last executing test programs:

31m38.497810249s ago: executing program 32 (id=33):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r2, &(0x7f0000000280)="d819", 0x2)
ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff)

31m23.033430716s ago: executing program 33 (id=81):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
lseek(r0, 0x80000000000000fe, 0x4)

31m12.342144247s ago: executing program 34 (id=119):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000000)="116b41319ef13386d7fd40ac5cf9181c")

29m38.053124142s ago: executing program 6 (id=451):
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000280)={0xf, "d042b2a3c5f8fa8224f4ea0f1d3e91"})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

29m35.900415617s ago: executing program 6 (id=460):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010d0000000708b5192100c798000000010902"], 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x36)
io_submit(0x0, 0xb, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}])
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x7, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0xffffffffffffffff, 0x3, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7, 0x12], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0x9, 0x28, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0xd000, 0x4, 0x5, 0x3, 0x7, 0x1, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xb, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe, 0x2}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xa8, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x10, 0xff, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x41000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x40, 0x9, 0x2, 0x9, 0xba, 0x9}, {0x2, 0x30}, {0xe000, 0x7}, 0x60000021, 0x0, 0x1000, 0x2024, 0x0, 0xf401, 0x3000, [0x6, 0x100000000000204, 0x5b, 0x5]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

29m34.141072328s ago: executing program 6 (id=471):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
r5 = openat$ttynull(0xffffff9c, &(0x7f0000000440), 0x141000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x7fffffff, 0x2, 0x5}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

29m33.862986277s ago: executing program 6 (id=473):
socket$key(0xf, 0x3, 0x2)
syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0xfffffffd}, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x10, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$l2tp6(0xa, 0x2, 0x73)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket(0x2, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0)

29m31.47119307s ago: executing program 6 (id=481):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x2, 0x0)
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x4, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0xb6, 0xb6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00')
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002780), 0x2882, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2808000, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f0000000500)="$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")

29m31.137262832s ago: executing program 6 (id=483):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,nocheckpoint_merge,nodiscard,fsync_mode=posix,background_gc=sync,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=000000000003444,\x00\x00\x00\x00\x00\x00'], 0x1, 0x5514, &(0x7f0000005880)="$eJzs3MtrY1UYAPAv7XTejkVcuJsLg9DCJEw6D3Q36gw+cIYy6sKVpkkaMpPkliZNa1cuXIoL/xNRcOXSv8GFa3fiQnEnKLnn1pn6AKFpY6e/H9x855ycfPecUArfveEGcGItZr/+XIlLcS4i5iPiYkTRrpRH4XYKL0TE5YiYe+KolON/DpyOiPMRcWmSPOWslG99fnV85eZPb/3yzXdnTl344uvvZ7drYNZejIj+Rmpv91PMOyk+LMcb424R+zfGZUxv9B+V/TzF7fZakWG7sTevUcTrnTQ/39gaTuJ6r9GcxE53vRjfGKQTDsedvTzFBx42Not+q71WxO4wL2JnN61rZzf9b9sdjlKeVpnvoyJ9jEZ7MY23d9ppPxuPitgcjMrxlDdvtXcmcVzG8nTRzHutYh1rB/mm/9/e7g62drJxe3PYzQfZzVr9pVr9VrW+mbfao/aNaqPfunUjW+r0JtOqo3ajf7uT551eu9bM+8vZUqfZrNbr2dKd9lq3Mcjq9dr12rXqzeWydTV7/f57Wa+VLU3iq93B1qjbG2br+WaWPrGcrdSuv7ycXaln79xbzVYf3L17b/XdD+68f/+Ve2++Vk7627KypZVrKyvV+rXqSn35BO3/k3LRU9w/HEhl1gsAOH7U/8AsHF79v/kg4vDr/1D/T8Wxqn9Pev1/CPuHA1H/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcWD8sfPlG0VhM/Qvl+DPl0HNlvxIRcxHx+z+Yj9P7cs6XeRb+Zf7CX9bwbSWKDJNznCmP8xFxuzx+e/awvwUAAAB4en318eXPUrWeXhZnvSCOUrpoM3fxwynlq0TEwuKPU8o2N3l5fkrJir/vU7EzpWzFBayzU0qWLrmdmla2/2R+Xzj7RKikMHekywEAAI7E/krgaKsQAAAAjtKnj5vKv5OkEnu3MvfuBRe/vH98Q/Dcvh4AAABwDFVmvQAAAADg0BX1v+f/AQAAwNMtPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mDnfnLTBqI4AD8bXOg/FVXd9yrdwTF6hC67rDhAL8EBuqBXyAU4A9nlCBFE2BOCIxaRPLaV6PskY8aYH28QLGZGGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE+31Xb1/8/3v11zDsdu8vQGAAAAuGZfbVf1k0XT/piuf06XvqZ2ERFlRFwbu0/iXStzknKqp/v/Xd5fPavhJqJOOH3GLB0fIuJHOu6/9P0tAAAAwNu1W2+WzWi9eVi0Xp2NVBUDaSZtyk8/M+UVEVEt7jKllae8b5nC6t/3NH5nSqsnsOaZwpopt2mutBep/+7nWbv5xaloTuXVt52LzNZ3AABgQJPWadhRCAAAAEP6NXYBjKOIx6XM81JgWvNPy3vvWy0AAADgFSrGLgAAAADoXT3+H2j/v6P9/wAAAGAczf5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9GlfbVe79WbZNedw7CZPbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhgf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe/O4v/yemxplk7rWx9DySrJ0aW6fG3rlx9Ifx9WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bbvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+/dto4oDAP7uzufSAqoJyEMQAokBFuq6paUbYgBFDPwJSFHqllCXH20GWlWILGwocxcEI0JIoLD1f+jcSFnClsFDkJhBd76LLz8kHH7cOcnnI717X59P977vLFn53rsYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASqN3JnGSbTrjOC72Pdl5sJT1G/v6zKO1zfmsZXFUZ9LHw0vVF1G3uUQAAAA4PZKyvg8hbKXrC1kfd/L6Py2PyWr+754dx2U9v7/uL/uy9s/ar79sv7A7UGc8TnbSG8vDwcWDqbT+v1nOtvN/e0Qrv/L5vZck/0Di91efH6X59Yy+efz43XYenqkjWwDgn7hQ9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfRani6jKMQwnxrEmc2dh4sHdY/WtucL9vVhw/XwleTc2anSEMIN5aHg4u1zma23b13/9bicDi4U3/wcgihqdHfLqZ/68MpDg6hkesj+I+CuPiwZyWf4xHs+Zo4X/sXEwAAJ05atKyu30rXF7J90VwIf36f1//tULz3WnH8Uer/7Y+uPqmOVa3/+7XOcrb1Vm5/1rt77/4by7cXbw5uDj5581L/rf7la1euXOvl90p67pgAAADw77SLVq3/47mD6//nKnGYsv7//Nv+l9WxEvX/oSaLfk1nAgAAcLo998ofv0eH7I/a7fDF4srKnf54u/v60njbQKpHdqZo1fo/mWs6KwAAAKAOo9Voz/r/9Uocplz/f+aHF3+qnjMJIZwt1v8vLH06vF7fdGZaHf9O3PQcAQAAaNbZolXX/9P8+f9495GHOITw+qvjuPgZwKnq/+S9r3+sjlV9/v9yfVOcSXF3fD3yvhtCq1t9N2kuMQAAAE6kp4qWFfu/pesLH/987oO25/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZXAAAA//8APT61")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x201488, 0x0, 0x7, 0x0, &(0x7f0000006380))
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
fallocate(r1, 0x10, 0x800, 0x8000)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

29m15.955340629s ago: executing program 35 (id=483):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,nocheckpoint_merge,nodiscard,fsync_mode=posix,background_gc=sync,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=000000000003444,\x00\x00\x00\x00\x00\x00'], 0x1, 0x5514, &(0x7f0000005880)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000001080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x201488, 0x0, 0x7, 0x0, &(0x7f0000006380))
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
fallocate(r1, 0x10, 0x800, 0x8000)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

28m56.6311264s ago: executing program 5 (id=554):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
rename(&(0x7f0000000100)='./file2\x00', 0x0)
rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

28m55.117942073s ago: executing program 5 (id=557):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r1 = fcntl$dupfd(r0, 0x406, r0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x4c, 0x12, 0x1, 0x70bd28, 0x25dfdbfc, {0xf, 0x8, 0x6, 0x7, {0x4e20, 0x4e20, [0x39, 0x4, 0x1ff, 0xc], [0x5, 0xaf58, 0x3, 0x5], 0x0, [0x1, 0x9]}, 0xc000000, 0x80000000}}, 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0xc4)
write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e80)={0xd0, r2, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x161a, 0x51}}}}, [@NL80211_ATTR_FRAME={0xad, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3330}, @broadcast, @device_a, @initial, {0x9, 0x81}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @measure_req={0x0, 0x0, {0x4, [{0x26, 0x12, {0x9, 0xc, 0x9, "768c33206e4d148c4ee96d6f8ee838"}}, {0x26, 0x3, {0x4, 0x9, 0x9}}, {0x26, 0x3, {0x1, 0xa, 0x2e}}, {0x26, 0x6a, {0x14, 0xf6, 0x6, "30cd262a5a5c5eb8ed9eb1bd93a43a9c79288251b068276dea343eb7eb0d9c0c4e1e6f9efc305585bc3db3b2912941ff0b3cc18569df3f033e9b130c8c0d06b5754c626c37d0a93aac861f3dd6134bd5a5c896e8cb33578034fb6af613e0f84f1e78b9172c5d26"}}]}}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x41c1}, 0x4008000)

28m54.843993183s ago: executing program 5 (id=559):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115e00000000008510000002000000850000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000100)=ANY=[], 0x0, 0xe, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[], 0xe00}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x80000000000, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x2, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000001, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

28m54.369241899s ago: executing program 5 (id=561):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r2 = io_uring_setup(0x138a, &(0x7f00000006c0)={0x0, 0x40cf, 0x1, 0x40000007, 0x15f})
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, 0x0, 0x0)
statx(0xffffffffffffffff, 0x0, 0x4000, 0x100, &(0x7f0000000540))
io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0)

28m53.061302724s ago: executing program 5 (id=564):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

28m52.6108269s ago: executing program 5 (id=567):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000c080)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001b80)={0x2f})

28m51.822798088s ago: executing program 36 (id=567):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x2000c080)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001b80)={0x2f})

26m22.948679588s ago: executing program 7 (id=780):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f00000000c0)={[{@cruft}, {@utf8}, {@nojoliet}, {@showassoc}, {@utf8}, {@map_normal}]}, 0x1, 0x55a, &(0x7f0000000b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020)
r3 = socket(0x1, 0x5, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RLOPEN(r5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r6 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, 0x0, 0x0, r7)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000040)={0x80002017})

26m21.414930481s ago: executing program 7 (id=783):
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
symlink(0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x89c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x870, 0x2, [@TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0xa, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0xa, 0x6, 0x0, 0xa1, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x101, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x89c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084)

26m19.225944357s ago: executing program 7 (id=786):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
shmctl$IPC_SET(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syslog(0x2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x7fff)
sendto$inet6(r4, 0x0, 0x0, 0x20008045, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0xd)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
getdents64(r5, 0x0, 0x0)
r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000007540), 0x2, 0x0)
read(r6, &(0x7f00000013c0)=""/155, 0x9b)
readv(r6, &(0x7f00000012c0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1)

26m11.933223371s ago: executing program 7 (id=795):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)
ioctl$KVM_TDX_FINALIZE_VM(0xffffffffffffffff, 0xc008aeba, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
getrlimit(0xa, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t'], 0xa)
mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
statx(r3, 0x0, 0x400, 0x100, &(0x7f0000000540))
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080001000100000014000700000000000000000500000000000000010800"], 0x74}}, 0x24005000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

26m10.372205545s ago: executing program 7 (id=797):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
socket$key(0xf, 0x3, 0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff4)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x8, 0x4101, 0x4000000000000b, 0x0, 0x9, 0x400000400, 0x80000000000a, 0x6, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x81, 0x20000000000009f, 0x56ee, 0xffff, 0x6, 0x6, 0xa, 0x8001, 0x3, 0x0, 0x3, 0x72a3, 0xe})
clock_adjtime(0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$sysfs(0xffffff9c, 0x0, 0x0, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0)

26m8.155305832s ago: executing program 7 (id=799):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41414270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc})
openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1})
ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000240)={0x0, @src_change})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af60, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d}, 0x24}}, 0x0)

25m52.853907573s ago: executing program 37 (id=799):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41414270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc})
openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1})
ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000240)={0x0, @src_change})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af60, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d}, 0x24}}, 0x0)

25m2.56218666s ago: executing program 1 (id=892):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x401}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5d0, 0x4)

25m0.111850325s ago: executing program 1 (id=896):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x503, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0], 0x48}}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0)

24m58.977557964s ago: executing program 1 (id=898):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x503, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0], 0x48}}, 0x0)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0)

24m58.749129512s ago: executing program 1 (id=899):
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f0000000140)={0x4})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, &(0x7f0000001bc0), 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r10)
bind$unix(r1, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r10, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x88c0)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4081}, 0x24008804)

24m51.147400376s ago: executing program 1 (id=908):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000380), &(0x7f0000000080)=@udp=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r6, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
write$FUSE_INIT(r7, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c)
arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1)
syz_fuse_handle_req(r7, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, 0x0, 0x0, 0x0)

24m49.818630202s ago: executing program 1 (id=909):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x503, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0], 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)

24m34.703109908s ago: executing program 38 (id=909):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x503, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1}}}}}}}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0], 0x48}}, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)

22m59.5822906s ago: executing program 0 (id=1037):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0xfffffffe}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

22m58.036108694s ago: executing program 0 (id=1040):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040), 0x4)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000000780)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c757466383d312c726f6469722c636865636b3d7374726963742c756e695f786c6174653d312c73686f72746e616d653d77696e39352c696f636861727365743d63703935302c636f6465706167653d3835352c696f636861727365743d63703836322c73686f72746e616d653d6d697865642c646d61736b3d30303030303030303030303030303030303030303130302c757466383d312c756e695f786c6174653d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d6d008000002c6e6e6f6e75008361690400312c73686f72746e616d6577696e39352c726fcf37c65b44e27956bd048e69e76469722c757466383d302c696f636861727365743d6575632d6a702c757466383d312c757466383d302c726f6f74636f6e746578743d73746166665f752c009d54d2aaf6d06f18be776bb0ffac7a5551d56f69676c5a4b4e936050f5015a88410ba0676d48b0d307dfb550ec405bfcf6345121e4ef37982c969e2ff5915d729aa2982209cd4f06a1b6fa7ff4d2a7ce636cbde5339573fbd7c5ff9ff4481d415a136dba0a11246055ee1246a02b888f9aa72f3e876b621297de4e141d9700eee76208a6b62fc18d5dce7a798b1920830452b000dfc54ce2735b49179188ca936edb03581e240974fc368283677a20dc700c5f6d3995b3ea4611d52f2dafd6a9e8ad74e3b18058a210222bd6486148ce3d94c215544f477f891c66edbacffe2bd39eb98b1f1ed6235876eeefbbc640b9c2d210c902b109e78b2c44fa76f42f9a483ccefb0fc2d45fad17e560b8543d8541f339460a2c8b58e136487d5c7bdecd4154ff67a270cd065552ab803548c87984b83ea170d3e4f7e0877821db7a8a6acdb68e00e21e0e0f0a19c2bf2c45491ba0e96446751cc7933d9cad94fa6f21", @ANYRES64=0x0, @ANYRES8=r0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$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")

22m54.315669183s ago: executing program 0 (id=1042):
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
readv(r1, 0x0, 0x0)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000032680)=""/194)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0)

22m46.687867896s ago: executing program 0 (id=1048):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0xfffffffe}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

22m44.28902192s ago: executing program 0 (id=1051):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES8=r0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$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")

22m41.703620839s ago: executing program 0 (id=1052):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040), 0x4)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES8=r0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$eJzs3b9rJHUUAPA3m9nZVYtNYSWCA1pYHZdrbRLkDsRUHilOCw3eHUh2ERKI+APXq8ROC0v/AkHwD7GxsxRsBTtPOBj5zs5kf9ywtye3Eb3Pp0jezve9nTc/kkyKvLz34uTkdhl37332awyHWfT2BxH3s9iNXrS+iCX7XwcA8F92v6rij2qmY/mXr5ZfZ4svelvuDQDYjkf8/G/k9cdbKePHy+sNANiOm7fefvPg8PD6W2U5jBuTL8+P0q/46fNs/eBufBDjuBNXYxQPIuoHhX7UTwspvFFV1TQvk914ZTI9P0qVk3d/at7/4PeIun4vRrFbb7p42qjr3zi8vlfOLNRPUx/PNvvfT/XXYhTPf9MWL9Vf66iPoyJefXmh/ysxip/fjw9jHLfrJub1n++V5evVt39++k5qL9Vn0/OjQZ03V+20O+9f8jUCAAAAAAAAAAAAAAAAAAAAAOD/50ozO2cQ9fyetKmZv7PzIL3oR9naXZ7PM6u/GAg8nw8UvaqqplV8187XuVqWZdUkzuvzeCFvBgsCAAAAAAAAAAAAAAAAAADAU+7s409OjsfjO6dPJGinAeQR8dfNiH/6PvsLW16K9cmDZp/H43GvCZdz8sUtsdPmZBFr20gH8YROy6OCZx7qOQW9OP3+h86qdERneXQtDVNQdC61Qb9jX48ffNSfncfOnPbuOjnOus/h4KLDYbpwsXrhiujeez9WthTt9VxNbm/FzQ6n6FwaPfZpKZ6rg+manMjWfV289tvS4WSxklzUEzc6y/tN0HU2ZvfGRvdzDGflD3+vyEzrAAAAAAAAAAAAAAAAAACArZr/9W/H4r21pb1qsLW2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSzf///yZBvly8QVURp2f/1rEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw9Pg7AAD//6ofUAA=")

22m26.237975304s ago: executing program 39 (id=1052):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040), 0x4)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES8=r0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$eJzs3b9rJHUUAPA3m9nZVYtNYSWCA1pYHZdrbRLkDsRUHilOCw3eHUh2ERKI+APXq8ROC0v/AkHwD7GxsxRsBTtPOBj5zs5kf9ywtye3Eb3Pp0jezve9nTc/kkyKvLz34uTkdhl37332awyHWfT2BxH3s9iNXrS+iCX7XwcA8F92v6rij2qmY/mXr5ZfZ4svelvuDQDYjkf8/G/k9cdbKePHy+sNANiOm7fefvPg8PD6W2U5jBuTL8+P0q/46fNs/eBufBDjuBNXYxQPIuoHhX7UTwspvFFV1TQvk914ZTI9P0qVk3d/at7/4PeIun4vRrFbb7p42qjr3zi8vlfOLNRPUx/PNvvfT/XXYhTPf9MWL9Vf66iPoyJefXmh/ysxip/fjw9jHLfrJub1n++V5evVt39++k5qL9Vn0/OjQZ03V+20O+9f8jUCAAAAAAAAAAAAAAAAAAAAAOD/50ozO2cQ9fyetKmZv7PzIL3oR9naXZ7PM6u/GAg8nw8UvaqqplV8187XuVqWZdUkzuvzeCFvBgsCAAAAAAAAAAAAAAAAAADAU+7s409OjsfjO6dPJGinAeQR8dfNiH/6PvsLW16K9cmDZp/H43GvCZdz8sUtsdPmZBFr20gH8YROy6OCZx7qOQW9OP3+h86qdERneXQtDVNQdC61Qb9jX48ffNSfncfOnPbuOjnOus/h4KLDYbpwsXrhiujeez9WthTt9VxNbm/FzQ6n6FwaPfZpKZ6rg+manMjWfV289tvS4WSxklzUEzc6y/tN0HU2ZvfGRvdzDGflD3+vyEzrAAAAAAAAAAAAAAAAAACArZr/9W/H4r21pb1qsLW2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSzf///yZBvly8QVURp2f/1rEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw9Pg7AAD//6ofUAA=")

11m3.565572271s ago: executing program 3 (id=3997):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x17, 0x11, 0x839, 0x70bd2c, 0x100003, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x2, 0xa}, {0xf, 0xfff1}}}, 0x24}}, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, &(0x7f0000000300)='skcipher\x00', 0x0, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x5, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', 0x0, 0x0, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmark\x00', 0x0, 0x0, 0x2}, {0x1, 0x3, 0x0, &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2", 0x74, 0x20}, {0x2, 0x0, 0x0, &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b", 0x11, 0x32}, {0x1, 0x80000001, 0x0, 0x0, 0x0, 0xa}]})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0)

11m3.456007945s ago: executing program 3 (id=3998):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@fallback=r0, r1, 0x2f, 0x20, 0x4}, 0x20)

11m3.349273658s ago: executing program 3 (id=3999):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x10000003}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x3a}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006118a80000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000900)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

11m1.974404846s ago: executing program 3 (id=4007):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

11m1.754922523s ago: executing program 3 (id=4009):
syz_emit_vhci(0x0, 0x16)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

11m1.401255585s ago: executing program 3 (id=4011):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c000280"], 0x80}}, 0x24000002)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
read$FUSE(r1, &(0x7f0000001200)={0x2020}, 0xacd)

11m0.817472445s ago: executing program 40 (id=4011):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c000280"], 0x80}}, 0x24000002)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = fcntl$dupfd(r0, 0x0, r0)
read$FUSE(r1, &(0x7f0000001200)={0x2020}, 0xacd)

40.413230588s ago: executing program 4 (id=6361):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x200, 0x8, 0x1000, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r10, 0x3c}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x4011)

39.661223144s ago: executing program 4 (id=6364):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x24, 0x1e, 0x1, 0x2070bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x6, 0x2}, {0x8, 0xa}}}, 0x24}}, 0x44004)

8.529267625s ago: executing program 4 (id=6365):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
socket$inet(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x41001}, 0x8000)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r5, &(0x7f0000000340)={0x6, 0x2, 0x3, 0x0, 0x1}, 0x8)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x80}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x1, 0x8, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x7fbfffd}}, 0xe8)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f00000002c0)=@ethtool_gstrings={0x4b, 0x3}})
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c2", 0x17)
accept4(r6, 0x0, 0x0, 0x0)

8.126966598s ago: executing program 8 (id=6448):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001ac0)=@urb_type_control={0x2, {0x1, 0x1}, 0x7, 0xa1, 0x0, 0x0, 0xfff, 0xfffffffd, 0x0, 0xfb3, 0x4, 0x0})
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0)

7.889418027s ago: executing program 8 (id=6449):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407900110010000000000109022400010000200009040000090300000009210000fe0122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

7.886601307s ago: executing program 2 (id=6450):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00')
fcntl$setstatus(r0, 0x4, 0x40800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7.692663514s ago: executing program 2 (id=6451):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r2)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

4.729005416s ago: executing program 8 (id=6452):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f9376b9bd08ff4733feb589ca70432b1fed0632fa8a295da47135911f", 0x38}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7c6012b802872041cfe8c0cd3e0dc1df76772f74d964ff31e481f3c5b96de5d57b25b5e6da0643aa88c693acfefe376af4bc577a451f8000a542b421fbfdedad1b9ba1da7521011", 0x8e}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea", 0x31}], 0x2, &(0x7f0000000f40)}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562ec546a5561f669564316f8ddca23e5463c55328cd09f02", 0x47}, {&(0x7f0000001080)="746db052af41b2750b2361b7bde26b61", 0x10}], 0x2, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x92}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x90}}, {{&(0x7f0000001240)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000001100)=[{0x0}, {&(0x7f00000023c0)="8a8648be4c0f4e1cba8b1840619b9a0923cbf9c9e8a72617e2e504549abe818ced0c93477f15975b6b27fd195a3a4401a378a1e5a709e9f341a8797020aab580ac75b83133bec3d80165bf352ecc7504f9962251f1a561761625a5a45301d2a88a2be2aeab736f41076e8646a5cff93e5b8fa1ef1430850968d743e3c547f8bbc45b04d88a8bb63ced695e762ad7b9", 0x8f}, {&(0x7f0000002480)="b5ab91163db3105215e366eb45664eb92ee14d8deb8cdfac670763e8882a6a6071042aaadc599c6f2232e1b6ea1db7c3e1b6748ff9527e3783f0007c9732084afa53b5f37f201a173b301cbfaa0c37ae7b866fc6285623c35b2071998f277f88a12fa1", 0x63}, {&(0x7f0000002500)="5aa9d040d6305795a3115a8a0bb4e7a5c3fc05e2c40575e5d7c818ab6793f3fede473ea54b4b6d5d29db4f46680c135b90008b4307a794fa9fd2c0a6d72a9f8a894cf52bf63e2ae96390cd0b3b08ff524984bf724eeace9bc6e9caebbe045ec695487633a2de1f2545ab0c2d74525d1f588287e966201492b03dab0326afab06d75a0f0b15d5f05d0f1b28f5fa5920a0d71394fbf1698230518b2e942b3499af46ce1a7c9b9f19068d7a306f6d08ce5d938524164854ad3322b0f7b3", 0xbc}], 0x4}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x6, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.118536542s ago: executing program 8 (id=6453):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2431}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

3.117203552s ago: executing program 9 (id=6454):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3.114286212s ago: executing program 2 (id=6455):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000004900)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x2, @mcast1, 0xa3d7}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000290000003400"], 0x18}}], 0x1, 0x24000840)

2.91116504s ago: executing program 2 (id=6456):
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000540)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.800353913s ago: executing program 4 (id=6457):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000088}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a64b9f00081100fe8000000000000000000000000000bbfe8000000000000000008000000000aa00004e2200089078"], 0x0)
io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4})
syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
io_uring_setup(0x1b24, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_setup(0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x5, 0x400, 0x7})
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
shutdown(r2, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r2, r4, 0x0, 0xffffffff004)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf)

2.748394305s ago: executing program 9 (id=6458):
r0 = io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.690935117s ago: executing program 8 (id=6459):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='oom_score_adj\x00')
fcntl$setstatus(r0, 0x4, 0x40800)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2.537263702s ago: executing program 9 (id=6460):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407900110010000000000109022400010000200009040000090300000009210000fe0122290009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

2.507308813s ago: executing program 8 (id=6461):
r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.142701846s ago: executing program 2 (id=6462):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
sched_setattr(0x0, &(0x7f0000000100)={0x66, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x408, 0xb319, 0x3}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = syz_open_dev$video4linux(0x0, 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x6}})
socket$key(0xf, 0x3, 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)={0x14, 0x2a, 0x1, 0x70bd25, 0x25dfdbfb, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008000)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002500010329bd7000fddbdf251500000004002f803969fb600a61a544b0cfd1f409f77f5af580062e3b808f6375f146098f148c23bfc988c4f9f43607d6e2174c"], 0x18}, 0x1, 0x0, 0x0, 0xc804}, 0x3e59cdaa2f3e420c)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x3f)
syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x2000)
syz_open_dev$tty20(0xc, 0x4, 0x0)

769.115413ms ago: executing program 9 (id=6463):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x400000000010, 0x3, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571f540aa75255a73b8c9cdc2e75edf622add4302f913d9", 0xb2}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f9376b9bd08ff4733feb589ca70432b1fed0632fa8a295da47135911f", 0x38}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295eb7c6012b802872041cfe8c0cd3e0dc1df76772f74d964ff31e481f3c5b96de5d57b25b5e6da0643aa88c693acfefe376af4bc577a451f8000a542b421fbfdedad1b9ba1da7521011", 0x8e}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a95e6fd3ec5771da8352900bb19979b10fe02dd6f981361f62316da7b3f7abc9fbae1ea2ab5eea", 0x31}], 0x2, &(0x7f0000000f40)}}, {{&(0x7f0000000f80)=@can, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="3d9162a847e3afc18db28d0be9d1c220b7844d9e236c35781da53eb30cd67912e5b4138fab89f32de1cd2edde4efa562ec546a5561f669564316f8ddca23e5463c55328cd09f02", 0x47}, {&(0x7f0000001080)="746db052af41b2750b2361b7bde26b61", 0x10}], 0x2, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x92}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x90}}, {{&(0x7f0000001240)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000001100)=[{0x0}, {&(0x7f00000023c0)="8a8648be4c0f4e1cba8b1840619b9a0923cbf9c9e8a72617e2e504549abe818ced0c93477f15975b6b27fd195a3a4401a378a1e5a709e9f341a8797020aab580ac75b83133bec3d80165bf352ecc7504f9962251f1a561761625a5a45301d2a88a2be2aeab736f41076e8646a5cff93e5b8fa1ef1430850968d743e3c547f8bbc45b04d88a8bb63ced695e762ad7b9", 0x8f}, {&(0x7f0000002480)="b5ab91163db3105215e366eb45664eb92ee14d8deb8cdfac670763e8882a6a6071042aaadc599c6f2232e1b6ea1db7c3e1b6748ff9527e3783f0007c9732084afa53b5f37f201a173b301cbfaa0c37ae7b866fc6285623c35b2071998f277f88a12fa1", 0x63}, {&(0x7f0000002500)="5aa9d040d6305795a3115a8a0bb4e7a5c3fc05e2c40575e5d7c818ab6793f3fede473ea54b4b6d5d29db4f46680c135b90008b4307a794fa9fd2c0a6d72a9f8a894cf52bf63e2ae96390cd0b3b08ff524984bf724eeace9bc6e9caebbe045ec695487633a2de1f2545ab0c2d74525d1f588287e966201492b03dab0326afab06d75a0f0b15d5f05d0f1b28f5fa5920a0d71394fbf1698230518b2e942b3499af46ce1a7c9b9f19068d7a306f6d08ce5d938524164854ad3322b0f7b3", 0xbc}], 0x4}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c77", 0x10}], 0x1}}], 0x6, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

369.065918ms ago: executing program 2 (id=6464):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e09200000000000010902240001000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004004}, 0x80)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A')
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})

258.187202ms ago: executing program 4 (id=6465):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44)

125.229876ms ago: executing program 9 (id=6466):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = dup3(r1, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

51.964269ms ago: executing program 9 (id=6467):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x80f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0xfffffffd, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0)

0s ago: executing program 4 (id=6468):
r0 = io_uring_setup(0x1b79, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

kernel console output (not intermixed with test programs):

read_bulk_callback - non-zero urb status: -71
[ 1586.082244][T22169] usb 3-1: USB disconnect, device number 106
[ 1586.116778][T22169] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1586.170289][T22169] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1586.205078][T22169] quatech2 3-1:0.51: device disconnected
[ 1586.251954][T25196] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5115'.
[ 1586.574781][T25207] syzkaller0: entered promiscuous mode
[ 1586.583045][T25207] syzkaller0: entered allmulticast mode
[ 1587.227733][T25230] syzkaller0: entered promiscuous mode
[ 1587.234303][T25230] syzkaller0: entered allmulticast mode
[ 1587.246102][T25230] 0: reclassify loop, rule prio 0, protocol 700
[ 1587.357492][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1587.504482][T25237] syzkaller0: entered promiscuous mode
[ 1587.511115][T25237] syzkaller0: entered allmulticast mode
[ 1588.111962][T25259] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5145'.
[ 1588.618223][T22018] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[ 1588.793928][T25278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5153'.
[ 1588.819235][T22018] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1588.829887][T25278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5153'.
[ 1588.848168][T22018] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1588.860959][T22018] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1588.898501][T22018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.906582][T22018] usb 5-1: Product: syz
[ 1588.923695][T22018] usb 5-1: Manufacturer: syz
[ 1588.935618][T22018] usb 5-1: SerialNumber: syz
[ 1588.955727][T22018] usb 5-1: config 0 descriptor??
[ 1588.963166][T25281] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5154'.
[ 1591.217841][T25334] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1591.252716][T25334] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1591.269567][T25334] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1591.318636][T25334] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1591.328979][T25334] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1591.336826][T25334] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1591.491760][ T5844] usb 5-1: USB disconnect, device number 55
[ 1591.604296][T24108] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1591.741520][T24108] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1591.847221][T24108] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1592.013543][T24108] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1592.055471][T25329] chnl_net:caif_netlink_parms(): no params data found
[ 1592.348694][T25329] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1592.356275][T25329] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1592.364914][T25329] bridge_slave_0: entered allmulticast mode
[ 1592.372924][T25329] bridge_slave_0: entered promiscuous mode
[ 1592.399321][T25329] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1592.406594][T25329] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1592.458334][T25329] bridge_slave_1: entered allmulticast mode
[ 1592.465861][T25329] bridge_slave_1: entered promiscuous mode
[ 1592.663867][T25329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1592.706920][T25329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1592.770453][T24108] tipc: Left network mode
[ 1592.826926][T25329] team0: Port device team_slave_0 added
[ 1592.980118][T25329] team0: Port device team_slave_1 added
[ 1593.123788][T25329] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1593.144921][T25329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1593.197761][T25329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1593.258716][T25329] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1593.269775][T25329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1593.306184][T25329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1593.359744][ T5844] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 1593.429520][T20029] Bluetooth: hci4: command tx timeout
[ 1593.492691][T25329] hsr_slave_0: entered promiscuous mode
[ 1593.567154][T25329] hsr_slave_1: entered promiscuous mode
[ 1593.578433][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1593.597022][ T5844] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1593.607411][T25329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1593.615348][T25329] Cannot create hsr debugfs directory
[ 1593.638213][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1593.681319][ T5844] usb 3-1: config 0 descriptor??
[ 1593.911360][ T5844] usbhid 3-1:0.0: can't add hid device: -71
[ 1593.917465][ T5844] usbhid: probe of 3-1:0.0 failed with error -71
[ 1593.961961][ T5844] usb 3-1: USB disconnect, device number 107
[ 1594.498540][ T5844] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 1594.684582][T24108] bond0: (slave wlan1): Releasing backup interface
[ 1594.696509][T24108] mac80211_hwsim hwsim27 wlan1 (unregistering): left promiscuous mode
[ 1594.708676][ T5844] usb 3-1: Using ep0 maxpacket: 32
[ 1594.724451][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1594.746860][ T5844] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[ 1594.778339][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1594.800146][ T5844] usb 3-1: config 0 descriptor??
[ 1594.819451][ T5844] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1594.855951][ T5844] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1595.108314][T24108] hsr_slave_0: left promiscuous mode
[ 1595.139966][T24108] hsr_slave_1: left promiscuous mode
[ 1595.160252][T24108] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1595.181421][T24108] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1595.193997][T24108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1595.203293][T24108] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1595.212906][T24108] bridge_slave_1: left allmulticast mode
[ 1595.225346][T24108] bridge_slave_1: left promiscuous mode
[ 1595.237540][T24108] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1595.247807][T24108] bridge_slave_0: left allmulticast mode
[ 1595.253751][T24108] bridge_slave_0: left promiscuous mode
[ 1595.260661][T24108] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1595.290764][ T5844] usb 3-1: USB disconnect, device number 108
[ 1595.306256][ T5844] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[ 1595.383959][T24108] veth1_macvtap: left promiscuous mode
[ 1595.397688][T24108] veth0_macvtap: left promiscuous mode
[ 1595.404182][T24108] veth1_vlan: left promiscuous mode
[ 1595.410333][T24108] veth0_vlan: left promiscuous mode
[ 1595.508845][T20029] Bluetooth: hci4: command tx timeout
[ 1597.516374][T24108] team0 (unregistering): Port device team_slave_1 removed
[ 1597.612745][T20029] Bluetooth: hci4: command tx timeout
[ 1597.657317][T24108] team0 (unregistering): Port device team_slave_0 removed
[ 1597.777294][T24108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1597.792603][T24108] bond_slave_1 (unregistering): left promiscuous mode
[ 1597.906180][T24108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1597.924026][T24108] bond_slave_0 (unregistering): left promiscuous mode
[ 1598.594088][T24108] bond0 (unregistering): Released all slaves
[ 1599.208890][T25329] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1599.260332][T25329] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1599.282323][T25329] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1599.340127][T25329] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1599.518904][T24108] IPVS: stop unused estimator thread 0...
[ 1599.670684][T20029] Bluetooth: hci4: command tx timeout
[ 1599.834693][T25329] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1599.881914][T25329] 8021q: adding VLAN 0 to HW filter on device team0
[ 1599.923769][T24112] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1599.931081][T24112] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1599.966331][T24112] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1599.973578][T24112] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1600.616454][T25329] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1601.173426][T25534] syzkaller0: entered promiscuous mode
[ 1601.203211][T25534] syzkaller0: entered allmulticast mode
[ 1601.413288][T25329] veth0_vlan: entered promiscuous mode
[ 1601.449213][T25329] veth1_vlan: entered promiscuous mode
[ 1601.536599][T25329] veth0_macvtap: entered promiscuous mode
[ 1601.563357][T25329] veth1_macvtap: entered promiscuous mode
[ 1601.623892][T25329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1601.661248][T25329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1601.680443][T25329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1601.701505][T25329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1601.723728][T25329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1601.751530][T25329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1601.782290][T25329] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1601.817709][T25329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1601.878158][T25329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1601.901757][T25329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1601.918219][T25329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1601.945437][T25329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1601.970829][T25329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1602.004124][T25329] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1602.047708][T25329] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1602.074262][T25329] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1602.090335][T25329] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1602.101406][T25329] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1602.413189][T24112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1602.438749][T24112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1602.474386][T25566] syzkaller0: entered promiscuous mode
[ 1602.487490][T25566] syzkaller0: entered allmulticast mode
[ 1602.623524][T25572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5236'.
[ 1604.517736][T25613] syzkaller0: entered promiscuous mode
[ 1604.535990][T25613] syzkaller0: entered allmulticast mode
[ 1604.866891][T25624] syzkaller0: entered promiscuous mode
[ 1604.900410][T25624] syzkaller0: entered allmulticast mode
[ 1605.962748][T25334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1605.984341][T25334] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1605.999128][T25334] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1606.013345][T25334] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1606.048637][T25334] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1606.074551][T25334] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1607.597106][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.604686][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1608.150180][T25334] Bluetooth: hci0: command tx timeout
[ 1610.236745][T25334] Bluetooth: hci0: command tx timeout
[ 1610.369543][ T3481] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1610.572496][ T3481] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1610.645805][T25676] fuse: Unknown parameter 'fd0x0000000000000006'
[ 1610.756832][ T3481] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1610.979888][ T3481] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1611.292475][T25635] chnl_net:caif_netlink_parms(): no params data found
[ 1611.766021][T25635] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1611.787969][T25635] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1611.811721][T25635] bridge_slave_0: entered allmulticast mode
[ 1611.839921][T25635] bridge_slave_0: entered promiscuous mode
[ 1611.863290][T25635] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1611.910418][T25635] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1611.917759][T25635] bridge_slave_1: entered allmulticast mode
[ 1611.942496][T25635] bridge_slave_1: entered promiscuous mode
[ 1612.201517][T25635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1612.245298][T25635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1612.308163][T25334] Bluetooth: hci0: command tx timeout
[ 1612.662875][T25705] syzkaller0: entered promiscuous mode
[ 1612.668757][T25705] syzkaller0: entered allmulticast mode
[ 1612.681502][T25711] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5268'.
[ 1612.775634][T25635] team0: Port device team_slave_0 added
[ 1612.794130][T25635] team0: Port device team_slave_1 added
[ 1614.401859][T25334] Bluetooth: hci0: command tx timeout
[ 1617.165497][T25635] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1617.192729][T25635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1617.233153][T25635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1617.335460][T25635] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1617.372287][T25635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1617.447607][T25635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1617.780024][T25635] hsr_slave_0: entered promiscuous mode
[ 1617.787326][T25635] hsr_slave_1: entered promiscuous mode
[ 1617.795036][T25755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5275'.
[ 1618.189449][ T3481] hsr_slave_0: left promiscuous mode
[ 1618.195992][ T3481] hsr_slave_1: left promiscuous mode
[ 1618.208848][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1618.216427][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1618.227033][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1618.235328][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1618.243926][ T3481] bridge_slave_1: left allmulticast mode
[ 1618.250422][ T3481] bridge_slave_1: left promiscuous mode
[ 1618.256432][ T3481] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1618.266723][ T3481] bridge_slave_0: left allmulticast mode
[ 1618.273018][ T3481] bridge_slave_0: left promiscuous mode
[ 1618.279459][ T3481] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1618.316708][ T3481] veth1_macvtap: left promiscuous mode
[ 1618.322496][ T3481] veth0_macvtap: left promiscuous mode
[ 1618.329894][ T3481] veth1_vlan: left promiscuous mode
[ 1618.335426][ T3481] veth0_vlan: left promiscuous mode
[ 1620.332358][ T3481] team0 (unregistering): Port device team_slave_1 removed
[ 1620.429477][ T3481] team0 (unregistering): Port device team_slave_0 removed
[ 1620.536537][ T3481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1620.631285][ T3481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1621.565870][ T3481] bond0 (unregistering): Released all slaves
[ 1622.363324][T25806] syzkaller0: entered promiscuous mode
[ 1622.396685][T25806] syzkaller0: entered allmulticast mode
[ 1629.230865][T25635] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1629.256046][T25635] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1629.333490][T25635] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1629.367277][T25635] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1629.597127][T25635] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1629.667884][T25635] 8021q: adding VLAN 0 to HW filter on device team0
[ 1629.717262][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1629.724548][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1629.862404][ T3481] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1629.869593][ T3481] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1630.445916][T25912] syzkaller0: entered promiscuous mode
[ 1630.452025][T25912] syzkaller0: entered allmulticast mode
[ 1635.435224][T25937] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[ 1635.452939][T25937] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[ 1635.484928][T25635] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1636.355042][T25635] veth0_vlan: entered promiscuous mode
[ 1636.460187][T25635] veth1_vlan: entered promiscuous mode
[ 1636.597420][T25635] veth0_macvtap: entered promiscuous mode
[ 1636.632609][T25635] veth1_macvtap: entered promiscuous mode
[ 1636.713439][T25635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1636.756732][T25635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1636.801338][T25635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1636.867610][T25635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1636.908679][T25635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1636.962126][T25635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1636.994795][T25635] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1637.067374][T25635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1637.121253][T25978] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5315'.
[ 1637.146906][T25635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1637.186279][T25635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1637.241785][T25635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1637.299656][T25635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1637.345668][T25635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1637.412795][T25635] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1637.422179][T25987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5315'.
[ 1637.449259][T25635] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1637.483807][T25635] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1637.507267][T25635] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1637.540784][T25635] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1638.168725][T25996] syzkaller0: entered promiscuous mode
[ 1638.258188][T25996] syzkaller0: entered allmulticast mode
[ 1642.619724][T24108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1642.633373][T24108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1642.757126][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1642.779100][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1644.355440][T26057] syzkaller0: entered promiscuous mode
[ 1644.439744][T26057] syzkaller0: entered allmulticast mode
[ 1652.037029][T26139] syzkaller0: entered promiscuous mode
[ 1652.042980][T26139] syzkaller0: entered allmulticast mode
[ 1652.425924][T26147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5361'.
[ 1652.457135][T26147] xfrm1: entered promiscuous mode
[ 1652.467162][T26147] xfrm1: entered allmulticast mode
[ 1652.474960][T26147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5361'.
[ 1653.235863][T26166] syzkaller0: entered promiscuous mode
[ 1653.241748][T26166] syzkaller0: entered allmulticast mode
[ 1654.311961][T26168] syzkaller1: entered promiscuous mode
[ 1654.317569][T26168] syzkaller1: entered allmulticast mode
[ 1654.549946][T26176] syzkaller0: entered promiscuous mode
[ 1654.555487][T26176] syzkaller0: entered allmulticast mode
[ 1656.161720][T26210] syzkaller0: entered promiscuous mode
[ 1656.167808][T26210] syzkaller0: entered allmulticast mode
[ 1657.762068][T26240] syzkaller0: entered promiscuous mode
[ 1657.767858][T26240] syzkaller0: entered allmulticast mode
[ 1659.418169][T12471] usb 10-1: new full-speed USB device number 92 using dummy_hcd
[ 1659.442663][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5399'.
[ 1659.467057][T26270] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5399'.
[ 1659.609179][T12471] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1659.620469][T12471] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1659.637200][T12471] usb 10-1: Product: syz
[ 1659.645944][T12471] usb 10-1: Manufacturer: syz
[ 1659.651310][T12471] usb 10-1: SerialNumber: syz
[ 1659.659671][T12471] usb 10-1: config 0 descriptor??
[ 1659.881693][T12471] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1660.047357][T26288] netlink: 224 bytes leftover after parsing attributes in process `syz.8.5405'.
[ 1660.059046][T26287] nbd0: detected capacity change from 0 to 63
[ 1660.085781][T25334] block nbd0: Receive control failed (result -104)
[ 1660.101675][T17977] block nbd0: Dead connection, failed to find a fallback
[ 1660.112464][T17977] block nbd0: shutting down sockets
[ 1660.120837][T17977] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1660.131317][T17977] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1660.140338][T17977] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2
[ 1660.150072][T17977] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1660.158883][T17977] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1660.543063][T12471] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -32
[ 1661.678152][T26308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5413'.
[ 1662.068386][T26313] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5414'.
[ 1662.177305][T22018] usb 10-1: USB disconnect, device number 92
[ 1663.955567][T26339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5424'.
[ 1663.975467][T26339] xfrm1: entered promiscuous mode
[ 1663.988900][T26339] xfrm1: entered allmulticast mode
[ 1664.020218][T26339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5424'.
[ 1664.260544][T10887] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[ 1664.462087][T10887] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1664.471707][T10887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1664.489969][T10887] usb 5-1: Product: syz
[ 1664.502753][T10887] usb 5-1: Manufacturer: syz
[ 1664.511616][T10887] usb 5-1: SerialNumber: syz
[ 1664.530339][T10887] usb 5-1: config 0 descriptor??
[ 1664.746970][T10887] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1664.986134][T26360] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5431'.
[ 1665.365530][T10887] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[ 1666.676376][T20029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1666.700651][T20029] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1666.716867][T20029] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1666.757235][T26382] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5440'.
[ 1666.821967][T20029] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1666.830373][T20029] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1666.841040][T20029] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1666.972380][T22018] usb 5-1: USB disconnect, device number 56
[ 1668.066612][T26378] chnl_net:caif_netlink_parms(): no params data found
[ 1668.179243][T26403] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5446'.
[ 1668.228352][T10887] usb 9-1: new high-speed USB device number 77 using dummy_hcd
[ 1668.264567][T26378] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1668.272434][T26378] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1668.282381][T26378] bridge_slave_0: entered allmulticast mode
[ 1668.291003][T26378] bridge_slave_0: entered promiscuous mode
[ 1668.304789][T26378] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1668.312429][T26378] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1668.323035][T26378] bridge_slave_1: entered allmulticast mode
[ 1668.330962][T26378] bridge_slave_1: entered promiscuous mode
[ 1668.417304][T26378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1668.419366][T10887] usb 9-1: Using ep0 maxpacket: 32
[ 1668.436255][T26378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1668.446139][T10887] usb 9-1: config 0 has an invalid interface number: 239 but max is 0
[ 1668.454631][T10887] usb 9-1: config 0 has no interface number 0
[ 1668.460881][T10887] usb 9-1: config 0 interface 239 has no altsetting 0
[ 1668.471350][T10887] usb 9-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1668.481038][T10887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1668.489812][T10887] usb 9-1: Product: syz
[ 1668.494181][T10887] usb 9-1: Manufacturer: syz
[ 1668.499480][T10887] usb 9-1: SerialNumber: syz
[ 1668.507786][T10887] usb 9-1: config 0 descriptor??
[ 1668.606574][T26378] team0: Port device team_slave_0 added
[ 1668.631480][T26378] team0: Port device team_slave_1 added
[ 1668.682814][T26378] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1668.690144][T26378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1668.720075][T26392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1668.729033][T26392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1668.759076][T10887] usb 9-1: USB disconnect, device number 77
[ 1668.781281][T26378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1668.813582][T26378] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1668.823066][T26378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1668.853673][T26378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1668.912847][T26378] hsr_slave_0: entered promiscuous mode
[ 1668.919624][T26378] hsr_slave_1: entered promiscuous mode
[ 1668.926031][T26378] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1668.929000][T22018] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[ 1668.936284][T26378] Cannot create hsr debugfs directory
[ 1668.948248][T20029] Bluetooth: hci1: command tx timeout
[ 1669.037649][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.048353][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.146052][T22018] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1669.157741][T22018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1669.168215][T26378] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1669.179451][T22018] usb 5-1: Product: syz
[ 1669.179474][T22018] usb 5-1: Manufacturer: syz
[ 1669.179491][T22018] usb 5-1: SerialNumber: syz
[ 1669.200117][T22018] usb 5-1: config 0 descriptor??
[ 1669.252036][T26414] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5449'.
[ 1669.405001][T26378] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1669.427713][T22018] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1669.555641][T26378] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1669.766210][T26378] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1670.031371][T22018] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[ 1670.268800][T26428] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5454'.
[ 1670.298172][T26378] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1670.324717][T26378] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1670.353158][T26378] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1670.384262][T26378] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1670.846705][T26378] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1670.912214][T26378] 8021q: adding VLAN 0 to HW filter on device team0
[ 1670.945297][T24112] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1670.952562][T24112] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1670.975948][T24108] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1670.983219][T24108] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1670.989086][T26434] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5456'.
[ 1671.028474][T20029] Bluetooth: hci1: command tx timeout
[ 1671.045371][T26432] syzkaller0: entered promiscuous mode
[ 1671.051065][T26432] syzkaller0: entered allmulticast mode
[ 1671.683946][T22169] usb 5-1: USB disconnect, device number 57
[ 1672.284804][ T7807] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1672.520604][ T7807] usb 5-1: Using ep0 maxpacket: 32
[ 1672.560412][ T7807] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[ 1672.568790][ T7807] usb 5-1: config 0 has no interface number 0
[ 1672.574901][ T7807] usb 5-1: config 0 interface 239 has no altsetting 0
[ 1672.657110][ T7807] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1672.666428][ T7807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1672.692446][ T7807] usb 5-1: Product: syz
[ 1672.696676][ T7807] usb 5-1: Manufacturer: syz
[ 1672.701881][ T7807] usb 5-1: SerialNumber: syz
[ 1672.727590][ T7807] usb 5-1: config 0 descriptor??
[ 1673.001385][T26441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1673.018836][T26441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1673.108459][T20029] Bluetooth: hci1: command tx timeout
[ 1675.196996][T20029] Bluetooth: hci1: command tx timeout
[ 1676.166540][ T7807] usb 5-1: USB disconnect, device number 58
[ 1676.208499][T26443] bond0: (slave wlan1): Releasing backup interface
[ 1676.255072][T26443] mac80211_hwsim hwsim33 wlan1 (unregistering): left promiscuous mode
[ 1676.379306][T26454] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5459'.
[ 1676.697943][T26467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5465'.
[ 1676.803270][T26378] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1676.868674][ T5844] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[ 1677.085830][ T5844] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1677.108771][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1677.116855][ T5844] usb 5-1: Product: syz
[ 1677.128140][T22658] usb 9-1: new high-speed USB device number 78 using dummy_hcd
[ 1677.144971][ T5844] usb 5-1: Manufacturer: syz
[ 1677.150533][T26378] veth0_vlan: entered promiscuous mode
[ 1677.157648][ T5844] usb 5-1: SerialNumber: syz
[ 1677.169025][ T5844] usb 5-1: config 0 descriptor??
[ 1677.183725][T26378] veth1_vlan: entered promiscuous mode
[ 1677.233385][T26378] veth0_macvtap: entered promiscuous mode
[ 1677.247185][T26378] veth1_macvtap: entered promiscuous mode
[ 1677.281843][T26378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1677.293246][T26378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1677.303644][T26378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1677.314944][T26378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1677.327609][T26378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1677.341372][T26378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1677.348891][T22658] usb 9-1: Using ep0 maxpacket: 32
[ 1677.357830][T26378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1677.365705][T22658] usb 9-1: config 0 has an invalid interface number: 239 but max is 0
[ 1677.377281][T22658] usb 9-1: config 0 has no interface number 0
[ 1677.387580][T26378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1677.397834][T22658] usb 9-1: config 0 interface 239 has no altsetting 0
[ 1677.404676][T26378] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1677.413417][ T5844] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1677.426669][T22658] usb 9-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1677.436554][T22658] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1677.445087][T22658] usb 9-1: Product: syz
[ 1677.451410][T22658] usb 9-1: Manufacturer: syz
[ 1677.456207][T22658] usb 9-1: SerialNumber: syz
[ 1677.469100][T22658] usb 9-1: config 0 descriptor??
[ 1677.489383][T26378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1677.500449][T26378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1677.512760][T26378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1677.525735][T26378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1677.543629][T26378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1677.556020][T26378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1677.577410][T26378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1677.598320][T26378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1677.615730][T26378] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1677.645680][T26378] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1677.660123][T26378] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1677.673938][T26378] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1677.695606][T26470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1677.704468][T26470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1677.727229][T26378] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1677.743112][T22658] usb 9-1: USB disconnect, device number 78
[ 1677.863427][T26478] syzkaller0: entered promiscuous mode
[ 1677.869221][T26478] syzkaller0: entered allmulticast mode
[ 1678.671948][ T5844] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[ 1678.700318][ T5844] usb 5-1: USB disconnect, device number 59
[ 1682.337591][T26483] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1682.355204][T26483] bond0: (slave rose0): Enslaving as an active interface with an up link
[ 1682.516638][T26497] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5471'.
[ 1682.660430][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1682.693416][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1682.810469][T17989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1682.843520][T17989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1682.915370][T26508] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5474'.
[ 1683.193499][T26513] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5434'.
[ 1683.338157][T12472] usb 9-1: new high-speed USB device number 79 using dummy_hcd
[ 1683.548826][T12472] usb 9-1: Using ep0 maxpacket: 32
[ 1683.561815][T12472] usb 9-1: config 0 has an invalid interface number: 239 but max is 0
[ 1683.582835][T12472] usb 9-1: config 0 has no interface number 0
[ 1683.598471][T12472] usb 9-1: config 0 interface 239 has no altsetting 0
[ 1683.622712][T12472] usb 9-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1683.656929][T12472] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1683.694850][T12472] usb 9-1: Product: syz
[ 1683.714325][T12472] usb 9-1: Manufacturer: syz
[ 1683.726894][T12472] usb 9-1: SerialNumber: syz
[ 1683.744236][T12472] usb 9-1: config 0 descriptor??
[ 1683.971803][T26511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1683.980747][T26511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1684.016682][T12472] usb 9-1: USB disconnect, device number 79
[ 1684.417952][T26528] syzkaller0: entered promiscuous mode
[ 1684.437100][T26528] syzkaller0: entered allmulticast mode
[ 1689.325156][T26554] netlink: 76 bytes leftover after parsing attributes in process `syz.9.5481'.
[ 1689.503885][T26589] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5486'.
[ 1690.772005][T12472] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1690.850105][T17977] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 30 seconds
[ 1691.028428][T12472] usb 5-1: Using ep0 maxpacket: 32
[ 1691.063793][T12472] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[ 1691.085174][T12472] usb 5-1: config 0 has no interface number 0
[ 1691.091734][T12472] usb 5-1: config 0 interface 239 has no altsetting 0
[ 1691.106973][T12472] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1691.122823][T12472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1691.133254][T12472] usb 5-1: Product: syz
[ 1691.137917][T12472] usb 5-1: Manufacturer: syz
[ 1691.156038][T12472] usb 5-1: SerialNumber: syz
[ 1691.173149][T12472] usb 5-1: config 0 descriptor??
[ 1691.192405][T11610] IPVS: starting estimator thread 0...
[ 1691.308208][T26612] IPVS: using max 18 ests per chain, 43200 per kthread
[ 1691.383165][T26603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1691.392156][T26603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1691.454288][T12472] usb 5-1: USB disconnect, device number 60
[ 1692.156648][T26631] syzkaller0: entered promiscuous mode
[ 1692.176334][T26631] syzkaller0: entered allmulticast mode
[ 1697.223728][T26635] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5495'.
[ 1697.809455][T10888] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 1698.008410][T10888] usb 3-1: Using ep0 maxpacket: 32
[ 1698.033492][T10888] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[ 1698.051471][T10888] usb 3-1: config 0 has no interface number 0
[ 1698.079737][T10888] usb 3-1: config 0 interface 239 has no altsetting 0
[ 1698.116292][T10888] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1698.156076][T10888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1698.180825][T10888] usb 3-1: Product: syz
[ 1698.194412][T10888] usb 3-1: Manufacturer: syz
[ 1698.204697][T10888] usb 3-1: SerialNumber: syz
[ 1698.226862][T10888] usb 3-1: config 0 descriptor??
[ 1698.449270][T26663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1698.458372][T26663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1698.497831][T10888] usb 3-1: USB disconnect, device number 109
[ 1699.158723][T26700] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5511'.
[ 1699.290857][T26703] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5512'.
[ 1699.312852][T26704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5510'.
[ 1699.324262][T26704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5510'.
[ 1700.088298][T10888] usb 10-1: new high-speed USB device number 93 using dummy_hcd
[ 1700.298216][T10888] usb 10-1: Using ep0 maxpacket: 32
[ 1700.316883][T10888] usb 10-1: config 0 has an invalid interface number: 239 but max is 0
[ 1700.356260][T10888] usb 10-1: config 0 has no interface number 0
[ 1700.363034][T10888] usb 10-1: config 0 interface 239 has no altsetting 0
[ 1700.374817][T10888] usb 10-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1700.384590][T10888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1700.395483][T10888] usb 10-1: Product: syz
[ 1700.399929][T10888] usb 10-1: Manufacturer: syz
[ 1700.404937][T10888] usb 10-1: SerialNumber: syz
[ 1700.429217][T10888] usb 10-1: config 0 descriptor??
[ 1700.637471][T26720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1700.646780][T26720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1700.680519][T10888] usb 10-1: USB disconnect, device number 93
[ 1700.819759][T26728] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5521'.
[ 1700.836467][T26728] xfrm1: entered promiscuous mode
[ 1700.844158][T26728] xfrm1: entered allmulticast mode
[ 1700.861240][T26728] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5521'.
[ 1703.394126][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5533'.
[ 1703.411916][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5533'.
[ 1703.538404][T10888] usb 10-1: new high-speed USB device number 94 using dummy_hcd
[ 1703.748443][T10888] usb 10-1: Using ep0 maxpacket: 32
[ 1703.768451][T10888] usb 10-1: config 0 has an invalid interface number: 239 but max is 0
[ 1703.818271][T10888] usb 10-1: config 0 has no interface number 0
[ 1703.828361][T10888] usb 10-1: config 0 interface 239 has no altsetting 0
[ 1703.846861][T10888] usb 10-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1703.862350][T10888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1703.871180][T10888] usb 10-1: Product: syz
[ 1703.877843][T10888] usb 10-1: Manufacturer: syz
[ 1703.888420][T10888] usb 10-1: SerialNumber: syz
[ 1703.907246][T10888] usb 10-1: config 0 descriptor??
[ 1704.144321][T26771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1704.153318][T26771] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1704.192205][T10888] usb 10-1: USB disconnect, device number 94
[ 1707.429528][T26882] syzkaller0: entered promiscuous mode
[ 1707.435873][T26882] syzkaller0: entered allmulticast mode
[ 1707.548121][T21664] usb 9-1: new high-speed USB device number 80 using dummy_hcd
[ 1708.468498][T21664] usb 9-1: Using ep0 maxpacket: 32
[ 1708.492948][T21664] usb 9-1: config 0 has an invalid interface number: 239 but max is 0
[ 1708.508123][T21664] usb 9-1: config 0 has no interface number 0
[ 1708.514308][T21664] usb 9-1: config 0 interface 239 has no altsetting 0
[ 1708.541315][T21664] usb 9-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1708.568091][T21664] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1708.576183][T21664] usb 9-1: Product: syz
[ 1708.588075][T21664] usb 9-1: Manufacturer: syz
[ 1708.592766][T21664] usb 9-1: SerialNumber: syz
[ 1708.603864][T21664] usb 9-1: config 0 descriptor??
[ 1708.822004][T26879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1708.830911][T26879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1708.847879][T21664] usb 9-1: USB disconnect, device number 80
[ 1711.416667][T26956] syzkaller0: entered promiscuous mode
[ 1711.442292][T26956] syzkaller0: entered allmulticast mode
[ 1712.230026][T26978] zonefs (nullb0) ERROR: Not a zoned block device
[ 1713.060494][T26981] dvmrp6: entered allmulticast mode
[ 1713.208682][T21608] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1713.468077][T21608] usb 5-1: Using ep0 maxpacket: 32
[ 1713.495580][T21608] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[ 1713.535875][T21608] usb 5-1: config 0 has no interface number 0
[ 1713.584722][T21608] usb 5-1: config 0 interface 239 has no altsetting 0
[ 1713.628844][T21608] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1713.672327][T21608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1713.755292][T21608] usb 5-1: Product: syz
[ 1713.780527][T21608] usb 5-1: Manufacturer: syz
[ 1713.804149][T21608] usb 5-1: SerialNumber: syz
[ 1713.841908][T21608] usb 5-1: config 0 descriptor??
[ 1714.081531][T26979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1714.144855][T26979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1714.852716][T26993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5578'.
[ 1715.246178][T21608] usb 5-1: USB disconnect, device number 61
[ 1715.653094][T27008] syzkaller0: entered promiscuous mode
[ 1715.672952][T27008] 0: reclassify loop, rule prio 0, protocol 800
[ 1716.204860][T27019] zonefs (nullb0) ERROR: Not a zoned block device
[ 1717.392415][T27030] syzkaller0: entered promiscuous mode
[ 1717.413227][T27030] syzkaller0: entered allmulticast mode
[ 1718.414976][T21608] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 1718.658164][T21608] usb 3-1: Using ep0 maxpacket: 32
[ 1718.686697][T21608] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[ 1718.704728][T21608] usb 3-1: config 0 has no interface number 0
[ 1718.741542][T21608] usb 3-1: config 0 interface 239 has no altsetting 0
[ 1718.778591][T21608] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1718.795551][T21608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1718.807724][T21608] usb 3-1: Product: syz
[ 1718.853590][T21608] usb 3-1: Manufacturer: syz
[ 1718.858383][T21608] usb 3-1: SerialNumber: syz
[ 1718.866222][T21608] usb 3-1: config 0 descriptor??
[ 1719.127141][T27058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1719.153405][T27058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1720.906780][T17977] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 60 seconds
[ 1722.178156][ T5142] udevd[5142]: worker [26102] /devices/virtual/block/nbd0 is taking a long time
[ 1724.236458][T10888] usb 3-1: USB disconnect, device number 110
[ 1724.710786][T27069] zonefs (nullb0) ERROR: Not a zoned block device
[ 1726.691191][T27110] syzkaller0: entered promiscuous mode
[ 1726.698174][T12467] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 1726.721672][T27110] syzkaller0: entered allmulticast mode
[ 1726.898428][T12467] usb 3-1: Using ep0 maxpacket: 32
[ 1726.932341][T12467] usb 3-1: config 0 has an invalid interface number: 239 but max is 0
[ 1726.964916][T12467] usb 3-1: config 0 has no interface number 0
[ 1727.002285][T12467] usb 3-1: config 0 interface 239 has no altsetting 0
[ 1727.048267][T12467] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1727.088360][T12467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1727.136379][T12467] usb 3-1: Product: syz
[ 1727.151026][T12467] usb 3-1: Manufacturer: syz
[ 1727.155918][T12467] usb 3-1: SerialNumber: syz
[ 1727.201916][T12467] usb 3-1: config 0 descriptor??
[ 1727.458384][T27109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1727.487250][T27109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1729.334235][T12467] usb 3-1: USB disconnect, device number 111
[ 1730.474009][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.508246][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1732.550169][T25334] Bluetooth: hci0: command 0x0406 tx timeout
[ 1733.826384][T27142] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5610'.
[ 1733.856807][T27142] ipvlan2: entered promiscuous mode
[ 1733.870016][T27142] bridge0: port 3(ipvlan2) entered blocking state
[ 1733.885654][T27142] bridge0: port 3(ipvlan2) entered disabled state
[ 1733.900675][T27142] ipvlan2: entered allmulticast mode
[ 1733.916387][T27142] bridge0: entered allmulticast mode
[ 1733.937767][T27142] ipvlan2: left allmulticast mode
[ 1733.951403][T27142] bridge0: left allmulticast mode
[ 1734.934177][T27181] syzkaller0: entered promiscuous mode
[ 1734.970230][T27181] syzkaller0: entered allmulticast mode
[ 1740.807915][T27253] syzkaller0: entered promiscuous mode
[ 1740.813901][T27253] syzkaller0: entered allmulticast mode
[ 1746.839760][T27330] syzkaller0: entered promiscuous mode
[ 1746.847735][T27330] syzkaller0: entered allmulticast mode
[ 1750.970462][T26922] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 90 seconds
[ 1751.934738][T27337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5653'.
[ 1751.954921][T27357] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1751.964498][T27357] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1751.973320][T27357] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1751.982139][T27357] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1753.128489][T27407] syzkaller0: entered promiscuous mode
[ 1753.134044][T27407] syzkaller0: entered allmulticast mode
[ 1753.729459][T27433] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5680'.
[ 1754.360460][T27452] syzkaller0: entered promiscuous mode
[ 1754.365993][T27452] syzkaller0: entered allmulticast mode
[ 1755.092499][T27470] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5694'.
[ 1755.848054][   T28] audit: type=1326 audit(1775636651.224:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27505 comm="syz.4.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5b99c819 code=0x7ffc0000
[ 1755.919943][   T28] audit: type=1326 audit(1775636651.224:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27505 comm="syz.4.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5b99c819 code=0x7ffc0000
[ 1755.942428][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1756.004951][   T28] audit: type=1326 audit(1775636651.224:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27505 comm="syz.4.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f0b5b99c819 code=0x7ffc0000
[ 1756.027431][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1756.037005][   T28] audit: type=1326 audit(1775636651.234:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27505 comm="syz.4.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5b99c819 code=0x7ffc0000
[ 1756.060059][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1756.096834][   T28] audit: type=1326 audit(1775636651.234:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27505 comm="syz.4.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b5b99c819 code=0x7ffc0000
[ 1756.729893][T27528] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5711'.
[ 1756.930664][T27536] syzkaller0: entered promiscuous mode
[ 1756.936550][T27536] syzkaller0: entered allmulticast mode
[ 1758.876463][T27583] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5726'.
[ 1758.894300][T27583] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5726'.
[ 1760.794300][T27631] syzkaller0: entered promiscuous mode
[ 1760.801587][T27631] syzkaller0: entered allmulticast mode
[ 1760.811483][T27628] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5739'.
[ 1760.829511][T27628] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5739'.
[ 1762.443013][T27667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5750'.
[ 1762.459238][T27667] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5750'.
[ 1767.229192][T27741] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5769'.
[ 1768.266873][T27755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5775'.
[ 1768.872449][T27778] misc userio: Invalid payload size
[ 1768.891692][T27778] misc userio: No port type given on /dev/userio
[ 1769.097736][T27783] loop2: detected capacity change from 0 to 7
[ 1769.131473][T27783] Dev loop2: unable to read RDB block 7
[ 1769.137523][T27783]  loop2: AHDI p1 p2 p3
[ 1769.166830][T27783] loop2: partition table partially beyond EOD, truncated
[ 1769.216199][T27783] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1769.276169][T27783] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1769.518760][T27800] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5787'.
[ 1769.583762][ T5142] Dev loop2: unable to read RDB block 7
[ 1769.596552][ T5142]  loop2: AHDI p1 p2 p3
[ 1769.610455][ T5142] loop2: partition table partially beyond EOD, truncated
[ 1769.626802][ T5142] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1769.658119][ T5142] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1770.029651][ T5142] Dev loop2: unable to read RDB block 7
[ 1770.076492][ T5142]  loop2: AHDI p1 p2 p3
[ 1770.112026][ T5142] loop2: partition table partially beyond EOD, truncated
[ 1770.192806][ T5142] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1770.242560][ T5142] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1770.832123][T27830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5797'.
[ 1772.120602][T27873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5807'.
[ 1774.272888][T27922] syzkaller0: entered promiscuous mode
[ 1774.296930][T27922] syzkaller0: entered allmulticast mode
[ 1780.739596][T27986] syzkaller0: entered promiscuous mode
[ 1780.755913][T27986] syzkaller0: entered allmulticast mode
[ 1781.049102][T26922] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 120 seconds
[ 1785.664785][T28019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5846'.
[ 1787.434737][T28043] syzkaller0: entered promiscuous mode
[ 1787.434757][T28043] syzkaller0: entered allmulticast mode
[ 1791.922760][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.929212][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1793.423926][T28058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5854'.
[ 1793.517585][T28077] netlink: 'syz.4.5859': attribute type 1 has an invalid length.
[ 1793.529332][T28077] netlink: 'syz.4.5859': attribute type 1 has an invalid length.
[ 1793.568522][T28058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5854'.
[ 1793.715105][T28085] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5861'.
[ 1793.988458][T25334] Bluetooth: hci1: command 0x0406 tx timeout
[ 1795.660989][T28128] netlink: 'syz.8.5870': attribute type 1 has an invalid length.
[ 1795.669849][T28128] netlink: 'syz.8.5870': attribute type 1 has an invalid length.
[ 1795.761606][T28120] syzkaller0: entered promiscuous mode
[ 1795.778177][T28120] syzkaller0: entered allmulticast mode
[ 1800.663285][T28170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5879'.
[ 1801.687075][T28185] misc userio: Invalid payload size
[ 1801.693539][T28185] misc userio: No port type given on /dev/userio
[ 1801.852212][T28182] netlink: 'syz.8.5881': attribute type 1 has an invalid length.
[ 1802.200105][T28182] netlink: 'syz.8.5881': attribute type 1 has an invalid length.
[ 1802.388400][T28196] syzkaller0: entered promiscuous mode
[ 1802.393963][T28196] syzkaller0: entered allmulticast mode
[ 1803.390713][T28231] zonefs (nullb0) ERROR: Not a zoned block device
[ 1808.298550][T28243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5896'.
[ 1808.307812][T28243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5896'.
[ 1808.795254][T28256] zonefs (nullb0) ERROR: Not a zoned block device
[ 1809.465995][T12472] usb 10-1: new high-speed USB device number 95 using dummy_hcd
[ 1809.658017][T12472] usb 10-1: Using ep0 maxpacket: 16
[ 1809.684711][T12472] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1809.698107][T12472] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1809.737633][T12472] usb 10-1: config 0 descriptor??
[ 1809.771190][T12472] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1810.735232][T28273] syzkaller0: entered promiscuous mode
[ 1810.765338][T28273] syzkaller0: entered allmulticast mode
[ 1811.117367][T26922] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 150 seconds
[ 1811.606032][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1811.671254][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1811.755207][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1812.028246][T12472] gspca_sonixj: i2c_w8 err -71
[ 1812.033248][T12472] sonixj: probe of 10-1:0.0 failed with error -71
[ 1812.051478][T12472] usb 10-1: USB disconnect, device number 95
[ 1812.507943][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1812.571712][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1812.738432][T28293] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5907'.
[ 1812.757732][T28293] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1812.923203][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1813.005989][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1813.039346][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1816.071524][T28289] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5906'.
[ 1816.103609][T28295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5908'.
[ 1816.328363][T28295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5908'.
[ 1816.508680][T28305] zonefs (nullb0) ERROR: Not a zoned block device
[ 1817.245797][T28315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5912'.
[ 1817.602150][T28327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5916'.
[ 1817.618762][T28327] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1818.017410][T28336] syzkaller0: entered promiscuous mode
[ 1818.027598][T28336] syzkaller0: entered allmulticast mode
[ 1818.596610][T28353] zonefs (nullb0) ERROR: Not a zoned block device
[ 1819.306131][T28357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5922'.
[ 1819.705796][T12472] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1819.921456][T12472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1819.936363][T12472] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1819.946897][T12472] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1819.962433][T12472] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.10
[ 1819.971942][T12472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1819.982886][T12472] usb 5-1: config 0 descriptor??
[ 1820.411416][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.424341][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.452940][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.460700][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.468248][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.475867][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.483424][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.503848][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.511608][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.519040][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.526662][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.572435][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.580036][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.587647][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.595184][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.602799][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.618356][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.626128][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.639146][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.647061][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.655179][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.662668][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.670323][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.677715][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.685415][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.692899][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.729756][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.737515][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.745245][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.753328][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.760768][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.778203][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.785698][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.800081][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.807535][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.815275][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.822724][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.831086][T12472] dragonrise 0003:0079:0011.0008: unknown main item tag 0x0
[ 1820.936526][T12472] dragonrise 0003:0079:0011.0008: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.4-1/input0
[ 1820.968488][T12472] usb 5-1: USB disconnect, device number 62
[ 1821.068597][T28363] fido_id[28363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1824.064149][T28350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5920'.
[ 1824.074660][T28340] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5919'.
[ 1824.084136][T28340] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5919'.
[ 1825.104695][T28405] misc userio: Invalid payload size
[ 1825.135759][T28405] misc userio: No port type given on /dev/userio
[ 1825.338409][T10888] usb 9-1: new full-speed USB device number 81 using dummy_hcd
[ 1825.362939][T28409] zonefs (nullb0) ERROR: Not a zoned block device
[ 1825.576649][T10888] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1825.713373][T10888] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1825.952704][T10888] usb 9-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[ 1825.972810][T10888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1825.997318][T28410] loop2: detected capacity change from 0 to 7
[ 1826.012000][T10888] usb 9-1: Product: syz
[ 1826.016552][T10888] usb 9-1: Manufacturer: syz
[ 1826.033747][T10888] usb 9-1: SerialNumber: syz
[ 1826.034546][T26130] Dev loop2: unable to read RDB block 7
[ 1826.045971][T10888] usb 9-1: config 0 descriptor??
[ 1826.059881][T26130]  loop2: AHDI p1 p2 p3
[ 1826.064218][T26130] loop2: partition table partially beyond EOD, truncated
[ 1826.113047][T26130] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1826.132098][T26130] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1826.165216][T28410] Dev loop2: unable to read RDB block 7
[ 1826.172243][T28410]  loop2: AHDI p1 p2 p3
[ 1826.185669][T28410] loop2: partition table partially beyond EOD, truncated
[ 1826.193811][T28410] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1826.201260][T28410] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1826.344592][T28400] qrtr: Invalid version 18
[ 1826.857187][T28422] syzkaller0: entered promiscuous mode
[ 1826.881755][T28422] syzkaller0: entered allmulticast mode
[ 1827.147391][T12467] usb 9-1: USB disconnect, device number 81
[ 1832.248285][T21664] usb 10-1: new high-speed USB device number 96 using dummy_hcd
[ 1832.438930][T21664] usb 10-1: Using ep0 maxpacket: 8
[ 1832.484962][T21664] usb 10-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[ 1832.521170][T21664] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[ 1832.554626][T21664] usb 10-1: Product: syz
[ 1832.568747][T21664] usb 10-1: Manufacturer: syz
[ 1832.579420][T21664] usb 10-1: SerialNumber: syz
[ 1832.598303][T21664] usb 10-1: config 0 descriptor??
[ 1832.609423][T21664] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[ 1832.976734][T28490] misc userio: Invalid payload size
[ 1832.991007][T28490] misc userio: No port type given on /dev/userio
[ 1833.127608][T28493] loop2: detected capacity change from 0 to 7
[ 1833.142753][T28493] Dev loop2: unable to read RDB block 7
[ 1833.150532][T28493]  loop2: AHDI p1 p2 p3
[ 1833.155047][T28493] loop2: partition table partially beyond EOD, truncated
[ 1833.178374][T28493] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1833.226166][T28493] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1833.236805][T21664] gspca_sn9c2028: read1 error -71
[ 1833.251395][T21664] sn9c2028: probe of 10-1:0.0 failed with error -71
[ 1833.264882][T21664] usb 10-1: USB disconnect, device number 96
[ 1833.538489][ T5142] Dev loop2: unable to read RDB block 7
[ 1833.555562][ T5142]  loop2: AHDI p1 p2 p3
[ 1833.573576][ T5142] loop2: partition table partially beyond EOD, truncated
[ 1833.604628][ T5142] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1833.619661][ T5142] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1833.814284][ T5142] Dev loop2: unable to read RDB block 7
[ 1833.831679][ T5142]  loop2: AHDI p1 p2 p3
[ 1833.848664][ T5142] loop2: partition table partially beyond EOD, truncated
[ 1833.865568][ T5142] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1833.882641][ T5142] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1834.527090][T28510] syzkaller0: entered promiscuous mode
[ 1834.572194][T28510] syzkaller0: entered allmulticast mode
[ 1834.627059][T28519] syzkaller0: entered promiscuous mode
[ 1834.633163][T28519] syzkaller0: entered allmulticast mode
[ 1834.943000][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1835.128012][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1835.203762][T28523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5950'.
[ 1835.212952][T28523] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1835.233008][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1835.260497][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1839.743858][T28544] syzkaller0: entered promiscuous mode
[ 1839.763202][T28544] syzkaller0: entered allmulticast mode
[ 1839.848039][T12471] IPVS: starting estimator thread 0...
[ 1839.938748][T28550] IPVS: using max 19 ests per chain, 45600 per kthread
[ 1840.106591][T28559] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5959'.
[ 1840.238180][T12467] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1840.438700][T12467] usb 5-1: Using ep0 maxpacket: 16
[ 1840.474765][T12467] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1840.507815][T12467] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1840.544964][T12467] usb 5-1: config 0 descriptor??
[ 1840.592662][T12467] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1840.871272][T28567] syzkaller0: entered promiscuous mode
[ 1840.888097][T28567] syzkaller0: entered allmulticast mode
[ 1841.193775][T26922] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 180 seconds
[ 1842.635994][T12467] gspca_sonixj: reg_r err -71
[ 1842.654022][T12467] sonixj: probe of 5-1:0.0 failed with error -71
[ 1842.665527][T12467] usb 5-1: USB disconnect, device number 63
[ 1846.244887][T28607] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5968'.
[ 1846.278636][T28607] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1847.472654][T28634] syzkaller0: entered promiscuous mode
[ 1847.481264][T28634] syzkaller0: entered allmulticast mode
[ 1847.579444][T28642] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5980'.
[ 1847.590293][T28642] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1847.597358][T28635] syzkaller0: entered promiscuous mode
[ 1847.604661][T28635] syzkaller0: entered allmulticast mode
[ 1847.691114][T28639] syzkaller0: entered promiscuous mode
[ 1847.704690][T28639] syzkaller0: entered allmulticast mode
[ 1850.700951][ T5142] udevd[5142]: worker [26102] /devices/virtual/block/nbd0 timeout; kill it
[ 1850.725821][ T5142] udevd[5142]: seq 27727 '/devices/virtual/block/nbd0' killed
[ 1853.238268][T28677] syzkaller0: entered promiscuous mode
[ 1853.243826][T28677] syzkaller0: entered allmulticast mode
[ 1853.360270][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.367280][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1854.002976][T28705] syzkaller0: entered promiscuous mode
[ 1854.010208][T28705] syzkaller0: entered allmulticast mode
[ 1854.303140][T28716] misc userio: Invalid payload size
[ 1854.316016][T28716] misc userio: No port type given on /dev/userio
[ 1854.507147][T28718] loop2: detected capacity change from 0 to 7
[ 1854.550498][T26130] Dev loop2: unable to read RDB block 7
[ 1854.565819][T26130]  loop2: AHDI p1 p2 p3
[ 1854.572594][T26130] loop2: partition table partially beyond EOD, truncated
[ 1854.583759][T26130] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1854.594908][T26130] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1854.604444][T28718] Dev loop2: unable to read RDB block 7
[ 1854.648370][T28718]  loop2: AHDI p1 p2 p3
[ 1854.681462][T28718] loop2: partition table partially beyond EOD, truncated
[ 1854.782678][T28718] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1854.792553][T28718] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1855.200953][ T5142] Dev loop2: unable to read RDB block 7
[ 1855.208099][ T5142]  loop2: AHDI p1 p2 p3
[ 1855.212670][ T5142] loop2: partition table partially beyond EOD, truncated
[ 1855.234977][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1855.242566][ T5142] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1855.250003][ T5142] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1855.925859][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1855.962004][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1860.189448][T28711] syzkaller0: entered promiscuous mode
[ 1860.195051][T28711] syzkaller0: entered allmulticast mode
[ 1860.972821][T28784] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1861.100380][T28788] syzkaller0: entered promiscuous mode
[ 1861.105968][T28788] syzkaller0: entered allmulticast mode
[ 1864.951622][    C1] icmp: detected local route for 169.254.77.26 during ICMP sending, src 169.254.169.254
[ 1866.323390][T28833] io-wq is not configured for unbound workers
[ 1866.921488][T28862] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[ 1866.978399][T28862] syzkaller0: entered promiscuous mode
[ 1866.983958][T28862] syzkaller0: entered allmulticast mode
[ 1867.088309][T11610] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 1867.302014][T11610] usb 3-1: Using ep0 maxpacket: 16
[ 1867.338550][T11610] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1867.346676][T11610] usb 3-1: config 0 has no interface number 0
[ 1867.361502][T11610] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1867.371208][T11610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1867.406185][T11610] usb 3-1: Product: syz
[ 1867.416397][T11610] usb 3-1: Manufacturer: syz
[ 1867.426908][T11610] usb 3-1: SerialNumber: syz
[ 1867.439505][T11610] usb 3-1: config 0 descriptor??
[ 1867.469332][T11610] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1867.715165][T28854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1867.759234][T28854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1867.988506][T11610] gspca_spca1528: reg_w err -110
[ 1868.018885][T11610] spca1528: probe of 3-1:0.1 failed with error -110
[ 1868.709769][    C1] icmp: detected local route for 169.254.77.26 during ICMP sending, src 169.254.169.254
[ 1869.305568][T12471] usb 3-1: USB disconnect, device number 112
[ 1871.283473][T26922] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 210 seconds
[ 1872.825498][   T28] audit: type=1326 audit(1775636768.204:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28926 comm="syz.4.6036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b5b99c819 code=0x0
[ 1873.041131][T28936] team_slave_0: entered promiscuous mode
[ 1873.046997][T28936] team_slave_1: entered promiscuous mode
[ 1873.060476][T28936] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1873.248241][T28943] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[ 1873.289090][T28943] syzkaller0: entered promiscuous mode
[ 1873.294733][T28943] syzkaller0: entered allmulticast mode
[ 1877.274865][    C1] icmp: detected local route for 169.254.77.26 during ICMP sending, src 169.254.169.254
[ 1878.305918][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6042'.
[ 1878.675028][T28993] misc userio: Invalid payload size
[ 1878.694716][T28993] misc userio: No port type given on /dev/userio
[ 1878.842795][T28998] loop2: detected capacity change from 0 to 7
[ 1878.867403][T28998] Dev loop2: unable to read RDB block 7
[ 1878.873832][T28998]  loop2: AHDI p1 p2 p3
[ 1878.911360][T28998] loop2: partition table partially beyond EOD, truncated
[ 1878.922796][T28998] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1878.930496][T28998] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1879.148257][T21664] usb 10-1: new high-speed USB device number 97 using dummy_hcd
[ 1879.160784][T29006] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[ 1879.217154][T29006] syzkaller0: entered promiscuous mode
[ 1879.223238][T29006] syzkaller0: entered allmulticast mode
[ 1879.353305][T21664] usb 10-1: Using ep0 maxpacket: 8
[ 1879.401470][T21664] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1879.493927][T21664] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1879.528046][T21664] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1879.566895][T21664] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1879.628465][T21664] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1879.674739][T21664] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1879.705339][T21664] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1879.986608][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1879.993334][T21664] usb 10-1: GET_CAPABILITIES returned 0
[ 1879.999187][T21664] usbtmc 10-1:16.0: can't read capabilities
[ 1880.100743][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1880.209098][T11610] usb 10-1: USB disconnect, device number 97
[ 1880.383654][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1884.801562][T29051] misc userio: Invalid payload size
[ 1884.812100][T29051] misc userio: No port type given on /dev/userio
[ 1884.943847][T29058] loop2: detected capacity change from 0 to 7
[ 1884.972588][T20025] Dev loop2: unable to read RDB block 7
[ 1884.989786][T20025]  loop2: AHDI p1 p2 p3
[ 1884.999444][T20025] loop2: partition table partially beyond EOD, truncated
[ 1885.007412][T20025] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1885.037755][T20025] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1885.140579][T29058] Dev loop2: unable to read RDB block 7
[ 1885.156911][T29058]  loop2: AHDI p1 p2 p3
[ 1885.166774][T29058] loop2: partition table partially beyond EOD, truncated
[ 1885.176097][T29058] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1885.183870][T29058] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1885.754663][ T5142] Dev loop2: unable to read RDB block 7
[ 1885.794614][ T5142]  loop2: AHDI p1 p2 p3
[ 1885.818080][ T5142] loop2: partition table partially beyond EOD, truncated
[ 1885.843065][ T5142] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1885.870474][ T5142] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1886.333826][ T5142] Dev loop2: unable to read RDB block 7
[ 1886.345292][ T5142]  loop2: AHDI p1 p2 p3
[ 1886.368148][ T5142] loop2: partition table partially beyond EOD, truncated
[ 1886.375460][ T5142] loop2: p1 start 1601398130 is beyond EOD, truncated
[ 1886.407384][ T5142] loop2: p2 start 1702059890 is beyond EOD, truncated
[ 1886.586136][T25334] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1886.611622][T25334] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1886.624549][T25334] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1886.639523][T25334] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1886.650353][T25334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1886.660228][T25334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1886.715999][ T1143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1886.766066][ T1143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1887.111329][ T1143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1887.122657][ T1143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1887.354895][ T1143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1887.392321][ T1143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1887.670876][ T1143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1887.682257][ T1143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1888.051314][T29083] chnl_net:caif_netlink_parms(): no params data found
[ 1888.413701][T29083] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1888.421147][T29083] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1888.429337][T29083] bridge_slave_0: entered allmulticast mode
[ 1888.436745][T29083] bridge_slave_0: entered promiscuous mode
[ 1888.446774][T29083] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1888.454401][T29083] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1888.462183][T29083] bridge_slave_1: entered allmulticast mode
[ 1888.470512][T29083] bridge_slave_1: entered promiscuous mode
[ 1888.508475][ T1143] tipc: Left network mode
[ 1888.532697][T29083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1888.546519][T29083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1888.679697][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1888.731797][T29083] team0: Port device team_slave_0 added
[ 1888.788760][T20029] Bluetooth: hci3: command tx timeout
[ 1888.992081][T29083] team0: Port device team_slave_1 added
[ 1889.370689][T29083] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1889.377747][T29083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1889.451087][T29083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1889.478448][T29083] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1889.491427][T29083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1889.526563][T29083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1890.180251][T29083] hsr_slave_0: entered promiscuous mode
[ 1890.194920][T29083] hsr_slave_1: entered promiscuous mode
[ 1890.207638][T29083] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1890.231036][T29083] Cannot create hsr debugfs directory
[ 1890.858118][T10888] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1890.977166][T20029] Bluetooth: hci3: command tx timeout
[ 1891.198056][T10888] usb 5-1: Using ep0 maxpacket: 32
[ 1891.334508][T10888] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[ 1891.473936][T10888] usb 5-1: config 0 has no interface number 0
[ 1891.624999][T10888] usb 5-1: config 0 interface 239 has no altsetting 0
[ 1891.871390][T10888] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1892.024990][T10888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1892.212285][T10888] usb 5-1: Product: syz
[ 1892.313814][T10888] usb 5-1: Manufacturer: syz
[ 1892.425769][T10888] usb 5-1: SerialNumber: syz
[ 1892.705771][T10888] usb 5-1: config 0 descriptor??
[ 1893.028394][T20029] Bluetooth: hci3: command tx timeout
[ 1893.063442][T29196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1893.074305][T29196] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1894.279011][T10888] usb 5-1: USB disconnect, device number 64
[ 1894.388927][ T1143] IPVS: stopping backup sync thread 24033 ...
[ 1894.601557][T29215] syzkaller0: entered promiscuous mode
[ 1894.623517][T29215] syzkaller0: entered allmulticast mode
[ 1894.818555][ T1143] hsr_slave_0: left promiscuous mode
[ 1894.844945][ T1143] hsr_slave_1: left promiscuous mode
[ 1894.870517][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1894.893771][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1894.914875][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1894.923933][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1894.942662][ T1143] bridge_slave_1: left allmulticast mode
[ 1894.974113][ T1143] bridge_slave_1: left promiscuous mode
[ 1894.994576][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1895.021024][ T1143] bridge_slave_0: left allmulticast mode
[ 1895.027157][ T1143] bridge_slave_0: left promiscuous mode
[ 1895.064648][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1895.108255][T20029] Bluetooth: hci3: command tx timeout
[ 1895.186943][ T1143] veth1_macvtap: left promiscuous mode
[ 1895.202117][ T1143] veth0_macvtap: left promiscuous mode
[ 1895.223436][ T1143] veth1_vlan: left promiscuous mode
[ 1895.229235][ T1143] veth0_vlan: left promiscuous mode
[ 1895.503272][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1896.218817][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1896.403423][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1896.595755][ T1143] team0 (unregistering): Port device team_slave_1 removed
[ 1896.689232][ T1143] team0 (unregistering): Port device team_slave_0 removed
[ 1896.787458][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1896.799998][ T1143] bond_slave_1 (unregistering): left promiscuous mode
[ 1896.891413][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1896.903085][ T1143] bond_slave_0 (unregistering): left promiscuous mode
[ 1897.606566][ T1143] bond0 (unregistering): Released all slaves
[ 1897.928610][T29244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6107'.
[ 1898.417021][T22018] usb 10-1: new high-speed USB device number 98 using dummy_hcd
[ 1898.708131][T22018] usb 10-1: Using ep0 maxpacket: 32
[ 1898.763120][T22018] usb 10-1: config 0 has an invalid interface number: 239 but max is 0
[ 1898.840597][T22018] usb 10-1: config 0 has no interface number 0
[ 1898.898776][T22018] usb 10-1: config 0 interface 239 has no altsetting 0
[ 1898.990942][T22018] usb 10-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1899.050076][T22018] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1899.111580][T22018] usb 10-1: Product: syz
[ 1899.157562][T22018] usb 10-1: Manufacturer: syz
[ 1899.204543][T22018] usb 10-1: SerialNumber: syz
[ 1899.424820][T22018] usb 10-1: config 0 descriptor??
[ 1899.800237][T29252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1899.810905][T29252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1900.868610][    C0] icmp: detected local route for 169.254.77.26 during ICMP sending, src 169.254.169.254
[ 1901.354398][T17977] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 240 seconds
[ 1902.031500][T22018] usb 10-1: USB disconnect, device number 98
[ 1902.692692][ T1143] IPVS: stop unused estimator thread 0...
[ 1903.133978][T29083] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1903.151933][T29083] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1903.176545][T29083] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1903.238658][T12471] usb 10-1: new high-speed USB device number 99 using dummy_hcd
[ 1903.246578][T29083] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1903.430251][T12471] usb 10-1: Using ep0 maxpacket: 32
[ 1903.442155][T12471] usb 10-1: config 0 has an invalid interface number: 239 but max is 0
[ 1903.460050][T12471] usb 10-1: config 0 has no interface number 0
[ 1903.476655][T12471] usb 10-1: config 0 interface 239 has no altsetting 0
[ 1903.500539][T12471] usb 10-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=c0.ce
[ 1903.510560][T12471] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1903.528629][T12471] usb 10-1: Product: syz
[ 1903.532964][T12471] usb 10-1: Manufacturer: syz
[ 1903.537701][T12471] usb 10-1: SerialNumber: syz
[ 1903.563997][T12471] usb 10-1: config 0 descriptor??
[ 1903.688693][T29083] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1903.713027][   T28] audit: type=1326 audit(1775636799.084:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29307 comm="syz.8.6117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f9e5c996597 code=0x0
[ 1903.771610][T29083] 8021q: adding VLAN 0 to HW filter on device team0
[ 1903.786306][T29289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1903.795458][T29289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1903.832649][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1903.840012][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1903.847148][T12471] usb 10-1: USB disconnect, device number 99
[ 1903.879023][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1903.886302][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1904.172027][T29314] syzkaller0: entered promiscuous mode
[ 1904.177719][T29314] syzkaller0: entered allmulticast mode
[ 1904.746600][T29083] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1904.834390][T29083] veth0_vlan: entered promiscuous mode
[ 1904.849363][T29083] veth1_vlan: entered promiscuous mode
[ 1906.091786][T29342] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.6125'.
[ 1906.219281][T29083] veth0_macvtap: entered promiscuous mode
[ 1906.254749][T29083] veth1_macvtap: entered promiscuous mode
[ 1906.335570][T29083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1906.346460][T29346] SET target dimension over the limit!
[ 1906.422121][T29083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1906.441897][T29083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1906.455390][T29083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1906.467655][T29083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1906.480348][T29083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1906.491483][T29083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1906.502175][T29083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1906.521376][T29083] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1906.621130][T29083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1906.643714][T29083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1906.658100][T29083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1906.675464][T29083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1906.686071][T29083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1906.714014][T29083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1906.742893][T29083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1906.769065][T29083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1906.787550][T29083] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1906.800762][T29355] syzkaller0: entered promiscuous mode
[ 1906.807822][T29355] syzkaller0: entered allmulticast mode
[ 1906.830757][T29083] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1906.840302][T29083] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1906.851994][T29083] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1906.864579][T29083] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1906.945575][T29359] binder: 29358:29359 ioctl c0306201 0 returned -14
[ 1907.405610][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1907.438504][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1907.543020][T11147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1907.566330][T11147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1908.968968][T29374] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6134'.
[ 1909.245426][T29380] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.6135'.
[ 1909.483251][T29386] netlink: 'syz.8.6136': attribute type 1 has an invalid length.
[ 1909.516711][T29386] netlink: 'syz.8.6136': attribute type 1 has an invalid length.
[ 1909.589239][T29386] netlink: 'syz.8.6136': attribute type 1 has an invalid length.
[ 1909.618020][T29386] netlink: 'syz.8.6136': attribute type 1 has an invalid length.
[ 1909.841177][T29392] syzkaller0: entered promiscuous mode
[ 1909.867065][T29392] syzkaller0: entered allmulticast mode
[ 1910.021580][T29396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1912.039245][T29411] syzkaller0: entered promiscuous mode
[ 1912.044840][T29411] syzkaller0: entered allmulticast mode
[ 1913.250185][T29428] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.6147'.
[ 1913.392805][T29436] netlink: 'syz.4.6149': attribute type 1 has an invalid length.
[ 1913.427354][T29436] netlink: 'syz.4.6149': attribute type 1 has an invalid length.
[ 1913.448203][T29436] netlink: 'syz.4.6149': attribute type 1 has an invalid length.
[ 1913.463405][T29436] netlink: 'syz.4.6149': attribute type 1 has an invalid length.
[ 1914.800135][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.806538][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1915.155425][T29463] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1915.634766][T29478] netlink: 'syz.2.6160': attribute type 1 has an invalid length.
[ 1915.748227][T29478] netlink: 'syz.2.6160': attribute type 1 has an invalid length.
[ 1915.756157][T29478] netlink: 'syz.2.6160': attribute type 1 has an invalid length.
[ 1915.783120][T29478] netlink: 'syz.2.6160': attribute type 1 has an invalid length.
[ 1917.490867][T29494] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1918.142890][T29509] netlink: 'syz.9.6172': attribute type 1 has an invalid length.
[ 1918.218408][T29509] netlink: 'syz.9.6172': attribute type 1 has an invalid length.
[ 1918.263759][T29509] netlink: 'syz.9.6172': attribute type 1 has an invalid length.
[ 1918.998892][T29509] netlink: 'syz.9.6172': attribute type 1 has an invalid length.
[ 1919.477543][T29524] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1920.471351][T29543] netlink: 'syz.4.6185': attribute type 1 has an invalid length.
[ 1920.496240][T29543] netlink: 'syz.4.6185': attribute type 1 has an invalid length.
[ 1922.954797][T29578] validate_nla: 2 callbacks suppressed
[ 1922.954816][T29578] netlink: 'syz.9.6196': attribute type 1 has an invalid length.
[ 1923.009017][T29578] netlink: 'syz.9.6196': attribute type 1 has an invalid length.
[ 1923.031685][T29578] netlink: 'syz.9.6196': attribute type 1 has an invalid length.
[ 1923.047947][T29578] netlink: 'syz.9.6196': attribute type 1 has an invalid length.
[ 1924.980233][T29612] netlink: 'syz.8.6208': attribute type 1 has an invalid length.
[ 1924.995442][T29612] netlink: 'syz.8.6208': attribute type 1 has an invalid length.
[ 1925.018111][T29612] netlink: 'syz.8.6208': attribute type 1 has an invalid length.
[ 1925.060345][T29612] netlink: 'syz.8.6208': attribute type 1 has an invalid length.
[ 1925.417977][    T8] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1925.628408][    T8] usb 3-1: Using ep0 maxpacket: 16
[ 1925.663537][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1926.569152][    T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1926.760821][    T8] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1926.770168][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1926.807206][    T8] usb 3-1: config 0 descriptor??
[ 1928.650861][T29655] netlink: 'syz.9.6219': attribute type 1 has an invalid length.
[ 1928.674190][T29655] netlink: 'syz.9.6219': attribute type 1 has an invalid length.
[ 1928.699572][T29655] netlink: 'syz.9.6219': attribute type 1 has an invalid length.
[ 1928.728136][T29655] netlink: 'syz.9.6219': attribute type 1 has an invalid length.
[ 1928.915862][T21608] usb 3-1: USB disconnect, device number 113
[ 1929.553015][T29660] syzkaller0: entered promiscuous mode
[ 1929.579773][T29660] syzkaller0: entered allmulticast mode
[ 1931.446505][T26922] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 270 seconds
[ 1932.238149][    C0] icmp: detected local route for 169.254.77.26 during ICMP sending, src 169.254.169.254
[ 1936.630088][T29711] netlink: 'syz.4.6231': attribute type 1 has an invalid length.
[ 1936.668726][T29711] netlink: 'syz.4.6231': attribute type 1 has an invalid length.
[ 1936.676848][T29711] netlink: 'syz.4.6231': attribute type 1 has an invalid length.
[ 1936.691442][T29711] netlink: 'syz.4.6231': attribute type 1 has an invalid length.
[ 1937.677074][T29739] binder: 29738:29739 ioctl c0306201 0 returned -14
[ 1937.719683][T29736] syzkaller0: entered promiscuous mode
[ 1937.739416][T29736] syzkaller0: entered allmulticast mode
[ 1938.234672][T29744] syzkaller0: entered promiscuous mode
[ 1938.240570][T29744] syzkaller0: entered allmulticast mode
[ 1938.364129][T29753] netlink: 'syz.8.6245': attribute type 1 has an invalid length.
[ 1938.390181][T29753] netlink: 'syz.8.6245': attribute type 1 has an invalid length.
[ 1938.412014][T29753] netlink: 'syz.8.6245': attribute type 1 has an invalid length.
[ 1938.427012][T29753] netlink: 'syz.8.6245': attribute type 1 has an invalid length.
[ 1938.958716][T29772] binder: 29770:29772 ioctl c0306201 0 returned -14
[ 1939.608258][T29782] syzkaller0: entered promiscuous mode
[ 1939.613781][T29782] syzkaller0: entered allmulticast mode
[ 1940.100767][T22018] usb 3-1: new full-speed USB device number 114 using dummy_hcd
[ 1940.101225][T29794] netlink: 'syz.9.6257': attribute type 1 has an invalid length.
[ 1940.127173][T29794] netlink: 'syz.9.6257': attribute type 1 has an invalid length.
[ 1940.342513][T22018] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1940.368090][T22018] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1940.438310][T29800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6259'.
[ 1940.465218][T29800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6259'.
[ 1940.467530][T22018] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[ 1940.495067][T22018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1940.521982][T29802] binder: 29798:29802 ioctl c0306201 0 returned -14
[ 1940.532270][T22018] usb 3-1: Product: syz
[ 1940.542381][T22018] usb 3-1: Manufacturer: syz
[ 1940.547055][T22018] usb 3-1: SerialNumber: syz
[ 1940.586564][T22018] usb 3-1: config 0 descriptor??
[ 1941.108577][T12472] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1941.156038][T29820] syzkaller0: entered promiscuous mode
[ 1941.167978][T29820] syzkaller0: entered allmulticast mode
[ 1941.298297][T12472] usb 5-1: Using ep0 maxpacket: 16
[ 1941.336924][T12472] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1941.367142][T12472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1941.383556][T22018] usb 3-1: USB disconnect, device number 114
[ 1941.402504][T12472] usb 5-1: config 0 descriptor??
[ 1941.419704][T12472] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1942.013454][T29838] binder: 29836:29838 ioctl c0306201 0 returned -14
[ 1942.243966][T12472] gspca_sonixj: reg_r err -32
[ 1942.270103][T12472] sonixj: probe of 5-1:0.0 failed with error -32
[ 1943.594283][T29859] syzkaller0: entered promiscuous mode
[ 1943.617532][T29859] syzkaller0: entered allmulticast mode
[ 1943.885056][T22169] usb 5-1: USB disconnect, device number 65
[ 1943.964412][T29871] binder: 29870:29871 ioctl c0306201 0 returned -14
[ 1944.077027][T29876] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6280'.
[ 1944.318732][   T28] audit: type=1326 audit(1775636839.704:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29883 comm="syz.2.6284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fedd1796597 code=0x0
[ 1944.628426][    T8] usb 10-1: new high-speed USB device number 100 using dummy_hcd
[ 1944.818326][    T8] usb 10-1: Using ep0 maxpacket: 16
[ 1944.832747][    T8] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1944.860032][    T8] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1944.874748][    T8] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1944.886967][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1944.906508][    T8] usb 10-1: config 0 descriptor??
[ 1945.128408][T29899] syzkaller0: entered promiscuous mode
[ 1945.134057][T29899] syzkaller0: entered allmulticast mode
[ 1945.236244][T29901] binder: 29900:29901 ioctl c0306201 0 returned -14
[ 1945.290495][    T8] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1945.479201][    T8] usb 5-1: Using ep0 maxpacket: 16
[ 1945.492218][    T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1945.528039][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1945.573562][    T8] usb 5-1: config 0 descriptor??
[ 1945.598344][    T8] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1945.737765][T29914] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1945.799487][T29919] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.6295'.
[ 1945.925266][T29923] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6296'.
[ 1946.404113][    T8] gspca_sonixj: reg_r err -32
[ 1946.412814][    T8] sonixj: probe of 5-1:0.0 failed with error -32
[ 1946.522313][   T28] audit: type=1326 audit(1775636841.904:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29938 comm="syz.2.6300" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedd179c819 code=0x0
[ 1947.390299][T22169] usb 10-1: USB disconnect, device number 100
[ 1947.600936][T29959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1947.639333][T29964] netlink: 1624 bytes leftover after parsing attributes in process `syz.9.6305'.
[ 1947.883915][T29974] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6309'.
[ 1948.072719][T22169] usb 5-1: USB disconnect, device number 66
[ 1948.148298][T22018] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1948.356807][T22018] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1948.380248][T22018] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.10
[ 1948.401652][T22018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1948.423662][T22018] usb 3-1: config 0 descriptor??
[ 1948.450719][T22018] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1948.507509][   T28] audit: type=1326 audit(1775636843.884:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29992 comm="syz.4.6312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f0b5b996597 code=0x0
[ 1949.218347][T30011] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.6317'.
[ 1949.398098][T22169] usb 10-1: new high-speed USB device number 101 using dummy_hcd
[ 1949.578305][T22169] usb 10-1: Using ep0 maxpacket: 16
[ 1949.598896][T22169] usb 10-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1949.618995][T22169] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1949.636811][T22169] usb 10-1: config 0 descriptor??
[ 1949.656412][T22169] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1950.188144][T21608] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 1950.378158][T21608] usb 5-1: Using ep0 maxpacket: 32
[ 1950.386598][T21608] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1950.396848][T21608] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1950.410570][T21608] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[ 1950.420170][T21608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1950.428872][T21608] usb 5-1: Product: syz
[ 1950.434394][T21608] usb 5-1: Manufacturer: syz
[ 1950.450053][T21608] usb 5-1: SerialNumber: syz
[ 1950.470719][T22169] gspca_sonixj: reg_r err -32
[ 1950.478075][T22169] sonixj: probe of 10-1:0.0 failed with error -32
[ 1950.684211][T21608] usb 5-1: Cannot retrieve CPort count: -32
[ 1950.692821][T21608] usb 5-1: Cannot retrieve CPort count: -32
[ 1950.705224][T21608] es2_ap_driver: probe of 5-1:7.0 failed with error -32
[ 1950.719184][T21608] usb 5-1: USB disconnect, device number 67
[ 1950.919633][T22018] usb 3-1: USB disconnect, device number 115
[ 1951.143658][   T28] audit: type=1326 audit(1775636846.524:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30048 comm="syz.8.6328" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f9e5c996597 code=0x0
[ 1952.119959][   T28] audit: type=1326 audit(1775636847.504:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30063 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd179c819 code=0x7ffc0000
[ 1952.195601][   T28] audit: type=1326 audit(1775636847.504:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30063 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd179c819 code=0x7ffc0000
[ 1952.236900][T30078] validate_nla: 2 callbacks suppressed
[ 1952.236917][T30078] netlink: 'syz.4.6334': attribute type 3 has an invalid length.
[ 1952.251617][T21608] usb 10-1: USB disconnect, device number 101
[ 1952.274973][T30078] netlink: 'syz.4.6334': attribute type 3 has an invalid length.
[ 1952.302978][   T28] audit: type=1326 audit(1775636847.524:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30063 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fedd179c819 code=0x7ffc0000
[ 1952.376971][   T28] audit: type=1326 audit(1775636847.534:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30063 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd179c819 code=0x7ffc0000
[ 1952.433849][   T28] audit: type=1326 audit(1775636847.534:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30063 comm="syz.2.6331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd179c819 code=0x7ffc0000
[ 1952.464669][T30078] netlink: 'syz.4.6334': attribute type 3 has an invalid length.
[ 1952.479847][T30078] netlink: 'syz.4.6334': attribute type 3 has an invalid length.
[ 1952.488684][T30078] netlink: 'syz.4.6334': attribute type 3 has an invalid length.
[ 1952.555505][T30078] netlink: 'syz.4.6334': attribute type 3 has an invalid length.
[ 1952.577514][T30078] netlink: 'syz.4.6334': attribute type 3 has an invalid length.
[ 1952.587263][T30078] netlink: 'syz.4.6334': attribute type 3 has an invalid length.
[ 1952.609781][T30078] netlink: 'syz.4.6334': attribute type 3 has an invalid length.
[ 1952.628530][T30078] netlink: 'syz.4.6334': attribute type 3 has an invalid length.
[ 1954.290786][   T28] audit: type=1326 audit(1775636849.674:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30104 comm="syz.9.6343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f0128b96597 code=0x0
[ 1954.408348][T30110] binder: 30109:30110 ioctl c0306201 0 returned -14
[ 1954.516864][T30112] syzkaller0: entered promiscuous mode
[ 1954.532303][T30112] syzkaller0: entered allmulticast mode
[ 1954.618048][T22018] usb 9-1: new high-speed USB device number 83 using dummy_hcd
[ 1954.808089][T22018] usb 9-1: Using ep0 maxpacket: 16
[ 1954.820017][T22018] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1954.836994][T22018] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1954.856845][T22018] usb 9-1: config 0 descriptor??
[ 1954.874475][T22018] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1955.675388][T22018] gspca_sonixj: reg_r err -32
[ 1955.680979][T22018] sonixj: probe of 9-1:0.0 failed with error -32
[ 1955.761469][T30136] binder: 30135:30136 ioctl c0306201 0 returned -14
[ 1955.830548][T30138] syzkaller0: entered promiscuous mode
[ 1955.836148][T30138] syzkaller0: entered allmulticast mode
[ 1956.076736][   T28] audit: type=1326 audit(1775636851.454:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30142 comm="syz.9.6358" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f0128b96597 code=0x0
[ 1957.171431][T30174] syzkaller0: entered promiscuous mode
[ 1957.177067][T30174] syzkaller0: entered allmulticast mode
[ 1957.367816][T22018] usb 9-1: USB disconnect, device number 83
[ 1957.639231][T30181] syzkaller0: entered promiscuous mode
[ 1957.644791][T30181] syzkaller0: entered allmulticast mode
[ 1958.290066][T25334] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1958.303431][T25334] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1958.314329][T25334] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1958.334876][T25334] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1958.346057][T25334] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1958.355683][T25334] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1958.488144][   T28] audit: type=1326 audit(1775636853.834:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30205 comm="syz.2.6371" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedd179c819 code=0x0
[ 1958.708628][ T1143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1958.963368][ T1143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1959.162202][ T1143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1959.273936][T30219] syzkaller0: entered promiscuous mode
[ 1959.280260][T30219] syzkaller0: entered allmulticast mode
[ 1959.393634][ T1143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1960.509956][T25334] Bluetooth: hci2: command tx timeout
[ 1961.518106][T26922] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 300 seconds
[ 1962.548320][T25334] Bluetooth: hci2: command tx timeout
[ 1964.632026][T25334] Bluetooth: hci2: command tx timeout
[ 1964.776205][T30200] chnl_net:caif_netlink_parms(): no params data found
[ 1965.043895][   T28] audit: type=1326 audit(1775636860.424:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30274 comm="syz.2.6382" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedd179c819 code=0x0
[ 1965.293027][T30200] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1965.311837][T30200] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1965.343407][T30200] bridge_slave_0: entered allmulticast mode
[ 1965.365486][T30200] bridge_slave_0: entered promiscuous mode
[ 1965.389151][T30200] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1965.406881][T30200] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1965.439417][T30200] bridge_slave_1: entered allmulticast mode
[ 1965.454316][T30200] bridge_slave_1: entered promiscuous mode
[ 1965.811473][T30200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1965.992568][T30200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1966.243144][T30200] team0: Port device team_slave_0 added
[ 1966.450308][T30200] team0: Port device team_slave_1 added
[ 1966.685062][T30200] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1966.704957][T30200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1966.738295][T25334] Bluetooth: hci2: command tx timeout
[ 1966.780310][T30200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1966.948103][T21664] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1966.956670][T30318] syzkaller0: entered promiscuous mode
[ 1966.968302][T30318] syzkaller0: entered allmulticast mode
[ 1966.981348][T30200] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1966.990614][T30200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1967.022958][T30200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1967.138018][T21664] usb 3-1: Using ep0 maxpacket: 16
[ 1967.160297][T21664] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1967.182685][T21664] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1967.202098][T21664] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1967.227570][T21664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1967.246922][T21664] usb 3-1: config 0 descriptor??
[ 1967.761134][   T28] audit: type=1326 audit(1775636863.144:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30330 comm="syz.9.6391" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0128b9c819 code=0x0
[ 1969.705355][T21664] usb 3-1: USB disconnect, device number 116
[ 1972.766320][T30200] hsr_slave_0: entered promiscuous mode
[ 1972.834285][T30200] hsr_slave_1: entered promiscuous mode
[ 1972.853325][T30200] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1972.867992][T30200] Cannot create hsr debugfs directory
[ 1972.884226][   T28] audit: type=1326 audit(1775636868.264:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30368 comm="syz.9.6399" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0128b9c819 code=0x0
[ 1973.038912][ T1143] IPVS: stopping backup sync thread 24074 ...
[ 1973.130243][T10888] usb 9-1: new high-speed USB device number 84 using dummy_hcd
[ 1973.197721][ T1143] hsr_slave_0: left promiscuous mode
[ 1973.205863][ T1143] hsr_slave_1: left promiscuous mode
[ 1973.218223][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1973.239077][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1973.247206][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1973.258240][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1973.318589][ T1143] veth1_macvtap: left promiscuous mode
[ 1973.324353][ T1143] veth0_macvtap: left promiscuous mode
[ 1973.328545][T10888] usb 9-1: Using ep0 maxpacket: 8
[ 1973.338426][ T1143] veth1_vlan: left promiscuous mode
[ 1973.344109][ T1143] veth0_vlan: left promiscuous mode
[ 1973.350948][T10888] usb 9-1: config 0 has an invalid interface number: 33 but max is 1
[ 1973.365440][T10888] usb 9-1: config 0 has no interface number 1
[ 1973.376213][T10888] usb 9-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[ 1973.394217][T10888] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247
[ 1973.424812][T10888] usb 9-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[ 1973.441816][T10888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1973.453998][T10888] usb 9-1: Product: syz
[ 1973.462453][T10888] usb 9-1: Manufacturer: syz
[ 1973.467218][T10888] usb 9-1: SerialNumber: syz
[ 1973.487652][T10888] usb 9-1: config 0 descriptor??
[ 1973.507320][T10888] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[ 1973.753332][T10888] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[ 1973.777078][ T2321] pvrusb2: Invalid read control endpoint
[ 1973.795423][ T2321] usb 9-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[ 1973.806455][T10888] usb 9-1: USB disconnect, device number 84
[ 1973.845275][ T2321] usb 9-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[ 1975.571003][ T1143] team0 (unregistering): Port device team_slave_1 removed
[ 1975.671160][ T1143] team0 (unregistering): Port device team_slave_0 removed
[ 1975.763485][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1975.773388][ T1143] bond_slave_1 (unregistering): left promiscuous mode
[ 1975.865739][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1975.875554][ T1143] bond_slave_0 (unregistering): left promiscuous mode
[ 1976.236125][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.248016][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.632138][ T1143] bond0 (unregistering): Released all slaves
[ 1976.914282][   T28] audit: type=1326 audit(1775636872.294:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30416 comm="syz.2.6409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedd179c819 code=0x0
[ 1977.112128][T30425] binder: 30424:30425 ioctl c0306201 0 returned -14
[ 1977.600374][ T1143] IPVS: stop unused estimator thread 0...
[ 1977.970255][T30200] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1978.001760][T30200] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1978.063084][T30200] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1978.114982][T30200] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1978.366743][T30449] syzkaller0: entered promiscuous mode
[ 1978.861401][T30454] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1978.868023][T30454] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1978.985703][T30454] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1979.083168][T30454] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1979.126614][T30454] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1979.584755][T30454] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1979.637156][T30454] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1979.717200][T30454] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1979.758270][T30454] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1979.766461][T30454] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1980.629324][T25334] Bluetooth: hci0: command 0x0406 tx timeout
[ 1981.018532][   T28] audit: type=1326 audit(1775636876.384:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30472 comm="syz.2.6423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedd179c819 code=0x0
[ 1981.048415][T25334] Bluetooth: hci1: command 0x0406 tx timeout
[ 1981.200547][T25334] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1981.748117][T25334] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1982.506361][T30482] Cannot find add_set index 0 as target
[ 1982.716555][T25334] Bluetooth: hci0: command 0x0406 tx timeout
[ 1983.111506][T25334] Bluetooth: hci1: command 0x0406 tx timeout
[ 1983.268255][T25334] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1983.837439][T25334] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1984.336455][T30482] netdevsim netdevsim2: Direct firmware load for /
[ 1984.336455][T30482]  failed with error -2
[ 1984.358357][T30482] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[ 1984.358357][T30482] 
[ 1984.645093][T30200] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1984.691837][T30200] 8021q: adding VLAN 0 to HW filter on device team0
[ 1984.729725][T24102] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1984.737026][T24102] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1984.779305][T24102] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1984.786549][T24102] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1985.138105][T21664] usb 10-1: new high-speed USB device number 102 using dummy_hcd
[ 1985.348430][T25334] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1985.365519][T21664] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1985.412122][T21664] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1985.429981][T30515] syzkaller0: entered promiscuous mode
[ 1985.468293][T21664] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1985.497938][T21664] usb 10-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.10
[ 1985.517688][T21664] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1985.567829][T21664] usb 10-1: config 0 descriptor??
[ 1985.654413][T30200] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1985.909044][T25334] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1985.989720][    C1] raw-gadget.0 gadget.9: ignoring, device is not running
[ 1986.008047][T21664] usbhid 10-1:0.0: can't add hid device: -71
[ 1986.014325][T21664] usbhid: probe of 10-1:0.0 failed with error -71
[ 1986.054744][T21664] usb 10-1: USB disconnect, device number 102
[ 1986.533133][T30200] veth0_vlan: entered promiscuous mode
[ 1986.571062][T30200] veth1_vlan: entered promiscuous mode
[ 1986.639134][T30200] veth0_macvtap: entered promiscuous mode
[ 1986.671148][T30200] veth1_macvtap: entered promiscuous mode
[ 1986.711552][T30200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1986.738269][T30200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1986.758034][T30200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1986.798032][T30200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1986.815269][T30200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1986.838197][T30200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1986.858317][T30200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1986.887966][T30200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1986.910738][T30200] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1986.951866][T30200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1986.971108][T30200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1986.997979][T30200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1987.014586][T30200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1987.024908][T30200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1987.049119][T30200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1987.068039][T30200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1987.108826][T30200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1987.136948][T30200] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1987.221399][T30200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1987.247314][T30200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1987.270487][T30200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1987.285304][T30200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1987.353368][T30549] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6441'.
[ 1987.640652][T28689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1987.699411][T28689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1987.789458][T30566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1987.903375][T28695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1987.936820][T28695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1988.088146][T30569] syzkaller0: entered promiscuous mode
[ 1988.119750][T30577] binder: 30576:30577 ioctl c0306201 0 returned -14
[ 1988.419869][T22018] IPVS: starting estimator thread 0...
[ 1988.538181][T30587] IPVS: using max 17 ests per chain, 40800 per kthread
[ 1988.756423][T30594] usb usb8: usbfs: process 30594 (syz.8.6448) did not claim interface 0 before use
[ 1991.611278][T26922] block nbd0: Possible stuck request ffff888021eb0000: control (read@0,1024B). Runtime 330 seconds
[ 1993.813082][T30623] binder: 30620:30623 ioctl c0306201 0 returned -14
[ 1993.928210][T30619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1994.553667][T21608] usb 10-1: new high-speed USB device number 103 using dummy_hcd
[ 1994.783907][T21608] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1994.808281][T21608] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1994.847957][T21608] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1994.894208][T21608] usb 10-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.10
[ 1994.943393][T21608] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1994.977195][T21608] usb 10-1: config 0 descriptor??
[ 1994.999277][T30656] binder: 30649:30656 ioctl c0306201 0 returned -14
[ 1995.458654][T21608] usbhid 10-1:0.0: can't add hid device: -71
[ 1995.464860][T21608] usbhid: probe of 10-1:0.0 failed with error -71
[ 1995.475928][T21608] usb 10-1: USB disconnect, device number 103
[ 1996.643893][T30675] binder: 30674:30675 ioctl c0306201 0 returned -14
[ 1996.723777][   T29] INFO: task udevd:26102 blocked for more than 143 seconds.
[ 1996.758149][   T29]       Not tainted syzkaller #0
[ 1996.782625][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1996.788159][T21608] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1996.809339][   T29] task:udevd           state:D stack:25680 pid:26102 ppid:5142   flags:0x00004006
[ 1996.847966][   T29] Call Trace:
[ 1996.855857][   T29]  <TASK>
[ 1996.862454][   T29]  __schedule+0x1553/0x45a0
[ 1996.876027][   T29]  ? asan.module_dtor+0x20/0x20
[ 1996.897084][   T29]  ? mark_lock+0x94/0x320
[ 1996.915772][   T29]  ? lock_chain_count+0x20/0x20
[ 1996.938019][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1996.952904][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[ 1996.968070][   T29]  schedule+0xbd/0x170
[ 1996.982459][   T29]  io_schedule+0x80/0xd0
[ 1996.986819][   T29]  folio_wait_bit_common+0x714/0xfa0
[ 1996.995528][   T29]  ? folio_wait_bit+0x30/0x30
[ 1997.001415][T21608] usb 3-1: Using ep0 maxpacket: 16
[ 1997.007387][   T29]  ? _compound_head+0x120/0x120
[ 1997.013554][   T29]  ? filemap_add_folio+0x192/0x3c0
[ 1997.019651][   T29]  ? __filemap_get_folio+0x704/0xbb0
[ 1997.026078][T21608] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1997.036930][   T29]  ? blkdev_writepage+0x30/0x30
[ 1997.042031][T21608] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1997.051343][   T29]  do_read_cache_folio+0x1c0/0x7d0
[ 1997.056532][   T29]  ? blkdev_writepage+0x30/0x30
[ 1997.061859][T21608] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[ 1997.071037][   T29]  read_part_sector+0xd2/0x340
[ 1997.076325][T21608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1997.084506][   T29]  adfspart_check_POWERTEC+0x93/0xed0
[ 1997.090569][   T29]  ? adfspart_check_ADFS+0x620/0x620
[ 1997.095925][   T29]  ? put_partition+0x370/0x370
[ 1997.106908][T21608] usb 3-1: config 0 descriptor??
[ 1997.116945][   T29]  ? alloc_pages+0x4dc/0x740
[ 1997.131135][   T29]  bdev_disk_changed+0x740/0x1420
[ 1997.136851][   T29]  ? bdev_resize_partition+0xf0/0xf0
[ 1997.150216][   T29]  ? iput+0x343/0x920
[ 1997.154448][   T29]  blkdev_get_whole+0x30d/0x390
[ 1997.163935][   T29]  blkdev_get_by_dev+0x279/0x600
[ 1997.171649][   T29]  blkdev_open+0x152/0x360
[ 1997.176150][   T29]  ? blkdev_mmap+0x1b0/0x1b0
[ 1997.184267][   T29]  do_dentry_open+0x8c6/0x1500
[ 1997.191670][   T29]  path_openat+0x27f1/0x3230
[ 1997.198032][   T29]  ? do_sys_openat2+0xda/0x1d0
[ 1997.202872][   T29]  ? verify_lock_unused+0x140/0x140
[ 1997.210424][   T29]  ? do_filp_open+0x430/0x430
[ 1997.215186][   T29]  ? __virt_addr_valid+0x18c/0x540
[ 1997.224364][   T29]  do_filp_open+0x1f5/0x430
[ 1997.231094][   T29]  ? vfs_tmpfile+0x490/0x490
[ 1997.235778][   T29]  ? _raw_spin_unlock+0x28/0x40
[ 1997.241907][   T29]  ? alloc_fd+0x58f/0x630
[ 1997.246352][   T29]  do_sys_openat2+0x134/0x1d0
[ 1997.251227][   T29]  ? do_sys_open+0xe0/0xe0
[ 1997.255785][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1997.261942][   T29]  ? lock_chain_count+0x20/0x20
[ 1997.266931][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1997.275476][   T29]  __x64_sys_openat+0x139/0x160
[ 1997.280777][   T29]  do_syscall_64+0x55/0xa0
[ 1997.285356][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1997.290388][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1997.295230][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1997.301797][   T29] RIP: 0033:0x7fabc34a7407
[ 1997.306365][   T29] RSP: 002b:00007ffce51c4410 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1997.315295][   T29] RAX: ffffffffffffffda RBX: 00007fabc3b55880 RCX: 00007fabc34a7407
[ 1997.324695][   T29] RDX: 00000000000a0800 RSI: 00005591d5ff0a30 RDI: ffffffffffffff9c
[ 1997.337287][   T29] RBP: 00005591d5fd7910 R08: 0000000000000000 R09: 0000000000000000
[ 1997.364649][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005591d5fefe00
[ 1997.375373][   T29] R13: 00005591d5fef410 R14: 0000000000000000 R15: 00005591d5fefe00
[ 1997.391170][   T29]  </TASK>
[ 1997.394465][   T29] 
[ 1997.394465][   T29] Showing all locks held in the system:
[ 1997.405090][   T29] 1 lock held by khungtaskd/29:
[ 1997.413709][   T29]  #0: ffffffff8d1320a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 1997.426463][   T29] 2 locks held by pvrusb2-context/2321:
[ 1997.437071][   T29]  #0: ffff88805d5a4188 (&hdw->big_lock_mutex){+.+.}-{3:3}, at: pvr2_hdw_initialize+0xe5/0x3c30
[ 1997.468677][   T29]  #1: ffffffff8cfdc690 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xfd/0x2b0
[ 1997.479528][   T29] 3 locks held by udevd/5142:
[ 1997.484257][   T29] 2 locks held by getty/5533:
[ 1997.490534][   T29]  #0: ffff88814c5760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1997.500683][   T29]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[ 1997.516236][   T29] 6 locks held by kworker/1:7/10888:
[ 1997.523041][   T29]  #0: ffff888147e7b938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1997.551614][   T29]  #1: ffffc900038ffd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1997.565929][   T29]  #2: ffff8880254b9190 (&dev->mutex){....}-{3:3}, at: hub_event+0x180/0x49f0
[ 1997.592533][   T29]  #3: ffff888047b32190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10b/0x8a0
[ 1997.606798][   T29]  #4: ffff888047b37160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x7a0
[ 1997.623475][   T29]  #5: ffff88805d5a4188 (&hdw->big_lock_mutex){+.+.}-{3:3}, at: pvr2_hdw_disconnect+0x6d/0x500
[ 1997.634302][   T29] 3 locks held by kworker/1:0/21664:
[ 1997.645589][   T29] 2 locks held by kworker/u4:0/24102:
[ 1997.652329][   T29]  #0: ffff888018f63138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1997.670004][   T29]  #1: ffffc9000c907d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1997.686009][   T29] 1 lock held by udevd/26102:
[ 1997.695461][   T29]  #0: ffff888021e224c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[ 1997.716244][   T29] 4 locks held by udevd/26130:
[ 1997.722485][   T29]  #0: ffff888063f6a8b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb1/0xd50
[ 1997.731789][   T29]  #1: ffff88805bd6f488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x5c/0x410
[ 1997.744614][   T29]  #2: ffff888060dfe8c0 (kn->active#18){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x410
[ 1997.754619][   T29]  #3: ffff888047b32190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0
[ 1997.769902][   T29] 
[ 1997.772300][   T29] =============================================
[ 1997.772300][   T29] 
[ 1997.791315][   T29] NMI backtrace for cpu 0
[ 1997.795737][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1997.802977][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1997.813093][   T29] Call Trace:
[ 1997.817646][   T29]  <TASK>
[ 1997.820621][   T29]  dump_stack_lvl+0x18c/0x250
[ 1997.825365][   T29]  ? show_regs_print_info+0x20/0x20
[ 1997.830630][   T29]  ? load_image+0x400/0x400
[ 1997.835202][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[ 1997.840196][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 1997.846398][   T29]  ? _printk+0xde/0x130
[ 1997.850611][   T29]  ? load_image+0x400/0x400
[ 1997.855175][   T29]  ? load_image+0x400/0x400
[ 1997.859745][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1997.865882][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 1997.871920][   T29]  watchdog+0xf3d/0xf80
[ 1997.876136][   T29]  ? watchdog+0x1e1/0xf80
[ 1997.880530][   T29]  kthread+0x2fa/0x390
[ 1997.884644][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1997.889752][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1997.894399][   T29]  ret_from_fork+0x48/0x80
[ 1997.898878][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1997.903520][   T29]  ret_from_fork_asm+0x11/0x20
[ 1997.908369][   T29]  </TASK>
[ 1997.912402][   T29] Sending NMI from CPU 0 to CPUs 1:
[ 1997.917669][    C1] NMI backtrace for cpu 1
[ 1997.917682][    C1] CPU: 1 PID: 21664 Comm: kworker/1:0 Not tainted syzkaller #0
[ 1997.917699][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1997.917711][    C1] Workqueue: events_power_efficient gc_worker
[ 1997.917735][    C1] RIP: 0010:check_preemption_disabled+0x3/0x110
[ 1997.917762][    C1] Code: ff ff ff cc cc cc cc f3 0f 1e fa 48 c7 c7 40 89 1c 8b 48 c7 c6 80 89 1c 8b eb 0c 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 41 57 <41> 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65
[ 1997.917777][    C1] RSP: 0018:ffffc900044af948 EFLAGS: 00000083
[ 1997.917791][    C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff818d9178
[ 1997.917803][    C1] RDX: 0000000000000000 RSI: ffffffff8b1c8980 RDI: ffffffff8b1c8940
[ 1997.917815][    C1] RBP: ffffc900044afa50 R08: ffffffff8e8b02af R09: 1ffffffff1d16055
[ 1997.917829][    C1] R10: dffffc0000000000 R11: fffffbfff1d16056 R12: 0000000000000200
[ 1997.917845][    C1] R13: dffffc0000000000 R14: 1ffff92000895f34 R15: dffffc0000000000
[ 1997.917858][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1997.917874][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1997.917887][    C1] CR2: 00007f9e5cbe92f8 CR3: 000000002f263000 CR4: 00000000003506e0
[ 1997.917904][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002
[ 1997.917915][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1997.917929][    C1] Call Trace:
[ 1997.917935][    C1]  <TASK>
[ 1997.917944][    C1]  rcu_is_watching+0x15/0xb0
[ 1997.917976][    C1]  trace_irq_enable+0x37/0xe0
[ 1997.918002][    C1]  ? gc_worker+0x317/0x1490
[ 1997.918023][    C1]  trace_hardirqs_on+0x18/0x40
[ 1997.918051][    C1]  seqcount_lockdep_reader_access+0x12b/0x1d0
[ 1997.918073][    C1]  ? nf_conntrack_hash_check_insert+0x9c0/0x9c0
[ 1997.918104][    C1]  gc_worker+0x317/0x1490
[ 1997.918132][    C1]  ? gc_worker+0x269/0x1490
[ 1997.918154][    C1]  ? init_conntrack+0xf10/0xf10
[ 1997.918176][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1997.918196][    C1]  ? process_scheduled_works+0x96f/0x15d0
[ 1997.918220][    C1]  ? process_scheduled_works+0x96f/0x15d0
[ 1997.918242][    C1]  process_scheduled_works+0xa5d/0x15d0
[ 1997.918278][    C1]  ? worker_attach_to_pool+0x380/0x380
[ 1997.918303][    C1]  ? assign_work+0x3d2/0x5d0
[ 1997.918327][    C1]  worker_thread+0xa55/0xfc0
[ 1997.918349][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1997.918370][    C1]  ? _raw_spin_unlock+0x40/0x40
[ 1997.918388][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1997.918419][    C1]  kthread+0x2fa/0x390
[ 1997.918434][    C1]  ? pr_cont_work+0x560/0x560
[ 1997.918462][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1997.918479][    C1]  ret_from_fork+0x48/0x80
[ 1997.918499][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 1997.918516][    C1]  ret_from_fork_asm+0x11/0x20
[ 1997.918547][    C1]  </TASK>
[ 1998.193019][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1998.215791][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1998.222742][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1998.229982][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1998.240077][   T29] Call Trace:
[ 1998.243390][   T29]  <TASK>
[ 1998.246361][   T29]  dump_stack_lvl+0x18c/0x250
[ 1998.251114][   T29]  ? show_regs_print_info+0x20/0x20
[ 1998.256379][   T29]  ? load_image+0x400/0x400
[ 1998.260941][   T29]  panic+0x2dc/0x730
[ 1998.264886][   T29]  ? schedule_preempt_disabled+0x20/0x20
[ 1998.270586][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 1998.275147][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 1998.280747][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 1998.286948][   T29]  watchdog+0xf7c/0xf80
[ 1998.291156][   T29]  ? watchdog+0x1e1/0xf80
[ 1998.295541][   T29]  kthread+0x2fa/0x390
[ 1998.299837][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1998.304930][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1998.309570][   T29]  ret_from_fork+0x48/0x80
[ 1998.314046][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1998.318689][   T29]  ret_from_fork_asm+0x11/0x20
[ 1998.323517][   T29]  </TASK>
[ 1998.327152][   T29] Kernel Offset: disabled
[ 1998.331578][   T29] Rebooting in 86400 seconds..