1495.798625][T16940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1495.831680][T16940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1495.903846][T16940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1495.930634][T16940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1496.011415][T17509] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[ 1496.024678][T19055] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4501'.
[ 1496.038005][T19055] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4501'.
[ 1496.199643][T17509] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1496.211840][T17509] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1496.226057][T17509] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64
[ 1496.334682][T17509] usb 9-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 1496.344508][T17509] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1496.353579][T17509] usb 9-1: Product: syz
[ 1496.357875][T17509] usb 9-1: Manufacturer: syz
[ 1496.362834][T17509] usb 9-1: SerialNumber: syz
[ 1496.444048][T17509] usb 9-1: config 0 descriptor??
[ 1496.452769][T19052] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1496.507174][T17509] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input24
[ 1496.526873][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.534915][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.546655][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.555470][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.563471][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.571343][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.579932][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.587904][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.596561][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.604343][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.612647][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.627965][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.636049][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.649452][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.659428][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.667953][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.675753][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.683690][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.691436][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.701294][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.709545][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.717479][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.725395][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.733054][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.740689][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.748609][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.756318][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.769517][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.778508][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.786409][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.794272][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.803865][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.811976][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.819743][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.827632][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.835358][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.843158][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.850888][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.858918][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.867141][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.877295][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.886390][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.894290][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.901978][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.909642][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.917352][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.925036][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.932689][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.940328][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.948015][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.955918][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.963749][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.971513][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.981346][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.989758][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1496.997550][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.005358][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.013951][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.021671][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.029442][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.037151][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.044980][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.052841][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.060750][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.068423][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.076009][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.083702][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.093902][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.102229][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.110343][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.118863][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.126532][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.134221][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.141972][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.149526][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.157115][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.164730][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.172292][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.179922][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.187507][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.195253][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.205437][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.214005][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.221585][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.229167][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.237232][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.244875][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.252453][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.260278][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.267872][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.275501][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.283248][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.290823][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.299090][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.306797][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.315885][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.324516][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.332074][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.339825][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.347391][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.354938][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.362484][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.370086][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.378072][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.385807][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.393477][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.401022][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.408567][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.416238][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.425250][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.433876][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.441473][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.449086][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.456650][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.464314][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.472172][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.479736][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.487304][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.494997][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.502550][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.510146][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.517700][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.525251][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.534443][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.542618][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.551435][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.559790][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.567405][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.575107][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.582909][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.590780][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.598446][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.606053][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.613625][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.621188][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.628760][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.638690][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.647090][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.654881][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.662715][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.670292][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.678095][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.685683][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.693276][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.700880][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.708811][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.716471][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.724585][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.732464][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.740029][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.750421][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.758748][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.766362][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.773972][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.781579][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.789324][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.797359][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.805046][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.812729][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.820580][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.828508][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.838023][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.845757][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.853778][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.863835][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.873165][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.881207][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.888930][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.896979][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.904792][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.912464][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.920046][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.927689][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.935319][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.943168][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.950787][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.958415][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.968813][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.977165][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.984726][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1497.992519][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.000172][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.008391][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.015959][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.023519][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.031171][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.038749][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.046355][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.053949][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.061555][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.069699][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.079556][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.087672][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.095625][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.103953][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.111513][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.119042][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.126659][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.134326][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.141986][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.150661][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.158516][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.166098][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.173722][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.181293][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.191774][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.200321][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.207904][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.215533][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.223080][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.230673][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.238293][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.246433][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.255279][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.262851][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.270448][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.278033][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.285718][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.295703][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.304255][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.312467][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.320472][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.328094][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.335885][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.343915][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.351513][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.359409][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.367022][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.374599][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.382149][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.390056][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.398300][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.408965][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.418368][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.426161][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.433905][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.442021][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.449852][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.458282][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.466050][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.474173][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.482046][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.490047][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.497781][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.505850][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.516241][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.524930][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.541459][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.549341][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.557314][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.566062][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.573823][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.581831][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.589973][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.597620][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.605844][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.613477][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.623806][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.632638][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.640602][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.648329][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.656414][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.665316][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.673807][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.682661][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.690663][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.698342][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.705916][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.713577][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.721244][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.729087][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.739427][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.747886][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.755560][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.763619][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.771394][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.779098][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.786817][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.794473][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.802267][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.809808][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.817543][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.825115][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.832893][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.843774][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.851649][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.859400][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.867285][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.874882][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.882640][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.890257][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.897827][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.905907][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.913637][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.922933][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.930819][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.938376][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.945952][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.955779][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.964204][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.972039][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.979584][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.987525][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1498.995307][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.002863][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.010580][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.018253][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.025882][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.033593][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.041351][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.048943][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.056582][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.066388][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.074152][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.081694][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.089655][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.097368][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.105177][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.112949][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.120571][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.128220][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.136075][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.143766][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.151493][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.159430][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.167308][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.177118][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.185328][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.192881][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.200448][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.208067][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.215720][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.223365][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.231335][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.239253][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.247196][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.254959][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.260366][ T5143] usb 9-1: control msg error: -71
[ 1499.262662][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.274955][    C1] usb 9-1: pegasus_irq - usb_submit_urb failed with result -1
[ 1499.313997][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.321713][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.329795][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.337568][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.345585][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.353308][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.361134][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.369207][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.386111][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.401115][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.411064][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.419247][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.426876][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.434657][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.442430][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.450065][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.457708][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.465429][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.473228][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.480778][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.488508][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.496192][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.506106][ T5143] usb 9-1: control msg error: -71
[ 1499.508403][    C0] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.518731][    C0] usb 9-1: pegasus_irq - usb_submit_urb failed with result -1
[ 1499.613383][    C1] usb 9-1: pegasus_irq - nonzero urb status received: -71
[ 1499.620376][T17509] usb 9-1: USB disconnect, device number 7
[ 1499.620746][    C1] usb 9-1: pegasus_irq - usb_submit_urb failed with result -19
[ 1499.634749][ T5143] usb 9-1: control msg error: -19
[ 1500.566370][T19068] binder_alloc: 19067: binder_alloc_buf, no vma
[ 1503.269420][T19096] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4511'.
[ 1503.279045][T19096] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4511'.
[ 1503.834537][ T6984] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1504.429463][ T6984] usb 1-1: Using ep0 maxpacket: 16
[ 1504.529176][ T6984] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1504.542059][ T6984] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1504.553127][ T6984] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1504.566502][ T6984] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1504.890545][ T6984] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1504.900150][ T6984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1504.908491][ T6984] usb 1-1: Product: syz
[ 1504.912789][ T6984] usb 1-1: Manufacturer: syz
[ 1504.917613][ T6984] usb 1-1: SerialNumber: syz
[ 1505.266082][ T6984] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[ 1505.481263][ T6984] usb 1-1: USB disconnect, device number 46
[ 1505.511162][ T6984] usblp0: removed
[ 1506.205738][T11028] Bluetooth: hci2: unexpected event for opcode 0x1408
[ 1506.234875][T16939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1506.243107][T16939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1506.308823][ T8170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1506.317111][ T8170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1506.710633][T19120] fuse: Bad value for 'fd'
[ 1507.993907][T19134] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4522'.
[ 1508.004390][T19134] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4522'.
[ 1508.987988][T17509] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[ 1509.099884][T19148] netlink: 'syz.8.4528': attribute type 4 has an invalid length.
[ 1509.196292][T17509] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1509.208531][T17509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1509.219945][T17509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64
[ 1509.305158][T17509] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 1509.315085][T17509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1509.323356][T17509] usb 5-1: Product: syz
[ 1509.327650][T17509] usb 5-1: Manufacturer: syz
[ 1509.332568][T17509] usb 5-1: SerialNumber: syz
[ 1509.395959][T17509] usb 5-1: config 0 descriptor??
[ 1509.404775][T19146] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1509.437037][T17509] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input25
[ 1509.450919][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.458906][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.472573][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.480698][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.488427][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.496193][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.504125][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.511894][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.519648][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.527437][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.535284][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.546700][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.554485][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.562275][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.573593][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.582017][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.589673][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.597357][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.605048][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.614110][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.622633][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.630456][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.638152][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.645902][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.654028][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.661805][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.669535][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.677292][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.687723][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.696690][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.704471][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.712189][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.719986][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.727777][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.736240][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.743981][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.751847][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.759753][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.767546][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.775351][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.783114][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.794128][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.803595][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.811376][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.819115][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.827057][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.837363][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.845166][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.852904][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.860987][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.870728][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.882576][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.890856][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.905218][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.914376][ T5143] usb 5-1: control msg error: -71
[ 1509.921248][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.921819][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.929768][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.937472][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.945246][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.953081][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.960821][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.968567][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.976366][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.984142][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1509.993073][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.000734][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.008525][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.030256][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.040061][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.048277][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.056020][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.063686][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.071473][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.079244][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.086997][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.095063][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.102847][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.110604][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.118270][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.131626][    C1] usb 5-1: pegasus_irq - urb shutting down with status: -2
[ 1510.191143][T19152] fuse: Bad value for 'fd'
[ 1510.482015][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.490644][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.499096][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.507486][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.515257][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.523352][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.531791][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.539968][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.548134][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.560496][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.570246][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.578752][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.587405][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.595843][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.603160][ T5143] usb 5-1: control msg error: -71
[ 1510.604020][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.615806][    C0] usb 5-1: pegasus_irq - usb_submit_urb failed with result -1
[ 1510.639104][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1510.644732][T17509] usb 5-1: USB disconnect, device number 21
[ 1510.646466][    C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19
[ 1510.660733][ T5143] usb 5-1: control msg error: -19
[ 1511.964304][T19165] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4535'.
[ 1511.975330][T19165] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4535'.
[ 1513.584408][ T6983] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1514.290500][ T6983] usb 9-1: Using ep0 maxpacket: 16
[ 1515.099724][ T6983] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1515.111736][ T6983] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1515.237947][ T6983] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1515.247586][ T6983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1515.256109][ T6983] usb 9-1: Product: syz
[ 1515.260525][ T6983] usb 9-1: Manufacturer: syz
[ 1515.269740][ T6983] usb 9-1: SerialNumber: syz
[ 1515.305202][ T6983] usb 9-1: config 0 descriptor??
[ 1515.333006][ T6983] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1515.340336][T19178] fuse: Bad value for 'fd'
[ 1515.342914][ T6983] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class)
[ 1516.514801][ T6983] em28xx 9-1:0.0: unknown em28xx chip ID (0)
[ 1516.522494][ T6983] em28xx 9-1:0.0: Config register raw data: 0xfffffffb
[ 1516.582995][ T6983] em28xx 9-1:0.0: AC97 chip type couldn't be determined
[ 1516.590427][ T6983] em28xx 9-1:0.0: No AC97 audio processor
[ 1517.350784][ T6983] usb 9-1: USB disconnect, device number 8
[ 1517.358843][ T6983] em28xx 9-1:0.0: Disconnecting em28xx
[ 1517.413434][ T6983] em28xx 9-1:0.0: Freeing device
[ 1517.820879][T17509] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[ 1518.056444][T17509] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1518.068755][T17509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1518.080742][T17509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64
[ 1518.308406][T17509] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 1518.318012][T17509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1518.332133][T17509] usb 5-1: Product: syz
[ 1518.338511][T17509] usb 5-1: Manufacturer: syz
[ 1518.343502][T17509] usb 5-1: SerialNumber: syz
[ 1518.413632][T17509] usb 5-1: config 0 descriptor??
[ 1518.422928][T19185] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1518.477225][T17509] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26
[ 1518.516574][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.525241][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.532937][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.541233][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.552973][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.563267][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.571112][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.579342][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.588285][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.596290][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.604210][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.612021][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.621710][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.629484][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.637493][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.645935][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.653846][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.663989][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.672989][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.680745][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.688938][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.696980][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.705155][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.713022][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.721489][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.729602][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.737530][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.745841][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.754702][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.762981][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.773787][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.782950][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.791158][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.798976][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.806966][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.815476][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.823463][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.831393][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.839474][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.847793][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.856333][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.864239][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.872967][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.884510][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.893571][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.901617][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.909813][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.917539][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.925759][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.935350][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.943721][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.952034][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.959970][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.968059][ T5143] usb 5-1: control msg error: -71
[ 1518.973618][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.981662][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1518.989498][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.002416][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.010579][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.018520][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.026319][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.033995][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.042181][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.049977][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.057786][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.065458][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.073406][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.081192][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.088849][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.089502][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.097125][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.117377][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.125200][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.133084][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.140755][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.148560][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.156343][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.164009][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.172744][    C1] usb 5-1: pegasus_irq - urb shutting down with status: -2
[ 1519.335047][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.343604][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.351560][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.360158][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.368242][ T5143] usb 5-1: control msg error: -71
[ 1519.373727][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.376174][T17509] usb 5-1: USB disconnect, device number 22
[ 1519.381546][    C1] usb 5-1: pegasus_irq - nonzero urb status received: -71
[ 1519.394822][    C1] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19
[ 1519.517721][ T9486] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1519.548630][T19204] loop2: detected capacity change from 0 to 16
[ 1519.603785][T19204] erofs (device loop2): mounted with root inode @ nid 36.
[ 1519.717651][ T9486] usb 1-1: Using ep0 maxpacket: 32
[ 1519.740257][ T9486] usb 1-1: config 0 has an invalid interface number: 66 but max is 0
[ 1519.748965][ T9486] usb 1-1: config 0 has no interface number 0
[ 1519.798810][ T9486] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1519.808379][ T9486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1519.816974][ T9486] usb 1-1: Product: syz
[ 1519.821364][ T9486] usb 1-1: Manufacturer: syz
[ 1519.826215][ T9486] usb 1-1: SerialNumber: syz
[ 1519.914374][ T9486] usb 1-1: config 0 descriptor??
[ 1519.955926][ T9486] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1519.964243][ T9486] dvb-usb: bulk message failed: -22 (2/0)
[ 1519.997701][ T9486] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1520.010766][ T9486] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1520.020759][ T9486] usb 1-1: media controller created
[ 1520.076580][ T9486] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1520.096750][T19210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4557'.
[ 1520.223621][ T6983] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1520.341316][ T9486] cxusb: set interface failed
[ 1520.346236][ T9486] dvb-usb: bulk message failed: -22 (1/0)
[ 1520.414359][ T6983] usb 5-1: Using ep0 maxpacket: 16
[ 1520.456885][ T6983] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1520.469375][ T6983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1520.536956][ T6983] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1520.546735][ T6983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.556573][ T6983] usb 5-1: Product: syz
[ 1520.560998][ T6983] usb 5-1: Manufacturer: syz
[ 1520.566966][ T6983] usb 5-1: SerialNumber: syz
[ 1520.610944][ T6983] usb 5-1: config 0 descriptor??
[ 1520.647257][ T9486] DVB: Unable to find symbol lgdt330x_attach()
[ 1520.647434][ T6983] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1520.653965][ T9486] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1520.663376][ T6983] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 1520.976303][T19218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4560'.
[ 1520.986113][T19218] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4560'.
[ 1520.995790][T19218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4560'.
[ 1521.005540][T19218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4560'.
[ 1521.184982][ T9486] rc_core: IR keymap rc-dvico-portable not found
[ 1521.192543][ T9486] Registered IR keymap rc-empty
[ 1521.200246][ T9486] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[ 1521.213120][ T9486] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input27
[ 1521.306121][ T6983] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1521.336615][ T6983] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 1521.356650][ T6983] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[ 1521.363858][ T6983] em28xx 5-1:0.0: No AC97 audio processor
[ 1521.404401][ T9486] dvb-usb: schedule remote query interval to 100 msecs.
[ 1521.412648][ T9486] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1521.452752][ T9486] usb 1-1: USB disconnect, device number 47
[ 1521.741828][ T9486] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1522.019605][T19198] loop8: detected capacity change from 0 to 32768
[ 1522.239163][T19198] JBD2: journal reset failed
[ 1522.244493][T19198] (syz.8.4551,19198,0):ocfs2_journal_load:1167 ERROR: Failed to load journal!
[ 1522.253978][T19198] (syz.8.4551,19198,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4
[ 1522.659829][T19234] loop2: detected capacity change from 0 to 512
[ 1522.731461][T19234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1522.933983][T18837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1523.288634][ T6983] usb 5-1: USB disconnect, device number 23
[ 1523.298171][ T6983] em28xx 5-1:0.0: Disconnecting em28xx
[ 1523.350321][ T6983] em28xx 5-1:0.0: Freeing device
[ 1524.031732][T19250] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4573'.
[ 1524.042507][T19250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4573'.
[ 1524.052916][T19250] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4573'.
[ 1524.062506][T19250] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4573'.
[ 1524.146506][ T6983] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1524.194330][T19253] loop8: detected capacity change from 0 to 16
[ 1524.252008][T19253] erofs (device loop8): mounted with root inode @ nid 36.
[ 1524.334796][ T6983] usb 3-1: Using ep0 maxpacket: 32
[ 1524.359483][ T6983] usb 3-1: config 0 has an invalid interface number: 66 but max is 0
[ 1524.368479][ T6983] usb 3-1: config 0 has no interface number 0
[ 1524.411050][ T6983] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1524.420704][ T6983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1524.429047][ T6983] usb 3-1: Product: syz
[ 1524.433432][ T6983] usb 3-1: Manufacturer: syz
[ 1524.438824][ T6983] usb 3-1: SerialNumber: syz
[ 1524.523009][ T6983] usb 3-1: config 0 descriptor??
[ 1524.555531][ T6983] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1524.563447][ T6983] dvb-usb: bulk message failed: -22 (2/0)
[ 1524.618417][ T6983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1524.655128][ T6983] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1524.664253][ T6983] usb 3-1: media controller created
[ 1524.741907][ T6983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1525.055773][ T6983] cxusb: set interface failed
[ 1525.060679][ T6983] dvb-usb: bulk message failed: -22 (1/0)
[ 1525.457334][ T6983] DVB: Unable to find symbol lgdt330x_attach()
[ 1525.464266][ T6983] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1525.479748][T19266] loop4: detected capacity change from 0 to 512
[ 1525.588167][T19266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1525.829962][T17108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1526.446376][ T6983] rc_core: IR keymap rc-dvico-portable not found
[ 1526.452969][ T6983] Registered IR keymap rc-empty
[ 1526.459916][ T6983] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[ 1526.472403][ T6983] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input28
[ 1526.574722][ T6983] dvb-usb: schedule remote query interval to 100 msecs.
[ 1526.582095][ T6983] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1526.659873][ T6983] usb 3-1: USB disconnect, device number 29
[ 1527.019769][ T6983] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1527.429588][ T6983] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1527.611899][ T6983] usb 3-1: Using ep0 maxpacket: 16
[ 1527.637247][T19284] loop5: detected capacity change from 0 to 16
[ 1527.654734][ T6983] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1527.667332][ T6983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1527.691435][T19284] erofs (device loop5): mounted with root inode @ nid 36.
[ 1527.758955][ T6983] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1527.768866][ T6983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.777397][ T6983] usb 3-1: Product: syz
[ 1527.781888][ T6983] usb 3-1: Manufacturer: syz
[ 1527.786711][ T6983] usb 3-1: SerialNumber: syz
[ 1527.869183][ T6983] usb 3-1: config 0 descriptor??
[ 1527.907820][ T6983] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1527.917599][ T6983] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 1528.230200][T19289] loop8: detected capacity change from 0 to 512
[ 1528.280579][T19289] EXT4-fs: Ignoring removed nobh option
[ 1528.348604][T19289] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.4588: iget: bad i_size value: 38620345925642
[ 1528.451973][T19289] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.4588: couldn't read orphan inode 15 (err -117)
[ 1528.496403][T19289] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1528.606922][ T6983] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1528.637109][ T6983] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 1530.428041][ T6983] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[ 1530.435376][ T6983] em28xx 3-1:0.0: No AC97 audio processor
[ 1530.988774][T17464] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1532.111505][ T6983] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1532.410439][ T6983] usb 9-1: Using ep0 maxpacket: 32
[ 1532.504823][ T6983] usb 9-1: config 0 has an invalid interface number: 66 but max is 0
[ 1532.513480][ T6983] usb 9-1: config 0 has no interface number 0
[ 1532.582007][T12279] usb 3-1: USB disconnect, device number 30
[ 1532.589979][T12279] em28xx 3-1:0.0: Disconnecting em28xx
[ 1532.689044][ T6983] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1532.698893][ T6983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1532.707164][ T6983] usb 9-1: Product: syz
[ 1532.711841][ T6983] usb 9-1: Manufacturer: syz
[ 1532.716762][ T6983] usb 9-1: SerialNumber: syz
[ 1532.742075][T12279] em28xx 3-1:0.0: Freeing device
[ 1532.934457][ T6983] usb 9-1: config 0 descriptor??
[ 1532.953282][ T6983] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1532.961347][ T6983] dvb-usb: bulk message failed: -22 (2/0)
[ 1532.972806][ T6983] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1532.988925][ T6983] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1533.002488][ T6983] usb 9-1: media controller created
[ 1533.059316][ T6983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1533.213017][T19306] loop2: detected capacity change from 0 to 512
[ 1533.271245][T19306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1533.289730][ T6983] cxusb: set interface failed
[ 1533.294619][ T6983] dvb-usb: bulk message failed: -22 (1/0)
[ 1534.467883][ T6983] DVB: Unable to find symbol lgdt330x_attach()
[ 1534.474381][ T6983] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1534.900030][T18837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1535.029383][ T6983] rc_core: IR keymap rc-dvico-portable not found
[ 1535.035955][ T6983] Registered IR keymap rc-empty
[ 1535.042648][ T6983] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0
[ 1535.055218][ T6983] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input29
[ 1535.105746][ T6983] dvb-usb: schedule remote query interval to 100 msecs.
[ 1535.113101][ T6983] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1535.129492][ T6983] usb 9-1: USB disconnect, device number 9
[ 1535.503733][ T6983] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1536.454541][T19325] loop8: detected capacity change from 0 to 16
[ 1536.461722][T19327] syzkaller0: entered promiscuous mode
[ 1536.467445][T19327] syzkaller0: entered allmulticast mode
[ 1536.539564][T19325] erofs (device loop8): mounted with root inode @ nid 36.
[ 1536.563263][T19327] tipc: Started in network mode
[ 1536.568944][T19327] tipc: Node identity 0642414f85a4, cluster identity 4711
[ 1536.577686][T19327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1536.701059][T19327] tipc: Resetting bearer <eth:syzkaller0>
[ 1536.793331][T19326] tipc: Resetting bearer <eth:syzkaller0>
[ 1536.872231][T19326] tipc: Disabling bearer <eth:syzkaller0>
[ 1537.254762][T19332] loop4: detected capacity change from 0 to 512
[ 1537.296215][T19332] EXT4-fs: Ignoring removed nobh option
[ 1537.370657][T19332] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4600: iget: bad i_size value: 38620345925642
[ 1537.509636][T19332] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4600: couldn't read orphan inode 15 (err -117)
[ 1537.570174][T19332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1537.745269][T19343] binder: 19342:19343 ioctl c0306201 0 returned -14
[ 1537.853989][T17108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1538.779477][T19353] loop2: detected capacity change from 0 to 4096
[ 1538.940623][T19360] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1539.147825][T19363] overlayfs: failed to resolve './file0': -2
[ 1541.217278][T19377] loop5: detected capacity change from 0 to 512
[ 1544.939613][T12279] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1545.278892][T19390] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4621'.
[ 1545.609364][T12279] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1545.622697][T12279] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1545.633438][T12279] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1545.642882][T12279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1545.738064][T19385] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1545.822197][T12279] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1545.850786][T19396] overlayfs: failed to resolve './file0': -2
[ 1546.395019][T12279] usb 5-1: USB disconnect, device number 24
[ 1546.924169][T19410] loop5: detected capacity change from 0 to 512
[ 1546.943484][T19410] EXT4-fs: Ignoring removed nobh option
[ 1546.977409][T19410] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4630: iget: bad i_size value: 38620345925642
[ 1547.019009][T19410] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4630: couldn't read orphan inode 15 (err -117)
[ 1547.083219][T19410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1547.102125][T19414] loop8: detected capacity change from 0 to 512
[ 1547.116631][T19414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1547.191550][T19414] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.4631: iget: bad i_size value: 38620345925642
[ 1547.219755][T19414] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.4631: couldn't read orphan inode 15 (err -117)
[ 1547.247881][T19414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1547.261883][T17892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1547.658266][T17464] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1547.872601][T19424] overlayfs: failed to resolve './file0': -2
[ 1548.124234][T19429] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4635'.
[ 1550.814239][T19446] loop2: detected capacity change from 0 to 512
[ 1550.904941][T19446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1551.182238][T19446] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.4645: iget: bad i_size value: 38620345925642
[ 1551.252946][T19446] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4645: couldn't read orphan inode 15 (err -117)
[ 1551.346222][T19446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1551.648434][T18837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1552.025966][T19461] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4651'.
[ 1552.880030][T19474] syzkaller0: entered promiscuous mode
[ 1552.887583][T19474] syzkaller0: entered allmulticast mode
[ 1552.950288][T19474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1552.983038][T19474] tipc: Resetting bearer <eth:syzkaller0>
[ 1553.044962][T19473] tipc: Resetting bearer <eth:syzkaller0>
[ 1553.072248][T19473] tipc: Disabling bearer <eth:syzkaller0>
[ 1553.669850][T19484] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4660'.
[ 1554.898978][T19499] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4664'.
[ 1555.737923][T12279] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 1555.940198][T12279] usb 6-1: Using ep0 maxpacket: 32
[ 1555.992097][T12279] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.002996][T12279] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1556.015371][T12279] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1556.027102][T12279] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1556.156861][T12279] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1556.166662][T12279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1556.175384][T12279] usb 6-1: Product: syz
[ 1556.180402][T12279] usb 6-1: Manufacturer: syz
[ 1556.185301][T12279] usb 6-1: SerialNumber: syz
[ 1556.216903][    C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1556.227622][T12279] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input30
[ 1556.453437][T12279] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1556.462141][T12279]  (id 0x00)
[ 1556.637186][T19515] syzkaller0: entered promiscuous mode
[ 1556.648853][T19515] syzkaller0: entered allmulticast mode
[ 1556.768666][T19515] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1556.835535][T19515] tipc: Resetting bearer <eth:syzkaller0>
[ 1556.850206][T12279] rc_core: IR keymap rc-imon-pad not found
[ 1556.856344][T12279] Registered IR keymap rc-empty
[ 1556.867294][T12279] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1556.879636][T12279] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1556.925559][T19513] tipc: Resetting bearer <eth:syzkaller0>
[ 1556.961184][T19513] tipc: Disabling bearer <eth:syzkaller0>
[ 1556.989217][T12279] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0
[ 1557.002724][T12279] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input31
[ 1557.064116][T12279] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:38> initialized
[ 1557.078756][T12279] usb 6-1: USB disconnect, device number 38
[ 1557.297776][ T6983] IPVS: starting estimator thread 0...
[ 1557.437192][T19523] IPVS: using max 240 ests per chain, 12000 per kthread
[ 1557.555608][T19525] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4675'.
[ 1557.565144][T19525] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4675'.
[ 1558.090551][T19531] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4677'.
[ 1558.298881][T19535] ip6tnl1: entered allmulticast mode
[ 1559.354381][T19551] syzkaller0: entered promiscuous mode
[ 1559.360238][T19551] syzkaller0: entered allmulticast mode
[ 1559.440058][T19551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1559.485926][T19551] tipc: Resetting bearer <eth:syzkaller0>
[ 1559.560400][T19550] tipc: Resetting bearer <eth:syzkaller0>
[ 1559.578748][T19550] tipc: Disabling bearer <eth:syzkaller0>
[ 1559.614503][T19556] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[ 1559.626942][T19556] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1559.801354][T19561] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4688'.
[ 1559.811427][T19561] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4688'.
[ 1560.240930][T19569] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4691'.
[ 1561.712085][T19582] loop5: detected capacity change from 0 to 512
[ 1561.812570][T19582] EXT4-fs: Ignoring removed nobh option
[ 1561.953135][T19582] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4697: iget: bad i_size value: 38620345925642
[ 1562.040272][T19582] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4697: couldn't read orphan inode 15 (err -117)
[ 1562.111487][T19582] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1563.135993][T19586] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1563.776325][T19600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4704'.
[ 1563.785597][T19600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4704'.
[ 1564.404704][T19611] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4707'.
[ 1565.755324][T19632] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1566.089482][T19630] loop2: detected capacity change from 0 to 4096
[ 1566.307291][T19640] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1566.903314][T19649] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4721'.
[ 1567.771777][T19659] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[ 1567.783826][T19659] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1567.910674][T19661] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1568.415117][T19669] loop2: detected capacity change from 0 to 64
[ 1569.518975][T19681] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4736'.
[ 1570.497428][T19701] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[ 1570.514306][T19701] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1570.698141][T19704] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1570.921913][T19706] loop2: detected capacity change from 0 to 64
[ 1571.078936][T19708] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4743'.
[ 1571.777262][T17892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1572.247298][T19726] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4750'.
[ 1573.125792][T19743] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1573.817798][T19754] loop5: detected capacity change from 0 to 512
[ 1573.860358][T19754] EXT4-fs: Ignoring removed nobh option
[ 1574.031174][T19754] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4760: iget: bad i_size value: 38620345925642
[ 1574.082629][T19754] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4760: couldn't read orphan inode 15 (err -117)
[ 1574.168773][T19754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1574.239475][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4764'.
[ 1574.997679][T19771] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4766'.
[ 1575.208723][T19777] syzkaller1: entered promiscuous mode
[ 1575.214519][T19777] syzkaller1: entered allmulticast mode
[ 1575.737551][T19783] overlayfs: failed to resolve './file0': -2
[ 1575.763652][T19784] netlink: 'syz.2.4768': attribute type 13 has an invalid length.
[ 1575.829307][T19760] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1576.147107][T19787] overlayfs: overlapping lowerdir path
[ 1576.226020][T19792] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1576.398313][T19784] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1576.408338][T19784] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1576.697790][T19784] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1576.726820][T19784] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1577.575870][  T151] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1577.623596][  T151] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1577.718951][  T151] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1577.768392][  T151] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1578.365338][T19812] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4780'.
[ 1578.898479][T19820] overlayfs: failed to resolve './file0': -2
[ 1578.937959][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4784'.
[ 1579.285907][T19825] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[ 1579.298363][T19825] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1580.821133][T19852] overlayfs: failed to resolve './file0': -2
[ 1580.902705][T12279] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[ 1580.926097][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4798'.
[ 1581.052650][T12279] usb 3-1: device descriptor read/64, error -71
[ 1581.311860][T12279] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[ 1581.469578][T12279] usb 3-1: device descriptor read/64, error -71
[ 1581.474302][T19864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4799'.
[ 1581.618364][T12279] usb usb3-port1: attempt power cycle
[ 1581.769745][T19867] loop8: detected capacity change from 0 to 16
[ 1581.808796][T19867] erofs (device loop8): mounted with root inode @ nid 36.
[ 1582.026289][T12279] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[ 1582.085806][T12279] usb 3-1: device descriptor read/8, error -71
[ 1582.378371][T12279] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[ 1582.418845][T12279] usb 3-1: device descriptor read/8, error -71
[ 1582.426561][T17892] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1582.571538][T12279] usb usb3-port1: unable to enumerate USB device
[ 1582.592465][T19872] syzkaller0: entered promiscuous mode
[ 1582.598193][T19872] syzkaller0: entered allmulticast mode
[ 1583.340973][T19887] overlayfs: failed to resolve './file0': -2
[ 1584.219302][T19902] loop4: detected capacity change from 0 to 512
[ 1584.244386][T19902] EXT4-fs: Ignoring removed nobh option
[ 1584.651821][T19902] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4815: iget: bad i_size value: 38620345925642
[ 1584.734123][T19902] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4815: couldn't read orphan inode 15 (err -117)
[ 1584.786621][T19910] loop2: detected capacity change from 0 to 4096
[ 1584.808902][T19902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1584.834114][T19911] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1586.151852][T19924] overlayfs: failed to resolve './file0': -2
[ 1586.190932][T19926] loop8: detected capacity change from 0 to 64
[ 1588.037724][T19909] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1588.161791][ T9486] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[ 1588.332840][ T9486] usb 3-1: device descriptor read/64, error -71
[ 1588.592648][ T9486] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[ 1588.805684][ T9486] usb 3-1: device descriptor read/64, error -71
[ 1588.887662][T19948] loop5: detected capacity change from 0 to 16
[ 1588.923549][T19948] erofs (device loop5): mounted with root inode @ nid 36.
[ 1588.932220][ T9486] usb usb3-port1: attempt power cycle
[ 1589.150034][T19952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4831'.
[ 1589.338453][ T9486] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[ 1589.394105][ T9486] usb 3-1: device descriptor read/8, error -71
[ 1589.628216][T19959] loop5: detected capacity change from 0 to 64
[ 1589.658376][ T9486] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[ 1589.698509][T19960] overlayfs: failed to resolve './file0': -2
[ 1589.714334][ T9486] usb 3-1: device descriptor read/8, error -71
[ 1589.831910][ T9486] usb usb3-port1: unable to enumerate USB device
[ 1590.055828][T19962] netlink: 'syz.8.4836': attribute type 11 has an invalid length.
[ 1590.064326][T19962] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4836'.
[ 1591.239771][T19981] loop5: detected capacity change from 0 to 16
[ 1591.294823][T19981] erofs (device loop5): mounted with root inode @ nid 36.
[ 1591.632283][T19989] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4844'.
[ 1591.873791][T19995] loop8: detected capacity change from 0 to 64
[ 1592.144090][T19998] overlayfs: failed to resolve './file0': -2
[ 1593.449080][T17108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1593.710326][ T9486] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[ 1593.743606][T20021] loop4: detected capacity change from 0 to 16
[ 1593.799348][T20021] erofs (device loop4): mounted with root inode @ nid 36.
[ 1593.903627][ T9486] usb 9-1: device descriptor read/64, error -71
[ 1594.188409][ T9486] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[ 1594.263728][T20031] syzkaller1: entered promiscuous mode
[ 1594.271895][T20031] syzkaller1: entered allmulticast mode
[ 1594.416411][ T9486] usb 9-1: device descriptor read/64, error -71
[ 1594.574482][ T9486] usb usb9-port1: attempt power cycle
[ 1595.035910][ T9486] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[ 1595.182546][ T9486] usb 9-1: device descriptor read/8, error -71
[ 1595.464475][ T9486] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[ 1595.589770][ T9486] usb 9-1: device descriptor read/8, error -71
[ 1595.721726][ T9486] usb usb9-port1: unable to enumerate USB device
[ 1595.836521][T20040] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1595.877830][T20042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4862'.
[ 1597.025212][T20053] loop8: detected capacity change from 0 to 512
[ 1597.055723][T20053] EXT4-fs: Ignoring removed nobh option
[ 1597.129705][T20053] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.4866: iget: bad i_size value: 38620345925642
[ 1597.180303][T20053] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.4866: couldn't read orphan inode 15 (err -117)
[ 1597.199214][T20053] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1597.441239][ T9486] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1597.656316][ T9486] usb 6-1: Using ep0 maxpacket: 16
[ 1597.684237][ T9486] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1597.701454][ T9486] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1597.824751][ T9486] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1597.835028][ T9486] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1597.843573][ T9486] usb 6-1: Product: syz
[ 1597.848244][ T9486] usb 6-1: Manufacturer: syz
[ 1597.853080][ T9486] usb 6-1: SerialNumber: syz
[ 1597.991381][ T9486] usb 6-1: config 0 descriptor??
[ 1598.088768][ T9486] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1598.098882][ T9486] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1598.719201][ T9486] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1598.733241][ T9486] em28xx 6-1:0.0: Config register raw data: 0x56
[ 1598.959818][ T9486] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[ 1598.967254][ T9486] em28xx 6-1:0.0: No AC97 audio processor
[ 1599.301723][T20085] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1600.743597][T12279] usb 6-1: USB disconnect, device number 39
[ 1600.751853][T12279] em28xx 6-1:0.0: Disconnecting em28xx
[ 1600.838224][T12279] em28xx 6-1:0.0: Freeing device
[ 1601.440502][T12279] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[ 1601.638534][T12279] usb 6-1: device descriptor read/64, error -71
[ 1601.718141][T20061] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1601.932895][T12279] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[ 1602.134512][T12279] usb 6-1: device descriptor read/64, error -71
[ 1602.257822][T12279] usb usb6-port1: attempt power cycle
[ 1602.693073][T12279] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[ 1602.736857][T12279] usb 6-1: device descriptor read/8, error -71
[ 1603.000275][T12279] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[ 1603.056772][T12279] usb 6-1: device descriptor read/8, error -71
[ 1603.184177][T12279] usb usb6-port1: unable to enumerate USB device
[ 1605.106647][T12279] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1605.295750][T12279] usb 6-1: Using ep0 maxpacket: 16
[ 1605.329652][T12279] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1605.342207][T12279] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1605.410279][T12279] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1605.420025][T12279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1605.432750][T12279] usb 6-1: Product: syz
[ 1605.437189][T12279] usb 6-1: Manufacturer: syz
[ 1605.442285][T12279] usb 6-1: SerialNumber: syz
[ 1605.510963][T12279] usb 6-1: config 0 descriptor??
[ 1605.545220][T12279] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1605.554795][T12279] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1606.221078][T12279] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1606.230006][T12279] em28xx 6-1:0.0: Config register raw data: 0x56
[ 1606.394477][T17464] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1606.457479][T12279] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[ 1606.465347][T12279] em28xx 6-1:0.0: No AC97 audio processor
[ 1608.562091][ T6983] usb 6-1: USB disconnect, device number 44
[ 1608.570388][ T6983] em28xx 6-1:0.0: Disconnecting em28xx
[ 1608.664881][ T6983] em28xx 6-1:0.0: Freeing device
[ 1609.186671][T20181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4895'.
[ 1610.039384][T20191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4901'.
[ 1610.100634][T20195] netlink: 'syz.2.4899': attribute type 13 has an invalid length.
[ 1610.439408][T20202] loop8: detected capacity change from 0 to 512
[ 1610.466221][T20202] EXT4-fs: Ignoring removed nobh option
[ 1610.527339][T20202] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.4902: iget: bad i_size value: 38620345925642
[ 1610.547281][T20202] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.4902: couldn't read orphan inode 15 (err -117)
[ 1610.628693][T20202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1611.053163][T16730] Bluetooth: hci3: command 0x0406 tx timeout
[ 1612.664758][T20204] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1613.949617][T20247] netlink: 'syz.5.4916': attribute type 13 has an invalid length.
[ 1614.557922][T20247] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1614.567897][T20247] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1614.985616][T20247] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1615.023371][T20247] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1615.129837][T20264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4919'.
[ 1616.130844][  T151] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1616.169255][  T151] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1616.236476][ T3885] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1616.267874][ T3885] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1617.088983][T20287] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4926'.
[ 1617.690164][ T6983] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1617.892513][ T6983] usb 5-1: device descriptor read/64, error -71
[ 1618.395576][ T6983] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1619.974751][ T6983] usb 5-1: device descriptor read/64, error -71
[ 1620.406597][ T6983] usb usb5-port1: attempt power cycle
[ 1620.768472][ T6983] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1621.113493][ T6983] usb 5-1: device descriptor read/8, error -71
[ 1621.242551][T20307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4932'.
[ 1622.106255][T17464] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1623.226770][ T6983] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1624.360056][ T6983] usb 6-1: device descriptor read/64, error -71
[ 1624.820613][ T6983] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1624.990936][ T6983] usb 6-1: device descriptor read/64, error -71
[ 1625.121748][ T6983] usb usb6-port1: attempt power cycle
[ 1625.525661][ T6983] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1625.615649][ T6983] usb 6-1: device descriptor read/8, error -71
[ 1625.888972][ T6983] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1625.921125][T12279] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1625.936814][ T6983] usb 6-1: device descriptor read/8, error -71
[ 1626.064127][ T6983] usb usb6-port1: unable to enumerate USB device
[ 1626.095072][T12279] usb 3-1: Using ep0 maxpacket: 16
[ 1626.127727][T12279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1626.177651][T12279] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1626.186990][T12279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1626.195461][T12279] usb 3-1: Product: syz
[ 1626.199845][T12279] usb 3-1: Manufacturer: syz
[ 1626.204573][T12279] usb 3-1: SerialNumber: syz
[ 1626.279643][T12279] usb 3-1: config 0 descriptor??
[ 1626.311967][T12279] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1626.321717][T12279] em28xx 3-1:0.0: DVB interface 0 found: bulk
[ 1627.247261][T12279] em28xx 3-1:0.0: chip ID is em2765
[ 1629.058718][T12279] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1629.067364][T12279] em28xx 3-1:0.0: board has no eeprom
[ 1629.161327][T12279] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1629.169446][T12279] em28xx 3-1:0.0: dvb set to bulk mode.
[ 1629.181965][ T6983] em28xx 3-1:0.0: Binding DVB extension
[ 1629.263063][T12279] usb 3-1: USB disconnect, device number 39
[ 1629.272981][T12279] em28xx 3-1:0.0: Disconnecting em28xx
[ 1629.523856][T20383] syzkaller0: entered promiscuous mode
[ 1629.529579][T20383] syzkaller0: entered allmulticast mode
[ 1629.597385][ T6983] em28xx 3-1:0.0: Registering input extension
[ 1629.652336][T12279] em28xx 3-1:0.0: Closing input extension
[ 1629.729536][T12279] em28xx 3-1:0.0: Freeing device
[ 1629.825100][T20389] overlayfs: failed to resolve './file1': -2
[ 1629.840948][T20389] overlayfs: failed to resolve './file1': -2
[ 1630.232420][T20392] tipc: Started in network mode
[ 1630.237761][T20392] tipc: Node identity 6a4a82b2e956, cluster identity 4711
[ 1630.246324][T20392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1630.305629][T20392] syzkaller0: entered promiscuous mode
[ 1630.311361][T20392] syzkaller0: entered allmulticast mode
[ 1630.355927][T20392] tipc: Resetting bearer <eth:syzkaller0>
[ 1630.394622][T20392] tipc: Resetting bearer <eth:syzkaller0>
[ 1630.430067][T20392] tipc: Disabling bearer <eth:syzkaller0>
[ 1630.859952][T12279] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1631.063138][T12279] usb 5-1: device descriptor read/64, error -71
[ 1631.341836][T12279] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1632.966559][T12279] usb 5-1: device descriptor read/64, error -71
[ 1633.448470][T12279] usb usb5-port1: attempt power cycle
[ 1634.112335][T12279] usb usb5-port1: Cannot enable. Maybe the USB cable is bad?
[ 1634.297572][T12279] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1634.368750][T12279] usb 5-1: Using ep0 maxpacket: 16
[ 1634.409785][T12279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1634.522070][T12279] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1634.532102][T12279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1634.540865][T12279] usb 5-1: Product: syz
[ 1634.545294][T12279] usb 5-1: Manufacturer: syz
[ 1634.550603][T12279] usb 5-1: SerialNumber: syz
[ 1634.661599][T12279] usb 5-1: config 0 descriptor??
[ 1634.716763][T12279] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1634.726991][T12279] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1635.352318][T12279] em28xx 5-1:0.0: chip ID is em2765
[ 1635.518418][T20436] syzkaller0: entered promiscuous mode
[ 1635.524552][T20436] syzkaller0: entered allmulticast mode
[ 1636.048708][T12279] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1636.058511][T12279] em28xx 5-1:0.0: board has no eeprom
[ 1636.244831][T12279] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1636.253110][T12279] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1636.262249][ T6983] em28xx 5-1:0.0: Binding DVB extension
[ 1636.398350][T12279] usb 5-1: USB disconnect, device number 32
[ 1636.406387][T12279] em28xx 5-1:0.0: Disconnecting em28xx
[ 1637.972933][ T6983] em28xx 5-1:0.0: Registering input extension
[ 1638.215833][T12279] em28xx 5-1:0.0: Closing input extension
[ 1638.262722][T12279] em28xx 5-1:0.0: Freeing device
[ 1639.490294][T20476] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[ 1639.582495][T20481] syzkaller0: entered promiscuous mode
[ 1639.590269][T20481] syzkaller0: entered allmulticast mode
[ 1639.912907][T12279] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1640.151787][T12279] usb 5-1: Using ep0 maxpacket: 16
[ 1640.259589][T12279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1640.392511][T12279] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1640.402146][T12279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1640.411031][T12279] usb 5-1: Product: syz
[ 1640.415422][T12279] usb 5-1: Manufacturer: syz
[ 1640.420331][T12279] usb 5-1: SerialNumber: syz
[ 1640.638450][T12279] usb 5-1: config 0 descriptor??
[ 1640.718404][T12279] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1640.729079][T12279] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1641.457304][T12279] em28xx 5-1:0.0: chip ID is em2765
[ 1643.766950][T12279] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1643.775412][T12279] em28xx 5-1:0.0: board has no eeprom
[ 1643.881090][T12279] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1643.889337][T12279] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1643.902392][ T6983] em28xx 5-1:0.0: Binding DVB extension
[ 1643.945702][T12279] usb 5-1: USB disconnect, device number 33
[ 1643.953703][T12279] em28xx 5-1:0.0: Disconnecting em28xx
[ 1644.195924][ T6983] em28xx 5-1:0.0: Registering input extension
[ 1644.226445][T12279] em28xx 5-1:0.0: Closing input extension
[ 1644.263015][T12279] em28xx 5-1:0.0: Freeing device
[ 1644.870894][T20519] syzkaller0: entered promiscuous mode
[ 1644.877228][T20519] syzkaller0: entered allmulticast mode
[ 1645.560725][T20530] binder: 20528:20530 ioctl c0306201 200000000240 returned -11
[ 1646.035288][T20535] loop2: detected capacity change from 0 to 16
[ 1646.140866][T20535] erofs (device loop2): mounted with root inode @ nid 36.
[ 1646.239114][T20535] overlayfs: missing 'lowerdir'
[ 1646.364339][T16730] Bluetooth: hci3: command 0x0406 tx timeout
[ 1646.444095][T20541] netlink: 'syz.8.5022': attribute type 3 has an invalid length.
[ 1646.496997][T20541] syz_tun: entered allmulticast mode
[ 1646.545924][T20540] syz_tun: left allmulticast mode
[ 1647.680014][T20561] syzkaller0: entered promiscuous mode
[ 1647.685858][T20561] syzkaller0: entered allmulticast mode
[ 1648.448084][T20575] binder: 20574:20575 ioctl c0306201 200000000240 returned -11
[ 1648.997098][T20584] overlayfs: missing 'lowerdir'
[ 1649.551064][T20589] netlink: 'syz.5.5036': attribute type 3 has an invalid length.
[ 1649.667349][T20589] syz_tun: entered allmulticast mode
[ 1649.694824][T20595] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5039'.
[ 1649.719804][T20587] syz_tun: left allmulticast mode
[ 1650.069483][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5040'.
[ 1650.164027][T20598] macvtap1: entered promiscuous mode
[ 1650.169740][T20598] bond0: entered promiscuous mode
[ 1650.175001][T20598] bond_slave_0: entered promiscuous mode
[ 1650.182355][T20598] bond_slave_1: entered promiscuous mode
[ 1650.190263][T20598] macvtap1: entered allmulticast mode
[ 1650.195878][T20598] bond0: entered allmulticast mode
[ 1650.201371][T20598] bond_slave_0: entered allmulticast mode
[ 1650.207446][T20598] bond_slave_1: entered allmulticast mode
[ 1650.217444][T20598] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1650.310307][T20600] macvtap1: left promiscuous mode
[ 1650.315708][T20600] bond0: left promiscuous mode
[ 1650.321115][T20600] bond_slave_0: left promiscuous mode
[ 1650.328278][T20600] bond_slave_1: left promiscuous mode
[ 1650.335813][T20600] macvtap1: left allmulticast mode
[ 1650.341414][T20600] bond0: left allmulticast mode
[ 1650.346487][T20600] bond_slave_0: left allmulticast mode
[ 1650.352501][T20600] bond_slave_1: left allmulticast mode
[ 1650.774434][T20608] syzkaller0: entered promiscuous mode
[ 1650.780680][T20608] syzkaller0: entered allmulticast mode
[ 1651.235579][T20616] binder: 20615:20616 ioctl 4018620d 0 returned -22
[ 1651.304501][T20616] binder: 20615:20616 ioctl c0306201 200000000240 returned -11
[ 1652.275155][T20633] netlink: 'syz.8.5052': attribute type 3 has an invalid length.
[ 1652.326487][T20633] syz_tun: entered allmulticast mode
[ 1652.334170][T20632] syz_tun: left allmulticast mode
[ 1653.170510][T20646] binder: 20643:20646 ioctl 4018620d 0 returned -22
[ 1653.186922][T20646] binder: 20643:20646 ioctl c0306201 200000000240 returned -11
[ 1653.461765][T20648] syzkaller0: entered promiscuous mode
[ 1653.467484][T20648] syzkaller0: entered allmulticast mode
[ 1653.616737][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5060'.
[ 1654.209529][T20663] netlink: 'syz.2.5066': attribute type 3 has an invalid length.
[ 1654.929824][T20674] binder: 20673:20674 ioctl 4018620d 0 returned -22
[ 1654.966040][T20674] binder: 20673:20674 ioctl c0306201 200000000240 returned -11
[ 1655.532726][T20683] openvswitch: netlink: Flow key attr not present in new flow.
[ 1656.382839][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5076'.
[ 1656.466518][T20700] netlink: 'syz.5.5078': attribute type 3 has an invalid length.
[ 1656.506858][T20702] syzkaller0: entered promiscuous mode
[ 1656.512923][T20702] syzkaller0: entered allmulticast mode
[ 1657.128670][T20712] binder: BINDER_SET_CONTEXT_MGR already set
[ 1657.135045][T20712] binder: 20710:20712 ioctl 4018620d 200000000040 returned -16
[ 1657.162136][T20712] binder: 20710:20712 ioctl c0306201 200000000240 returned -11
[ 1657.276392][T20721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5084'.
[ 1657.790379][ T6983] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1658.095290][ T6983] usb 5-1: Using ep0 maxpacket: 16
[ 1658.110536][ T6983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1658.128194][T20736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1658.132338][ T6983] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1658.148333][ T6983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1658.156679][ T6983] usb 5-1: Product: syz
[ 1658.161067][ T6983] usb 5-1: Manufacturer: syz
[ 1658.166225][ T6983] usb 5-1: SerialNumber: syz
[ 1658.177192][ T6983] usb 5-1: config 0 descriptor??
[ 1658.206068][ T6983] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1658.215986][ T6983] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1658.279524][T20736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1658.476171][T20736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1658.646035][T20736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1658.910258][ T6983] em28xx 5-1:0.0: chip ID is em2765
[ 1659.054566][T17655] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1659.064245][T17655] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1659.075712][T17655] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1659.116118][T17655] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1659.467538][T20747] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5095'.
[ 1659.520641][T20749] binder: BINDER_SET_CONTEXT_MGR already set
[ 1659.528359][T20749] binder: 20748:20749 ioctl 4018620d 200000000040 returned -16
[ 1659.586113][T20749] binder: 20748:20749 ioctl c0306201 200000000240 returned -11
[ 1659.591773][ T6983] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1659.602323][ T6983] em28xx 5-1:0.0: board has no eeprom
[ 1659.746013][ T6983] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1659.754134][ T6983] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1659.762354][T12279] em28xx 5-1:0.0: Binding DVB extension
[ 1659.804273][ T6983] usb 5-1: USB disconnect, device number 34
[ 1659.812414][ T6983] em28xx 5-1:0.0: Disconnecting em28xx
[ 1660.021830][T12279] em28xx 5-1:0.0: Registering input extension
[ 1660.045586][ T6983] em28xx 5-1:0.0: Closing input extension
[ 1660.091646][ T6983] em28xx 5-1:0.0: Freeing device
[ 1660.271481][ T9486] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1660.441401][ T9486] usb 6-1: Using ep0 maxpacket: 16
[ 1660.452247][T20769] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5105'.
[ 1660.468016][ T9486] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1660.479388][ T9486] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1660.489911][ T9486] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1660.503357][ T9486] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1660.524893][ T9486] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1660.534768][ T9486] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1660.543151][ T9486] usb 6-1: Product: syz
[ 1660.547750][ T9486] usb 6-1: Manufacturer: syz
[ 1660.552564][ T9486] usb 6-1: SerialNumber: syz
[ 1660.808197][ T9486] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[ 1660.838096][ T9486] usb 6-1: USB disconnect, device number 49
[ 1660.862064][ T9486] usblp0: removed
[ 1661.115655][T12279] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1661.198966][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5109'.
[ 1661.285497][T12279] usb 1-1: device descriptor read/64, error -71
[ 1661.565568][T20785] binder: BINDER_SET_CONTEXT_MGR already set
[ 1661.569812][T12279] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1661.571816][T20785] binder: 20784:20785 ioctl 4018620d 200000000040 returned -16
[ 1661.633061][T20785] binder: 20784:20785 ioctl c0306201 200000000240 returned -11
[ 1661.712932][T12279] usb 1-1: device descriptor read/64, error -71
[ 1661.841462][T12279] usb usb1-port1: attempt power cycle
[ 1662.258941][T12279] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1662.289666][T20801] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5118'.
[ 1662.316564][T12279] usb 1-1: device descriptor read/8, error -71
[ 1662.322823][ T9486] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[ 1662.482966][ T9486] usb 9-1: Using ep0 maxpacket: 16
[ 1662.505672][ T9486] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1662.544117][ T9486] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1662.553845][ T9486] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1662.562230][ T9486] usb 9-1: Product: syz
[ 1662.566610][ T9486] usb 9-1: Manufacturer: syz
[ 1662.571628][ T9486] usb 9-1: SerialNumber: syz
[ 1662.583099][ T9486] usb 9-1: config 0 descriptor??
[ 1662.591816][T12279] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1662.611314][ T9486] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1662.620878][ T9486] em28xx 9-1:0.0: DVB interface 0 found: bulk
[ 1662.636198][T12279] usb 1-1: device descriptor read/8, error -71
[ 1662.766013][T12279] usb usb1-port1: unable to enumerate USB device
[ 1662.866009][T20812] binder: 20811:20812 ioctl c0306201 0 returned -14
[ 1662.889064][T20812] binder: 20811:20812 ioctl c0306201 200000000240 returned -11
[ 1662.964226][    T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1663.135461][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 1663.173645][    T9] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1663.184351][    T9] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1663.194742][    T9] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1663.208241][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1663.246874][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1663.248389][T20814] overlayfs: failed to resolve './file0': -2
[ 1663.256723][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1663.256936][    T9] usb 3-1: Product: syz
[ 1663.257114][    T9] usb 3-1: Manufacturer: syz
[ 1663.281523][    T9] usb 3-1: SerialNumber: syz
[ 1663.301688][ T9486] em28xx 9-1:0.0: chip ID is em2765
[ 1663.313391][T20815] overlayfs: failed to resolve './file0/file0': -2
[ 1663.603587][    T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[ 1663.635128][    T9] usb 3-1: USB disconnect, device number 40
[ 1663.650802][    T9] usblp0: removed
[ 1663.834656][T20824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5127'.
[ 1663.969799][ T9486] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1663.978405][ T9486] em28xx 9-1:0.0: board has no eeprom
[ 1664.055294][ T9486] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1664.063590][ T9486] em28xx 9-1:0.0: dvb set to bulk mode.
[ 1664.071292][    T9] em28xx 9-1:0.0: Binding DVB extension
[ 1664.103016][ T9486] usb 9-1: USB disconnect, device number 14
[ 1664.111234][ T9486] em28xx 9-1:0.0: Disconnecting em28xx
[ 1664.218000][T20829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5129'.
[ 1664.335948][    T9] em28xx 9-1:0.0: Registering input extension
[ 1664.364838][ T9486] em28xx 9-1:0.0: Closing input extension
[ 1664.396345][ T9486] em28xx 9-1:0.0: Freeing device
[ 1664.923291][T20839] binder: 20838:20839 ioctl c0306201 0 returned -14
[ 1664.990276][T20839] binder: 20838:20839 ioctl c0306201 200000000240 returned -11
[ 1665.104081][T20841] overlayfs: failed to resolve './file0/file0': -2
[ 1665.700662][T20850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5138'.
[ 1666.129244][T12279] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[ 1666.318885][T12279] usb 9-1: device descriptor read/64, error -71
[ 1666.589978][T12279] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[ 1666.662831][ T6983] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 1666.772138][T12279] usb 9-1: device descriptor read/64, error -71
[ 1666.794723][T20860] overlayfs: failed to resolve './file0': -2
[ 1666.817484][T20860] overlayfs: failed to resolve './file0/file0': -2
[ 1666.855428][ T6983] usb 5-1: Using ep0 maxpacket: 16
[ 1666.882851][ T6983] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1666.893895][ T6983] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1666.904257][ T6983] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1666.917711][ T6983] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1666.952574][T12279] usb usb9-port1: attempt power cycle
[ 1667.055810][ T6983] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1667.065830][ T6983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1667.074429][ T6983] usb 5-1: Product: syz
[ 1667.078793][ T6983] usb 5-1: Manufacturer: syz
[ 1667.087311][ T6983] usb 5-1: SerialNumber: syz
[ 1667.389763][T12279] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[ 1667.431489][T12279] usb 9-1: device descriptor read/8, error -71
[ 1667.456238][ T6983] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 35 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[ 1667.509951][ T6983] usb 5-1: USB disconnect, device number 35
[ 1667.534278][ T6983] usblp0: removed
[ 1667.700454][T12279] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[ 1667.734672][T12279] usb 9-1: device descriptor read/8, error -71
[ 1667.851257][T12279] usb usb9-port1: unable to enumerate USB device
[ 1668.410853][T20873] binder: 20872:20873 ioctl c0306201 0 returned -14
[ 1668.428654][T20873] binder: 20872:20873 ioctl c0306201 200000000240 returned -11
[ 1668.552598][T20876] overlayfs: failed to resolve './file0/file0': -2
[ 1669.145308][T20887] overlayfs: failed to resolve './file0': -2
[ 1669.170101][T20887] overlayfs: failed to resolve './file0/file0': -2
[ 1669.869512][T17655] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60
[ 1669.878611][T17655] =====================================================
[ 1669.885985][T17655] BUG: KMSAN: uninit-value in nci_ntf_packet+0x26b2/0x46c0
[ 1669.893614][T17655]  nci_ntf_packet+0x26b2/0x46c0
[ 1669.898708][T17655]  nci_rx_work+0x403/0x750
[ 1669.903522][T17655]  process_scheduled_works+0xb91/0x1d80
[ 1669.909319][T17655]  worker_thread+0xedf/0x1590
[ 1669.914391][T17655]  kthread+0xd5c/0xf00
[ 1669.918629][T17655]  ret_from_fork+0x1f5/0x4c0
[ 1669.923562][T17655]  ret_from_fork_asm+0x1a/0x30
[ 1669.928564][T17655] 
[ 1669.930983][T17655] Uninit was created at:
[ 1669.935857][T17655]  kmem_cache_alloc_node_noprof+0x989/0x16b0
[ 1669.942049][T17655]  kmalloc_reserve+0x13c/0x4b0
[ 1669.947234][T17655]  __alloc_skb+0x347/0x7d0
[ 1669.951852][T17655]  virtual_ncidev_write+0x6b/0x430
[ 1669.957296][T17655]  vfs_write+0x48a/0x15d0
[ 1669.961796][T17655]  __x64_sys_write+0x1fb/0x4d0
[ 1669.967092][T17655]  x64_sys_call+0x3014/0x3e30
[ 1669.971989][T17655]  do_syscall_64+0xd9/0xfa0
[ 1669.976861][T17655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1669.982947][T17655] 
[ 1669.985401][T17655] CPU: 1 UID: 0 PID: 17655 Comm: kworker/u8:4 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[ 1669.996854][T17655] Tainted: [W]=WARN
[ 1670.000971][T17655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1670.011314][T17655] Workqueue: nfc2_nci_rx_wq nci_rx_work
[ 1670.017114][T17655] =====================================================
[ 1670.024378][T17655] Disabling lock debugging due to kernel taint
[ 1670.031114][T17655] Kernel panic - not syncing: kmsan.panic set ...
[ 1670.037783][T17655] CPU: 1 UID: 0 PID: 17655 Comm: kworker/u8:4 Tainted: G    B   W           syzkaller #0 PREEMPT(none) 
[ 1670.049146][T17655] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1670.054299][T17655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1670.064527][T17655] Workqueue: nfc2_nci_rx_wq nci_rx_work
[ 1670.070342][T17655] Call Trace:
[ 1670.073738][T17655]  <TASK>
[ 1670.076780][T17655]  __dump_stack+0x26/0x30
[ 1670.081361][T17655]  dump_stack_lvl+0x53/0x270
[ 1670.086260][T17655]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1670.092292][T17655]  dump_stack+0x1e/0x25
[ 1670.096665][T17655]  vpanic+0x435/0xd30
[ 1670.100884][T17655]  panic+0x15d/0x160
[ 1670.105046][T17655]  kmsan_report+0x31c/0x320
[ 1670.109764][T17655]  ? __msan_warning+0x1b/0x30
[ 1670.114615][T17655]  ? nci_ntf_packet+0x26b2/0x46c0
[ 1670.119840][T17655]  ? nci_rx_work+0x403/0x750
[ 1670.124674][T17655]  ? process_scheduled_works+0xb91/0x1d80
[ 1670.130635][T17655]  ? worker_thread+0xedf/0x1590
[ 1670.135719][T17655]  ? kthread+0xd5c/0xf00
[ 1670.140129][T17655]  ? ret_from_fork+0x1f5/0x4c0
[ 1670.145122][T17655]  ? ret_from_fork_asm+0x1a/0x30
[ 1670.150303][T17655]  ? ret_from_fork_asm+0x1a/0x30
[ 1670.155478][T17655]  ? vprintk_emit+0xb51/0xb60
[ 1670.160364][T17655]  ? vprintk_default+0x3f/0x50
[ 1670.165409][T17655]  ? vprintk+0x36/0x50
[ 1670.169690][T17655]  ? _printk+0x17e/0x1b0
[ 1670.174209][T17655]  ? kmsan_get_metadata+0xfb/0x160
[ 1670.179538][T17655]  __msan_warning+0x1b/0x30
[ 1670.184224][T17655]  nci_ntf_packet+0x26b2/0x46c0
[ 1670.189268][T17655]  ? kmsan_internal_unpoison_memory+0x14/0x20
[ 1670.195599][T17655]  ? sk_skb_reason_drop+0x13f/0x440
[ 1670.201121][T17655]  nci_rx_work+0x403/0x750
[ 1670.205787][T17655]  ? __pfx_nci_rx_work+0x10/0x10
[ 1670.211048][T17655]  process_scheduled_works+0xb91/0x1d80
[ 1670.216912][T17655]  worker_thread+0xedf/0x1590
[ 1670.221831][T17655]  kthread+0xd5c/0xf00
[ 1670.226045][T17655]  ? __pfx_worker_thread+0x10/0x10
[ 1670.231386][T17655]  ? __pfx_kthread+0x10/0x10
[ 1670.236212][T17655]  ret_from_fork+0x1f5/0x4c0
[ 1670.241006][T17655]  ? __pfx_kthread+0x10/0x10
[ 1670.245746][T17655]  ret_from_fork_asm+0x1a/0x30
[ 1670.250752][T17655]  </TASK>
[ 1670.254072][T17655] Kernel Offset: disabled
[ 1670.258479][T17655] Rebooting in 86400 seconds..