last executing test programs:

2m47.397163413s ago: executing program 3 (id=195):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000c80)='io\x00')
syz_fuse_handle_req(r4, &(0x7f0000000cc0)="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", 0x2000, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, 0x0)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000840)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x39}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendfile(r5, r3, 0x0, 0x3a)

2m46.346306912s ago: executing program 3 (id=196):
r0 = open(0x0, 0x30000, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x0, &(0x7f0000000080)})
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

2m44.332797743s ago: executing program 3 (id=201):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket(0x10, 0x3, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
userfaultfd(0x80001)
openat$dlm_plock(0xffffff9c, &(0x7f0000000400), 0x909000, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0xa}}, './file0\x00'})
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0))
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

2m40.809041704s ago: executing program 3 (id=212):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37)

2m40.404612815s ago: executing program 3 (id=215):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2, 0xffffffeffffffffe, 0x7f})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000005100)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0})

2m37.446873103s ago: executing program 3 (id=222):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x38)
r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
syz_emit_vhci(0x0, 0x7)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x24, 0x3)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$NBD_DO_IT(r1, 0xab03)

2m21.189355446s ago: executing program 32 (id=222):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x38)
r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
syz_emit_vhci(0x0, 0x7)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x24, 0x3)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$NBD_DO_IT(r1, 0xab03)

1m57.389640591s ago: executing program 6 (id=264):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x2})
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0x3, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x43, 0x0, 0x0, &(0x7f00000000c0))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2})
close_range(r3, 0xffffffffffffffff, 0x0)

1m56.273646871s ago: executing program 6 (id=324):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10084, &(0x7f00000000c0)={[{@minixdf}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nomblk_io_submit}, {@lazytime}, {@jqfmt_vfsold}]}, 0x1, 0x401, &(0x7f0000000540)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0xef)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0xe, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780860d1cbf7966d61fdcf339bffbcc26b96ec71038259ca171ce1a311ef54ec32d71e14ef3dc177e9dc8b000000000000000200", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})

1m53.280661312s ago: executing program 6 (id=330):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0x0, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)

1m49.782152583s ago: executing program 6 (id=341):
unshare(0x200)
io_setup(0x222, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_vhci(0x0, 0x0)
r0 = getpid()
waitid(0x300, 0x0, 0xffffffffffffffff, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)

1m45.591284682s ago: executing program 33 (id=341):
unshare(0x200)
io_setup(0x222, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001740)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_vhci(0x0, 0x0)
r0 = getpid()
waitid(0x300, 0x0, 0xffffffffffffffff, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)

1m26.409819965s ago: executing program 5 (id=396):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff)

1m26.037850329s ago: executing program 5 (id=398):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x104}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
rt_tgsigqueueinfo(r0, r0, 0x2a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(0x0, 0x80080)
r3 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020)
lseek(0xffffffffffffffff, 0xfffd, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x8000)

1m24.965954455s ago: executing program 5 (id=400):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}})

1m24.095595107s ago: executing program 5 (id=402):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10084, &(0x7f00000000c0)={[{@minixdf}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nomblk_io_submit}, {@lazytime}, {@jqfmt_vfsold}]}, 0x1, 0x401, &(0x7f0000000540)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0xef)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0xe, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780860d1cbf7966d61fdcf339bffbcc26b96ec71038259ca171ce1a311ef54ec32d71e14ef3dc177e9dc8b000000000000000200", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

1m21.981681137s ago: executing program 5 (id=407):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002248000000b002000436"], 0x0}, 0x0)

1m15.402779008s ago: executing program 5 (id=419):
open$dir(0x0, 0x80000, 0x8d)
write$qrtrtun(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
syz_io_uring_setup(0x7955, 0x0, &(0x7f0000000040), &(0x7f0000000000))
syz_io_uring_complete(0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
socket(0xa, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x800000, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)

1m13.837898249s ago: executing program 34 (id=419):
open$dir(0x0, 0x80000, 0x8d)
write$qrtrtun(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
syz_io_uring_setup(0x7955, 0x0, &(0x7f0000000040), &(0x7f0000000000))
syz_io_uring_complete(0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
socket(0xa, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x800000, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)

1m1.1182387s ago: executing program 0 (id=451):
fanotify_init(0x0, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000380)={0x4, {0x10000, 0x6, 0x5, 0xd}})
ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000080)={0x8, 0x2, 0x7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)
sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0xb, 0x0, 0x0)
shutdown(r6, 0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x40)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x80000001}, &(0x7f00000011c0)=0x8)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x208088, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x2f2, &(0x7f0000000180)="$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")
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x17e5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0)

59.840020428s ago: executing program 0 (id=455):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0xee, 0x64, 0x71, 0x8, 0x8ca, 0x2016, 0xd4cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x68, 0xb, 0x40, 0x6, "", [{{0x9, 0x4, 0x2d, 0x1c, 0x1, 0x8f, 0x85, 0x41, 0x5, [], [{{0x9, 0x5, 0xb, 0x0, 0x200, 0x5, 0xfa, 0xc0}}]}}]}}]}}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})

59.122307671s ago: executing program 0 (id=457):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000400)={0x40, 0x16, 0x4, "d9a0df6c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

58.222795963s ago: executing program 0 (id=462):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}})

57.958648196s ago: executing program 0 (id=463):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000000)={[{@init_itable}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')

57.747612774s ago: executing program 0 (id=464):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
sync()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f0000000500)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@delalloc}, {@quota}], [{@euid_lt}, {@euid_gt}, {@pcr={'pcr', 0x3d, 0x37}}, {@appraise}]}, 0x1, 0x56a, &(0x7f0000001180)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)

42.524826257s ago: executing program 35 (id=464):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0)
sync()
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x84042, 0x1fb)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f0000000500)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@delalloc}, {@quota}], [{@euid_lt}, {@euid_gt}, {@pcr={'pcr', 0x3d, 0x37}}, {@appraise}]}, 0x1, 0x56a, &(0x7f0000001180)="$eJzs3c+PG1cdAPDvzP7sJu0m0ANUQAIUAopiZ502qnppuYBQVami4sQhXXad1RI7DrG3dJdIbI+cQQKJE/wJHJA4IPXEgRtHJA6AKAekAhEoQeIwaMazG2fXS0zstZv15yNN5sebme97dmbe87N3XgBT63xE7EbEfES8FRHL5faknOLV7pTvd+/unbX7d++sJZFlb/49KdLzbdFzTO5Uec7FiPjaVyK+mRyO297eubHaaNRvl+vVTvNWtb29c2mzubpR36jfrNWurly9/NKVF2sjK+u55s8/+PLma1//1S8/+f5vd7/43Txbp8u03nKMUrfoc/txcrMR8dpxBJuAmXI+P+F88HjSiPhIRHymuP6XY6b43wkAnGRZthzZcu86AHDSpUUfWJJWIiJNy0ZApduH92wspY1Wu3Pxemvr5nq3r+xMzKXXNxv1y2cXfv/tYue5JF9fKdKK9GK9dmD9SkScjYgfLjxVrFfWWo31yTR5AGDqneqt/yPiXwtpWqkMdGifb/UAgCfG4qQzAACM3SD1/8XvjyEjAMDY+PwPANNngPq//LJ/99jzAgCMh8//ADB91P8AMH3U/wAwVd54/fV8yu6Xz79ef3t760br7Uvr9faNSnNrrbLWun2rstFqbRTP7Gk+6nyNVuvWygux9U61U293qu3tnWvN1tbNzrXiud7X6nNjKRUA8L+cPffe75KI2H35qWKKnrEc1NVwsqUj3At4sswMc7AGAjzRjPYF02ugKrxoJPzm2PMCTEbfh3kv9l182I//jyB+ZwQfKhc+Pnj/vzGe4WTRsw/T6/H6/18ZeT6A8Xvs/v8/jjYfwPhlWXJwzP/5/aReb4xzVGIA4DgN8RO+7HujaoQAE/WowbxH8v0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnDCnI+JbkaSVYizwNP83rVQino6IMzGXXN9s1C9HxDNxLiLmFvL1lUlnGgAYUvrXpBz/68Ly86cPps4n/y7GA56PyL7zkzd/9M5qp3N7Jd/+j4VyeyzsDR9We3DcEOMKAgCD+/MgOxX1d62c93yQv3f3ztredIx5POSDL+0PPrp2/+6dYuqmzEaWZVnEYtGWWPpnErPlMYsR8VxEzIwg/u67EfGxfuVPir6RM+XIp73xo4z99Fjjpw/FT4u07jx/+T46grzAtHkvv/+82u/6S+N8Me9//S8Wd6jhFfe/xYi9e9/9nvizZaSZPvHza/78oDFe+PVXD23Mlrtp70Y8N9svfrIfPzki/vMDxv/DJz71g1eOSMt+GnEh+sfvjVXtNG9V29s7lzabqxv1jfrNWu3qytXLL115sVYt+qirez3Vh/3t5YvPHJW3vPxLR8TvvvOnDpR/fv/Yzw1Y/p/9561vfPrB6sLB+F/4bP/3/9li3v/1z+vEzw8Yf3XpF0cO353HXz+i/I96/y8OGP/9v+ysD7grADAG7e2dG6uNRv32UAv5p9BRnOfQQp7FwXbeay4OF/RPUSw8eFmSSGLU5cobY4PsPHdcr+qxL8zutxVHccKZ7sJSecoxFycdUSmGW4gz5cK9cQWdzP0IGJ8HF/2kcwIAAAAAAAAAAAAAABxlHH/DNOkyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHL9NwAA//8TFMB5")
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)

29.515593598s ago: executing program 7 (id=538):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, &(0x7f0000000080)={0x18, "d04237b5d17d56d147f27c442e00"}})
socket$inet6(0xa, 0x3, 0x5)
socket$key(0xf, 0x3, 0x2)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

24.865258866s ago: executing program 7 (id=549):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
r1 = socket$pppoe(0x18, 0x1, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, 0x0, 0x44000)
syz_open_dev$tty1(0xc, 0x4, 0x3)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0)

21.942315758s ago: executing program 7 (id=555):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

21.546527641s ago: executing program 7 (id=556):
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x2)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="2b637075203bdee1853053d7ea1a11dd421481445b994e3f111b4e203b56eed95cbf14adaf48e56568a7339985f1c2eb17f27d75fc22d0bf477e9aee2eb0f9baec0bd66dd679af6e0681705117b7e31f4775f8b0a6646ff98237995c1084f35f10a44f7e2b3aaa99cca258ed2c39055e178b3ecc2b177e2c"], 0x5)

21.345483024s ago: executing program 7 (id=557):
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10)
fchown(r0, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f00000004c0)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@autodefrag}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x6000, 0x1)
r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80)
getdents(r1, &(0x7f0000001fc0)=""/184, 0x2000208e)

18.28930744s ago: executing program 4 (id=566):
r0 = syz_open_dev$sg(0x0, 0x0, 0x800)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000340)=0x7)
openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(0x0)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x228, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
io_uring_setup(0x1539, &(0x7f0000000240)={0x0, 0x3970, 0x10, 0x2, 0x233})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)

18.272371857s ago: executing program 7 (id=567):
unshare(0x6a040000)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)

17.083486643s ago: executing program 4 (id=569):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x2)
r2 = openat$cgroup_subtree(r1, 0x0, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="2b637075203bdee1853053d7ea1a11dd421481445b994e3f111b4e203b56eed95cbf14adaf48e56568a7339985f1c2eb17f27d75fc22d0bf477e9aee2eb0f9baec0bd66dd679af6e0681705117b7e31f4775f8b0a6646ff98237995c1084f35f10a44f7e2b3aaa99cca258ed2c39055e178b3ecc2b177e2c"], 0x5)

16.179004319s ago: executing program 4 (id=572):
syz_emit_ethernet(0x7c, 0x0, 0x0)
r0 = getpgrp(0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_usb_connect(0x6, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r4, 0x101, 0x1, &(0x7f0000000400), 0x4)

14.248829408s ago: executing program 8 (id=574):
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
capset(&(0x7f0000000100)={0x20080522}, 0x0)
syz_io_uring_setup(0x4b3, &(0x7f0000000180)={0x0, 0x8e04, 0x1000, 0x1, 0x271}, &(0x7f0000ff0000), &(0x7f0000000140))

14.13367205s ago: executing program 4 (id=575):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000c40)="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", 0x2000, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

11.322766351s ago: executing program 2 (id=577):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
syz_open_dev$dvb_demux(0x0, 0x0, 0x41)
futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

11.156410563s ago: executing program 8 (id=579):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1e0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$rds(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

11.025430536s ago: executing program 1 (id=580):
syz_open_dev$dri(&(0x7f0000000140), 0xbb2, 0x4000c0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x5, 0x3, 0xf0})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000300)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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")
r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26)
connect$inet6(r3, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8)
r6 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={<r8=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xa, @mcast2, 0x4}, r8}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @empty}, {0x2, 0xfff9, 0x8, @empty, 0xffffffff}, r8, 0x9dffffff}}, 0x48)
sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4041)
syz_genetlink_get_family_id$nfc(&(0x7f0000001740), r0)
sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000001800)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x2400c800)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)

9.974513218s ago: executing program 8 (id=581):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, &(0x7f0000000080)={0x18, "d04237b5d17d56d147f27c442e00"}})
socket$inet6(0xa, 0x3, 0x5)
socket$key(0xf, 0x3, 0x2)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

9.73443828s ago: executing program 2 (id=582):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)

8.595171935s ago: executing program 1 (id=583):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45a}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

8.390513505s ago: executing program 9 (id=584):
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r1, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82)
mmap(&(0x7f000053e000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r4, 0x0)
munmap(&(0x7f000053c000/0x4000)=nil, 0x4000)

7.450163572s ago: executing program 1 (id=585):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r0, 0x62c21a4ade68aba1, 0x70bd2c, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1)

7.267658867s ago: executing program 9 (id=586):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)

7.025716117s ago: executing program 1 (id=587):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280", 0x13}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12", 0x12}], 0x2}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}], 0x1}, 0x0)

6.616780123s ago: executing program 2 (id=588):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})

6.081908408s ago: executing program 8 (id=589):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f640d967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c8348100"/4195, @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x64, r3, 0x1, 0x70bd2e, 0x25dfdbfc, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000000)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)
readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0)
ftruncate(r7, 0x2007ffc)
sendfile(r7, r7, 0x0, 0x2000000000006)

6.019702395s ago: executing program 9 (id=590):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000029a, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c)
r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0)
ftruncate(r4, 0x200004)
sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d1)

5.78523659s ago: executing program 2 (id=591):
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080))
syz_io_uring_setup(0x4b3, 0x0, &(0x7f0000ff0000), &(0x7f0000000140))

4.622420085s ago: executing program 9 (id=592):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)

3.345989371s ago: executing program 1 (id=593):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x7fe}, 0xe)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000))

2.704328001s ago: executing program 36 (id=567):
unshare(0x6a040000)
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)

2.69933124s ago: executing program 8 (id=595):
r0 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ntfs3\x00', 0x200000, 0x0)
r3 = dup(r1)
read$eventfd(r3, 0x0, 0x0)
r4 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000700)="97452a307eb403000b000000e0004a9b8f52ac8e5c7f00003326491f", 0x1c}], 0x18, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x400c804)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xff7f, 0x3}, 0x6)
write(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8084)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8)

2.636319271s ago: executing program 4 (id=596):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0))
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x90, 0x200, 0x0, 0x5, 0xf34})

2.634842387s ago: executing program 2 (id=597):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioprio_set$uid(0x3, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7e)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]})

2.534038903s ago: executing program 9 (id=598):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x341102, 0x0)
memfd_secret(0x80000)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0)
r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000}, 0x0)
close(0xffffffffffffffff)
r4 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0)
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0)
landlock_restrict_self(r3, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
socket$inet6_sctp(0xa, 0x801, 0x84)

1.874193221s ago: executing program 4 (id=599):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0xee, 0x64, 0x71, 0x8, 0x8ca, 0x2016, 0xd4cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x68, 0xb, 0x40, 0x6, "", [{{0x9, 0x4, 0x87, 0x1, 0x1, 0xb5, 0xf, 0xe3, 0x2, [], [{{0x9, 0x5, 0x8b, 0xe, 0x10, 0x45, 0x0, 0x6}}]}}]}}]}}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0})

949.978782ms ago: executing program 2 (id=600):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)

819.227822ms ago: executing program 9 (id=601):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0xc, 0x7, &(0x7f0000000080)={0x18, "d04237b5d17d56d147f27c442e00"}})
socket$inet6(0xa, 0x3, 0x5)
socket$key(0xf, 0x3, 0x2)
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)

582.306917ms ago: executing program 1 (id=602):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0)

0s ago: executing program 8 (id=603):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]})

kernel console output (not intermixed with test programs):

 em28xx 1-1:0.0: couldn't setup AC97 register 54
[  103.716743][ T6111] =======================================================
[  103.716743][ T6111] WARNING: The mand mount option has been deprecated and
[  103.716743][ T6111]          and is ignored by this kernel. Remove the mand
[  103.716743][ T6111]          option from the mount to silence this warning.
[  103.716743][ T6111] =======================================================
[  104.422893][ T6111] ntfs3(loop2): Failed to read $AttrDef (-4).
[  104.585123][ T5822] usb 3-1: USB disconnect, device number 3
[  105.050760][ T5888] usb 1-1: USB disconnect, device number 2
[  105.360905][  T790] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  105.746941][  T790] usb 3-1: unable to get BOS descriptor or descriptor too short
[  106.145822][  T790] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  106.546889][  T790] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  107.355793][  T790] usb 3-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40
[  107.598741][  T790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.877897][  T790] usb 3-1: Product: syz
[  108.003054][  T790] usb 3-1: Manufacturer: syz
[  108.167254][  T790] usb 3-1: SerialNumber: syz
[  108.358096][  T790] usb 3-1: can't set config #1, error -71
[  108.413561][  T790] usb 3-1: USB disconnect, device number 4
[  108.870889][ T6212] loop2: detected capacity change from 0 to 64
[  109.501042][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[  109.531324][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[  109.544883][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[  109.561023][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'.
[  109.622738][ T6213] /dev/sg0: Can't lookup blockdev
[  110.341246][ T6213] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  110.561323][ T6222] loop2: detected capacity change from 0 to 256
[  110.679500][ T6222] FAT-fs (loop2): Directory bread(block 64) failed
[  110.694707][ T6226] loop0: detected capacity change from 0 to 512
[  110.719829][ T6222] FAT-fs (loop2): Directory bread(block 65) failed
[  110.764253][ T6226] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.63: corrupted in-inode xattr: e_value out of bounds
[  110.852737][ T6222] FAT-fs (loop2): Directory bread(block 66) failed
[  110.900049][ T6226] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  110.901029][    C1] EXT4-fs (loop0): initial error at time 1772384477: ext4_iget_extra_inode:5025: inode 15
[  110.920269][    C1] EXT4-fs (loop0): last error at time 1772384477: ext4_iget_extra_inode:5025: inode 15
[  110.920970][ T6222] FAT-fs (loop2): Directory bread(block 67) failed
[  110.968652][ T6226] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.63: couldn't read orphan inode 15 (err -117)
[  111.024541][ T6222] FAT-fs (loop2): Directory bread(block 68) failed
[  111.036144][ T6226] loop0: lost filesystem error report for type 5 error -117
[  111.047826][ T6226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.110032][ T6222] FAT-fs (loop2): Directory bread(block 69) failed
[  111.132199][ T6222] FAT-fs (loop2): Directory bread(block 70) failed
[  111.159197][ T6222] FAT-fs (loop2): Directory bread(block 71) failed
[  111.212428][ T6222] FAT-fs (loop2): Directory bread(block 72) failed
[  111.230722][ T6222] FAT-fs (loop2): Directory bread(block 73) failed
[  111.282921][ T5814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.332863][ T6222] syz.2.61: attempt to access beyond end of device
[  111.332863][ T6222] loop2: rw=8912896, sector=1192, nr_sectors = 4 limit=256
[  111.396499][ T6222] syz.2.61: attempt to access beyond end of device
[  111.396499][ T6222] loop2: rw=8388608, sector=1192, nr_sectors = 4 limit=256
[  111.548060][   T30] audit: type=1800 audit(1772384478.222:2): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.61" name="file1" dev="loop2" ino=1048610 res=0 errno=0
[  113.351759][ T6245] macvlan0: entered promiscuous mode
[  113.392470][ T6245] netlink: 'syz.5.67': attribute type 2 has an invalid length.
[  113.482248][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.67'.
[  113.983249][ T6231] loop4: detected capacity change from 0 to 32768
[  114.012256][ T6231] xfs: Deprecated parameter 'attr2'
[  114.040750][ T6231] XFS: attr2 mount option is deprecated.
[  114.109855][ T6231] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  114.143177][ T6231] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.465317][ T6231] XFS (loop4): Ending clean mount
[  114.564682][ T6231] XFS (loop4): Quotacheck needed: Please wait.
[  115.299255][ T6270] loop5: detected capacity change from 0 to 4096
[  116.011783][ T6271] capability: warning: `syz.1.73' uses deprecated v2 capabilities in a way that may be insecure
[  117.917286][ T6231] XFS (loop4): Quotacheck: Done.
[  117.928395][ T6270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  118.262585][ T5818] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.331781][ T5816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.618636][ T6304] loop5: detected capacity change from 0 to 256
[  120.634555][ T6303] loop1: detected capacity change from 0 to 512
[  120.710305][ T6304] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  120.807088][ T6311] loop0: detected capacity change from 0 to 64
[  120.817339][ T6309] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  120.988070][ T6311] Trying to free block not in datazone
[  121.073601][ T6303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.814672][ T6303] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.657158][ T5828] Bluetooth: hci2: unexpected cc 0x042e length: 1 < 7
[  123.855878][ T6327] loop4: detected capacity change from 0 to 32768
[  123.898490][ T6327] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.90 (6327)
[  123.916887][ T6327] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  123.927129][ T6327] BTRFS info (device loop4): using crc32c checksum algorithm
[  123.934740][ T6327] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  123.974553][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.172745][ T6327] BTRFS info (device loop4): rebuilding free space tree
[  124.194234][ T6327] BTRFS info (device loop4): disabling free space tree
[  124.201885][ T6327] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  124.211838][ T6327] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  124.230237][ T6327] BTRFS info (device loop4): enabling ssd optimizations
[  124.237424][ T6327] BTRFS info (device loop4): turning on async discard
[  124.244257][ T6327] BTRFS info (device loop4): enabling disk space caching
[  124.251434][ T6327] BTRFS info (device loop4): force clearing of disk cache
[  124.258541][ T6327] BTRFS info (device loop4): use zstd compression, level 3
[  124.831773][  T790] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  125.021706][ T5818] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  125.031266][  T790] usb 1-1: Using ep0 maxpacket: 32
[  125.048656][  T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.079058][  T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.113529][  T790] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  125.153162][  T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.192709][  T790] usb 1-1: config 0 descriptor??
[  125.895324][  T790] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  125.921305][ T5822] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  126.129571][ T5822] usb 2-1: Using ep0 maxpacket: 32
[  126.142715][ T6369] block nbd2: shutting down sockets
[  126.203285][ T6370] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  126.894760][ T5822] usb 2-1: config 0 has an invalid interface number: 111 but max is 1
[  126.911269][ T5822] usb 2-1: config 0 has no interface number 1
[  126.919588][ T5822] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  126.930330][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.939174][ T5822] usb 2-1: Product: syz
[  126.939555][ T5888] usb 1-1: USB disconnect, device number 3
[  126.944112][ T5822] usb 2-1: Manufacturer: syz
[  126.955000][ T5822] usb 2-1: SerialNumber: syz
[  126.962579][ T6367] nbd2: detected capacity change from 0 to 112
[  126.980269][ T5822] usb 2-1: config 0 descriptor??
[  127.211863][ T6365] fido_id[6365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  127.533435][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.550608][ T5888] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  127.573751][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.582043][ T5823] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  127.596710][ T6378] netlink: 104 bytes leftover after parsing attributes in process `syz.2.101'.
[  127.712269][ T5822] snd-usb-6fire 2-1:0.111: unknown device firmware state received from device:
[  127.831352][ T5888] usb 1-1: Using ep0 maxpacket: 32
[  127.915632][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.074052][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.129475][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.260740][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.308651][ T5888] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  128.418062][ T5822] 31 db 99 aa dd 09 f1 37 
[  128.423606][ T5822] snd-usb-6fire 2-1:0.111: probe with driver snd-usb-6fire failed with error -5
[  128.425615][ T5823] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  128.438966][ T5822] usb 2-1: USB disconnect, device number 3
[  128.481086][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.570677][ T5888] usb 1-1: config 0 descriptor??
[  128.577051][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.594080][ T5888] usb 1-1: can't set config #0, error -71
[  128.666075][ T5888] usb 1-1: USB disconnect, device number 4
[  128.725296][ T5823] usb 4-1: config 0 descriptor??
[  130.084460][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'.
[  130.904777][ T5823] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  130.921153][ T5823] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  130.928139][ T5823] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  130.935192][ T5823] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  130.942212][ T5823] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  130.949168][ T5823] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  131.631123][ T5823] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  131.651854][ T5823] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  132.028140][ T5823] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE
[  132.096765][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  132.106763][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  132.518596][ T5823] cp2112 0003:10C4:EA90.0002: error requesting SMBus config
[  132.545263][ T5823] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71
[  132.625484][ T5823] usb 4-1: USB disconnect, device number 6
[  135.670588][ T5823] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  135.774458][ T6428] QAT: failed to copy from user.
[  135.893854][ T5823] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  135.913675][ T5823] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  136.004091][ T5823] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  136.020963][ T5823] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  136.042366][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.078107][ T5823] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  136.132201][ T5823] usb 6-1: invalid MIDI out EP 0
[  137.170865][ T6434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.191039][ T6434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  140.006387][ T6443] loop0: detected capacity change from 0 to 1024
[  140.021325][ T6443] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  140.031094][ T6443] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  140.043499][ T6443] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: inode #8: comm syz.0.119: inode has both inline data and extents flags
[  140.057093][ T6443] loop0: lost file I/O error report for ino 8 type 5 pos 0x0 len 0x0 error -117
[  140.060556][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  140.076023][    C0] EXT4-fs (loop0): initial error at time 1772384506: ext4_get_journal_inode:5863: inode 8
[  140.086002][    C0] EXT4-fs (loop0): last error at time 1772384506: ext4_get_journal_inode:5863: inode 8
[  140.096272][ T6443] EXT4-fs (loop0): no journal found
[  142.638924][ T5823] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  142.690817][ T5823] usb 6-1: USB disconnect, device number 2
[  145.911105][ T6480] tipc: Started in network mode
[  145.916088][ T6480] tipc: Node identity 4004, cluster identity 4711
[  145.923428][ T6480] tipc: Node number set to 16388
[  147.521151][ T6488] nbd5: detected capacity change from 0 to 112
[  147.561544][ T6488] block nbd5: shutting down sockets
[  147.574052][   T11] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  147.583860][   T11] Buffer I/O error on dev nbd5, logical block 0, async page read
[  147.594051][ T6009] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  147.607150][ T6009] Buffer I/O error on dev nbd5, logical block 0, async page read
[  147.616465][ T6009] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  147.662248][ T6009] Buffer I/O error on dev nbd5, logical block 0, async page read
[  148.460742][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  148.475839][ T2251] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  148.486520][ T2251] Buffer I/O error on dev nbd5, logical block 0, async page read
[  148.499212][ T6009] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  148.519936][ T6009] Buffer I/O error on dev nbd5, logical block 0, async page read
[  148.528685][ T6009] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  148.539422][ T6009] Buffer I/O error on dev nbd5, logical block 0, async page read
[  148.548061][ T6009] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  148.558558][ T6009] Buffer I/O error on dev nbd5, logical block 0, async page read
[  148.581337][ T6009] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  148.601275][ T6009] Buffer I/O error on dev nbd5, logical block 0, async page read
[  148.623044][ T6009] ldm_validate_partition_table(): Disk read failed.
[  148.629947][ T6009] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  148.639876][ T6009] Buffer I/O error on dev nbd5, logical block 0, async page read
[  148.647826][ T6009] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  148.668276][ T6009] Buffer I/O error on dev nbd5, logical block 0, async page read
[  148.687246][ T6009] Dev nbd5: unable to read RDB block 0
[  148.688385][   T10] usb 5-1: config 0 has no interfaces?
[  148.701610][ T6009]  nbd5: unable to read partition table
[  148.718018][   T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  148.728339][ T6009] ldm_validate_partition_table(): Disk read failed.
[  148.756474][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.765006][ T6009] Dev nbd5: unable to read RDB block 0
[  148.789919][ T6009]  nbd5: unable to read partition table
[  148.801887][   T10] usb 5-1: config 0 descriptor??
[  149.265552][ T5919] usb 5-1: USB disconnect, device number 2
[  149.469450][ T6508] netlink: 52 bytes leftover after parsing attributes in process `syz.2.122'.
[  149.505008][ T6487] loop0: detected capacity change from 0 to 32768
[  149.559465][ T6487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.133 (6487)
[  149.609882][ T6487] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  149.634484][ T6487] BTRFS info (device loop0): using sha256 checksum algorithm
[  149.740465][ T6487] BTRFS info (device loop0): enabling ssd optimizations
[  149.816988][ T6487] BTRFS info (device loop0): turning on async discard
[  149.830638][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  149.868852][ T6487] BTRFS info (device loop0): enabling free space tree
[  149.877267][ T6526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'.
[  150.015717][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.190699][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  150.930047][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.007314][ T5814] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  151.019365][   T10] usb 2-1: config 0 descriptor??
[  151.023562][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  151.749600][ T6539] loop2: detected capacity change from 0 to 1024
[  151.763556][ T6539] EXT4-fs: inline encryption not supported
[  152.114722][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  152.177930][ T6539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.365714][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  152.373785][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  152.381835][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[  152.446840][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  152.463448][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  152.471063][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  152.479696][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[  152.487186][   T10] pwc: recv_control_msg error -32 req 04 val 1500
[  152.607406][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.721567][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[  152.761066][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[  152.800890][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  152.810668][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  152.824737][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  152.858553][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  152.883178][ T6552] loop4: detected capacity change from 0 to 512
[  152.934822][   T10] pwc: Registered as video103.
[  152.935570][ T6552] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  152.942639][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[  153.097310][ T6552] Quota error (device loop4): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  153.150043][   T10] usb 2-1: USB disconnect, device number 4
[  153.202545][ T6552] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  153.237005][ T6552] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.148: Failed to acquire dquot type 1
[  153.269913][ T6552] loop4: lost filesystem error report for type 5 error -117
[  153.279339][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  153.352944][ T6567] netlink: 52 bytes leftover after parsing attributes in process `syz.2.153'.
[  153.410544][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  153.417091][    C0] EXT4-fs (loop4): initial error at time 1772384520: ext4_acquire_dquot:7001
[  153.426004][    C0] EXT4-fs (loop4): last error at time 1772384520: ext4_acquire_dquot:7001
[  153.464885][ T6552] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.148: corrupted inode contents
[  153.660590][ T6552] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  153.667814][ T6552] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #16: comm syz.4.148: mark_inode_dirty error
[  154.232986][ T6552] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  154.238085][ T6552] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.148: corrupted inode contents
[  154.391237][ T5892] usb 6-1: Using ep0 maxpacket: 16
[  154.412403][ T6552] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  154.424356][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.452706][ T6552] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.148: mark_inode_dirty error
[  154.476436][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.494174][ T6552] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  154.501736][ T6552] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.148: corrupted inode contents
[  154.550674][ T5892] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  154.577710][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.596871][ T6552] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  154.618682][ T5892] usb 6-1: config 0 descriptor??
[  154.645507][ T6552] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  154.673495][ T6552] loop4: lost filesystem error report for type 5 error -117
[  154.676538][ T6552] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #16: comm syz.4.148: corrupted inode contents
[  154.776179][ T6552] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  154.779866][ T6552] EXT4-fs error (device loop4): ext4_truncate:4587: inode #16: comm syz.4.148: mark_inode_dirty error
[  155.092393][ T6552] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  155.102545][ T6552] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  155.396709][ T6552] loop4: lost filesystem error report for type 5 error -117
[  155.501050][ T6552] EXT4-fs (loop4): 1 truncate cleaned up
[  155.590748][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  155.603262][ T5892] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  155.637780][ T5892] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  155.659751][ T6552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.663715][ T5892] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  155.929508][ T6593] loop0: detected capacity change from 0 to 40427
[  155.947663][ T5892] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  155.955732][ T5892] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  155.966340][ T5892] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  155.973969][ T5892] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  155.988652][ T5892] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  155.995912][ T6552] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.010135][ T6593] F2FS-fs (loop0): invalid crc value
[  156.052101][   T10] usb 2-1: Using ep0 maxpacket: 8
[  156.055891][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.062598][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  156.090605][ T5823] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  156.135663][ T6593] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  156.149953][ T6593] F2FS-fs (loop0): Start checkpoint disabled!
[  156.159763][ T5892] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  156.167478][ T5892] wacom 0003:056A:0084.0003: unknown main item tag 0x0
[  156.178212][ T6593] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  156.179651][   T10] usb 2-1: config 86 has an invalid interface number: 246 but max is 0
[  156.202724][ T5892] usb 6-1: USB disconnect, device number 3
[  156.212181][ T6593] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  156.265469][   T10] usb 2-1: config 86 has no interface number 0
[  156.297495][   T10] usb 2-1: config 86 interface 246 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1023
[  156.312690][ T5823] usb 3-1: Using ep0 maxpacket: 8
[  156.351151][ T5823] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  156.371078][   T30] audit: type=1800 audit(1772384523.062:3): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.160" name="bus" dev="loop0" ino=10 res=0 errno=0
[  156.424018][   T10] usb 2-1: config 86 interface 246 altsetting 128 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  156.459816][ T5823] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  156.487408][ T6596] syz.0.160: attempt to access beyond end of device
[  156.487408][ T6596] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  156.505917][ T6596] syz.0.160: attempt to access beyond end of device
[  156.505917][ T6596] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  156.520954][ T6596] syz.0.160: attempt to access beyond end of device
[  156.520954][ T6596] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  156.538747][ T6596] syz.0.160: attempt to access beyond end of device
[  156.538747][ T6596] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  156.632539][   T10] usb 2-1: config 86 interface 246 has no altsetting 0
[  156.640130][ T5823] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  156.761207][ T5823] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  156.784098][ T5823] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.830741][ T5823] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  156.839903][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.879664][   T10] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=12.36
[  156.893484][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.938857][   T10] usb 2-1: Product: syz
[  156.954505][   T10] usb 2-1: Manufacturer: syz
[  156.959281][   T10] usb 2-1: SerialNumber: syz
[  157.011505][ T6580] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  157.254690][ T5888] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  157.290426][   T10] kvaser_usb 2-1:86.246: error -ENODEV: Cannot get usb endpoint(s)
[  157.300108][ T5823] usb 3-1: usb_control_msg returned -32
[  157.306138][ T5823] usbtmc 3-1:16.0: can't read capabilities
[  158.302324][ T5888] usb 5-1: config 0 has no interfaces?
[  158.346502][ T6155] kworker/u8:11: attempt to access beyond end of device
[  158.346502][ T6155] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  158.369089][ T5888] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  159.283170][ T6602] loop5: detected capacity change from 0 to 128
[  159.353113][ T5823] usb 3-1: USB disconnect, device number 5
[  159.390971][ T6604] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.162'.
[  159.402961][ T6602] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.162'.
[  159.606253][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.085838][ T6155] CPU: 1 UID: 0 PID: 6155 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) 
[  160.085870][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  160.085886][ T6155] Workqueue: writeback wb_workfn (flush-7:0)
[  160.085925][ T6155] Call Trace:
[  160.085934][ T6155]  <TASK>
[  160.085944][ T6155]  dump_stack_lvl+0xe8/0x150
[  160.085983][ T6155]  f2fs_handle_critical_error+0x37c/0x540
[  160.086021][ T6155]  f2fs_write_end_io+0xcdb/0xff0
[  160.086080][ T6155]  __submit_merged_bio+0x256/0x700
[  160.086117][ T6155]  __submit_merged_write_cond+0x3c9/0x4e0
[  160.086157][ T6155]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  160.086203][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.086247][ T6155]  f2fs_write_data_pages+0x2975/0x35e0
[  160.086277][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.086306][ T6155]  ? lock_release+0x4b/0x3d0
[  160.086387][ T6155]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  160.086437][ T6155]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  160.086522][ T6155]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  160.086581][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.086611][ T6155]  ? __lock_acquire+0x6b5/0x2cf0
[  160.086670][ T6155]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  160.086712][ T6155]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  160.086746][ T6155]  do_writepages+0x32e/0x550
[  160.086792][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.086821][ T6155]  ? reacquire_held_locks+0x104/0x190
[  160.086858][ T6155]  ? writeback_sb_inodes+0x477/0x1a20
[  160.086901][ T6155]  __writeback_single_inode+0x133/0x11a0
[  160.086938][ T6155]  ? do_raw_spin_unlock+0xf5/0x210
[  160.086971][ T6155]  writeback_sb_inodes+0x992/0x1a20
[  160.087033][ T6155]  ? do_raw_spin_unlock+0xf5/0x210
[  160.087068][ T6155]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  160.087099][ T6155]  ? do_raw_spin_lock+0x12b/0x2f0
[  160.087179][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.087209][ T6155]  ? rcu_is_watching+0x15/0xb0
[  160.087244][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.087286][ T6155]  wb_writeback+0x456/0xb70
[  160.087324][ T6155]  ? queue_io+0x211/0x4a0
[  160.087370][ T6155]  ? __pfx_wb_writeback+0x10/0x10
[  160.087399][ T6155]  ? do_raw_spin_lock+0x12b/0x2f0
[  160.087448][ T6155]  wb_workfn+0x414/0xf50
[  160.087479][ T6155]  ? look_up_lock_class+0x57/0x110
[  160.087524][ T6155]  ? __pfx_wb_workfn+0x10/0x10
[  160.087555][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.087584][ T6155]  ? do_raw_spin_lock+0x12b/0x2f0
[  160.087614][ T6155]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  160.087640][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.087685][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.087718][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.087749][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.087783][ T6155]  ? process_scheduled_works+0xa25/0x1830
[  160.087816][ T6155]  ? process_scheduled_works+0xa25/0x1830
[  160.087853][ T6155]  process_scheduled_works+0xb02/0x1830
[  160.087927][ T6155]  ? __pfx_process_scheduled_works+0x10/0x10
[  160.087969][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.087998][ T6155]  ? assign_work+0x3d5/0x5e0
[  160.088039][ T6155]  worker_thread+0xa50/0xfc0
[  160.088075][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.088126][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.088169][ T6155]  kthread+0x388/0x470
[  160.088195][ T6155]  ? __pfx_worker_thread+0x10/0x10
[  160.088227][ T6155]  ? __pfx_kthread+0x10/0x10
[  160.088254][ T6155]  ret_from_fork+0x51e/0xb90
[  160.088289][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.088321][ T6155]  ? __pfx_ret_from_fork+0x10/0x10
[  160.088351][ T6155]  ? srso_alias_return_thunk+0x5/0xfbef5
[  160.088380][ T6155]  ? __switch_to+0xc7d/0x1450
[  160.088416][ T6155]  ? __pfx_kthread+0x10/0x10
[  160.088443][ T6155]  ret_from_fork_asm+0x1a/0x30
[  160.088505][ T6155]  </TASK>
[  160.088515][ T6155] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  160.269137][ T5888] usb 5-1: config 0 descriptor??
[  160.618288][   T10] usb 2-1: USB disconnect, device number 5
[  160.706704][ T6609] syzkaller0: entered promiscuous mode
[  160.712562][ T6609] syzkaller0: entered allmulticast mode
[  160.724483][ T6609] tipc: Started in network mode
[  160.729558][ T6609] tipc: Node identity f64c0a906ff4, cluster identity 4711
[  160.740096][ T6609] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.852966][ T6155] kworker/u8:11: attempt to access beyond end of device
[  160.852966][ T6155] loop5: rw=1, sector=145, nr_sectors = 896 limit=128
[  161.158819][ T6606] tipc: Resetting bearer <eth:syzkaller0>
[  161.604320][ T5888] usb 5-1: can't set config #0, error -71
[  161.745450][ T5888] usb 5-1: USB disconnect, device number 3
[  162.379457][ T6606] tipc: Disabling bearer <eth:syzkaller0>
[  162.488621][ T6612] netlink: 52 bytes leftover after parsing attributes in process `syz.1.167'.
[  162.655487][ T5892] tipc: Node number set to 2578975376
[  163.523826][ T5892] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  163.993382][ T5892] usb 6-1: Using ep0 maxpacket: 16
[  164.007871][ T5892] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  164.076017][ T5892] usb 6-1: config 251 has 0 interfaces, different from the descriptor's value: 1
[  164.100751][ T6637] loop2: detected capacity change from 0 to 2048
[  164.119399][ T5892] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  164.123332][ T6638] nbd0: detected capacity change from 0 to 112
[  164.164657][ T6638] block nbd0: shutting down sockets
[  164.181172][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.211411][ T5892] usb 6-1: Product: syz
[  164.254824][ T5892] usb 6-1: Manufacturer: syz
[  164.274069][ T6637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.305642][ T5892] usb 6-1: SerialNumber: syz
[  164.382090][ T6637] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.436221][ T6637] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.174: bg 0: block 288: padding at end of block bitmap is not set
[  164.475753][ T6637] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -117
[  165.183731][ T6655] loop0: detected capacity change from 0 to 256
[  165.546165][ T6655] FAT-fs (loop0): Directory bread(block 64) failed
[  165.551343][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.553450][ T6655] FAT-fs (loop0): Directory bread(block 65) failed
[  165.570962][ T6655] FAT-fs (loop0): Directory bread(block 66) failed
[  165.581575][ T6655] FAT-fs (loop0): Directory bread(block 67) failed
[  165.588193][ T6655] FAT-fs (loop0): Directory bread(block 68) failed
[  165.596440][ T6655] FAT-fs (loop0): Directory bread(block 69) failed
[  165.603674][ T6655] FAT-fs (loop0): Directory bread(block 70) failed
[  165.610180][ T6655] FAT-fs (loop0): Directory bread(block 71) failed
[  165.617464][ T6655] FAT-fs (loop0): Directory bread(block 72) failed
[  165.624488][ T6655] FAT-fs (loop0): Directory bread(block 73) failed
[  166.001716][ T5823] usb 6-1: USB disconnect, device number 4
[  166.961945][ T5823] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  167.441924][ T5823] usb 2-1: Using ep0 maxpacket: 8
[  167.458957][ T5823] usb 2-1: unable to get BOS descriptor or descriptor too short
[  167.679828][ T6679] netlink: 52 bytes leftover after parsing attributes in process `syz.5.184'.
[  167.723593][ T5823] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  167.750802][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.791148][ T5823] usb 2-1: Product: syz
[  167.820625][ T5823] usb 2-1: Manufacturer: syz
[  167.850066][ T5823] usb 2-1: SerialNumber: syz
[  168.071489][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  168.434944][   T10] usb 4-1: Using ep0 maxpacket: 32
[  168.443514][   T10] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  168.453033][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.477217][   T10] gspca_main: nw80x-2.14.0 probing 055f:d001
[  168.499886][ T5823] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  168.509045][ T5823] usb 2-1: MIDIStreaming interface descriptor not found
[  169.245714][   T10] gspca_nw80x: reg_w err -110
[  169.265221][   T10] nw80x 4-1:3.0: probe with driver nw80x failed with error -110
[  169.301348][ T5828] block nbd5: Receive control failed (result -32)
[  169.392493][ T6692] nbd5: detected capacity change from 0 to 112
[  169.417185][ T6692] block nbd5: shutting down sockets
[  169.429273][ T5823] usb 2-1: USB disconnect, device number 6
[  170.606721][ T6001] udevd[6001]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.853110][ T5823] usb 4-1: USB disconnect, device number 7
[  173.531797][ T6722] syzkaller0: entered promiscuous mode
[  173.537291][ T6722] syzkaller0: entered allmulticast mode
[  173.881517][ T6732] loop5: detected capacity change from 0 to 32768
[  173.930214][ T6732] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  173.938962][ T6732] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  174.038124][ T6732] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  174.051307][   T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  174.087492][   T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  174.788486][   T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 700ms
[  174.965400][   T10] gfs2: fsid=syz:syz.0: jid=0: Done
[  175.111403][ T6732] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  176.334662][ T6755] nbd0: detected capacity change from 0 to 112
[  176.340984][ T5828] block nbd0: Receive control failed (result -32)
[  176.391848][ T6755] block nbd0: shutting down sockets
[  177.417982][ T6766] loop0: detected capacity change from 0 to 764
[  179.161078][ T6786] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size.
[  179.742503][ T6791] loop4: detected capacity change from 0 to 256
[  181.223702][ T6808] Bluetooth: MGMT ver 1.23
[  181.945804][ T5822] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  182.232385][ T6817] nbd3: detected capacity change from 0 to 112
[  182.241355][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.270372][ T5822] usb 2-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00
[  182.281001][ T6819] input: syz0 as /devices/virtual/input/input6
[  182.301572][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.317385][ T5828] block nbd3: Receive control failed (result -104)
[  182.897792][ T5822] usb 2-1: config 0 descriptor??
[  182.918764][ T5822] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  183.185507][ T6828] syz.2.226 uses obsolete (PF_INET,SOCK_PACKET)
[  183.934435][ T6829] loop5: detected capacity change from 0 to 4096
[  184.278299][ T6829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.400761][ T6829] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.228: corrupted inode contents
[  184.441845][ T6829] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.228: mark_inode_dirty error
[  184.649904][ T6829] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.228: corrupted inode contents
[  184.777617][ T6829] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.228: mark_inode_dirty error
[  184.964267][ T6829] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.228: corrupted inode contents
[  185.114732][ T6829] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.228: mark_inode_dirty error
[  185.351555][  T790] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  185.937664][ T5816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.021214][  T790] usb 3-1: Using ep0 maxpacket: 16
[  186.028469][  T790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.042837][  T790] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  186.056138][  T790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  186.066555][  T790] usb 3-1: SerialNumber: syz
[  186.084648][  T790] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  186.123209][ T5823] usb 2-1: USB disconnect, device number 7
[  186.313898][  T974] usb 3-1: USB disconnect, device number 6
[  186.585205][ T6836] loop4: detected capacity change from 0 to 32768
[  186.686840][ T6836] xfs: Deprecated parameter 'attr2'
[  186.730021][ T6836] XFS: attr2 mount option is deprecated.
[  186.970185][ T6836] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  187.141304][ T6836] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  187.215699][ T6836] XFS (loop4): Ending clean mount
[  187.254920][ T6836] XFS (loop4): Quotacheck needed: Please wait.
[  187.472452][ T6836] XFS (loop4): Quotacheck: Done.
[  187.506891][ T6868] loop1: detected capacity change from 0 to 64
[  187.674502][ T5818] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  188.440742][ T5815] hfs: node 4:3 still has 1 user(s)!
[  188.520709][ T5823] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  188.712455][ T5823] usb 6-1: Using ep0 maxpacket: 32
[  188.731509][ T5823] usb 6-1: unable to get BOS descriptor or descriptor too short
[  188.742353][ T5823] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  188.783169][ T5823] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  188.798055][ T5823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.809133][ T5823] usb 6-1: Product: syz
[  188.816570][ T5823] usb 6-1: Manufacturer: syz
[  188.836813][ T5823] usb 6-1: SerialNumber: syz
[  190.811651][ T6848] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  190.927145][ T5823] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  190.964222][ T5823] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  190.971701][  T790] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  191.591927][ T5823] usb 6-1: USB disconnect, device number 5
[  192.608640][  T790] usb 2-1: device descriptor read/all, error -71
[  192.755084][ T6605] udevd[6605]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.541656][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  193.549887][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  193.593075][ T6905] loop0: detected capacity change from 0 to 16
[  193.662734][ T6905] erofs (device loop0): invalid ishare xattr prefix id 0
[  194.320864][ T5823] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  194.420358][ T6923] loop0: detected capacity change from 0 to 128
[  194.440333][ T6924] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  194.515558][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.536139][ T5823] usb 2-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00
[  194.565921][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.580650][ T5888] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  194.609527][ T5823] usb 2-1: config 0 descriptor??
[  194.625682][ T5823] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  194.750978][ T5888] usb 6-1: Using ep0 maxpacket: 32
[  194.764648][ T5888] usb 6-1: unable to get BOS descriptor or descriptor too short
[  194.802727][ T5888] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  194.839964][ T5888] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  194.848851][ T6931] capability: warning: `syz.0.260' uses 32-bit capabilities (legacy support in use)
[  194.860119][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.860151][ T5888] usb 6-1: Product: syz
[  194.860170][ T5888] usb 6-1: Manufacturer: syz
[  194.860188][ T5888] usb 6-1: SerialNumber: syz
[  195.090698][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  195.113048][ T5888] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  195.145461][ T5888] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  195.772867][   T10] usb 3-1: Using ep0 maxpacket: 32
[  197.057213][   T10] usb 3-1: config 0 has an invalid interface number: 111 but max is 1
[  197.068631][   T10] usb 3-1: config 0 has no interface number 1
[  197.080613][ T5888] usb 6-1: USB disconnect, device number 6
[  197.100986][  T974] usb 2-1: USB disconnect, device number 10
[  197.132096][   T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  197.158952][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.190579][   T10] usb 3-1: Product: syz
[  197.194821][   T10] usb 3-1: Manufacturer: syz
[  197.199410][   T10] usb 3-1: SerialNumber: syz
[  197.289095][   T10] usb 3-1: config 0 descriptor??
[  197.296861][ T6605] udevd[6605]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  198.313944][   T10] snd-usb-6fire 3-1:0.111: unable to receive device firmware state.
[  198.404823][   T10] snd-usb-6fire 3-1:0.111: probe with driver snd-usb-6fire failed with error -71
[  198.450351][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  198.470412][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  198.491646][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  198.496225][   T10] usb 3-1: USB disconnect, device number 7
[  198.511284][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  198.521452][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  198.713325][ T5935] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  198.880568][ T5935] usb 2-1: Using ep0 maxpacket: 8
[  198.893623][ T5935] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  198.921550][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.961607][ T5935] usb 2-1: config 0 descriptor??
[  199.448384][ T5935] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  200.239597][  T974] usb 2-1: USB disconnect, device number 11
[  200.569814][ T6953] chnl_net:caif_netlink_parms(): no params data found
[  200.581082][ T5837] Bluetooth: hci6: command tx timeout
[  200.730570][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  200.731813][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  200.731895][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  200.732007][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  200.732034][ T5837] Bluetooth: hci5: command 0x0406 tx timeout
[  200.732080][ T5837] Bluetooth: hci0: command 0x0406 tx timeout
[  200.825888][ T6953] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.826112][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.826258][ T6953] bridge_slave_0: entered allmulticast mode
[  200.828212][ T6953] bridge_slave_0: entered promiscuous mode
[  200.831809][ T6953] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.831979][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.832123][ T6953] bridge_slave_1: entered allmulticast mode
[  200.834107][ T6953] bridge_slave_1: entered promiscuous mode
[  200.901754][ T6953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.905642][ T6953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.953169][ T6953] team0: Port device team_slave_0 added
[  201.144456][ T6953] team0: Port device team_slave_1 added
[  201.761273][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.781878][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  201.840557][ T6953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.864521][ T6992] netlink: 'syz.4.279': attribute type 3 has an invalid length.
[  201.872811][ T6992] netlink: 'syz.4.279': attribute type 3 has an invalid length.
[  201.880541][ T6992] netlink: 'syz.4.279': attribute type 3 has an invalid length.
[  201.888217][ T6992] netlink: 'syz.4.279': attribute type 3 has an invalid length.
[  201.896026][ T6992] netlink: 'syz.4.279': attribute type 3 has an invalid length.
[  201.903895][ T6992] netlink: 'syz.4.279': attribute type 3 has an invalid length.
[  201.911604][ T6992] netlink: 'syz.4.279': attribute type 3 has an invalid length.
[  201.919278][ T6992] netlink: 'syz.4.279': attribute type 3 has an invalid length.
[  201.927502][ T6992] netlink: 'syz.4.279': attribute type 3 has an invalid length.
[  201.935526][ T6992] netlink: 'syz.4.279': attribute type 3 has an invalid length.
[  201.966622][ T6953] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.985578][ T6953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  202.092369][ T6953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.407230][ T6953] hsr_slave_0: entered promiscuous mode
[  202.426732][ T6953] hsr_slave_1: entered promiscuous mode
[  202.450673][ T6953] debugfs: 'hsr0' already exists in 'hsr'
[  202.480156][ T6953] Cannot create hsr debugfs directory
[  202.523442][  T790] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  202.533569][ T7001] loop2: detected capacity change from 0 to 512
[  202.557136][ T7001] EXT4-fs (loop2): Test dummy encryption mode enabled
[  202.591299][ T7001] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  202.651378][ T5136] Bluetooth: hci6: command tx timeout
[  202.684418][  T790] usb 5-1: Using ep0 maxpacket: 8
[  202.701382][ T7001] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.284: bad orphan inode 131083
[  202.722891][  T790] usb 5-1: unable to get BOS descriptor or descriptor too short
[  202.750546][ T7001] loop2: lost filesystem error report for type 5 error -117
[  202.763267][ T7001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.784066][  T790] usb 5-1: config 7 has an invalid interface number: 45 but max is 0
[  202.801338][  T790] usb 5-1: config 7 has no interface number 0
[  202.807511][  T790] usb 5-1: config 7 interface 45 has no altsetting 0
[  202.851576][  T790] usb 5-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=52.85
[  202.865819][  T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.879143][  T790] usb 5-1: Product: syz
[  202.884495][  T790] usb 5-1: Manufacturer: syz
[  202.931035][  T974] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  203.163563][  T790] usb 5-1: SerialNumber: syz
[  203.204217][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.361828][  T974] usb 2-1: Using ep0 maxpacket: 8
[  203.398829][  T790] pegasus 5-1:7.45: Missing or invalid endpoints
[  203.489592][  T974] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  203.553123][  T974] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[  203.607993][  T974] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  203.611622][  T790] usb 5-1: USB disconnect, device number 4
[  203.695627][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.818512][  T974] usb 2-1: Product: syz
[  203.865350][  T974] usb 2-1: Manufacturer: syz
[  204.052876][  T974] usb 2-1: SerialNumber: syz
[  204.151172][ T5822] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  204.317551][ T7023] loop2: detected capacity change from 0 to 256
[  204.603594][ T5822] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  204.725546][ T7023] FAT-fs (loop2): Directory bread(block 64) failed
[  204.733181][ T7023] FAT-fs (loop2): Directory bread(block 65) failed
[  204.740323][ T7023] FAT-fs (loop2): Directory bread(block 66) failed
[  204.747750][ T7023] FAT-fs (loop2): Directory bread(block 67) failed
[  204.755556][ T7023] FAT-fs (loop2): Directory bread(block 68) failed
[  204.763246][ T7023] FAT-fs (loop2): Directory bread(block 69) failed
[  204.770332][ T7023] FAT-fs (loop2): Directory bread(block 70) failed
[  204.777788][ T7023] FAT-fs (loop2): Directory bread(block 71) failed
[  204.785582][ T7023] FAT-fs (loop2): Directory bread(block 72) failed
[  204.794791][ T7023] FAT-fs (loop2): Directory bread(block 73) failed
[  204.841433][ T5136] Bluetooth: hci6: command tx timeout
[  204.895170][ T5822] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  205.062741][ T5822] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  205.291539][ T5822] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  205.392775][ T5822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.949577][ T6953] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  205.975673][ T6953] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  205.987128][ T5822] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  206.068779][ T6953] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  206.166446][ T6953] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  206.188169][ T7025] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  206.777888][ T5822] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2
[  206.800275][ T7025] block device autoloading is deprecated and will be removed.
[  206.868120][ T5822] usb 6-1: USB disconnect, device number 7
[  206.891744][ T5136] Bluetooth: hci6: command tx timeout
[  208.746442][ T5888] usb 2-1: USB disconnect, device number 12
[  209.125378][ T6953] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.154706][ T6953] 8021q: adding VLAN 0 to HW filter on device team0
[  209.185923][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.193145][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.207805][ T7052] loop5: detected capacity change from 0 to 512
[  209.224335][ T7052] EXT4-fs (loop5): Test dummy encryption mode enabled
[  209.274208][ T7052] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  209.284889][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.292103][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.322875][ T7060] loop2: detected capacity change from 0 to 16
[  209.404536][ T7052] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.298: bad orphan inode 131083
[  209.465806][ T7052] loop5: lost filesystem error report for type 5 error -117
[  209.468249][ T7052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.518743][ T7065] validate_nla: 43 callbacks suppressed
[  209.518763][ T7065] netlink: 'syz.0.303': attribute type 1 has an invalid length.
[  209.549211][ T7060] erofs (device loop2): mounted with root inode @ nid 36.
[  209.557241][ T5919] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  209.602551][ T7065] bond1: entered promiscuous mode
[  209.607835][ T7065] bond1: entered allmulticast mode
[  209.614351][ T7065] 8021q: adding VLAN 0 to HW filter on device bond1
[  209.732817][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'.
[  209.774164][ T7068] erspan1: entered allmulticast mode
[  209.803944][ T7068] bond1: (slave erspan1): making interface the new active one
[  209.814910][ T7068] erspan1: entered promiscuous mode
[  209.822912][ T7068] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  209.944133][ T5919] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  209.976163][ T7065] bond1 (unregistering): (slave erspan1): Releasing active interface
[  209.978832][ T5919] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  210.036938][ T5919] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  210.040597][ T7065] erspan1: left promiscuous mode
[  210.051920][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.099981][ T7065] bond1 (unregistering): Released all slaves
[  210.216079][ T6953] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.237017][ T5816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.524258][ T5919] usb 5-1: usb_control_msg returned -32
[  211.345287][ T5919] usbtmc 5-1:16.0: can't read capabilities
[  213.386706][   T25] block nbd3: Possible stuck request ffff8880265f0000: control (read@0,4096B). Runtime 30 seconds
[  213.457924][ T5935] usb 5-1: USB disconnect, device number 5
[  214.784007][ T6953] veth0_vlan: entered promiscuous mode
[  214.986329][ T6953] veth1_vlan: entered promiscuous mode
[  215.019912][ T6953] veth0_macvtap: entered promiscuous mode
[  215.051433][ T6953] veth1_macvtap: entered promiscuous mode
[  215.268700][ T7102] loop1: detected capacity change from 0 to 1024
[  216.160746][ T7102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.174909][ T7102] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  216.299807][ T7102] EXT4-fs error (device loop1): ext4_xattr_block_list:766: inode #15: comm syz.1.310: corrupted xattr block 128: invalid header
[  216.547738][ T7105] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  217.113588][ T7102] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  217.525617][ T6953] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.604220][ T6953] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.631348][ T5919] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  217.666675][ T6072] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.697536][ T6072] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.823933][ T5919] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  217.891609][ T6072] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.941390][ T6072] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.951223][ T5919] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  218.687798][ T5919] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.790558][ T5919] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  218.799654][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.038894][ T5919] usb 3-1: can't set config #27, error -71
[  220.228307][ T5919] usb 3-1: USB disconnect, device number 8
[  220.381644][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.411797][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.574687][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.582318][ T7130] loop2: detected capacity change from 0 to 512
[  220.619732][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.629819][ T7130] EXT4-fs (loop2): Test dummy encryption mode enabled
[  220.671223][ T7130] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  220.806721][ T7130] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.321: bad orphan inode 131083
[  220.818109][ T7130] loop2: lost filesystem error report for type 5 error -117
[  220.820543][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  220.834292][    C1] EXT4-fs (loop2): initial error at time 1772384587: ext4_orphan_get:1417
[  220.842842][    C1] EXT4-fs (loop2): last error at time 1772384587: ext4_orphan_get:1417
[  220.883731][ T7130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.016878][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.346277][ T7145] loop6: detected capacity change from 0 to 512
[  222.383283][ T7145] EXT4-fs: Ignoring removed i_version option
[  222.424882][ T7145] EXT4-fs: Ignoring removed nomblk_io_submit option
[  222.543721][ T7145] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.324: bad orphan inode 1
[  222.568011][ T7145] loop6: lost filesystem error report for type 5 error -117
[  222.570547][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  222.584716][    C0] EXT4-fs (loop6): initial error at time 1772384589: ext4_orphan_get:1417
[  222.593266][    C0] EXT4-fs (loop6): last error at time 1772384589: ext4_orphan_get:1417
[  224.320053][ T7145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.472581][   T30] audit: type=1800 audit(1772384591.172:4): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.324" name="file1" dev="loop6" ino=15 res=0 errno=0
[  224.730828][    C0] blk_print_req_error: 27 callbacks suppressed
[  224.730850][    C0] I/O error, dev loop6, sector 450 op 0x1:(WRITE) flags 0x808800 phys_seg 31 prio class 2
[  224.748140][    C0] I/O error, dev loop6, sector 106 op 0x1:(WRITE) flags 0x808800 phys_seg 12 prio class 2
[  224.751280][ T7151] loop6: detected capacity change from 512 to 0
[  224.758534][    C0] I/O error, dev loop6, sector 194 op 0x1:(WRITE) flags 0x808800 phys_seg 21 prio class 2
[  224.989768][ T6953] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  225.248166][ T6953] EXT4-fs error (device loop6): ext4_get_inode_loc:4920: inode #2: block 5: comm syz-executor: unable to read itable block
[  225.325059][ T6953] buffer_io_error: 27 callbacks suppressed
[  225.325077][ T6953] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  225.353408][ T6953] EXT4-fs (loop6): I/O error while writing superblock
[  225.360326][ T6953] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: IO failure
[  225.370774][ T5935] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  225.395888][ T6953] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  225.415548][ T6953] EXT4-fs (loop6): I/O error while writing superblock
[  225.491379][ T6953] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz-executor: mark_inode_dirty error
[  225.570823][ T6953] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  225.600562][ T5935] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  225.650653][ T5935] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  225.678621][ T6953] EXT4-fs (loop6): I/O error while writing superblock
[  226.221768][   T12] EXT4-fs warning (device loop6): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 36)
[  226.237710][ T5935] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  226.278146][   T12] Buffer I/O error on device loop6, logical block 36
[  226.285066][   T12] Buffer I/O error on device loop6, logical block 37
[  226.291829][   T12] Buffer I/O error on device loop6, logical block 38
[  226.298499][   T12] Buffer I/O error on device loop6, logical block 39
[  226.308238][ T5935] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  226.341096][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.388106][ T5935] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  226.419872][   T12] Buffer I/O error on device loop6, logical block 40
[  226.426684][   T12] Buffer I/O error on device loop6, logical block 41
[  226.433360][   T12] Buffer I/O error on device loop6, logical block 42
[  226.440059][   T12] Buffer I/O error on device loop6, logical block 43
[  226.533059][ T7170] netlink: 'syz.5.334': attribute type 12 has an invalid length.
[  226.540554][   T12] Buffer I/O error on device loop6, logical block 44
[  226.547842][   T12] Buffer I/O error on device loop6, logical block 45
[  226.800621][   T12] EXT4-fs warning (device loop6): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 49)
[  227.050877][ T5935] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[  227.132578][   T12] EXT4-fs warning (device loop6): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 209)
[  227.318500][ T7174] loop1: detected capacity change from 0 to 512
[  227.367656][ T7174] EXT4-fs (loop1): Test dummy encryption mode enabled
[  227.388476][ T5935] usb 5-1: USB disconnect, device number 6
[  227.400545][ T7174] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  227.414986][   T12] EXT4-fs warning (device loop6): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 65)
[  227.447161][   T12] EXT4-fs error (device loop6): __ext4_get_inode_loc_noinmem:4905: inode #2: block 5: comm kworker/u8:0: unable to read itable block
[  227.463112][   T12] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  227.472912][   T12] EXT4-fs (loop6): I/O error while writing superblock
[  227.499087][ T6953] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.509512][ T7174] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.335: bad orphan inode 131083
[  227.581753][ T7174] loop1: lost filesystem error report for type 5 error -117
[  227.583715][ T7174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.635009][ T6953] Buffer I/O error on dev loop6, logical block 1, lost sync page write
[  227.658226][ T6953] EXT4-fs (loop6): I/O error while writing superblock
[  227.747348][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.382825][ T6787] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.443500][ T7195] macvtap1: entered promiscuous mode
[  232.448844][ T7195] macvtap1: entered allmulticast mode
[  232.455951][ T7195] dummy0: entered promiscuous mode
[  232.462124][ T7195] dummy0: entered allmulticast mode
[  232.470034][ T7195] team0: Device macvtap1 failed to register rx_handler
[  232.480203][ T7195] dummy0: left allmulticast mode
[  232.486216][ T7195] dummy0: left promiscuous mode
[  232.793927][ T6787] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.402899][ T6787] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.676899][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  234.686572][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  234.698670][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  234.708827][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  234.722281][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  234.857826][ T6787] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.911226][  T790] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  236.671293][  T790] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  236.739128][  T790] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  236.782458][  T790] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  236.837098][   T51] Bluetooth: hci6: command tx timeout
[  236.860670][  T790] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  236.884803][  T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.047851][  T790] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  237.451371][ T6787] bridge_slave_1: left allmulticast mode
[  237.460044][ T6787] bridge_slave_1: left promiscuous mode
[  237.469133][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.557220][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.563797][  T790] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[  237.572862][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.951252][ T6787] bridge_slave_0: left allmulticast mode
[  238.001232][  T790] usb 2-1: USB disconnect, device number 13
[  238.011443][ T6787] bridge_slave_0: left promiscuous mode
[  238.017231][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.179680][ T7252] loop5: detected capacity change from 0 to 128
[  238.894968][   T51] Bluetooth: hci6: command tx timeout
[  239.159988][ T6787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  239.189303][ T6787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  239.225787][ T6787] bond0 (unregistering): Released all slaves
[  239.358875][ T7274] loop5: detected capacity change from 0 to 512
[  239.425829][ T7274] EXT4-fs (loop5): Test dummy encryption mode enabled
[  239.468574][ T7274] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  239.528765][ T7274] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.363: bad orphan inode 131083
[  239.573040][ T7274] loop5: lost filesystem error report for type 5 error -117
[  239.577740][ T7274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.888778][ T5816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.890666][  T790] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  240.972477][   T51] Bluetooth: hci6: command tx timeout
[  241.000146][ T7222] chnl_net:caif_netlink_parms(): no params data found
[  242.631843][  T790] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  242.684669][  T790] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[  242.743023][  T790] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  242.781846][  T790] usb 6-1: config 220 interface 0 has no altsetting 0
[  242.788669][  T790] usb 6-1: config 220 interface 1 has no altsetting 0
[  242.859225][  T790] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  242.948899][  T790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.004376][  T790] usb 6-1: Product: syz
[  243.014347][  T790] usb 6-1: Manufacturer: syz
[  243.018992][  T790] usb 6-1: SerialNumber: syz
[  243.049638][ T6787] hsr_slave_0: left promiscuous mode
[  243.057005][   T51] Bluetooth: hci6: command tx timeout
[  243.292670][ T6787] hsr_slave_1: left promiscuous mode
[  243.319694][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.328008][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.342985][ T6787] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.352357][ T6787] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.383763][ T6787] veth1_macvtap: left promiscuous mode
[  243.389456][ T6787] veth0_macvtap: left promiscuous mode
[  243.413045][ T6787] veth1_vlan: left promiscuous mode
[  243.427791][ T6787] veth0_vlan: left promiscuous mode
[  243.452631][   T25] block nbd3: Possible stuck request ffff8880265f0000: control (read@0,4096B). Runtime 60 seconds
[  243.479548][ T7285] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  243.486119][ T7285] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  243.520687][ T7285] vhci_hcd vhci_hcd.0: Device attached
[  243.542252][ T7303] vhci_hcd: connection closed
[  243.542820][   T12] vhci_hcd vhci_hcd.5: stop threads
[  243.559460][  T790] usb 6-1: selecting invalid altsetting 0
[  243.588670][   T12] vhci_hcd vhci_hcd.5: release socket
[  243.609500][  T790] usb 6-1: selecting invalid altsetting 0
[  243.647582][   T12] vhci_hcd vhci_hcd.5: disconnect device
[  243.652670][  T790] uvcvideo 6-1:220.0: probe with driver uvcvideo failed with error -22
[  243.680141][  T790] usb 6-1: selecting invalid altsetting 0
[  243.701655][ T5919] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  243.715430][  T790] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  243.750333][  T790] usb 6-1: USB disconnect, device number 8
[  244.073106][ T7306] fuse: Bad value for 'fd'
[  244.492683][ T7312] loop1: detected capacity change from 0 to 4096
[  244.553305][ T5823] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  244.599752][ T6787] team0 (unregistering): Port device team_slave_1 removed
[  244.669307][ T6787] team0 (unregistering): Port device team_slave_0 removed
[  244.729107][ T5823] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  244.875183][ T5823] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  244.987840][ T5823] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  245.130203][ T5823] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  245.268952][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.569473][ T5823] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  247.919375][ T5823] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2
[  247.993768][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.079303][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.105819][ T7339] netlink: 'syz.2.379': attribute type 1 has an invalid length.
[  248.251987][ T7339] 8021q: adding VLAN 0 to HW filter on device bond1
[  248.299979][ T5823] usb 6-1: USB disconnect, device number 9
[  248.428187][ T7343] vlan2: entered allmulticast mode
[  248.453340][ T7343] veth0_to_bond: entered allmulticast mode
[  248.474086][ T7343] bond1: (slave vlan2): making interface the new active one
[  248.485371][ T7343] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  248.535369][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.565242][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.604085][ T7222] bridge_slave_0: entered allmulticast mode
[  248.631607][ T7222] bridge_slave_0: entered promiscuous mode
[  248.683953][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.735042][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.768998][ T7222] bridge_slave_1: entered allmulticast mode
[  248.805003][ T7222] bridge_slave_1: entered promiscuous mode
[  248.818758][ T7358] overlayfs: failed to clone upperpath
[  248.900333][ T7356] netlink: 'syz.4.388': attribute type 3 has an invalid length.
[  248.908448][ T7356] netlink: 'syz.4.388': attribute type 3 has an invalid length.
[  248.916175][ T7356] netlink: 'syz.4.388': attribute type 3 has an invalid length.
[  248.924492][ T7356] netlink: 'syz.4.388': attribute type 3 has an invalid length.
[  248.932396][ T7356] netlink: 'syz.4.388': attribute type 3 has an invalid length.
[  248.940066][ T7356] netlink: 'syz.4.388': attribute type 3 has an invalid length.
[  248.947782][ T7356] netlink: 'syz.4.388': attribute type 3 has an invalid length.
[  248.955532][ T7356] netlink: 'syz.4.388': attribute type 3 has an invalid length.
[  248.963211][ T7356] netlink: 'syz.4.388': attribute type 3 has an invalid length.
[  249.001099][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.028362][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.141984][  T790] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  249.235639][ T7222] team0: Port device team_slave_0 added
[  250.428000][ T7222] team0: Port device team_slave_1 added
[  250.521222][  T790] usb 3-1: device descriptor read/64, error -71
[  250.761314][  T790] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  250.800732][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.850321][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  251.146209][  T790] usb 3-1: device descriptor read/64, error -71
[  251.416852][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.434258][  T790] usb usb3-port1: attempt power cycle
[  251.559830][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.601390][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  251.671462][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.842029][  T790] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  251.870352][ T7222] hsr_slave_0: entered promiscuous mode
[  251.892610][ T7222] hsr_slave_1: entered promiscuous mode
[  251.901577][ T5892] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  251.919523][ T7222] debugfs: 'hsr0' already exists in 'hsr'
[  251.938378][ T7222] Cannot create hsr debugfs directory
[  252.045326][ T7389] pimreg: entered allmulticast mode
[  252.071407][  T790] usb 3-1: device not accepting address 11, error -71
[  252.080287][ T5892] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  252.107162][ T5892] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  252.138789][ T5892] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  252.191249][ T5892] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  252.223254][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.287880][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  253.893005][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.902432][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.963076][ T5892] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[  254.036676][ T5892] usb 5-1: USB disconnect, device number 7
[  254.315988][ T7413] loop5: detected capacity change from 0 to 512
[  254.346661][ T7413] EXT4-fs: Ignoring removed i_version option
[  254.381604][ T7413] EXT4-fs: Ignoring removed nomblk_io_submit option
[  254.441937][ T7413] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.402: bad orphan inode 1
[  254.455320][ T7222] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  254.464609][ T7413] loop5: lost filesystem error report for type 5 error -117
[  254.470153][ T7413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.542184][ T7222] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  254.583593][ T7222] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  254.632595][   T30] audit: type=1800 audit(1772384621.332:5): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.402" name="file1" dev="loop5" ino=15 res=0 errno=0
[  254.694041][ T7418] loop1: detected capacity change from 0 to 164
[  255.888100][ T7222] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  255.903305][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  255.913293][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  255.975064][ T7418] Unable to read rock-ridge attributes
[  256.366135][ T5816] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 21: comm syz-executor: path /81/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0
[  256.485312][ T7440] Unable to read rock-ridge attributes
[  256.638136][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.767318][ T5816] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0
[  256.793590][ T7222] 8021q: adding VLAN 0 to HW filter on device team0
[  256.899224][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.906451][ T6155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.941006][ T5816] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 21: comm syz-executor: path /81/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0
[  257.022910][ T7437] overlayfs: failed to resolve './file0': -2
[  257.057572][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.064863][ T6155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.096477][ T5816] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0
[  257.213686][ T5816] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 21: comm syz-executor: path /81/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0
[  257.318018][ T5816] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0
[  257.412333][ T5816] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 21: comm syz-executor: path /81/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0
[  257.508947][ T5816] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0
[  257.591552][ T5816] EXT4-fs error (device loop5): ext4_readdir:265: inode #11: block 21: comm syz-executor: path /81/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=64815104, rec_len=1024, size=1024 fake=0
[  257.677575][ T5816] EXT4-fs error (device loop5): ext4_empty_dir:3118: inode #11: block 21: comm syz-executor: bad entry in directory: inode out of bounds - offset=7168, inode=64815104, rec_len=1024, size=1024 fake=0
[  258.054710][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.606682][ T7222] veth0_vlan: entered promiscuous mode
[  260.627544][ T7222] veth1_vlan: entered promiscuous mode
[  262.190844][ T5919] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  262.582741][ T5816] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.631500][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.789901][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.800562][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  262.815216][ T5919] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  262.825396][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.872369][ T5919] usb 5-1: config 0 descriptor??
[  263.830096][ T5919] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  263.942226][ T5919] usb 5-1: USB disconnect, device number 8
[  264.003380][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.115196][ T7502] fido_id[7502]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  264.147584][ T7222] veth0_macvtap: entered promiscuous mode
[  264.238713][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.343463][ T7222] veth1_macvtap: entered promiscuous mode
[  264.628546][ T7510] syz.2.421 (7510): attempted to duplicate a private mapping with mremap.  This is not supported.
[  264.755279][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.912156][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.971640][  T790] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  265.059903][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.191407][  T790] usb 5-1: Using ep0 maxpacket: 8
[  265.216813][ T5136] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  265.234276][  T790] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  265.244749][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.251184][  T790] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  265.266543][ T5136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  265.276070][  T790] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  265.287006][ T5136] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  265.295317][  T790] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  265.308503][  T790] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  265.322878][  T790] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  265.332842][ T5136] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  265.340039][  T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.349693][ T5136] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  265.507475][  T380] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.541236][  T380] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.603125][  T790] usb 5-1: usb_control_msg returned -32
[  265.620156][  T790] usbtmc 5-1:16.0: can't read capabilities
[  265.639807][  T380] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.671601][  T380] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.916025][ T7512] usbtmc 5-1:16.0: usb_control_msg returned -71
[  265.933514][ T5935] usb 5-1: USB disconnect, device number 9
[  266.495470][   T12] bridge_slave_1: left allmulticast mode
[  266.523960][   T12] bridge_slave_1: left promiscuous mode
[  266.550432][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.569980][   T12] bridge_slave_0: left allmulticast mode
[  266.588335][   T12] bridge_slave_0: left promiscuous mode
[  266.595219][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.185443][   T51] Bluetooth: hci2: command tx timeout
[  269.862369][ T7549] loop1: detected capacity change from 0 to 32768
[  270.250681][   T51] Bluetooth: hci2: command tx timeout
[  270.380952][ T7549] JBD2: Ignoring recovery information on journal
[  270.533909][ T7549] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  270.567445][ T7549] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  270.585096][ T7549] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  270.594992][ T7549] OCFS2: File system is now read-only.
[  270.600523][ T7549] (syz.1.430,7549,1):ocfs2_find_entry_dx:1058 ERROR: status = -30
[  270.608985][ T7549] OCFS2: ERROR (device loop1): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  270.627063][ T7549] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  270.639279][ T7549] (syz.1.430,7549,1):ocfs2_find_entry_dx:1058 ERROR: status = -30
[  270.647319][ T7549] (syz.1.430,7549,1):ocfs2_mknod:506 ERROR: status = -30
[  270.654415][ T7549] (syz.1.430,7549,1):ocfs2_create:679 ERROR: status = -30
[  270.681014][ T7556] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  270.759498][ T7556] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  270.796219][ T7556] (syz.1.430,7556,1):ocfs2_find_leaf:1949 ERROR: status = -30
[  270.840119][ T7556] (syz.1.430,7556,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  270.869316][ T7556] (syz.1.430,7556,1):ocfs2_get_clusters:634 ERROR: status = -30
[  270.891986][ T7556] (syz.1.430,7556,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  270.909587][ T7556] (syz.1.430,7556,1):ocfs2_read_virt_blocks:1005 ERROR: status = -30
[  270.911454][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.921198][ T7556] (syz.1.430,7556,1):ocfs2_read_dir_block:524 ERROR: status = -30
[  270.964651][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.985385][   T12] bond0 (unregistering): Released all slaves
[  271.078354][  T380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.112791][ T5815] ocfs2: Unmounting device (7,1) on (node local)
[  271.122784][  T380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.483478][ T7546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.499729][ T7516] chnl_net:caif_netlink_parms(): no params data found
[  271.523948][ T7546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.331966][   T51] Bluetooth: hci2: command tx timeout
[  274.784939][   T51] Bluetooth: hci2: command tx timeout
[  275.304663][   T25] block nbd3: Possible stuck request ffff8880265f0000: control (read@0,4096B). Runtime 90 seconds
[  275.580039][ T7607] validate_nla: 44 callbacks suppressed
[  275.580062][ T7607] netlink: 'syz.2.444': attribute type 10 has an invalid length.
[  275.644147][   T12] hsr_slave_0: left promiscuous mode
[  275.678509][   T12] hsr_slave_1: left promiscuous mode
[  275.689306][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  275.710594][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  275.760616][ T5892] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  275.884094][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.894548][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.934351][   T12] veth1_macvtap: left promiscuous mode
[  275.948877][   T12] veth0_macvtap: left promiscuous mode
[  275.961162][   T12] veth1_vlan: left promiscuous mode
[  275.978938][   T12] veth0_vlan: left promiscuous mode
[  275.992629][ T5892] usb 8-1: config index 0 descriptor too short (expected 23569, got 27)
[  276.073683][ T5892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.214132][   T12] pimreg (unregistering): left allmulticast mode
[  276.228873][ T5892] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  276.240051][ T5892] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  276.255207][ T5892] usb 8-1: Manufacturer: syz
[  276.354527][ T5892] usb 8-1: config 0 descriptor??
[  276.620333][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.632599][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.729077][ T5892] rc_core: IR keymap rc-hauppauge not found
[  276.752162][ T5892] Registered IR keymap rc-empty
[  276.759223][ T5892] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  276.802788][ T5892] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input8
[  276.911400][ T5892] usb 8-1: USB disconnect, device number 2
[  277.249136][   T12] team0 (unregistering): Port device team_slave_1 removed
[  277.274412][ T7635] loop7: detected capacity change from 0 to 1024
[  277.298574][ T7635] EXT4-fs: Ignoring removed orlov option
[  277.305433][   T12] team0 (unregistering): Port device team_slave_0 removed
[  277.327335][ T7635] EXT4-fs (loop7): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  277.384147][ T7635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.612384][ T7222] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.650159][ T7630] slcan: can't register candev
[  277.682490][ T7607] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  278.197815][ T7612] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  278.985710][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.025935][ T7516] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.067999][ T7516] bridge_slave_0: entered allmulticast mode
[  279.104184][ T7516] bridge_slave_0: entered promiscuous mode
[  279.197614][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.215573][ T7516] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.239517][ T7516] bridge_slave_1: entered allmulticast mode
[  279.274874][ T7516] bridge_slave_1: entered promiscuous mode
[  279.778659][ T7516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.815459][ T7516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  279.974475][ T7516] team0: Port device team_slave_0 added
[  279.984161][ T7516] team0: Port device team_slave_1 added
[  280.073358][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.093194][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.151705][ T7677] overlayfs: failed to resolve './file1': -2
[  280.169833][ T7516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.222174][ T7516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.251567][ T7516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  280.316033][ T7516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.731671][ T7516] hsr_slave_0: entered promiscuous mode
[  280.754612][ T7516] hsr_slave_1: entered promiscuous mode
[  280.980776][ T5935] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  281.162884][ T5935] usb 2-1: Using ep0 maxpacket: 32
[  281.176798][ T5935] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  281.200707][ T5935] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  281.244684][ T5935] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  281.286344][ T5935] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  281.290619][ T5919] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  281.345086][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0
[  281.370212][ T5935] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  281.399238][ T5935] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  281.428423][ T5935] usb 2-1: Product: syz
[  281.451129][ T5935] usb 2-1: Manufacturer: syz
[  281.455771][ T5935] usb 2-1: SerialNumber: syz
[  281.476956][ T5935] usb 2-1: config 0 descriptor??
[  281.493264][ T5935] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  281.567149][ T5935] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  281.594589][ T5919] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  281.628334][ T5919] usb 8-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  281.660844][ T5919] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.741181][ T5919] usb 8-1: config 0 descriptor??
[  281.768189][ T5919] smsusb:smsusb_probe: board id=8, interface number 0
[  281.801850][ T5919] smsusb:smsusb_probe: Device initialized with return code -19
[  282.298969][ T7691] loop7: detected capacity change from 0 to 128
[  282.682392][ T7684] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  282.685319][ T5822] usb 2-1: USB disconnect, device number 14
[  282.689648][    C0] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  282.800979][   T51] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  282.811935][   T51] Bluetooth: hci6: Injecting HCI hardware error event
[  282.822325][   T51] Bluetooth: hci6: hardware error 0x00
[  283.648634][ T7701] ldusb: No device or device unplugged -19
[  283.648639][ T5822] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  283.722512][ T5935] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  283.794505][ T7516] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  283.820205][ T7516] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  283.836445][ T7516] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  283.865072][ T7516] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  283.910527][ T5935] usb 3-1: Using ep0 maxpacket: 8
[  283.930200][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short
[  283.959948][ T5935] usb 3-1: config 104 has an invalid interface number: 45 but max is 0
[  284.043570][ T7516] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.095700][ T7516] 8021q: adding VLAN 0 to HW filter on device team0
[  284.196986][ T5935] usb 3-1: config 104 has no interface number 0
[  284.206015][ T5935] usb 3-1: config 104 interface 45 altsetting 28 endpoint 0xB has invalid maxpacket 512, setting to 64
[  284.217222][ T5935] usb 3-1: config 104 interface 45 has no altsetting 0
[  284.239732][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.247058][ T6072] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.343802][ T5935] usb 3-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=d4.cd
[  284.354139][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.357361][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.362176][ T5935] usb 3-1: Product: syz
[  284.362199][ T5935] usb 3-1: Manufacturer: syz
[  284.362217][ T5935] usb 3-1: SerialNumber: syz
[  284.369510][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.609553][ T5935] gspca_main: sunplus-2.14.0 probing 08ca:2016
[  284.768245][    T9] usb 8-1: USB disconnect, device number 3
[  284.774264][ T5935] gspca_sunplus: reg_w_riv err -71
[  284.779450][ T5935] sunplus 3-1:104.45: probe with driver sunplus failed with error -71
[  284.798363][ T5935] usb 3-1: USB disconnect, device number 13
[  285.771828][   T51] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  286.095192][ T7756] netlink: 84 bytes leftover after parsing attributes in process `syz.1.478'.
[  286.926403][ T7758] input: syz0 as /devices/virtual/input/input9
[  287.854958][ T7516] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.491178][ T5823] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  290.532616][ T5935] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  290.695378][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.707495][ T5935] usb 8-1: Using ep0 maxpacket: 8
[  290.719301][ T5935] usb 8-1: unable to get BOS descriptor or descriptor too short
[  290.890734][ T5823] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  290.899852][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.940195][ T5935] usb 8-1: config 104 has an invalid interface number: 45 but max is 1
[  290.970633][ T5935] usb 8-1: config 104 has an invalid interface number: 135 but max is 1
[  291.006098][ T5935] usb 8-1: config 104 has no interface number 0
[  291.015588][ T5935] usb 8-1: config 104 has no interface number 1
[  291.456710][ T5823] usb 3-1: config 0 descriptor??
[  291.480834][ T5935] usb 8-1: config 104 interface 45 altsetting 28 endpoint 0xB has invalid maxpacket 512, setting to 64
[  291.531104][ T5935] usb 8-1: config 104 interface 45 has no altsetting 0
[  291.538070][ T5935] usb 8-1: config 104 interface 135 has no altsetting 0
[  291.552372][ T7516] veth0_vlan: entered promiscuous mode
[  291.575874][ T5935] usb 8-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=d4.cd
[  291.603177][ T7516] veth1_vlan: entered promiscuous mode
[  291.608914][ T5935] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.630930][ T5935] usb 8-1: Product: syz
[  291.635175][ T5935] usb 8-1: Manufacturer: syz
[  291.639796][ T5935] usb 8-1: SerialNumber: syz
[  291.687447][ T7516] veth0_macvtap: entered promiscuous mode
[  291.714102][ T7516] veth1_macvtap: entered promiscuous mode
[  291.753599][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.779503][ T7516] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.810575][ T6155] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.824294][ T6101] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.843117][ T6101] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.858714][ T6101] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.924499][ T5823] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  291.983486][ T5823] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input10
[  291.998447][ T5935] usb 8-1: USB disconnect, device number 4
[  292.213890][ T5823] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  292.233304][ T6101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.274950][ T6101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.389742][ T7814] loop4: detected capacity change from 0 to 1024
[  292.409366][ T6155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.449441][ T7814] EXT4-fs: Ignoring removed i_version option
[  292.455573][ T6155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.499380][ T7814] EXT4-fs: inline encryption not supported
[  292.551941][ T7814] EXT4-fs (loop4): Test dummy encryption mode enabled
[  292.604279][ T5935] usb 3-1: USB disconnect, device number 14
[  292.635908][ T7814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.640109][ T7821] overlayfs: failed to resolve './bus': -2
[  294.456629][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.589377][ T7830] loop8: detected capacity change from 0 to 4096
[  294.847029][ T7830] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  295.559268][ T7830] ntfs3(loop8): ino=19, mi_enum_attr
[  295.593846][ T7830] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  296.864834][ T7861] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  296.873069][ T7861] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  296.918311][  T974] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  297.111399][  T974] usb 5-1: Using ep0 maxpacket: 16
[  297.364895][ T7865] loop8: detected capacity change from 0 to 4096
[  299.588815][ T5919] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  299.627249][ T5136] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  299.636730][ T5136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  299.644979][ T5136] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  299.653302][ T5136] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  299.678443][  T974] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  299.687589][  T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.696012][  T974] usb 5-1: Product: syz
[  299.700261][  T974] usb 5-1: Manufacturer: syz
[  299.708137][  T974] usb 5-1: config 0 descriptor??
[  299.714653][  T974] usb 5-1: can't set config #0, error -71
[  299.722031][  T974] usb 5-1: USB disconnect, device number 10
[  299.741273][ T5136] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  299.821128][ T5919] usb 2-1: Using ep0 maxpacket: 8
[  299.866222][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short
[  299.928232][ T5919] usb 2-1: config 104 has an invalid interface number: 45 but max is 1
[  299.966436][ T5919] usb 2-1: config 104 has an invalid interface number: 135 but max is 1
[  300.026808][ T5919] usb 2-1: config 104 has no interface number 0
[  300.048311][ T5919] usb 2-1: config 104 has no interface number 1
[  300.091690][ T5919] usb 2-1: config 104 interface 45 altsetting 28 endpoint 0xB has invalid maxpacket 512, setting to 64
[  300.144768][ T5919] usb 2-1: config 104 interface 45 has no altsetting 0
[  300.164974][ T5919] usb 2-1: config 104 interface 135 has no altsetting 0
[  300.203392][ T5919] usb 2-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=d4.cd
[  300.222972][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.244295][ T5919] usb 2-1: Product: syz
[  300.275937][ T5919] usb 2-1: Manufacturer: syz
[  300.301038][ T5919] usb 2-1: SerialNumber: syz
[  301.022351][ T5919] usb 2-1: USB disconnect, device number 15
[  301.438665][ T7873] chnl_net:caif_netlink_parms(): no params data found
[  301.620186][ T7916] loop8: detected capacity change from 0 to 16
[  301.657064][ T7916] erofs (device loop8): invalid ishare xattr prefix id 0
[  301.792689][   T51] Bluetooth: hci7: command tx timeout
[  302.620358][ T7873] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.640807][ T7873] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.657524][ T7873] bridge_slave_0: entered allmulticast mode
[  302.677107][ T7873] bridge_slave_0: entered promiscuous mode
[  302.695264][ T7873] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.704731][ T7873] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.720824][ T7873] bridge_slave_1: entered allmulticast mode
[  302.728839][ T7873] bridge_slave_1: entered promiscuous mode
[  302.903886][ T7943] netlink: 220 bytes leftover after parsing attributes in process `syz.8.520'.
[  302.914115][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.8.520'.
[  302.935843][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.018599][ T7946] netlink: 148 bytes leftover after parsing attributes in process `syz.2.518'.
[  303.020777][ T7936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.151784][ T7873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.692120][ T7873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.861861][ T5136] Bluetooth: hci7: command tx timeout
[  303.879039][ T7873] team0: Port device team_slave_0 added
[  303.927749][ T7873] team0: Port device team_slave_1 added
[  304.207351][ T7959] loop1: detected capacity change from 0 to 64
[  305.108679][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.223415][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.465336][ T7873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.544808][   T25] block nbd3: Possible stuck request ffff8880265f0000: control (read@0,4096B). Runtime 120 seconds
[  305.751472][ T7873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.824453][ T7873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.903387][ T7873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.933791][ T5136] Bluetooth: hci7: command tx timeout
[  306.091063][   T29] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  306.160981][ T5892] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  306.871391][   T29] usb 2-1: Using ep0 maxpacket: 8
[  306.893237][   T29] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  306.935173][   T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.970177][   T29] usb 2-1: config 0 has no interface number 0
[  307.052515][ T5892] usb 8-1: Using ep0 maxpacket: 16
[  307.126752][   T29] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  307.128204][ T7873] hsr_slave_0: entered promiscuous mode
[  307.180684][ T5892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.201619][   T29] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  307.225132][ T5892] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.236792][ T7873] hsr_slave_1: entered promiscuous mode
[  307.251063][   T29] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  307.260254][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.285837][ T5892] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  307.317477][ T7873] debugfs: 'hsr0' already exists in 'hsr'
[  307.323328][ T5892] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  307.323363][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.348407][   T29] usb 2-1: config 0 descriptor??
[  307.385278][   T29] ldusb 2-1:0.55: Interrupt in endpoint not found
[  307.404849][ T7873] Cannot create hsr debugfs directory
[  307.421625][ T5892] usb 8-1: config 0 descriptor??
[  307.615705][   T29] usb 2-1: USB disconnect, device number 16
[  307.925063][ T5892] hid_parser_main: 1 callbacks suppressed
[  307.925090][ T5892] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  307.985106][ T5892] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  308.021429][ T5136] Bluetooth: hci7: command tx timeout
[  308.116826][ T5892] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  308.155095][ T5892] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  308.196840][ T5892] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  308.237173][ T5892] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  308.274943][ T5892] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  308.295205][ T5892] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  308.324321][ T5892] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  308.351314][ T5892] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  308.468796][ T5892] HID 045e:07da: Invalid code 65791 type 1
[  308.514246][ T5892] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0006/input/input11
[  308.700200][ T5892] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  308.836699][ T5892] usb 8-1: USB disconnect, device number 5
[  309.034380][ T8022] fido_id[8022]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  309.516070][ T7873] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  309.624647][ T7873] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  309.689619][ T7873] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  309.922809][ T7873] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  313.150028][ T7873] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.563595][ T7873] 8021q: adding VLAN 0 to HW filter on device team0
[  313.632524][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.639724][ T8095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  314.698061][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.705265][ T8095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.786546][ T7873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  315.798354][ T7873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  316.240731][ T8097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.546'.
[  316.301263][  T974] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  316.303195][ T8117] nbd1: detected capacity change from 0 to 112
[  316.320175][ T8120] block nbd1: shutting down sockets
[  316.362771][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  316.372404][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  316.393442][   T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  316.408488][   T25] Buffer I/O error on dev nbd1, logical block 0, async page read
[  316.420668][    T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  316.433224][ T6605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  316.433627][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  316.442948][ T6605] Buffer I/O error on dev nbd1, logical block 0, async page read
[  316.456978][ T6605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  316.465387][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  316.466508][ T6605] Buffer I/O error on dev nbd1, logical block 0, async page read
[  316.480540][ T6605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  316.488676][  T974] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  316.490184][ T6605] Buffer I/O error on dev nbd1, logical block 0, async page read
[  316.521745][ T6605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  316.531414][ T6605] Buffer I/O error on dev nbd1, logical block 0, async page read
[  316.539320][ T6605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  316.548948][ T6605] Buffer I/O error on dev nbd1, logical block 0, async page read
[  316.563948][  T974] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  316.577879][ T6605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  316.600696][ T6605] Buffer I/O error on dev nbd1, logical block 0, async page read
[  316.602367][    T9] usb 9-1: device descriptor read/64, error -71
[  316.626612][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.637838][ T7873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.655915][  T974] usb 5-1: config 0 descriptor??
[  316.662496][ T6605] ldm_validate_partition_table(): Disk read failed.
[  316.677473][  T974] pwc: Askey VC010 type 2 USB webcam detected.
[  316.683598][ T6605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  316.727502][ T6605] Buffer I/O error on dev nbd1, logical block 0, async page read
[  316.750660][ T6605] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  316.791670][ T6605] Buffer I/O error on dev nbd1, logical block 0, async page read
[  316.799577][ T6605] Dev nbd1: unable to read RDB block 0
[  316.841921][ T6605]  nbd1: unable to read partition table
[  316.881256][ T6605] ldm_validate_partition_table(): Disk read failed.
[  316.881287][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  316.888060][ T6605] Dev nbd1: unable to read RDB block 0
[  316.979834][ T6605]  nbd1: unable to read partition table
[  317.076774][    T9] usb 9-1: device descriptor read/64, error -71
[  317.094198][  T974] pwc: recv_control_msg error -32 req 02 val 2b00
[  317.123042][  T974] pwc: recv_control_msg error -32 req 02 val 2700
[  317.150311][  T974] pwc: recv_control_msg error -32 req 02 val 2c00
[  317.178139][  T974] pwc: recv_control_msg error -32 req 04 val 1000
[  317.251239][    T9] usb usb9-port1: attempt power cycle
[  317.291461][  T974] pwc: recv_control_msg error -32 req 04 val 1300
[  317.298798][  T974] pwc: recv_control_msg error -32 req 04 val 1400
[  317.314163][  T974] pwc: recv_control_msg error -32 req 02 val 2000
[  317.322920][  T974] pwc: recv_control_msg error -32 req 02 val 2100
[  317.611299][  T974] pwc: recv_control_msg error -71 req 02 val 2500
[  317.619388][    T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  317.640291][  T974] pwc: recv_control_msg error -71 req 02 val 2400
[  317.664915][  T974] pwc: recv_control_msg error -71 req 02 val 2600
[  317.678301][    T9] usb 9-1: device descriptor read/8, error -71
[  317.702916][  T974] pwc: recv_control_msg error -71 req 02 val 2900
[  317.738140][  T974] pwc: recv_control_msg error -71 req 02 val 2800
[  317.784949][  T974] pwc: recv_control_msg error -71 req 04 val 1100
[  317.809893][  T974] pwc: recv_control_msg error -71 req 04 val 1200
[  317.865659][  T974] pwc: Registered as video103.
[  317.908436][  T974] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12
[  317.945151][    T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  318.016435][    T9] usb 9-1: device descriptor read/8, error -71
[  318.058033][  T974] usb 5-1: USB disconnect, device number 11
[  318.166087][    T9] usb usb9-port1: unable to enumerate USB device
[  318.196654][ T7873] veth0_vlan: entered promiscuous mode
[  318.309939][ T7873] veth1_vlan: entered promiscuous mode
[  318.616156][ T7873] veth0_macvtap: entered promiscuous mode
[  318.716625][ T7873] veth1_macvtap: entered promiscuous mode
[  318.738892][ T8149] loop7: detected capacity change from 0 to 32768
[  318.778556][ T8149] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.557 (8149)
[  318.885763][ T8149] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  318.931267][ T8149] BTRFS info (device loop7): using sha256 checksum algorithm
[  319.022640][ T7873] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.109724][ T8149] BTRFS info (device loop7): rebuilding free space tree
[  319.208834][ T7873] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.227068][ T8149] BTRFS info (device loop7): turning off barriers
[  319.255895][ T8149] BTRFS info (device loop7): turning on sync discard
[  319.295176][ T8149] BTRFS info (device loop7): enabling free space tree
[  319.339520][ T8149] BTRFS info (device loop7): force clearing of disk cache
[  319.382568][ T8149] BTRFS info (device loop7): enabling auto defrag
[  319.400318][  T131] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.442446][  T131] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.488669][  T131] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.530077][  T131] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.980080][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.062971][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.195960][ T7222] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  320.248918][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.391609][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.912131][   T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  323.922620][    C0] raw-gadget.0 gadget.9: ignoring, device is not running
[  324.051629][   T10] usb 10-1: device descriptor read/64, error -32
[  324.405287][   T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  325.421459][ T8277] loop2: detected capacity change from 0 to 128
[  326.976119][  T380] kworker/u8:6: attempt to access beyond end of device
[  326.976119][  T380] loop2: rw=1, sector=145, nr_sectors = 896 limit=128
[  327.000821][   T10] usb 10-1: device descriptor read/all, error -71
[  327.054551][   T10] usb usb10-port1: attempt power cycle
[  328.265641][ T8297] syz.8.579 (8297): drop_caches: 2
[  328.395698][ T8295] loop1: detected capacity change from 0 to 1024
[  328.766757][ T8295] hfsplus: bad catalog entry type
[  329.545395][ T8289] warning: `syz.9.578' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  329.768254][  T997] hfsplus: b-tree write err: -5, ino 25
[  329.816797][  T997] hfsplus: b-tree write err: -5, ino 4
[  329.857273][  T997] hfsplus: b-tree write err: -5, ino 2
[  332.175881][   T13] wlan1: Trigger new scan to find an IBSS to join
[  332.848332][ T8367] loop8: detected capacity change from 0 to 128
[  333.581434][ T5899] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  333.941958][ T5899] usb 5-1: device descriptor read/64, error -71
[  334.103705][ T8370] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.589'.
[  334.117810][ T8367] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.589'.
[  334.641360][ T5899] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  335.086846][ T5899] usb 5-1: device descriptor read/64, error -71
[  335.557452][ T6787] kworker/u8:12: attempt to access beyond end of device
[  335.557452][ T6787] loop8: rw=1, sector=145, nr_sectors = 896 limit=128
[  335.621082][   T25] block nbd3: Possible stuck request ffff8880265f0000: control (read@0,4096B). Runtime 150 seconds
[  335.660941][ T5899] usb usb5-port1: attempt power cycle
[  336.195875][ T8390] ntfs3(nbd8): try to read out of volume at offset 0x0
[  337.405395][ T8394] netlink: 'syz.8.595': attribute type 10 has an invalid length.
[  337.616947][   T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  337.738798][   T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  337.751018][ T8394] team0: Port device dummy0 added
[  337.776754][   T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  337.843336][   T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  337.866004][   T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  338.040569][ T5919] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  338.186688][  T380] wlan1: Trigger new scan to find an IBSS to join
[  338.210572][ T5919] usb 5-1: Using ep0 maxpacket: 8
[  338.249629][ T5919] usb 5-1: unable to get BOS descriptor or descriptor too short
[  338.274345][ T5919] usb 5-1: config 104 has an invalid interface number: 135 but max is 0
[  338.321455][ T5919] usb 5-1: config 104 has no interface number 0
[  338.353014][ T5919] usb 5-1: config 104 interface 135 altsetting 1 bulk endpoint 0x8B has invalid maxpacket 16
[  338.452762][ T5919] usb 5-1: config 104 interface 135 has no altsetting 0
[  338.500738][ T5919] usb 5-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=d4.cd
[  338.525083][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.547299][ T5919] usb 5-1: Product: syz
[  338.556833][ T5919] usb 5-1: Manufacturer: syz
[  338.586990][ T5919] usb 5-1: SerialNumber: syz
[  338.630706][ T8400] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  338.820670][   T31] INFO: task syz.3.222:6811 blocked for more than 143 seconds.
[  338.828275][   T31]       Not tainted syzkaller #0
[  338.870577][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  338.887319][ T5919] gspca_main: sunplus-2.14.0 probing 08ca:2016
[  338.890483][   T31] task:syz.3.222       state:D stack:25152 pid:6811  tgid:6811  ppid:5824   task_flags:0x400040 flags:0x00080002
[  338.907146][   T31] Call Trace:
[  338.910682][   T31]  <TASK>
[  338.913626][   T31]  __schedule+0x1585/0x5340
[  338.918190][   T31]  ? __pfx___schedule+0x10/0x10
[  338.923670][   T31]  ? schedule+0x90/0x360
[  338.930696][   T31]  schedule+0x164/0x360
[  338.935943][   T31]  schedule_preempt_disabled+0x13/0x30
[  338.946902][ T5919] gspca_sunplus: reg_w_riv err -71
[  338.950874][   T31]  __mutex_lock+0x7fe/0x1300
[  338.956614][   T31]  ? __mutex_lock+0x5ac/0x1300
[  338.967194][ T5919] sunplus 5-1:104.135: probe with driver sunplus failed with error -71
[  338.970528][   T31]  ? bdev_release+0x1a9/0x650
[  338.987458][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  339.005098][   T31]  ? __asan_memset+0x22/0x50
[  339.032539][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  339.049471][ T5919] usb 5-1: USB disconnect, device number 15
[  339.077487][   T31]  ? __fsnotify_parent+0x267/0x620
[  339.099550][   T31]  ? __pfx___fsnotify_parent+0x10/0x10
[  339.124204][   T31]  bdev_release+0x1a9/0x650
[  339.140485][   T31]  ? __pfx_blkdev_release+0x10/0x10
[  339.151761][   T31]  blkdev_release+0x15/0x20
[  339.158538][   T31]  __fput+0x44f/0xa70
[  339.163371][   T31]  task_work_run+0x1d9/0x270
[  339.168144][   T31]  ? __pfx_task_work_run+0x10/0x10
[  339.173743][   T31]  exit_to_user_mode_loop+0xed/0x480
[  339.179190][   T31]  ? rcu_is_watching+0x15/0xb0
[  339.184553][   T31]  do_syscall_64+0x32d/0xf80
[  339.189302][   T31]  ? trace_irq_disable+0x3b/0x150
[  339.194806][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.201326][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.207561][   T31] RIP: 0033:0x7faf8d39c799
[  339.212474][   T31] RSP: 002b:00007fff8d9d0488 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  339.232593][   T31] RAX: 0000000000000000 RBX: 00007faf8d617da0 RCX: 00007faf8d39c799
[  339.268981][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  339.291032][   T31] RBP: 00007faf8d617da0 R08: 0000000000000006 R09: 0000000000000000
[  339.304436][   T31] R10: 00007faf8d617cb0 R11: 0000000000000246 R12: 000000000002c816
[  339.312848][   T31] R13: 00007faf8d61609c R14: 000000000002c7b1 R15: 00007fff8d9d0590
[  339.321061][   T31]  </TASK>
[  339.324407][   T31] INFO: task syz.3.222:6817 blocked for more than 143 seconds.
[  339.332649][   T31]       Not tainted syzkaller #0
[  339.344051][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  339.353497][   T31] task:syz.3.222       state:D stack:26560 pid:6817  tgid:6811  ppid:5824   task_flags:0x400140 flags:0x00080002
[  339.365967][   T31] Call Trace:
[  339.369409][   T31]  <TASK>
[  339.372604][   T31]  __schedule+0x1585/0x5340
[  339.377517][   T31]  ? __pfx___schedule+0x10/0x10
[  339.382586][   T31]  ? schedule+0x90/0x360
[  339.404007][   T31]  schedule+0x164/0x360
[  339.411749][   T31]  schedule_preempt_disabled+0x13/0x30
[  339.424461][   T31]  __mutex_lock+0x7fe/0x1300
[  339.440371][   T31]  ? __mutex_lock+0x5ac/0x1300
[  339.462087][   T31]  ? bdev_release+0x1a9/0x650
[  339.472511][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  339.482615][   T31]  ? __asan_memset+0x22/0x50
[  339.487375][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  339.493319][   T31]  ? __fsnotify_parent+0x267/0x620
[  339.498752][   T31]  ? __pfx___fsnotify_parent+0x10/0x10
[  339.504453][   T31]  bdev_release+0x1a9/0x650
[  339.509135][   T31]  ? __pfx_blkdev_release+0x10/0x10
[  339.514574][   T31]  blkdev_release+0x15/0x20
[  339.519214][   T31]  __fput+0x44f/0xa70
[  339.523409][   T31]  task_work_run+0x1d9/0x270
[  339.528185][   T31]  ? __pfx_task_work_run+0x10/0x10
[  339.534065][   T31]  ? __fput_deferred+0x216/0x380
[  339.539192][   T31]  exit_to_user_mode_loop+0xed/0x480
[  339.545264][   T31]  ? rcu_is_watching+0x15/0xb0
[  339.552604][   T31]  do_syscall_64+0x32d/0xf80
[  339.557215][   T31]  ? trace_irq_disable+0x3b/0x150
[  339.562341][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.568427][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  339.574631][   T31] RIP: 0033:0x7faf8d39c799
[  339.579066][   T31] RSP: 002b:00007faf8b5f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  339.587582][   T31] RAX: 0000000000000000 RBX: 00007faf8d616090 RCX: 00007faf8d39c799
[  339.595644][   T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000004
[  339.603701][   T31] RBP: 00007faf8d432bd9 R08: 0000000000000000 R09: 0000000000000000
[  339.612536][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  339.630505][   T31] R13: 00007faf8d616128 R14: 00007faf8d616090 R15: 00007fff8d9d0328
[  339.638557][   T31]  </TASK>
[  339.660566][   T31] 
[  339.660566][   T31] Showing all locks held in the system:
[  339.668331][   T31] 4 locks held by kworker/u8:1/13:
[  339.679997][   T31]  #0: ffff88813fe44148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  339.692248][   T31]  #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  339.704941][   T31]  #2: ffff888028dd0788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x4a0
[  339.715264][   T31]  #3: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  339.726592][   T31] 1 lock held by khungtaskd/31:
[  339.732202][   T31]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  339.742367][   T31] 1 lock held by klogd/5174:
[  339.747115][   T31]  #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150
[  339.761367][   T31] 1 lock held by dhcpcd/5480:
[  339.766134][   T31]  #0: ffffffff8fbcd048 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  339.776448][   T31] 2 locks held by getty/5576:
[  339.784535][   T31]  #0: ffff888034ba30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  339.810556][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  339.831542][   T31] 1 lock held by udevd/6009:
[  339.836167][   T31]  #0: ffff888026512358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  339.847257][   T31] 3 locks held by kworker/u8:11/6155:
[  339.857960][   T31]  #0: ffff88813fe44148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  339.872266][   T31]  #1: ffffc90004a0fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  339.883496][   T31]  #2: ffffffff8fbcd048 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  339.892736][   T31] 2 locks held by kworker/u8:12/6787:
[  339.898283][   T31]  #0: ffff88813fe44948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[  339.915181][   T31]  #1: ffffc90020177c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[  339.927435][   T31] 1 lock held by syz.3.222/6811:
[  339.932549][ T5136] Bluetooth: hci8: command tx timeout
[  339.939182][   T31]  #0: ffff888026512358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650
[  339.949837][   T31] 1 lock held by syz.3.222/6817:
[  339.954875][   T31]  #0: ffff888026512358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650
[  339.967206][   T31] 1 lock held by syz-executor/7222:
[  339.973175][   T31]  #0: ffffffff8fbcd048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  339.982370][   T31] 1 lock held by syz.0.464/7686:
[  339.987325][   T31]  #0: ffff888026512358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470
[  339.996956][   T31] 1 lock held by syz-executor/8399:
[  340.002250][   T31]  #0: ffffffff8fbcd048 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  340.011824][   T31] 2 locks held by syz.9.601/8405:
[  340.016859][   T31]  #0: ffff8880794367d8 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: pfkey_sendmsg+0x464/0x1120
[  340.027739][   T31]  #1: ffffffff8fd1ada8 (pfkey_mutex){+.+.}-{4:4}, at: pfkey_register+0x10e/0x890
[  340.037117][   T31] 1 lock held by syz.8.603/8422:
[  340.042130][   T31]  #0: ffffffff8fbcd048 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  340.051348][   T31] 
[  340.053689][   T31] =============================================
[  340.053689][   T31] 
[  340.064621][   T31] NMI backtrace for cpu 1
[  340.064646][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  340.064673][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  340.064696][   T31] Call Trace:
[  340.064705][   T31]  <TASK>
[  340.064715][   T31]  dump_stack_lvl+0xe8/0x150
[  340.064756][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  340.064792][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  340.064828][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  340.064864][   T31]  sys_info+0x135/0x170
[  340.064892][   T31]  watchdog+0xfd9/0x1030
[  340.064938][   T31]  ? watchdog+0x21a/0x1030
[  340.064985][   T31]  kthread+0x388/0x470
[  340.065010][   T31]  ? __pfx_watchdog+0x10/0x10
[  340.065046][   T31]  ? __pfx_kthread+0x10/0x10
[  340.065072][   T31]  ret_from_fork+0x51e/0xb90
[  340.065110][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  340.065141][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.065170][   T31]  ? __switch_to+0xc7d/0x1450
[  340.065204][   T31]  ? __pfx_kthread+0x10/0x10
[  340.065229][   T31]  ret_from_fork_asm+0x1a/0x30
[  340.065286][   T31]  </TASK>
[  340.065295][   T31] Sending NMI from CPU 1 to CPUs 0:
[  340.067157][   T13] wlan1: Creating new IBSS network, BSSID aa:a2:59:27:c9:dd
[  340.069637][    C0] NMI backtrace for cpu 0
[  340.069651][    C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  340.069674][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  340.069689][    C0] Workqueue: events_unbound cfg80211_wiphy_work
[  340.069723][    C0] RIP: 0010:printk_get_next_message+0x28f/0x880
[  340.069749][    C0] Code: 21 00 41 39 de 0f 8e 74 03 00 00 e8 6b 08 21 00 80 7c 24 20 00 75 43 e8 5f 08 21 00 0f b6 35 e8 b5 86 18 0f b6 15 a1 19 bf 0c <48> 8d bc 24 40 01 00 00 e8 f4 05 00 00 49 89 c4 e9 3d 04 00 00 e8
[  340.069767][    C0] RSP: 0018:ffffc900001272e0 EFLAGS: 00000293
[  340.069785][    C0] RAX: ffffffff81a48371 RBX: 0000000000000004 RCX: ffff88801d695ac0
[  340.069801][    C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000f
[  340.069814][    C0] RBP: ffffc900001274b0 R08: ffff88801d695ac0 R09: 0000000000000003
[  340.069829][    C0] R10: 00000000ffffffff R11: 0000000000000000 R12: ffffc900001273a0
[  340.069844][    C0] R13: 1ffff92000024e76 R14: 000000000000000f R15: 1ffff92000024e68
[  340.069863][    C0] FS:  0000000000000000(0000) GS:ffff888125463000(0000) knlGS:0000000000000000
[  340.069880][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  340.069895][    C0] CR2: 00007f500550ee9c CR3: 000000005fbbc000 CR4: 0000000000350ef0
[  340.069912][    C0] Call Trace:
[  340.069920][    C0]  <TASK>
[  340.069930][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.069962][    C0]  ? __pfx_printk_get_next_message+0x10/0x10
[  340.069985][    C0]  ? __pfx__prb_read_valid+0x10/0x10
[  340.070017][    C0]  ? format_decode+0xd9/0xe10
[  340.070053][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.070079][    C0]  ? lock_acquire+0xf0/0x2e0
[  340.070107][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.070136][    C0]  ? console_flush_all+0x4ac/0xb20
[  340.070162][    C0]  console_flush_all+0x501/0xb20
[  340.070187][    C0]  ? console_flush_all+0x123/0xb20
[  340.070214][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  340.070238][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.070264][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  340.070292][    C0]  console_unlock+0xd1/0x1c0
[  340.070325][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.070353][    C0]  ? __pfx_console_unlock+0x10/0x10
[  340.070385][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.070418][    C0]  ? vprintk_emit+0x2cf/0x560
[  340.070456][    C0]  ? vprintk_emit+0x2cf/0x560
[  340.070492][    C0]  vprintk_emit+0x485/0x560
[  340.070525][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  340.070551][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  340.070585][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.070613][    C0]  ? __asan_memset+0x22/0x50
[  340.070655][    C0]  _printk+0xdd/0x130
[  340.070682][    C0]  ? __pfx__printk+0x10/0x10
[  340.070713][    C0]  ieee80211_sta_create_ibss+0x27b/0x490
[  340.070744][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  340.070776][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.070803][    C0]  ? __cfg80211_get_bss+0x5ad/0x7d0
[  340.070828][    C0]  ? __pfx_ieee80211_sta_create_ibss+0x10/0x10
[  340.070867][    C0]  ieee80211_ibss_work+0xba8/0x10a0
[  340.070902][    C0]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  340.070930][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  340.070965][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.070993][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  340.071015][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.071042][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  340.071077][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.071105][    C0]  ? skb_dequeue+0x124/0x160
[  340.071131][    C0]  ? ieee80211_iface_work+0x102e/0x1340
[  340.071165][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.071191][    C0]  ? ieee80211_iface_work+0x128e/0x1340
[  340.071223][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.071256][    C0]  cfg80211_wiphy_work+0x2ab/0x4a0
[  340.071289][    C0]  ? process_scheduled_works+0xa25/0x1830
[  340.071322][    C0]  process_scheduled_works+0xb02/0x1830
[  340.071374][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  340.071414][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.071446][    C0]  ? assign_work+0x3d5/0x5e0
[  340.071480][    C0]  worker_thread+0xa50/0xfc0
[  340.071524][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.071559][    C0]  kthread+0x388/0x470
[  340.071582][    C0]  ? __pfx_worker_thread+0x10/0x10
[  340.071612][    C0]  ? __pfx_kthread+0x10/0x10
[  340.071636][    C0]  ret_from_fork+0x51e/0xb90
[  340.071669][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  340.071699][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.071726][    C0]  ? __switch_to+0xc7d/0x1450
[  340.071755][    C0]  ? __pfx_kthread+0x10/0x10
[  340.071778][    C0]  ret_from_fork_asm+0x1a/0x30
[  340.071827][    C0]  </TASK>
[  340.100141][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  340.100168][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  340.100196][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  340.100212][   T31] Call Trace:
[  340.100223][   T31]  <TASK>
[  340.100233][   T31]  vpanic+0x56c/0xa60
[  340.100276][   T31]  ? __pfx___schedule+0x10/0x10
[  340.100316][   T31]  ? __pfx_vpanic+0x10/0x10
[  340.100352][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.100393][   T31]  panic+0xc5/0xd0
[  340.100432][   T31]  ? __pfx_panic+0x10/0x10
[  340.100468][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.100498][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  340.100534][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.100564][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  340.100603][   T31]  watchdog+0x1023/0x1030
[  340.100650][   T31]  ? watchdog+0x21a/0x1030
[  340.100703][   T31]  kthread+0x388/0x470
[  340.100729][   T31]  ? __pfx_watchdog+0x10/0x10
[  340.100766][   T31]  ? __pfx_kthread+0x10/0x10
[  340.100793][   T31]  ret_from_fork+0x51e/0xb90
[  340.100831][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  340.100863][   T31]  ? srso_alias_return_thunk+0x5/0xfbef5
[  340.100893][   T31]  ? __switch_to+0xc7d/0x1450
[  340.100927][   T31]  ? __pfx_kthread+0x10/0x10
[  340.100954][   T31]  ret_from_fork_asm+0x1a/0x30
[  340.101011][   T31]  </TASK>
[  340.102461][   T31] Kernel Offset: disabled