last executing test programs:

17m56.677138834s ago: executing program 32 (id=183):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, 0xfffffffffffffffe)

16m44.687442983s ago: executing program 33 (id=288):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98)
r5 = epoll_create1(0x80000)
epoll_wait(r5, 0x0, 0x0, 0xfffffffc)
connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x80)

16m6.055269177s ago: executing program 5 (id=361):
keyctl$setperm(0x5, 0x0, 0x120c0603)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
r1 = getpgrp(r0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
r5 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
accept$alg(r5, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r8, 0x5501)
write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c)
close_range(r4, 0xffffffffffffffff, 0x0)

16m2.412285766s ago: executing program 5 (id=364):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x542, &(0x7f0000000cc0)="$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")
lstat(&(0x7f0000003440)='./file2\x00', 0x0)

15m47.975227139s ago: executing program 5 (id=390):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x8031, r0, 0xffffd000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000f42000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4442)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)="636f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b7222a386fbf03b1a65623d7edcefcd2f65bb7b2e69a3f5eeaf055b607bef043f3116b808b2eb616aa8423d6a73a5f6bf032cd33e285f060b6253e21883bb202ddc9fbf4cf8fb8f80f5ae14836c5c9aeec5a0311947e4c39b9daed06a823c1444dcacd40174e60566bac015ed", 0xcb)
socket$kcm(0x2, 0x7, 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x403, {{0x2, 0x0, @multicast2}}}, 0x84)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r5, 0x2000, 0x0)
mount(&(0x7f0000000280)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='xfs\x00', 0x8410, 0x0)

15m44.074160729s ago: executing program 5 (id=395):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)='\\\':\x00')
openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0xc0803, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x24000045, 0x0, 0x0)
ioctl$KDSETLED(r1, 0x4b32, 0x9)
connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2711, @hyper}, 0x10)
bind$inet(r1, &(0x7f00000028c0)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0xfffffffdfffffffd, 0x1}, {0x1, 0x0, 0x8771}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x3, 0x0, 0x9, 0x2, 0xfffffffe}}, 0xe8)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c000180080106"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

15m41.634277152s ago: executing program 5 (id=399):
keyctl$setperm(0x5, 0x0, 0x120c0603)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
r1 = getpgrp(r0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
r5 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
accept$alg(r5, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r8, 0x5501)
write$uinput_user_dev(r7, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c)
close_range(r4, 0xffffffffffffffff, 0x0)

15m39.397093691s ago: executing program 5 (id=401):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98)
r6 = epoll_create1(0x80000)
epoll_wait(r6, 0x0, 0x0, 0xfffffffc)
connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x80)

15m23.718442108s ago: executing program 34 (id=401):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98)
r6 = epoll_create1(0x80000)
epoll_wait(r6, 0x0, 0x0, 0xfffffffc)
connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x80)

14m6.94122353s ago: executing program 6 (id=572):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x31)
mount(0x0, 0x0, 0x0, 0x1214040, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='10 1 1\x00', 0x7)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='1\x00', 0x2)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1}, 0x14)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/heartbeat/dead_threshold\x00', 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0x7f}, 0x50)

14m2.454245363s ago: executing program 6 (id=578):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0xc00)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x4, 0x4})
semop(0x0, 0x0, 0x0)
r2 = semget(0x3, 0x4, 0x39c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
semctl$GETVAL(r2, 0x1, 0xc, &(0x7f0000000440)=""/133)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
userfaultfd(0x80001)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000280)={0x7, 0x1b, 0x2}, 0x7)
semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2)
semop(0x0, &(0x7f00000000c0)=[{0x1, 0xff80, 0x1400}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff])
ioctl$TCSETSF(r0, 0x5457, 0x0)

14m0.069354782s ago: executing program 6 (id=581):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x8031, r0, 0xffffd000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000f42000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4442)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)="636f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b7222a386fbf03b1a65623d7edcefcd2f65bb7b2e69a3f5eeaf055b607bef043f3116b808b2eb616aa8423d6a73a5f6bf032cd33e285f060b6253e21883bb202ddc9fbf4cf8fb8f80f5ae14836c5c9aeec5a0311947e4c39b9daed06a823c1444dcacd40174e60566bac015ed", 0xcb)
socket$kcm(0x2, 0x7, 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x403, {{0x2, 0x0, @multicast2}}}, 0x84)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
lseek(0xffffffffffffffff, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000280)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='xfs\x00', 0x8410, 0x0)

13m56.283407396s ago: executing program 6 (id=588):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x8031, r0, 0xffffd000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000f42000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4442)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)="636f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b7222a386fbf03b1a65623d7edcefcd2f65bb7b2e69a3f5eeaf055b607bef043f3116b808b2eb616aa8423d6a73a5f6bf032cd33e285f060b6253e21883bb202ddc9fbf4cf8fb8f80f5ae14836c5c9aeec5a0311947e4c39b9daed06a823c1444dcacd40174e60566bac015ed", 0xcb)
socket$kcm(0x2, 0x7, 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x403, {{0x2, 0x0, @multicast2}}}, 0x84)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
lseek(0xffffffffffffffff, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000280)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='xfs\x00', 0x8410, 0x0)

13m54.112464672s ago: executing program 6 (id=593):
keyctl$setperm(0x5, 0x0, 0x120c0603)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
r1 = getpgrp(r0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
r6 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58)
accept$alg(r6, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r7, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c)
close_range(r5, 0xffffffffffffffff, 0x0)

13m49.58614896s ago: executing program 6 (id=597):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
mlockall(0x2)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000020601080000000000000000000000001400078008001100050005190a0000000000000000"], 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, 0x0, 0x56592a445bc89e6d)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
socket$packet(0x11, 0x2, 0x300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
landlock_restrict_self(0xffffffffffffffff, 0xc)

13m32.691071735s ago: executing program 35 (id=597):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
mlockall(0x2)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000020601080000000000000000000000001400078008001100050005190a0000000000000000"], 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, 0x0, 0x56592a445bc89e6d)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
socket$packet(0x11, 0x2, 0x300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
landlock_restrict_self(0xffffffffffffffff, 0xc)

9m31.031116453s ago: executing program 8 (id=1185):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000204e040b12000000000001090224000100006b2c09040005020300000009210080090122180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1"], 0x0}, 0x0)

9m26.107610632s ago: executing program 8 (id=1197):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='iocharset=euc-jp,codepage=macturkish,gid=', @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRESHEX=0xee00, @ANYBLOB="2c00b5da9d1423dd002677aa1201e709a1d87a5d98dd2d573f736e6187cdccc9836cd3a59342771e3be9d5a347f287a519daaae09a721e14b3df1c8b3936683409026968b019ef655268ae6bc2e6538f397c76c0376ccefb655a71bea92591b7cef711e5315a9e43e69a9ff0c92afd7c8092f1d092e2bf4a38695f12f941e2ea2b7514287242d039208f3a91ce5865b6d0650372cc6345c31c475e32bcfae8d07db6"], 0x5, 0x2d1, &(0x7f0000000600)="$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")
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000240)=ANY=[@ANYBLOB="747970653d54a10fb22c71756965742c696f636861727365743d63703836342c706172743d3078303030303030303030303030303030382c646972c21f01495bb4ee51303030303030303030303030303030303030303030352c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030303030302c6469725f756d61736b3d30303030303030303030303030303030303030313030302c71756965742c756d61736b3d30303030303030303030303030303030303030303030322c00"], 0x7, 0x318, &(0x7f00000004c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0)

9m22.829873341s ago: executing program 8 (id=1202):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x7)
read(r1, &(0x7f0000001140)=""/4096, 0x48)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000009200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
io_setup(0x202, &(0x7f0000000200)=<r5=>0x0)
ioctl$I2C_TIMEOUT(r4, 0x702, 0x9)
io_submit(r5, 0x1, &(0x7f0000000700)=[0x0])
write$FUSE_DIRENT(r4, 0x0, 0x10)
write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d0000000400000000000000000000000100000000000000000000800000230005"], 0x2d)

9m16.386427929s ago: executing program 8 (id=1217):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000006c0)={[{@utf8}, {@utf8}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@allow_utime}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x3}}]}, 0x1, 0x153c, &(0x7f00000008c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)

9m15.373915447s ago: executing program 8 (id=1228):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f00000004c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001900)="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", 0x23f}], 0x1}, 0x48800)

9m13.945925497s ago: executing program 8 (id=1230):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x8031, r0, 0xffffd000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000f42000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4442)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)="636f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b7222a386fbf03b1a65623d7edcefcd2f65bb7b2e69a3f5eeaf055b607bef043f3116b808b2eb616aa8423d6a73a5f6bf032cd33e285f060b6253e21883bb202ddc9fbf4cf8fb8f80f5ae14836c5c9aeec5a0311947e4c39b9daed06a823c1444dcacd40174e60566bac015ed", 0xcb)
socket$kcm(0x2, 0x7, 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x403, {{0x2, 0x0, @multicast2}}}, 0x84)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r5, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000280)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='xfs\x00', 0x8410, 0x0)

9m12.91985371s ago: executing program 36 (id=1230):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x8031, r0, 0xffffd000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000f42000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4442)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)="636f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b7222a386fbf03b1a65623d7edcefcd2f65bb7b2e69a3f5eeaf055b607bef043f3116b808b2eb616aa8423d6a73a5f6bf032cd33e285f060b6253e21883bb202ddc9fbf4cf8fb8f80f5ae14836c5c9aeec5a0311947e4c39b9daed06a823c1444dcacd40174e60566bac015ed", 0xcb)
socket$kcm(0x2, 0x7, 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x403, {{0x2, 0x0, @multicast2}}}, 0x84)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r5, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000280)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='xfs\x00', 0x8410, 0x0)

2m12.90286521s ago: executing program 4 (id=2735):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0xc004, &(0x7f0000003d00)=ANY=[@ANYRES32=0x0, @ANYRES64=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16], 0x1, 0x5f7, &(0x7f0000000c80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
creat(&(0x7f0000000080)='./file1\x00', 0x1)

2m11.494219691s ago: executing program 4 (id=2739):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x120c408, &(0x7f0000000180)={[{@compress_force}, {@clear_cache}, {@acl}, {@treelog}, {}, {@compress_force}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd")
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x40089413, 0x0)

2m9.694817599s ago: executing program 4 (id=2752):
io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000005b00)=[{0x94, 0x0, 0x0}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x40000000)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4)
socket(0x1, 0x803, 0x0)
r2 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc3", 0x2b}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0xfff, 0xfff, 0x401}, 0x10)
write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000b000000000004000800090000140000", 0x24)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x20, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x8)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000a02000/0x2000)=nil, 0x2000}, 0x1})

2m8.318611028s ago: executing program 4 (id=2756):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@nodioread_nolock}, {@noinit_itable}, {@orlov}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}]}, 0x0, 0x484, &(0x7f0000000b00)="$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")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

2m7.054344065s ago: executing program 4 (id=2760):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
mlockall(0x2)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000020601080000000000000000000000001400078008001100050005190a0000000000000000"], 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, 0x0, 0x56592a445bc89e6d)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
socket$packet(0x11, 0x2, 0x300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
landlock_restrict_self(0xffffffffffffffff, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_pidfd_open(0x0, 0x0)

2m5.945894768s ago: executing program 4 (id=2766):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
memfd_create(0x0, 0x8340b1aabcc04bec)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98)
r6 = epoll_create1(0x80000)
epoll_wait(r6, 0x0, 0x0, 0xfffffffc)
connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x80)

2m5.143469368s ago: executing program 37 (id=2766):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
memfd_create(0x0, 0x8340b1aabcc04bec)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98)
r6 = epoll_create1(0x80000)
epoll_wait(r6, 0x0, 0x0, 0xfffffffc)
connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x80)

24.044123978s ago: executing program 3 (id=3119):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x3, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xfe, [], [{{0x9, 0x5, 0x7, 0x2, 0x40, 0x3, 0x7f, 0x0, {0x4}}}]}}}}}]}}, 0x0)
close(0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0)
connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e)

20.053906212s ago: executing program 3 (id=3130):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
close(0x3)

19.826860671s ago: executing program 3 (id=3132):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r1, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/174, 0xae}], 0x1}, 0x7}], 0x1, 0x31, 0x0)

19.350410643s ago: executing program 3 (id=3136):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x14c)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0)
pivot_root(&(0x7f0000000280)='./file0/../file0/../file0\x00', &(0x7f0000000300)='./file2\x00')

18.898251719s ago: executing program 3 (id=3139):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
read(r0, &(0x7f0000000140)=""/192, 0xc0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfd}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41)

18.141571659s ago: executing program 3 (id=3146):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x9}}, @TCA_GRED_STAB={0x104, 0x2, "000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005836ad50ad973c0900"}]}}]}, 0x170}}, 0x0)

17.47418315s ago: executing program 38 (id=3146):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x9}}, @TCA_GRED_STAB={0x104, 0x2, "000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005836ad50ad973c0900"}]}}]}, 0x170}}, 0x0)

12.272671333s ago: executing program 9 (id=3176):
syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d042d158fefb32da0f10902"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./my_debugfs/usb/devices\x00', 0x0, 0x0)
read(r0, &(0x7f0000000500)=""/100, 0x7ffe)

10.842812504s ago: executing program 1 (id=3180):
syz_mount_image$nilfs2(&(0x7f0000000380), &(0x7f0000000a40)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000001ec0)="$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")
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40)
pwrite64(r0, &(0x7f0000000080)='2', 0x1, 0xfecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)=ANY=[])

10.445198408s ago: executing program 1 (id=3184):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)
close(0x3)

10.432708543s ago: executing program 9 (id=3185):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
mlockall(0x2)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000206010800000000000000000000000014"], 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, 0x0, 0x56592a445bc89e6d)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
socket$packet(0x11, 0x2, 0x300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
landlock_restrict_self(0xffffffffffffffff, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_pidfd_open(0x0, 0x0)

8.445584728s ago: executing program 1 (id=3187):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240)={[{@dioread_nolock}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0x1, 0x4b2, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x103042, 0x41)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
r2 = creat(&(0x7f0000000000)='./file1\x00', 0x1a6)
fallocate(r2, 0x0, 0x1, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x4, 0x0, 0x4, 0x1000000000000})

8.444356368s ago: executing program 0 (id=3198):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8})

8.392663802s ago: executing program 9 (id=3188):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80201)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'})
poll(&(0x7f0000000080)=[{r0, 0x81}], 0x1, 0x2000009d)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8)
syz_io_uring_complete(0x0, 0x0)

8.073855785s ago: executing program 0 (id=3191):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x8031, r0, 0xffffd000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000f42000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4442)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
socket$kcm(0x2, 0x7, 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x403, {{0x2, 0x0, @multicast2}}}, 0x84)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r5, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000280)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='xfs\x00', 0x8410, 0x0)

5.262145864s ago: executing program 9 (id=3192):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x24000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="1c002d"], 0x38}}, 0x4044000)

5.212741056s ago: executing program 1 (id=3193):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

5.062289303s ago: executing program 0 (id=3196):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_DO_IT(r1, 0xab03)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)

4.923845058s ago: executing program 2 (id=3197):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000001000/0x4000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)

4.625134455s ago: executing program 9 (id=3199):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.673462338s ago: executing program 7 (id=3200):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
mlockall(0x2)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000020601080000000000000000000000001400078008001100050005"], 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, 0x0, 0x56592a445bc89e6d)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
socket$packet(0x11, 0x2, 0x300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
landlock_restrict_self(0xffffffffffffffff, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_pidfd_open(0x0, 0x0)

3.524119432s ago: executing program 0 (id=3201):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000000)='10', 0x2)
name_to_handle_at(0xffffffffffffffff, &(0x7f0000000040)='./proc\x00', 0x0, 0x0, 0x400)
setuid(0xee01)

3.377669761s ago: executing program 1 (id=3202):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16=r0], 0x0)
syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_disconnect(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

3.322067571s ago: executing program 2 (id=3203):
syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000f40)=ANY=[@ANYBLOB='discard,discard,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303030342c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303030352c6e616d65636173653d312c756d61736b3d30303030303030303030303030303030303030303230312c696f636861727365743d6d6163696e7569742c6e616d65636173653d352c005e1371f9bbe32e19057d22dc1a5c8dec4ec3b6092e8f5558dc0600000070ddbbfd55d44b2f176524d660451f5cdec229331c7d55fc7147ecd238a57766a7f780ec82bfa73b62426d94f6ecb9d4c57ef24f9693900bef4e3315d349205bdaef711cde36b5368f3676d5105c3fd7ef81ff5c71d81f52daaa842aab69d71512f458b2bcc1ad248775df5322ed2546ca7f15", @ANYRESHEX, @ANYBLOB="93972e084e030fe7e7e2626498772bfd03b26c0dfd240e11a1207f19dae4b6da899d62627838d0c566eda79ef3b2da9249d2917c76b4fcafea9160826a453a7fbce21a8de93e50e4150bd97db4adc8907e8f1baa47fdd696aeec8b80200b5a70f8772b9d542579d481443fe3fa6a04cdd02e1bd8e37600824a8b3663baababddf278c82039702b2d3e", @ANYRES32, @ANYRES16, @ANYRESHEX=0x0], 0x1, 0x153c, &(0x7f00000028c0)="$eJzs3AuYjVXbOPD7Xms9Y0jaTXIY1lr3w04OiyTJIUkOSZIkSU4JSZJXEhJDTklDEpJzchhCcpiYNM7n8yEhSZokCckpWf9rYv7qVV/v+9WX73vn/l3Xvmbds/a9nrXmnv3s9Tyz+abT4GoNqleuR0Twp+CFLwkAEAsA/QHgGgAIAKB0XOm49P6sEhP+3EHYX+uhpCs9A3Ylcf0zN65/5sb1z9y4/pkb1z9z4/pnblz/zI3rz1hmtmla3mv5kXkffP///7bYP5XN7///QdKKj/5iTfHrOwPE/KspXP//+/BP5HL9/2MF/8qTuP6ZG9c/s/pz+0b2n4Ff/5lBlt/t4fpnblx/xjKzX94LjoUrfz/6735A5H/ybyC+x4Wf8pVf5++unzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYY+xuc9pcoAMhoX+l5McYYY4wxxhhj7K/js1zpGTDGGGOMMcYYY+x/HoIACQoCiIEsEAtZIRsIgJiM/mshDq6DnHA95ILckAfyQjzkg/ygwYAFghAKQEGIwg1QCG6EwlAEikIxcFAcSsBNUBJuhlJwC5SGW6EM3AZloRyUhwpwO1SEO6AS3AmV4S6oAlWhGlSHu6EG3AM14V6oBfdBbbgf6sADUBcehHrwENSHh6EBPAIN4VFoBI2hCTSFZv+t/BegG7wI3aEHJEBP6AUvQW/oA32hH/SHl2EAvAID4VVIhEEwGF6DIfA6DIU3YBgMhxHwJoyEt2AUjIYxMBbGwXiYAG/DRHgHJsFkmAJTIQmmwXR4F2bATJgF78FseB/mwFyYB/MhGT6ABbAQUuBDWAQfQSoshiWwFJbBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVtsF22AEfw074BHbBbtgDn8Je+OzfzD/1T/mdERBQoECFCmMwBmMxFrNhNsyO2TEH5sAIRjAO4zAn5sRcmAvzYB6Mx3jMj/nRoEFCwgJYAKMYxUJYCAtjYSyKRdGhwxJYAkvizVgKS2FpLI1lsAyWxXJYDitgBayIFbESVsLKWBmrYBWshtXwbrwbe2JNrIm1sBbWxtoZt6ewHtbD+lgfG2ADbIgNsRE2wibYBJthM2yOzbEFtsBW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YCTtjF+yS9kIWwBfxReyBVURP7IW9sDcmZumL/bAfvowD8BV8BV/FRByEg/E1fA1fx6F4EoedH44jcARWFG/hKByNJMbiOByHE3ACTsSJOAkn42Scikk4DafjdJyBM3Emvoez8X18H+fiXJyPyZiMC3AhpmAKLsJTmIqLcQkuxWW4HJfhSlyFK3ENrsU1uB7X40bciJtxM27Frbgdt+PHqADwE9yNuzER9+Je3If7cD/uxwN4ANMwDQ/iQTyEh/AwHsYjeASP4jE8jsfwBJ7Ak3gKT+NpPItn8Rw+F/9V/Y+LrE4EkU4JJWJEjIgVsSKbyCayi+wih8ghIiIi4kScyClyilwil8gj8oh4ES/yi/zCCCNIhOlnChEVUVFIFBKFRWFRVBQVTjhRQpQQJUVJUUqUEqXFraKMuE2UFeVES1dBVBAVRStXSdwpKovKooqoKqqJ6qK6qCFqiJqipqglaonaoraoIx4QdUVP7IsPifTKNBCDsKEYjI1EYyEvnqGai6HYQrQUrcQTYjgOwzaiuWsrnhbtxChsL/4hRuOzoqMYi53E86Kz6CK6ihdEN9HCdRc9xCTsKXqJqdhb9BF9RT8xA6uK93B21mriVZEoBonB4jUxH18XQ8VVYpgYLkaIN8VI8ZYYJUaLMWKsGCfGiwnibTFRvCMmicliipgqksQ0MV28K2aImWKWeE/MFu+LOWKumCfmi2TxgVggFooU8aFYJD4SqWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UqSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkZmkbEyq8wmr5LZZZBx/pdx8jqZU14vc8ncMo/MK+NlPplfammklSRDWUAWlFF5gywkb5SFZRFZVBaTThaXJeRNsqS8WZaSt8jS8lZZRt4my8pysrysIG+XFeUdEiIXjlFFVpXVZHV5t0yAe2RNea+sJe+TteX9so58QNaVD8p68iFZXz4sG8hHZEP5qGwkG8smsqlsJh+TzeXjsoVsKVvJJ2Rr+aRsI5+SbeXTsp30F39FnpUd5XOyk3xedpZdZFf5kzwvvewue0joCbKXfEn2ln1kX9lP9pcvywHyFTlQvioT5SA5WL4mh8jX5VD5hhwmh8sR8k05Ur4lR8nRcowcK8fJ8XKCfFtOlO/ISXKynCKnyiQ5Tfa9ONIsKf8w/+3fyB/489E3yk1ys9wit8ptcrvcIT+WO+VOuUvuknvkHrlX7pX75D65X+6XB+QBmSbT5EF5UB6Sh+RheVgekUfkUXlMnpHfyxPyB3lSnpKn5Bl5Vp6V5y7+DEChEkoqpQIVo7KoWJVVZVNXqezqapVDXaMi6loVp65TOdX1KpfKrfKovCpe5VP5lVZGWUUqVAVUQRVVN+DFXxhVVBVTThVXJdRN/06+KqRuVIVVkV/lZ8wv4Xfm10w1U81Vc9VCtVCtVCvVWrVWbVQb1Va1Ve1UO9VetVcdVAfVUXVUnVQn1Vl1Vl1VV9VNdVPdVXeVoBJUL/WS6q36qL6qn+qvXhbpaxioBqpElagGq8FqiBqihqqhapgapkaoEWqkGqlGqVFqjBqjxqlxaoKaoCaqiWqSmqSmqCkqSSWp6Wq6mqFmqFlqlpqtZqs5ao6ap+apZJWsFqgFKkWlqEVqkUpVi9VitVQtVcvVcrVSrVSr1Wq1Vq1V69V6lao2qU1qi9qitqltaofaoXaqnWqX2qX2qD1qr9qr9ql9ar/arw6oAypNpamD6qA6pA6pw+qwOqKOqKPqqDqujqsT6oQ6qU6q0+q0OqvOqnPqnDqvzqdv+wIRiEAFKogJYoLYIDbIFmQLsgfZgxxBjiASRIK4IC7IGVwf5ApyB3mCvEF8kC/IH+jABDYQF4seDW4ICgU3BoWDIkHRoFjgguJBieCmoGRwc1AquCUoHdwalAluC8oG5YLyQYXg9qBicEdQKbgzqBzcFVQJqgbVgurB3UGN4J6gZnBvUCu4L6gd3B/UCR4I6gYPBvWCh4L6wcNBg+CRoGHwaNAoaBw0CZoGzf7S8b0/mftx11330Am6p+6lX9K9dR/dV/fT/fXLeoB+RQ/Ur+pEPUgP1q/pIfp1PVS/oYfp4XqEflOP1G/pUXq0HqPH6nF6vJ6g39YT9Tt6kp6sp+ipOklP09P1u3qGnqln6ff0bP2+nqPn6nl6vk7WH+gFeqFO0R/qRfojnaoX6yV6qV6ml+sVeqVepVfrNXqtXqfX6w16o96kN+steqveprfrHfpjvVN/onfp3XqP/lTv1Z/pffpzvV9/oQ/oL3Wa/kof1F/rQ/obfVh/q4/o7/RRfUyX0t/rE/oHfVKf0qf1GX1W/6jP6Z/0ee3TN/fpb+9GGWViTIyJNbEmm8lmspvsJofJYSImYuJMnMlpcppcJpfJY/KYeBNv8pv8Jh0ZMgVMARM1UVPIFDKFTWFT1BQ1zjhTwpQwJU1JU8qUMqVNaVPGlDFlTVlT3pQ3t5vbzR3mDnOnudPcZe4yVU1VU91UNzVMDVPT1DS1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj08Q0Mc1MM9PcNDctTAvTyrQyrU1r08a0MW1NW9POtDPtTXvTwXQwHU1H08l0Mp1NZ9PVdDXdTDfT3XQ3CSbB9DK9TG/T2/Q1fU1/098MMAPMQDPQJJpEM9gMNkPMEDPUDDXDzHAzIn2jat4yo8xoM8aMNePMODPBTDATzUQzyUwyU8wUk2SSzHQz3cwwM8wsM8vMNrPNHDPHzDPzTLJJNgvMApNiUswis8ikmlSzxCwxy8wys8KsMKvMKrPGrDHrYJ3ZYDaYTWaT2WK2mG1mm9lhdpidZqfZZXaZPWaP2Wv2mn1mn9lv9psD5oBJM2nmoDloDplD5rA5bI6YI+aoOWqOm+PmhDlhTpqT5rQ5bc6a3BffL72JtVltNnuVzW6vtjnsNfaf4zw2r423+Wx+q20um/tXsbHWFrZFbFFbzDpb3JawN10Wl7XlbHlbwd5uK9o7bKXL4hr2HlvT3mtr2ftsdXv3r+La9n5bxz5i6yIC2Ma2vm1qG9hHbEP7qG1kG9smtqltbZ+0bexTtq192razz1wWL7AL7Sq72q6xa+0uu9uetmfsIfuNPWt/tN1tD9vfvmwH2FfsQPuqTbSDLotH2DftSPuWHWVH2zF27GXxFDvVJtlpdrp9186wMy+Lk+0HdrZNsXPsXDvPzv85Tp9Tiv3QLrIf2VQbwBK71C6zy+0Ku/L/z3WpXW832I12p/3EbrFb7Ta73e7I2Ajb3XaP/dTutZ/Zg/Zru99+YQ/YwzbNfvVznL6+w/Zbe8R+Z4/aY/a4/d6esD+ojOz0tX9vf7LnrbdASECSFAUUQ1kolrJSNrqKstPVlIOuoQhdS3F0HeWk6ykX5aY8lJfiKR/lJ02GLBGFVIAKUpRuoIzpFaVi5Kg4laCbqCTdTKXoFipNt1IZuo3KUjkqTxXodqpId1AlupMq011UhapSNapOd1MNuodq0r1Ui+6j2nQ/1aEHqC49SPXoIapPD1MDeoQa0qPUiBpTE2pKzegxak6PUwtqSa3oCWpNT1Ibeora0tPUjp6h9vQP6kDPUkd6jjrR89SZulBXeoG60YvUnXpQAvWkXvQS9aY+1Jf6UX96mQbQKzSQXqVEGkSD6TUaQq/TUHqDhtFwGkFv0kh6i0bRaBpDY2kcjacJ9DZNpHdoEk2mKTSVkmgaTad3aQbNpFn0Hs2m92kOzaV5NJ+S6QNaQAsphT6kRfQRpdJiWkJLaRktpxW0klbRalpDa2kdracNtJE20WbaQltpG22nHfQx7aRPaBftpj30Ke2lz2gffU776Qs6QF9SGn1FB+lrOkTf0GH61veg7+goHaPj9D2doB/oJJ2i03SGztKPdI5+ovPkCUIMRShDFQZhTJgljA2zhtnCq8Ls4dVhjvCaMBJeG8aF14U5w+vDXGHuME+YN4wP84X5Qx2a0IYUhmGBsGAYDW8IC4U3hoXDImHRsFjowuJhifCmsGR4c1gqvCUsHd4alglvC8uG5cJH7qsQ3h5WDO8IK4V3hpXDu8IqYdWwWlg9vDusEd4T1gzvDWuF94WlwvvDOuEDYd3wwbBe+FBYP3w4bBA+EjYMHw0bhY3DJmHTsFn4WNg8fDxsEbYMW4VXha3DJ8M24VNh2/DpsF34zM/99y/M6H/isv6EsGfYK3wpfCn0/l45Lzo/mhz9ILogujCaEv0wuij6UTQ1uji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Ibox6n31LODQCSedcoGLcVlcrMvqsrmrXHZ3tcvhrnERd62Lc9e5nO56l8vldnlcXhfv8rn8TjvjrCMXugKuoIu6G1whd6Mr7Iq4oq6Yc664K+GaumaumWvuHnctXEvXyj3hnnBPuifdU+4p97Rr555x7d0/XAf3rOvonnPPueddZ9fFdXUvuG5ufI4Lr8kE18v1cr1db9fX9XX9XX83wA1wA91Al+gS3WA32A1xQ9xQN9QNc8PcCDfCjXQj3Sg3yo1xY9w4N85NcBPcRDfRTXKT3BQ3xSW5JDfdTXcz3AxXceaFo8xxc9w8N88lu2S3wKXvGVPcIrfIpbpUt8QtccvcMrfCrXCr3Cq3xq1x69w6t8FtcJvcJrfFbXHb3Da3w+1wO91Ot8tfc2FQt9ftc/vcfrffHXBfujT3lTvovnaH3DfusPvWHXHfuaPumDvuvncn3A/upDvlTrsz7qz70Z1zP7nzzrtxkfGRCZG3IxMj70QmRSZHpkSmRpIi0yLTI+9GZkRmRmZF3ovMjrwfmROZG5kXmR9JjnwQWRBZGEmJfBhZFPkokhpZHFkSWRpZFlke8T7fltAX8AV91N/gC/kbfWFfxBf1xbzzxX0Jf5MveWHeqd7f6sv423xZX86X94/6Rr6xb+Kb+mb+Md/cP+5b+Ja+lX/Ct/ZP+jb+Kd/WP+3b+Wd8e/8P38E/6zv653wn/7zv7Lv4rv4F382/6Lv7Hj7B9/S9/Eu+t+/j+/p+vr9/2Q/wr/iB/lWf6Af5wf41P8S/7of6N/wwP9yPiHnTj8y4RIaxfpwf7yf4t/1E/46f5Cf7KX6qT/LT/HT/rp/hZ/pZ/j0/27/v5/i5fp6f75P9B36BX+hT/Id+kf/Ip/rFGTeN/Qq/0q/yq/0av9av8+v9Br/Rb/Kb/Ra/1W/z2/0O/7Hf6T/xu/xuv8d/6vf6z/w+/7nf77/wB/yXPs1/5Q/6r/0h/40/7L/1R/x3/qg/5o/77/0J/4M/6U/50/6MP+t/9Of8T/48/5s1xhhjjLF/yfhLTfHrngu383v+Ro74xZN7AcDVW/Om/bI/fUe5LteFdh8RH5v+9ekenR7KeFSpkpCQcPG5qRKCgnMBMv4SlO7njx5cjBdDK3gS2kJLKPmb8+8jupylPxg/eitAtl/kpE8oI740/ucAmHDZevuIx54YsaBMeDruvxh/LkDhgpdyssKleDG0+vn+Skso9Tvzz938D+af9YtxAC1+kZMdLsWX5l8CHodnoG1Gj/zNwzHGGGOMMcYYy6T6iPIdMq4/Mz7x+VvX5/HqUk4WuBT/0fU5Y4wxxhhjjDHGrrxnu3R96rG2bVt2+PcblTIaHv876X/UaAh/8YDc+K8b3gNkfEcBwJ8cECC9If/OVWz+W46VePGl889dy874AP53lPKvaFzhExNjjDHGGGPsL3dp0//r76srNSHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYywT+jv+O7ErvUbGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGPsSvt/AQAA//9YxPsy")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8)
io_setup(0x2e, &(0x7f0000000200)=<r1=>0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000140)='./file1\x00', 0x12000061)
io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xf, r0, 0x0, 0x0, 0x3fffffe}])

2.920882229s ago: executing program 0 (id=3204):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, r2, 0x0)

2.728800503s ago: executing program 7 (id=3205):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='7', 0x1)
getdents64(0xffffffffffffffff, 0x0, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140))

2.586015332s ago: executing program 2 (id=3206):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0xc080120, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x8, 0x102}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x18, 0x0, 0xde2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.248336653s ago: executing program 7 (id=3207):
r0 = syz_open_dev$loop(&(0x7f0000000340), 0xfffffffffffff703, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}})
r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xde, 0x7ffd]}})
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0)

2.107598533s ago: executing program 2 (id=3208):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000002380), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r1, 0x1, 0x30bd3d, 0x25dfdc01, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c805}, 0x4)

2.067447092s ago: executing program 7 (id=3209):
io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000005b00)=[{0x94, 0x0, 0x0}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x40000000)
ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000240))
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4)
socket(0x1, 0x803, 0x0)
r2 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0xfff, 0xfff, 0x401}, 0x10)
write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700", 0x12)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x20, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x4, 0x4}, &(0x7f00000002c0)=0x8)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="580000001200192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_POISON(r4, 0xc020aa08, &(0x7f0000000380)={{&(0x7f0000a02000/0x2000)=nil, 0x2000}, 0x1})

1.835215009s ago: executing program 7 (id=3210):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b4, 0x80, 0xfffffffa, 0xd8}, &(0x7f0000000640)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f00000000c0)={0x0, 0x1fffd, 0x400, 0x3, 0x178}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0x0, 0x90000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x2000, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9af9, 0x80, 0x2, 0xe3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x400, 0x2, 0x369, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x1, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x3d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}})

1.579874304s ago: executing program 2 (id=3211):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb2, &(0x7f0000000140)=""/178, 0x1f00, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb5}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
syz_open_dev$tty20(0xc, 0x4, 0x1)
memfd_create(&(0x7f0000000040)='\x00', 0x8340b1aabcc04bec)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x98)
r6 = epoll_create1(0x80000)
epoll_wait(r6, 0x0, 0x0, 0xfffffffc)
connect(r0, &(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x80)

1.083752639s ago: executing program 1 (id=3212):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)="82f0bb6bad9d02", 0x7}], 0x1}}], 0x1, 0x4404c884)
sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)

1.045754341s ago: executing program 9 (id=3213):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa)
shutdown(r0, 0x1)

162.66883ms ago: executing program 2 (id=3214):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})

131.481635ms ago: executing program 0 (id=3215):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000c, 0x8031, r0, 0xffffd000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x7, &(0x7f0000f42000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x4442)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
write(r2, &(0x7f00000003c0)="636f6d6d6f6e5f706964203e201148b2526e36903541c803fd8b9101b242f57efd9262327c8f358a0c85249b975bd66d739884506dc24cc900588a3dd86f3ec5ae31fae4310455d2b9eb3aafb5d588ba86cc2d1dcb08c50a643c09eb35d02b7222a386fbf03b", 0x66)
socket$kcm(0x2, 0x7, 0x2)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x403, {{0x2, 0x0, @multicast2}}}, 0x84)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
lseek(r5, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000280)=@nullb, &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='xfs\x00', 0x8410, 0x0)

0s ago: executing program 7 (id=3216):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
mlockall(0x2)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000020601080000000000000000000000001400078008001100050005"], 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, 0x0, 0x56592a445bc89e6d)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
socket$packet(0x11, 0x2, 0x300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
landlock_restrict_self(0xffffffffffffffff, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_pidfd_open(0x0, 0x0)

kernel console output (not intermixed with test programs):

 promiscuous mode
[  995.781100][T15841] netlink: 'syz.4.2286': attribute type 1 has an invalid length.
[  996.644932][T15835] netlink: 'syz.1.2288': attribute type 29 has an invalid length.
[  996.804228][T15856] netlink: 'syz.2.2292': attribute type 29 has an invalid length.
[  997.103584][T15854] netlink: 'syz.4.2293': attribute type 29 has an invalid length.
[  998.372475][T15866] loop9: detected capacity change from 0 to 2048
[  998.649639][T15868] input: syz0 as /devices/virtual/input/input56
[  998.709394][   T31] audit: type=1800 audit(1791263545.784:43): pid=15866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2296" name="file2" dev="loop9" ino=1347 res=0 errno=0
[  999.348520][T15885] netlink: 'syz.9.2304': attribute type 29 has an invalid length.
[  999.457807][T15879] netlink: 'syz.3.2303': attribute type 29 has an invalid length.
[  999.683874][ T8846] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  999.841872][ T8846] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00
[  999.841933][ T8846] usb 5-1: too many configurations: 102, using maximum allowed: 8
[  999.843560][ T8846] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[  999.843598][ T8846] usb 5-1: config 1 has no interface number 0
[  999.847227][ T8846] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[  999.847271][ T8846] usb 5-1: config 1 has no interface number 0
[  999.851526][ T8846] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[  999.851563][ T8846] usb 5-1: config 1 has no interface number 0
[  999.853344][ T8846] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[  999.853381][ T8846] usb 5-1: config 1 has no interface number 0
[  999.858907][ T8846] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[  999.858943][ T8846] usb 5-1: config 1 has no interface number 0
[  999.862120][ T8846] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[  999.862157][ T8846] usb 5-1: config 1 has no interface number 0
[  999.868065][ T8846] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[  999.868103][ T8846] usb 5-1: config 1 has no interface number 0
[  999.872827][ T8846] usb 5-1: config 1 has an invalid interface number: 3 but max is 0
[  999.872864][ T8846] usb 5-1: config 1 has no interface number 0
[  999.884138][ T8846] usb 5-1: New USB device strings: Mfr=219, Product=128, SerialNumber=211
[  999.884178][ T8846] usb 5-1: Product: syz
[  999.884204][ T8846] usb 5-1: Manufacturer: syz
[  999.884230][ T8846] usb 5-1: SerialNumber: syz
[  999.986814][ T8846] usb 5-1: 3:0 : does not exist
[  999.986848][ T8846] usb 5-1: 3:0 : does not exist
[ 1000.262907][ T8846] usb 5-1: USB disconnect, device number 13
[ 1000.319841][T15894] netlink: 'syz.9.2309': attribute type 29 has an invalid length.
[ 1000.505967][T15661] udevd[15661]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1000.699084][T15908] netlink: 'syz.7.2314': attribute type 29 has an invalid length.
[ 1001.594880][T15912] loop9: detected capacity change from 0 to 131072
[ 1001.627269][T15912] F2FS-fs (loop9): Invalid segment/section count (458783, 24 x 150994945)
[ 1001.627312][T15912] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1001.636917][T15912] F2FS-fs (loop9): invalid crc value
[ 1001.717544][T15912] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1001.744347][T15912] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1001.744464][T15912] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[ 1001.768718][T15905] netlink: 'syz.3.2313': attribute type 29 has an invalid length.
[ 1002.588531][T15920] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1002.965094][T15920] loop4: detected capacity change from 0 to 512
[ 1002.999808][T15920] EXT4-fs: Ignoring removed nobh option
[ 1003.013340][T15924] netlink: 'syz.3.2319': attribute type 29 has an invalid length.
[ 1003.065265][T15920] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1003.088947][T15920] EXT4-fs error (device loop4): ext4_xattr_inode_iget:470: comm syz.4.2317: EA inode 11 has unexpected i_nlink=2 ref_count=18446744069414584320
[ 1003.088989][T15920] loop4: lost filesystem error report for type 5 error -117
[ 1003.091601][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1003.091626][    C1] EXT4-fs (loop4): initial error at time 1791263550: ext4_xattr_inode_iget:470
[ 1003.091656][    C1] EXT4-fs (loop4): last error at time 1791263550: ext4_xattr_inode_iget:470
[ 1003.149660][T15920] EXT4-fs (loop4): Remounting filesystem read-only
[ 1003.149768][T15920] EXT4-fs (loop4): 1 orphan inode deleted
[ 1003.247144][T15920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1003.601694][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1004.205863][T15951] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2324'.
[ 1004.372913][T15942] netlink: 'syz.7.2322': attribute type 29 has an invalid length.
[ 1004.844200][T15971] loop7: detected capacity change from 0 to 64
[ 1006.148260][T15983] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1006.793041][T15996] netlink: 'syz.4.2332': attribute type 29 has an invalid length.
[ 1007.479753][T16020] loop7: detected capacity change from 0 to 128
[ 1007.484400][T16020] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1007.485666][T16020] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1007.848675][ T8598] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1012.381972][T16031] input: syz0 as /devices/virtual/input/input57
[ 1013.176734][T16061] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2344'.
[ 1019.294640][T16106] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[ 1019.788052][T16130] loop7: detected capacity change from 0 to 256
[ 1021.076324][T16121] all (unregistering): Released all slaves
[ 1021.093250][T16129] input: syz0 as /devices/virtual/input/input58
[ 1021.160622][T16130] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[ 1021.383015][   T31] audit: type=1800 audit(1791263568.464:44): pid=16130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2365" name="file2" dev="loop7" ino=1048883 res=0 errno=0
[ 1021.692256][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2369'.
[ 1023.001938][T16145] loop7: detected capacity change from 0 to 131072
[ 1023.003165][T16145] xfs: Deprecated parameter 'ikeep'
[ 1023.003192][T16145] XFS: ikeep mount option is deprecated.
[ 1023.042138][T16145] XFS (loop7): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[ 1023.389337][T16156] netlink: 'syz.4.2372': attribute type 22 has an invalid length.
[ 1023.389446][T16156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2372'.
[ 1024.134860][T16145] XFS (loop7): Starting recovery (logdev: internal)
[ 1024.193819][T16145] XFS (loop7): Ending recovery (logdev: internal)
[ 1024.423887][ T7072] XFS (loop7): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[ 1024.841122][T16161] netlink: 'syz.9.2350': attribute type 29 has an invalid length.
[ 1027.009034][T16179] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[ 1027.439487][T16186] block2mtd: error: cannot open device /d
[ 1027.565834][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2382'.
[ 1028.572584][T16203] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2367'.
[ 1028.633298][ T4930] Bluetooth: hci3: unexpected event for opcode 0x2023
[ 1028.989279][T16214] netlink: 'syz.3.2390': attribute type 29 has an invalid length.
[ 1031.950316][T16230] netlink: 'syz.3.2397': attribute type 29 has an invalid length.
[ 1032.683171][ T4930] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[ 1032.687384][ T4930] Bluetooth: hci3: Injecting HCI hardware error event
[ 1032.692175][T11035] Bluetooth: hci3: hardware error 0x00
[ 1032.787146][T16267] loop7: detected capacity change from 0 to 1024
[ 1032.800016][T16267] EXT4-fs: Ignoring removed i_version option
[ 1032.800049][T16267] EXT4-fs: Ignoring removed orlov option
[ 1032.829118][T16267] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1032.858394][T16267] EXT4-fs (loop7): revision level too high, forcing read-only mode
[ 1032.858781][T16267] EXT4-fs (loop7): orphan cleanup on readonly fs
[ 1032.961048][T16267] EXT4-fs error (device loop7): __ext4_get_inode_loc:4915: comm syz.7.2401: Invalid inode table block 0 in block_group 0
[ 1032.961101][T16267] loop7: lost filesystem error report for type 5 error -117
[ 1032.966156][T16267] EXT4-fs (loop7): Remounting filesystem read-only
[ 1032.966188][T16267] Quota error (device loop7): write_blk: dquota write failed
[ 1032.966287][T16267] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[ 1032.966432][T16267] EXT4-fs (loop7): 1 truncate cleaned up
[ 1032.978703][T16267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1033.049210][T16267] EXT4-fs (loop7): shut down requested (1)
[ 1033.221078][ T8846] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1033.255879][ T7072] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1033.395535][ T8846] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[ 1033.396914][ T8846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1033.411638][ T8846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1033.411677][ T8846] usb 3-1: Product: syz
[ 1033.411703][ T8846] usb 3-1: Manufacturer: syz
[ 1033.411730][ T8846] usb 3-1: SerialNumber: syz
[ 1033.442223][ T8846] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected
[ 1033.442442][ T8846] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84
[ 1033.448877][ T8846] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81
[ 1033.448973][ T8846] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82
[ 1033.449064][ T8846] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1
[ 1033.449156][ T8846] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2
[ 1033.449247][ T8846] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83
[ 1033.449347][ T8846] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3
[ 1033.492480][ T8846] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1033.609082][T16288] netlink: 'syz.1.2409': attribute type 1 has an invalid length.
[ 1033.609115][T16288] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2409'.
[ 1033.978109][T16300] loop7: detected capacity change from 0 to 16
[ 1033.995339][ T8846] usb 3-1: USB disconnect, device number 12
[ 1033.996948][T16300] erofs (device loop7): mounted with root inode @ nid 36.
[ 1034.018700][ T8846] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1034.023326][ T8846] keyspan 3-1:1.0: device disconnected
[ 1034.109172][T16280] loop4: detected capacity change from 0 to 32768
[ 1034.146827][T16293] netlink: 'syz.3.2410': attribute type 29 has an invalid length.
[ 1034.187046][T16280] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[ 1034.229141][T16280] JBD2: Ignoring recovery information on journal
[ 1034.373558][T16280] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[ 1034.801080][T16305] loop7: detected capacity change from 0 to 32768
[ 1034.838988][T16305] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2415 (16305)
[ 1034.925129][T11035] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[ 1034.937795][T16305] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1034.937843][T16305] BTRFS info (device loop7): using xxhash64 checksum algorithm
[ 1035.133722][T16305] BTRFS info (device loop7): rebuilding free space tree
[ 1035.334374][T16305] BTRFS info (device loop7): allowing degraded mounts
[ 1035.334405][T16305] BTRFS info (device loop7): enabling ssd optimizations
[ 1035.334428][T16305] BTRFS info (device loop7): turning on async discard
[ 1035.334449][T16305] BTRFS info (device loop7): enabling free space tree
[ 1035.334471][T16305] BTRFS info (device loop7): force clearing of disk cache
[ 1035.334492][T16305] BTRFS info (device loop7): force zlib compression, level 3
[ 1035.735327][T16305] BTRFS info (device loop7): setting incompat feature flag for DEFAULT_SUBVOL (0x2)
[ 1036.055347][ T7072] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1036.149180][T16342] xt_hashlimit: size too large, truncated to 1048576
[ 1036.171157][ T5622] ocfs2: Unmounting device (7,4) on (node local)
[ 1036.431675][T16344] geneve2: entered promiscuous mode
[ 1036.521864][T13214] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 53444 - 0
[ 1036.521939][T13214] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 53444 - 0
[ 1036.522003][T13214] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 53444 - 0
[ 1036.522067][T13214] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 53444 - 0
[ 1038.401216][T13408] libceph: connect (1)[c::]:6789 error -101
[ 1038.401627][T13408] libceph: mon0 (1)[c::]:6789 connect error
[ 1038.459486][T13408] libceph: connect (1)[c::]:6789 error -101
[ 1038.459668][T13408] libceph: mon0 (1)[c::]:6789 connect error
[ 1038.477978][T16358] ceph: No mds server is up or the cluster is laggy
[ 1038.853998][T16380] netlink: 'syz.1.2430': attribute type 29 has an invalid length.
[ 1038.948811][T16391] loop4: detected capacity change from 0 to 4096
[ 1038.950112][T16391] EXT4-fs: Ignoring removed nobh option
[ 1038.950202][T16391] EXT4-fs: Ignoring removed bh option
[ 1038.984253][T16391] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1039.007928][T16391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1041.236895][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1042.716589][T16420] netlink: 'syz.9.2443': attribute type 29 has an invalid length.
[ 1042.730128][T16433] netlink: 'syz.1.2447': attribute type 29 has an invalid length.
[ 1044.040805][ T5828] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1044.268023][ T5828] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[ 1044.337044][ T5828] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1044.339680][ T5828] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1044.513077][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1044.515084][ T5828] usb 4-1: Product: syz
[ 1044.516470][ T5828] usb 4-1: Manufacturer: syz
[ 1044.566650][ T5828] usb 4-1: SerialNumber: syz
[ 1044.866848][ T5828] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[ 1045.158941][    C0] usblp0: nonzero read bulk status received: -71
[ 1045.159904][ T8846] usb 4-1: USB disconnect, device number 11
[ 1046.124684][T16439] usblp0: removed
[ 1048.098937][ T5754] logitech-hidpp-device 0005:046D:B012.000E: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[ 1048.253297][T16494] fido_id[16494]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1049.647290][T16496] input: syz0 as /devices/virtual/input/input59
[ 1049.684000][T16489] netlink: 'syz.9.2461': attribute type 29 has an invalid length.
[ 1050.309631][T16503] netlink: 'syz.7.2465': attribute type 29 has an invalid length.
[ 1050.440999][ T5754] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1050.583497][ T8846] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1050.600953][ T5754] usb 4-1: Using ep0 maxpacket: 8
[ 1050.601828][ T5754] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1050.603328][ T5754] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 1050.603393][ T5754] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1050.603435][ T5754] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1050.603479][ T5754] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1050.603523][ T5754] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1050.603588][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.796549][ T8846] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[ 1050.798337][ T8846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.940620][ T5754] usb 4-1: usb_control_msg returned -32
[ 1050.940752][ T5754] usbtmc 4-1:16.0: can't read capabilities
[ 1051.054021][T16533] syzkaller1: entered promiscuous mode
[ 1051.054054][T16533] syzkaller1: entered allmulticast mode
[ 1051.391402][T16539] FAULT_INJECTION: forcing a failure.
[ 1051.391402][T16539] name failslab, interval 1, probability 0, space 0, times 1
[ 1051.391456][T16539] CPU: 0 UID: 0 PID: 16539 Comm: syz.1.2474 Not tainted syzkaller #0 PREEMPT(full) 
[ 1051.391508][T16539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1051.391532][T16539] Call Trace:
[ 1051.391545][T16539]  <TASK>
[ 1051.391560][T16539]  dump_stack_lvl+0x100/0x190
[ 1051.391624][T16539]  should_fail_ex.cold+0x5/0xa
[ 1051.391669][T16539]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1051.391725][T16539]  should_failslab+0xc2/0x120
[ 1051.391774][T16539]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[ 1051.391852][T16539]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1051.391902][T16539]  ? lock_acquire+0x1d1/0x380
[ 1051.391946][T16539]  ? kstrdup_const+0x63/0x80
[ 1051.392014][T16539]  kstrdup+0x51/0xe0
[ 1051.392074][T16539]  kstrdup_const+0x63/0x80
[ 1051.392132][T16539]  alloc_vfsmnt+0xe5/0x710
[ 1051.392209][T16539]  clone_mnt+0x4b/0x930
[ 1051.392266][T16539]  ? _raw_spin_unlock+0x28/0x50
[ 1051.392317][T16539]  lock_mount_exact+0x187/0x7e0
[ 1051.392372][T16539]  create_new_namespace+0x35e/0xba0
[ 1051.392438][T16539]  ? __pfx_create_new_namespace+0x10/0x10
[ 1051.392501][T16539]  ? strncpy_from_user+0x19d/0x2d0
[ 1051.392580][T16539]  ? vfs_open_tree+0x8c0/0xae0
[ 1051.392630][T16539]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1051.392679][T16539]  vfs_open_tree+0x8c0/0xae0
[ 1051.392732][T16539]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1051.392781][T16539]  ? _raw_spin_unlock+0x28/0x50
[ 1051.392832][T16539]  ? __pfx_vfs_open_tree+0x10/0x10
[ 1051.392900][T16539]  __x64_sys_open_tree+0xa3/0x150
[ 1051.392960][T16539]  do_syscall_64+0x123/0x790
[ 1051.393019][T16539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1051.393061][T16539] RIP: 0033:0x7f803f79e199
[ 1051.393092][T16539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1051.393133][T16539] RSP: 002b:00007f80405aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac
[ 1051.393171][T16539] RAX: ffffffffffffffda RBX: 00007f803fa25fa0 RCX: 00007f803f79e199
[ 1051.393198][T16539] RDX: 0000000000081802 RSI: 0000200000000640 RDI: ffffffffffffff9c
[ 1051.393225][T16539] RBP: 00007f803f8358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1051.393250][T16539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1051.393275][T16539] R13: 00007f803fa26038 R14: 00007f803fa25fa0 R15: 00007ffd831c56d8
[ 1051.393330][T16539]  </TASK>
[ 1051.670382][    C0] usb 3-1: NFC: It it not the response to the last command
[ 1051.692948][ T8846] usb 3-1: NFC: Unable to get FW version
[ 1051.738273][ T8846] pn533_usb 3-1:1.0: probe with driver pn533_usb failed with error -5
[ 1051.892762][ T5828] usb 3-1: USB disconnect, device number 13
[ 1052.609925][T16541] netlink: 'syz.7.2475': attribute type 29 has an invalid length.
[ 1053.742527][ T5828] usb 4-1: USB disconnect, device number 12
[ 1053.754715][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 1053.754785][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1053.920865][ T5733] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[ 1054.074704][ T5733] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1054.075416][ T5733] usb 3-1: not running at top speed; connect to a high speed hub
[ 1054.075457][ T5733] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[ 1054.108888][ T5733] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1054.108955][ T5733] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[ 1054.160989][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.161030][ T5733] usb 3-1: Product: syz
[ 1054.161056][ T5733] usb 3-1: Manufacturer: syz
[ 1054.161082][ T5733] usb 3-1: SerialNumber: syz
[ 1054.317061][T16575] loop9: detected capacity change from 0 to 1024
[ 1054.335840][T16575] EXT4-fs: Ignoring removed nobh option
[ 1054.335900][T16575] EXT4-fs: Ignoring removed orlov option
[ 1054.348871][T16575] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1054.367941][T16566] netlink: 'syz.4.2466': attribute type 29 has an invalid length.
[ 1054.429741][T16575] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1054.604890][T16581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2485'.
[ 1054.768271][ T9694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1054.857445][ T5828] usb 3-1: USB disconnect, device number 14
[ 1054.925654][T16590] jffs2: notice: (16590) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 1054.963754][T16590] jffs2: warning: (16590) jffs2_sum_write_data: Summary too big (-8 data, -34 pad) in eraseblock at 0001d000
[ 1055.663107][T16612] netlink: 'syz.9.2493': attribute type 29 has an invalid length.
[ 1056.010534][T16624] loop7: detected capacity change from 0 to 736
[ 1056.313657][T16624] isofs: isofs_export_get_parent(): child directory not normalized!
[ 1056.576358][T16638] netlink: 'syz.4.2502': attribute type 1 has an invalid length.
[ 1056.576427][T16638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1056.576444][T16638] IPv6: NLM_F_CREATE should be set when creating new route
[ 1056.794971][T16635] netlink: 'syz.2.2500': attribute type 29 has an invalid length.
[ 1057.030980][T16649] input: syz0 as /devices/virtual/input/input60
[ 1057.787259][T16661] input: syz0 as /devices/virtual/input/input61
[ 1059.595882][T16665] netlink: 'syz.3.2510': attribute type 29 has an invalid length.
[ 1060.711136][T16707] netlink: 'syz.3.2522': attribute type 29 has an invalid length.
[ 1061.576729][T16716] input: syz0 as /devices/virtual/input/input62
[ 1068.457447][T16816] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1068.570607][T16819] netlink: 'syz.2.2550': attribute type 29 has an invalid length.
[ 1068.803212][T16813] netlink: 'syz.4.2549': attribute type 29 has an invalid length.
[ 1068.971925][T16826] FAULT_INJECTION: forcing a failure.
[ 1068.971925][T16826] name failslab, interval 1, probability 0, space 0, times 0
[ 1068.971976][T16826] CPU: 0 UID: 0 PID: 16826 Comm: syz.2.2554 Not tainted syzkaller #0 PREEMPT(full) 
[ 1068.972022][T16826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1068.972045][T16826] Call Trace:
[ 1068.972057][T16826]  <TASK>
[ 1068.972073][T16826]  dump_stack_lvl+0x100/0x190
[ 1068.972132][T16826]  should_fail_ex.cold+0x5/0xa
[ 1068.972181][T16826]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1068.972248][T16826]  should_failslab+0xc2/0x120
[ 1068.972293][T16826]  kmem_cache_alloc_noprof+0x92/0x6a0
[ 1068.972360][T16826]  ? ioctx_alloc+0x1b9/0x21a0
[ 1068.972422][T16826]  ioctx_alloc+0x1b9/0x21a0
[ 1068.972485][T16826]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1068.972533][T16826]  ? lock_acquire+0x1d1/0x380
[ 1068.972574][T16826]  ? __might_fault+0xc5/0x140
[ 1068.972631][T16826]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1068.972678][T16826]  ? find_held_lock+0x2b/0x80
[ 1068.972736][T16826]  ? __pfx_ioctx_alloc+0x10/0x10
[ 1068.972788][T16826]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1068.972859][T16826]  __x64_sys_io_setup+0xc9/0x220
[ 1068.972920][T16826]  do_syscall_64+0x123/0x790
[ 1068.972978][T16826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1068.973019][T16826] RIP: 0033:0x7f4f03d9e199
[ 1068.973050][T16826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1068.973089][T16826] RSP: 002b:00007f4f04cbc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[ 1068.973126][T16826] RAX: ffffffffffffffda RBX: 00007f4f04025fa0 RCX: 00007f4f03d9e199
[ 1068.973152][T16826] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00000000000003ff
[ 1068.973177][T16826] RBP: 00007f4f03e358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1068.973202][T16826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1068.973227][T16826] R13: 00007f4f04026038 R14: 00007f4f04025fa0 R15: 00007ffe088adeb8
[ 1068.973279][T16826]  </TASK>
[ 1069.665785][T16836] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2556'.
[ 1070.255473][T16845] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2559'.
[ 1070.864826][T16869] netlink: 90 bytes leftover after parsing attributes in process `syz.2.2563'.
[ 1071.937409][T16883] input: syz0 as /devices/virtual/input/input67
[ 1073.328608][T16879] loop4: detected capacity change from 0 to 4096
[ 1073.493043][T16879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1073.788776][T16893] netlink: 'syz.7.2570': attribute type 29 has an invalid length.
[ 1074.417280][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1074.489750][T16902] netlink: 'syz.3.2572': attribute type 29 has an invalid length.
[ 1074.979684][T16919] FAULT_INJECTION: forcing a failure.
[ 1074.979684][T16919] name failslab, interval 1, probability 0, space 0, times 0
[ 1074.979752][T16919] CPU: 0 UID: 0 PID: 16919 Comm: syz.3.2580 Not tainted syzkaller #0 PREEMPT(full) 
[ 1074.979801][T16919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1074.979824][T16919] Call Trace:
[ 1074.979837][T16919]  <TASK>
[ 1074.979860][T16919]  dump_stack_lvl+0x100/0x190
[ 1074.979920][T16919]  should_fail_ex.cold+0x5/0xa
[ 1074.979964][T16919]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1074.980020][T16919]  should_failslab+0xc2/0x120
[ 1074.980065][T16919]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1074.980120][T16919]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1074.980167][T16919]  ? kasan_save_track+0x14/0x30
[ 1074.980205][T16919]  ? nfs_init_fs_context+0x4f/0x1510
[ 1074.980272][T16919]  nfs_init_fs_context+0x4f/0x1510
[ 1074.980327][T16919]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1074.980380][T16919]  alloc_fs_context+0x60c/0xf40
[ 1074.980447][T16919]  __x64_sys_fsopen+0xed/0x220
[ 1074.980513][T16919]  do_syscall_64+0x123/0x790
[ 1074.980572][T16919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1074.980612][T16919] RIP: 0033:0x7f358759e199
[ 1074.980643][T16919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1074.980682][T16919] RSP: 002b:00007f35857f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[ 1074.980722][T16919] RAX: ffffffffffffffda RBX: 00007f3587825fa0 RCX: 00007f358759e199
[ 1074.980749][T16919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[ 1074.980774][T16919] RBP: 00007f35876358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1074.980799][T16919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1074.980824][T16919] R13: 00007f3587826038 R14: 00007f3587825fa0 R15: 00007fff07e1ec18
[ 1074.980884][T16919]  </TASK>
[ 1075.942029][T16922] netlink: 'syz.9.2579': attribute type 29 has an invalid length.
[ 1076.014491][T16932] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2582'.
[ 1077.330248][T16953] netlink: 'syz.4.2587': attribute type 29 has an invalid length.
[ 1078.496922][T16979] netlink: 'syz.3.2594': attribute type 29 has an invalid length.
[ 1078.537663][T16994] loop7: detected capacity change from 0 to 512
[ 1078.556574][T16994] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1078.580329][T16994] EXT4-fs error (device loop7): ext4_free_branches:1020: inode #16: comm syz.7.2598: invalid indirect mapped block 32768 (level 2)
[ 1078.580378][T16994] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1078.580692][    C1] EXT4-fs (loop7): error count since last fsck: 1
[ 1078.580723][    C1] EXT4-fs (loop7): initial error at time 1791263625: ext4_free_branches:1020: inode 16
[ 1078.580825][    C1] EXT4-fs (loop7): last error at time 1791263625: ext4_free_branches:1020: inode 16
[ 1078.601909][T16994] EXT4-fs (loop7): 1 orphan inode deleted
[ 1078.601938][T16994] EXT4-fs (loop7): 1 truncate cleaned up
[ 1078.607903][T16994] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1078.855347][T17000] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1078.985750][ T7072] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1079.285795][T17013] loop7: detected capacity change from 0 to 2048
[ 1079.377041][   T31] audit: type=1800 audit(1791263626.454:45): pid=17013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2605" name="file2" dev="loop7" ino=1347 res=0 errno=0
[ 1079.382343][T17009] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2602'.
[ 1081.177127][T17047] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1081.336790][T17041] netlink: 'syz.7.2608': attribute type 29 has an invalid length.
[ 1084.903917][T17075] loop7: detected capacity change from 0 to 131072
[ 1084.937119][T17075] F2FS-fs (loop7): Invalid segment/section count (458783, 24 x 150994945)
[ 1084.937161][T17075] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1084.945162][T17075] F2FS-fs (loop7): invalid crc value
[ 1085.035802][T17075] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1085.057719][T17075] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1085.057756][T17075] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[ 1085.651593][T17098] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2624'.
[ 1087.952881][T17116] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1087.955972][T17116] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1088.089165][T17133] loop9: detected capacity change from 0 to 512
[ 1088.108644][T17133] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1088.165828][T17133] EXT4-fs (loop9): 1 truncate cleaned up
[ 1088.200472][T17116] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1088.200573][T17116] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1088.208399][T17133] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1088.250100][T17133] EXT4-fs error (device loop9): ext4_generic_delete_entry:2674: inode #2: block 13: comm syz.9.2634: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[ 1088.254038][T17133] EXT4-fs error (device loop9) in ext4_delete_entry:2746: Corrupt filesystem
[ 1088.333112][T17140] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1088.381152][T17140] loop7: detected capacity change from 0 to 512
[ 1088.382386][T17140] EXT4-fs: Ignoring removed nobh option
[ 1088.418226][T17140] EXT4-fs (loop7): orphan cleanup on readonly fs
[ 1088.423000][T17140] EXT4-fs error (device loop7): ext4_xattr_inode_iget:470: comm syz.7.2636: EA inode 11 has unexpected i_nlink=2 ref_count=18446744069414584320
[ 1088.423052][T17140] loop7: lost filesystem error report for type 5 error -117
[ 1088.437954][T17140] EXT4-fs (loop7): Remounting filesystem read-only
[ 1088.438059][T17140] EXT4-fs (loop7): 1 orphan inode deleted
[ 1088.477107][T17140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1088.516364][ T9694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1088.738252][T17146] vcan0: tx address claim with broadcast sa
[ 1088.792089][ T7072] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1088.843739][T11035] Bluetooth: hci6: command 0x0406 tx timeout
[ 1088.897401][T17141] netlink: 'syz.1.2635': attribute type 29 has an invalid length.
[ 1089.829396][T17169] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2645'.
[ 1090.201091][T11035] Bluetooth: hci4: command 0x0406 tx timeout
[ 1091.195971][T11035] Bluetooth: hci6: command 0x0406 tx timeout
[ 1092.290775][T11035] Bluetooth: hci4: command 0x0406 tx timeout
[ 1092.754637][T17195] loop7: detected capacity change from 0 to 512
[ 1092.905537][T17195] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1092.905668][T17195] ext4 filesystem being mounted at /403/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1092.916143][T17195] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.2651: corrupted xattr block 33: invalid header
[ 1092.916851][T17195] EXT4-fs error (device loop7): ext4_xattr_block_get:608: inode #15: comm syz.7.2651: corrupted xattr block 33: invalid header
[ 1092.917423][T17195] fscrypt (loop7, inode 15): Error -117 getting encryption context
[ 1092.999286][ T7072] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1093.699467][T17200] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1093.699720][T17200] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1094.167312][T17230] sit0: entered promiscuous mode
[ 1094.199301][T17230] netlink: 'syz.1.2665': attribute type 1 has an invalid length.
[ 1094.199327][T17230] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2665'.
[ 1094.315231][T17221] netlink: 'syz.3.2660': attribute type 29 has an invalid length.
[ 1095.080736][T11035] Bluetooth: hci6: command 0x0406 tx timeout
[ 1095.466224][T17233] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2664'.
[ 1095.584242][T17239] syz_tun: entered allmulticast mode
[ 1095.721080][T11035] Bluetooth: hci4: command 0x0406 tx timeout
[ 1095.809895][T17248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'.
[ 1095.996564][T17252] syzkaller1: entered promiscuous mode
[ 1095.998995][T17252] syzkaller1: entered allmulticast mode
[ 1096.247300][T17260] loop4: detected capacity change from 0 to 512
[ 1096.248204][T17254] netlink: 'syz.2.2674': attribute type 29 has an invalid length.
[ 1096.274936][T17260] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1096.334436][T17260] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #16: comm syz.4.2677: invalid indirect mapped block 32768 (level 2)
[ 1096.337503][T17260] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[ 1096.341115][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1096.341140][    C1] EXT4-fs (loop4): initial error at time 1791263643: ext4_free_branches:1020: inode 16
[ 1096.341179][    C1] EXT4-fs (loop4): last error at time 1791263643: ext4_free_branches:1020: inode 16
[ 1096.438390][T17260] EXT4-fs (loop4): 1 orphan inode deleted
[ 1096.438425][T17260] EXT4-fs (loop4): 1 truncate cleaned up
[ 1096.456122][T17260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1096.669424][ T5622] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1097.055483][T17261] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1097.140570][T17261] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1098.082512][T17280] netlink: 'syz.4.2680': attribute type 29 has an invalid length.
[ 1098.361373][T11035] Bluetooth: hci6: command 0x0406 tx timeout
[ 1099.160818][T11035] Bluetooth: hci4: command 0x0406 tx timeout
[ 1102.611301][T17349] netlink: 'syz.2.2700': attribute type 29 has an invalid length.
[ 1104.164031][T17387] netlink: 'syz.3.2716': attribute type 29 has an invalid length.
[ 1104.238545][T17396] all (unregistering): Released all slaves
[ 1105.222190][T17412] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1105.222263][T17412] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received
[ 1105.735852][T17408] netlink: 'syz.4.2723': attribute type 29 has an invalid length.
[ 1107.182487][T17435] netlink: 'syz.1.2733': attribute type 29 has an invalid length.
[ 1107.483555][T17451] loop4: detected capacity change from 0 to 1024
[ 1107.579242][   T31] audit: type=1800 audit(1791263654.654:46): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2735" name="file1" dev="loop4" ino=20 res=0 errno=0
[ 1107.627843][T17442] all (unregistering): Released all slaves
[ 1108.509256][T17454] netlink: 'syz.1.2749': attribute type 29 has an invalid length.
[ 1109.123140][ T5733] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1109.281525][ T5733] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[ 1109.285642][ T5733] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1109.285684][ T5733] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1109.289770][ T5733] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1109.289840][ T5733] usb 8-1: Product: syz
[ 1109.289867][ T5733] usb 8-1: Manufacturer: syz
[ 1109.289894][ T5733] usb 8-1: SerialNumber: syz
[ 1109.346493][T17473] loop4: detected capacity change from 0 to 32768
[ 1109.362857][T17473] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2739 (17473)
[ 1109.408034][T17473] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1109.408082][T17473] BTRFS info (device loop4): using xxhash64 checksum algorithm
[ 1109.553509][T17477] netlink: 'syz.1.2742': attribute type 29 has an invalid length.
[ 1109.621729][ T5733] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[ 1109.664928][T17473] BTRFS info (device loop4): rebuilding free space tree
[ 1109.697071][T17473] BTRFS info (device loop4): allowing degraded mounts
[ 1109.697105][T17473] BTRFS info (device loop4): enabling ssd optimizations
[ 1109.697133][T17473] BTRFS info (device loop4): turning on async discard
[ 1109.697162][T17473] BTRFS info (device loop4): enabling free space tree
[ 1109.697189][T17473] BTRFS info (device loop4): force clearing of disk cache
[ 1109.697219][T17473] BTRFS info (device loop4): force zlib compression, level 3
[ 1109.854319][ T5733] usb 8-1: USB disconnect, device number 12
[ 1109.876676][ T5733] usblp0: removed
[ 1110.173475][T17473] BTRFS info (device loop4): setting incompat feature flag for DEFAULT_SUBVOL (0x2)
[ 1110.266709][T17509] loop9: detected capacity change from 0 to 4096
[ 1110.280468][T17509] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[ 1110.770134][ T5622] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1111.904948][T17520] ntfs3(loop9): ino=1b, "file0" The size of extended attributes must not exceed 64KiB
[ 1112.071028][T17528] netlink: 'syz.2.2754': attribute type 29 has an invalid length.
[ 1112.265230][T17539] loop4: detected capacity change from 0 to 512
[ 1112.282239][T17539] EXT4-fs: Ignoring removed orlov option
[ 1112.337691][T17539] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1112.340229][T17539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.2756: ea_inode with extended attributes
[ 1112.340277][T17539] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1112.342738][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1112.342769][    C1] EXT4-fs (loop4): initial error at time 1791263659: ext4_xattr_inode_iget:437: inode 11
[ 1112.342839][    C1] EXT4-fs (loop4): last error at time 1791263659: ext4_xattr_inode_iget:437: inode 11
[ 1112.400554][T17541] loop7: detected capacity change from 0 to 1024
[ 1112.480825][T17539] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.2756: error while reading EA inode 11 err=-117
[ 1112.480881][T17539] loop4: lost filesystem error report for type 5 error -117
[ 1112.503766][T17539] EXT4-fs (loop4): 1 orphan inode deleted
[ 1112.506104][T17539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1112.535751][   T31] audit: type=1800 audit(1791263659.614:47): pid=17541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2755" name="file1" dev="loop7" ino=20 res=0 errno=0
[ 1113.582693][T16991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1114.666053][ T5754] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1114.821481][ T5754] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1114.822701][ T5754] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1114.822739][ T5754] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1114.822768][ T5754] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1114.822833][ T5754] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1114.825564][ T5754] usb 10-1: config 0 descriptor??
[ 1114.933828][T17574] netlink: 'syz.2.2765': attribute type 29 has an invalid length.
[ 1115.175638][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.176562][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.340086][ T5754] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1115.641347][ T1216] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1115.773196][T17581] netlink: 'syz.3.2770': attribute type 29 has an invalid length.
[ 1115.814513][ T1216] usb 3-1: Using ep0 maxpacket: 8
[ 1115.815227][ T1216] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1115.817292][ T1216] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1115.817330][ T1216] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1115.817426][ T1216] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1115.817476][ T1216] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1115.817576][ T1216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1115.899347][ T4930] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1115.912730][ T1216] hub 3-1:1.0: bad descriptor, ignoring hub
[ 1115.912758][ T1216] hub 3-1:1.0: probe with driver hub failed with error -5
[ 1115.925050][ T4930] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1115.930345][ T4930] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1115.934832][ T4930] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1115.936808][ T4930] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1115.938048][ T1216] cdc_wdm 3-1:1.0: skipping garbage
[ 1115.938104][ T1216] cdc_wdm 3-1:1.0: skipping garbage
[ 1115.987560][ T1216] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[ 1115.987591][ T1216] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1116.241904][ T5754] usb 3-1: USB disconnect, device number 15
[ 1117.179961][T17599] lo speed is unknown, defaulting to 1000
[ 1117.471408][ T5849] usb 10-1: USB disconnect, device number 11
[ 1117.853379][T17640] netlink: 'syz.1.2784': attribute type 29 has an invalid length.
[ 1117.928780][T17636] netlink: 'syz.2.2781': attribute type 29 has an invalid length.
[ 1118.040813][ T4930] Bluetooth: hci3: command tx timeout
[ 1118.847278][T17652] netlink: 'syz.7.2785': attribute type 29 has an invalid length.
[ 1121.036327][ T4930] Bluetooth: hci3: command tx timeout
[ 1121.155164][T17671] loop9: detected capacity change from 0 to 1024
[ 1121.232501][T17671] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[ 1121.255165][T17671] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[ 1121.279814][T17671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1121.361501][T17671] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1121.637986][ T9694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1121.718793][T17599] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1121.718987][T17599] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1121.719155][T17599] bridge_slave_0: entered allmulticast mode
[ 1121.742527][T17599] bridge_slave_0: entered promiscuous mode
[ 1121.756868][T17599] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1121.756986][T17599] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1121.757143][T17599] bridge_slave_1: entered allmulticast mode
[ 1121.759543][T17599] bridge_slave_1: entered promiscuous mode
[ 1121.822724][T17599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1121.826165][T17599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1121.888655][T17599] team0: Port device team_slave_0 added
[ 1121.899660][T17599] team0: Port device team_slave_1 added
[ 1121.935975][T17695] loop9: detected capacity change from 0 to 1024
[ 1121.972545][   T31] audit: type=1800 audit(1791263669.054:48): pid=17695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2794" name="file1" dev="loop9" ino=20 res=0 errno=0
[ 1122.097759][T17599] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1122.097803][T17599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1122.097837][T17599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1122.114972][T17599] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1122.114994][T17599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1122.115040][T17599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1122.150823][T13408] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1122.300723][T13408] usb 2-1: Using ep0 maxpacket: 8
[ 1122.301438][T13408] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1122.302742][T13408] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1122.302771][T13408] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1122.302822][T13408] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[ 1122.302862][T13408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.376613][T17689] netlink: 'syz.3.2792': attribute type 29 has an invalid length.
[ 1122.459266][T17599] hsr_slave_0: entered promiscuous mode
[ 1122.460391][T17599] hsr_slave_1: entered promiscuous mode
[ 1122.473773][T17599] debugfs: 'hsr0' already exists in 'hsr'
[ 1122.473803][T17599] Cannot create hsr debugfs directory
[ 1122.973695][T17716] jffs2: notice: (17716) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[ 1123.082755][ T4930] Bluetooth: hci3: command tx timeout
[ 1125.162461][ T4930] Bluetooth: hci3: command tx timeout
[ 1125.207919][T13408] usb 2-1: USB disconnect, device number 11
[ 1125.234840][T17726] netlink: 'syz.3.2801': attribute type 29 has an invalid length.
[ 1125.521293][T17745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2804'.
[ 1126.108210][T17773] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1126.259729][T17761] syzkaller1: entered promiscuous mode
[ 1126.259755][T17761] syzkaller1: entered allmulticast mode
[ 1126.270804][ T5849] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1126.422830][ T5849] usb 2-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00
[ 1126.424187][ T5849] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1126.424251][ T5849] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1126.424316][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.885064][T17758] raw-gadget.0 gadget.1: fail, usb_ep_set_wedge returned -11
[ 1126.888734][T13408] usb 2-1: USB disconnect, device number 12
[ 1127.094106][T17599] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1127.111869][T17599] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1127.126283][T17599] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1127.150942][ T1216] usb 10-1: new low-speed USB device number 12 using dummy_hcd
[ 1127.156315][T17599] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1127.180422][T17599] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1127.249007][T17599] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1127.255376][T17599] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1127.282873][T17599] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1127.351705][ T1216] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1127.353539][ T1216] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1127.353600][ T1216] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1127.353648][ T1216] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1127.353693][ T1216] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1127.353740][ T1216] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1127.358364][ T1216] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1127.358430][ T1216] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1127.358478][ T1216] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1127.358522][ T1216] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1127.358570][ T1216] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1127.360155][ T1216] usb 10-1: config 168 descriptor has 1 excess byte, ignoring
[ 1127.360221][ T1216] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 1127.360267][ T1216] usb 10-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1127.360312][ T1216] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1127.360358][ T1216] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 1127.549285][ T1216] usb 10-1: string descriptor 0 read error: -22
[ 1127.549646][ T1216] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1127.598035][ T1216] adutux 10-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1128.345817][T17599] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1128.459799][T17599] 8021q: adding VLAN 0 to HW filter on device team0
[ 1128.497228][ T3291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1128.497335][ T3291] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1128.548980][ T8600] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1128.549113][ T8600] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1128.630755][ T1216] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1128.802851][ T1216] usb 3-1: Using ep0 maxpacket: 32
[ 1128.803490][ T1216] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1128.805210][ T1216] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[ 1128.805251][ T1216] usb 3-1: config 0 has no interface number 0
[ 1128.805352][ T1216] usb 3-1: config 0 interface 184 has no altsetting 0
[ 1128.852347][ T1216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1128.852389][ T1216] usb 3-1: Product: syz
[ 1128.852421][ T1216] usb 3-1: Manufacturer: syz
[ 1128.852447][ T1216] usb 3-1: SerialNumber: syz
[ 1128.879043][ T1216] usb 3-1: config 0 descriptor??
[ 1129.009358][T17818] netlink: 'syz.1.2817': attribute type 29 has an invalid length.
[ 1129.095350][T17828] loop7: detected capacity change from 0 to 256
[ 1129.289554][T17828] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d)
[ 1129.290179][T17828] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186)
[ 1129.315443][T17828] exFAT-fs (loop7): failed to load alloc-bitmap
[ 1129.315463][T17828] exFAT-fs (loop7): failed to recognize exfat type
[ 1129.625146][ T1216] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1129.625196][ T1216] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1131.011865][ T1216] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[ 1131.011917][ T1216] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[ 1131.011954][ T1216] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1131.012223][ T1216] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[ 1131.442672][ T1216] usb 3-1: USB disconnect, device number 16
[ 1131.659509][  T187] usb 10-1: USB disconnect, device number 12
[ 1132.860551][T17876] netlink: 'syz.9.2828': attribute type 29 has an invalid length.
[ 1133.656568][T17885] netlink: 'syz.1.2829': attribute type 29 has an invalid length.
[ 1133.733330][T17599] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1133.900791][  T187] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1135.194719][T17599] veth0_vlan: entered promiscuous mode
[ 1135.514283][  T187] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[ 1135.534698][T17599] veth1_vlan: entered promiscuous mode
[ 1135.540982][  T187] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1135.541026][  T187] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1135.587758][  T187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1135.587801][  T187] usb 10-1: Product: syz
[ 1135.587828][  T187] usb 10-1: Manufacturer: syz
[ 1135.587855][  T187] usb 10-1: SerialNumber: syz
[ 1135.677775][T17599] veth0_macvtap: entered promiscuous mode
[ 1135.715465][T17599] veth1_macvtap: entered promiscuous mode
[ 1135.793110][T17599] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1135.830015][T17599] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1136.092243][ T8600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.294385][ T5971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.310790][  T971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.505394][  T971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1136.634192][  T187] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[ 1136.737056][  T187] usb 10-1: USB disconnect, device number 13
[ 1136.776318][  T187] usblp0: removed
[ 1137.372867][  T971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1137.372899][  T971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1137.457125][  T971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1137.457157][  T971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1137.975358][T17942] loop9: detected capacity change from 0 to 2048
[ 1138.005855][T17942] NILFS (loop9): invalid segment: Magic number mismatch
[ 1138.005893][T17942] NILFS (loop9): trying rollback from an earlier position
[ 1138.058729][T17942] NILFS (loop9): recovery complete
[ 1138.064081][T17951] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1138.172194][T17942] NILFS (loop9): error -22 preparing GC: cannot read source blocks
[ 1138.284748][T17942] NILFS (loop9): nilfs_sufile_do_free: segment 9 is already clean
[ 1138.292860][T17949] tun0: tun_chr_ioctl cmd 1074025675
[ 1138.292891][T17949] tun0: persist enabled
[ 1138.323371][T17949] tun0: tun_chr_ioctl cmd 1074025675
[ 1138.323401][T17949] tun0: persist disabled
[ 1141.456028][T17986] netlink: 'syz.1.2851': attribute type 29 has an invalid length.
[ 1141.625373][T17977] netlink: 'syz.2.2849': attribute type 29 has an invalid length.
[ 1141.667880][T13408] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1141.820909][T13408] usb 8-1: Using ep0 maxpacket: 8
[ 1141.826925][T13408] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1141.831385][T13408] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1141.831423][T13408] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1141.831486][T13408] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1141.831532][T13408] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1141.831594][T13408] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.877090][T13408] hub 8-1:1.0: bad descriptor, ignoring hub
[ 1141.877125][T13408] hub 8-1:1.0: probe with driver hub failed with error -5
[ 1141.877849][T13408] cdc_wdm 8-1:1.0: skipping garbage
[ 1141.877874][T13408] cdc_wdm 8-1:1.0: skipping garbage
[ 1141.908076][T13408] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1141.908106][T13408] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1142.242159][T13408] usb 8-1: USB disconnect, device number 13
[ 1142.623962][ T1216] usb 10-1: new full-speed USB device number 14 using dummy_hcd
[ 1142.771786][ T1216] usb 10-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[ 1142.773112][ T1216] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1142.773186][ T1216] usb 10-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[ 1142.776985][ T1216] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1142.777023][ T1216] usb 10-1: Product: syz
[ 1142.777049][ T1216] usb 10-1: Manufacturer: syz
[ 1142.777075][ T1216] usb 10-1: SerialNumber: syz
[ 1143.647257][T18008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1144.485263][T13408] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1144.490041][T18008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1144.508134][    C0] usb 10-1: received EP1 urb->status = -2
[ 1144.509596][ T1216] usb 10-1: unable to init card! (ret=-19)
[ 1146.168073][T13408] usb 4-1: device descriptor read/all, error -71
[ 1146.271767][ T1216] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1146.421495][ T1216] usb 8-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 1.00
[ 1146.423659][ T1216] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.859849][T18051] netlink: 'syz.0.2868': attribute type 29 has an invalid length.
[ 1147.407520][ T1216] hid-rmi 0003:06CB:81A7.0010: unbalanced collection at end of report description
[ 1147.478688][ T1216] hid-rmi 0003:06CB:81A7.0010: parse failed
[ 1147.518946][ T1216] hid-rmi 0003:06CB:81A7.0010: probe with driver hid-rmi failed with error -22
[ 1148.003192][ T5754] usb 8-1: USB disconnect, device number 14
[ 1148.096710][ T1216] usb 10-1: USB disconnect, device number 14
[ 1149.830813][T18072] netlink: 'syz.3.2871': attribute type 29 has an invalid length.
[ 1149.999022][T18100] loop7: detected capacity change from 0 to 8
[ 1150.094748][T18100] SQUASHFS error: Failed to read block 0x71: -5
[ 1150.099282][   T31] audit: type=1800 audit(1791263697.174:49): pid=18100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2876" name="file1" dev="loop7" ino=1 res=0 errno=0
[ 1153.028887][T18119] input: syz0 as /devices/virtual/input/input69
[ 1156.185865][T18137] netlink: 'syz.3.2886': attribute type 29 has an invalid length.
[ 1156.557591][T18153] netlink: 'syz.1.2891': attribute type 1 has an invalid length.
[ 1157.237107][T18147] loop9: detected capacity change from 0 to 131072
[ 1157.255884][T18147] F2FS-fs (loop9): Wrong secs_per_zone / total_sections (512, 24)
[ 1157.255912][T18147] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[ 1157.255939][T18147] F2FS-fs (loop9): Test dummy encryption mode enabled
[ 1157.263056][T18147] F2FS-fs (loop9): invalid crc value
[ 1157.331582][T18147] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[ 1157.332682][T18147] loop9: lost filesystem error report for type 5 error -117
[ 1157.377442][T18147] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1157.382239][T18147] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0
[ 1157.382933][T18147] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[ 1157.382993][T18147] F2FS-fs (loop9): Start checkpoint disabled!
[ 1157.402765][T18147] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0
[ 1157.540115][T18147] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0
[ 1157.540155][T18147] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[ 1157.897709][T18155] netlink: 'syz.1.2892': attribute type 29 has an invalid length.
[ 1160.040927][T18212] loop7: detected capacity change from 0 to 256
[ 1160.425099][T18194] netlink: 'syz.1.2898': attribute type 29 has an invalid length.
[ 1161.009158][T18230] loop7: detected capacity change from 0 to 512
[ 1161.031362][T18230] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1161.099088][T18230] EXT4-fs (loop7): 1 truncate cleaned up
[ 1161.112668][T18230] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1161.492699][ T7072] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1161.810921][ T5754] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1161.931107][T13408] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1162.015973][ T5754] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1162.019985][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1162.031828][ T5754] usb 3-1: config 0 descriptor??
[ 1162.080687][T13408] usb 10-1: Using ep0 maxpacket: 8
[ 1162.081439][T13408] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1162.084912][T13408] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1162.084976][T13408] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1162.085016][T13408] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1162.085059][T13408] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1162.085101][T13408] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1162.085164][T13408] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1162.273244][ T5754] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1162.301414][T18268] tipc: Started in network mode
[ 1162.301478][T18268] tipc: Node identity 4, cluster identity 4711
[ 1162.301499][T18268] tipc: Node number set to 4
[ 1162.762199][T18273] netlink: 'syz.1.2919': attribute type 29 has an invalid length.
[ 1163.805265][ T5754] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1
[ 1163.805305][ T5754] [drm] Initialized udl on minor 1
[ 1163.809646][ T5754] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1163.817015][ T5754] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 1163.820814][ T5754] usb 3-1: USB disconnect, device number 17
[ 1164.738944][T11854] usb 10-1: USB disconnect, device number 15
[ 1164.891983][T18311] netlink: 'syz.0.2923': attribute type 29 has an invalid length.
[ 1164.893715][T18320] loop7: detected capacity change from 0 to 256
[ 1165.056380][T18325] capability: warning: `syz.9.2928' uses 32-bit capabilities (legacy support in use)
[ 1165.113202][T18325] sctp: Failed to create the SCTP UDP tunneling v4 sock
[ 1165.147051][T18324] syz.1.2929 uses obsolete (PF_INET,SOCK_PACKET)
[ 1165.709248][T18335] netlink: 'syz.7.2933': attribute type 29 has an invalid length.
[ 1167.475712][T18381] FAULT_INJECTION: forcing a failure.
[ 1167.475712][T18381] name fail_futex, interval 1, probability 0, space 0, times 1
[ 1167.475769][T18381] CPU: 0 UID: 0 PID: 18381 Comm: syz.1.2942 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1167.475824][T18381] Tainted: [L]=SOFTLOCKUP
[ 1167.475838][T18381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1167.475861][T18381] Call Trace:
[ 1167.475872][T18381]  <TASK>
[ 1167.475887][T18381]  dump_stack_lvl+0x100/0x190
[ 1167.475947][T18381]  should_fail_ex.cold+0x5/0xa
[ 1167.476008][T18381]  should_fail_futex+0x4c/0x60
[ 1167.476058][T18381]  futex_lock_pi_atomic+0x130/0xb80
[ 1167.476132][T18381]  futex_lock_pi+0x278/0x7e0
[ 1167.476205][T18381]  ? __pfx_futex_lock_pi+0x10/0x10
[ 1167.476264][T18381]  ? try_to_wake_up+0x70a/0x1c90
[ 1167.476318][T18381]  ? __pfx_try_to_wake_up+0x10/0x10
[ 1167.476376][T18381]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1167.476425][T18381]  ? plist_check_list+0x1b8/0x280
[ 1167.476479][T18381]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1167.476526][T18381]  ? futex_private_hash_put.part.0+0xdc/0x180
[ 1167.476590][T18381]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1167.476668][T18381]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1167.476715][T18381]  ? rcu_read_lock_any_held+0x6a/0x90
[ 1167.476775][T18381]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1167.476822][T18381]  ? find_held_lock+0x2b/0x80
[ 1167.476880][T18381]  ? ksys_write+0x190/0x250
[ 1167.476951][T18381]  do_futex+0x371/0x440
[ 1167.477017][T18381]  ? __pfx_do_futex+0x10/0x10
[ 1167.477075][T18381]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1167.477141][T18381]  __x64_sys_futex+0x34f/0x4d0
[ 1167.477199][T18381]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1167.477250][T18381]  ? __pfx___x64_sys_futex+0x10/0x10
[ 1167.477316][T18381]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1167.477373][T18381]  do_syscall_64+0x123/0x790
[ 1167.477429][T18381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1167.477470][T18381] RIP: 0033:0x7f803f79e199
[ 1167.477500][T18381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1167.477537][T18381] RSP: 002b:00007f80405aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1167.477574][T18381] RAX: ffffffffffffffda RBX: 00007f803fa25fa0 RCX: 00007f803f79e199
[ 1167.477601][T18381] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000020000000cffc
[ 1167.477625][T18381] RBP: 00007f803f8358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1167.477650][T18381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1167.477674][T18381] R13: 00007f803fa26038 R14: 00007f803fa25fa0 R15: 00007ffd831c56d8
[ 1167.477727][T18381]  </TASK>
[ 1169.222617][T18398] loop7: detected capacity change from 0 to 4096
[ 1169.446769][T18398] ntfs3(loop7): ino=19, mi_enum_attr
[ 1169.446813][T18398] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[ 1169.549266][T18402] netlink: 'syz.9.2948': attribute type 29 has an invalid length.
[ 1169.575796][T18385] netlink: 'syz.2.2944': attribute type 29 has an invalid length.
[ 1170.505317][T18422] netlink: 'syz.7.2952': attribute type 1 has an invalid length.
[ 1170.505350][T18422] netlink: 'syz.7.2952': attribute type 1 has an invalid length.
[ 1170.505373][T18422] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2952'.
[ 1170.505398][T18422] netlink: 'syz.7.2952': attribute type 1 has an invalid length.
[ 1170.596637][T18424] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1170.692215][T18430] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1170.713399][T18428] sg_write: data in/out 1265126/1 bytes for SCSI command 0x32-- guessing data in;
[ 1170.713399][T18428]    program syz.2.2954 not setting count and/or reply_len properly
[ 1170.998740][T18441] loop7: detected capacity change from 0 to 512
[ 1171.207163][T18441] FAT-fs (loop7): error, corrupted file size (i_pos 51, 512)
[ 1171.249002][T18441] FAT-fs (loop7): error, invalid FAT chain (i_pos 51, last_block 64)
[ 1171.298802][T18452] ima: policy update failed
[ 1171.299004][   T31] audit: type=1802 audit(1791263718.374:50): pid=18452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2963" res=0 errno=0
[ 1171.857790][T18464] netlink: 'syz.2.2966': attribute type 29 has an invalid length.
[ 1172.100721][  T187] usb 10-1: new full-speed USB device number 16 using dummy_hcd
[ 1172.271417][  T187] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1172.272838][  T187] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1172.272885][  T187] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1172.272938][  T187] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[ 1172.272988][  T187] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 1172.281142][  T187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1172.281182][  T187] usb 10-1: Product: syz
[ 1172.281208][  T187] usb 10-1: Manufacturer: syz
[ 1172.281235][  T187] usb 10-1: SerialNumber: syz
[ 1172.317877][T18466] netlink: 'syz.3.2967': attribute type 29 has an invalid length.
[ 1172.378107][T18473] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1172.404759][  T187] cdc_mbim 10-1:1.0: skipping garbage
[ 1172.647241][T18473] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1172.647429][T18473] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1172.757600][T18493] jffs2: notice: (18493) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[ 1172.789556][T18493] jffs2: warning: (18493) jffs2_sum_write_data: Not enough space for summary, padsize = -2
[ 1172.922225][T11854] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 1173.120748][T11854] usb 3-1: Using ep0 maxpacket: 32
[ 1173.121678][T11854] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1173.504567][T11854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1173.504624][T11854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1173.504684][T11854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.682059][T18473] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1173.682911][T18473] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1173.824743][  T187] cdc_mbim 10-1:1.0: setting tx_max = 16384
[ 1173.825869][T11854] usb 3-1: config 0 descriptor??
[ 1173.835941][  T187] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device
[ 1173.851816][  T187] wwan wwan0: port wwan0mbim0 attached
[ 1173.979390][  T187] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 32:2e:86:77:56:e7
[ 1174.050214][  T187] usb 10-1: USB disconnect, device number 16
[ 1174.052041][ T6823] IPVS: starting estimator thread 0...
[ 1174.064224][  T187] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM
[ 1174.081577][T18518] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1174.210556][T18516] IPVS: using max 22 ests per chain, 52800 per kthread
[ 1174.624828][T13408] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1174.910721][T13408] usb 8-1: Using ep0 maxpacket: 8
[ 1174.912296][T13408] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1174.963544][T13408] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[ 1174.963590][T13408] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1174.963624][T13408] usb 8-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[ 1174.963680][T13408] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.190971][T18535] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR
[ 1175.217995][T11854] savu 0003:1E7D:2D5A.0011: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[ 1175.305934][T11854] usb 3-1: USB disconnect, device number 18
[ 1175.310043][  T187] wwan wwan0: port wwan0mbim0 disconnected
[ 1175.730231][T18544] fido_id[18544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1176.223878][T18552] netlink: 'syz.9.2983': attribute type 29 has an invalid length.
[ 1176.550539][T18569] netlink: 'syz.0.2987': attribute type 29 has an invalid length.
[ 1176.569224][T18558] netlink: 'syz.1.2984': attribute type 29 has an invalid length.
[ 1176.606412][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 1176.606491][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.055777][T18592] WARNING! power/level is deprecated; use power/control instead
[ 1178.202557][T13408] usb 8-1: USB disconnect, device number 15
[ 1179.248953][T18574] loop9: detected capacity change from 0 to 32768
[ 1179.315464][T18574] 
[ 1179.315464][T18574]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1179.315464][T18574] 
[ 1179.402828][T11854] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1179.541578][T18574] JFS: metapage_get_blocks failed
[ 1179.552318][T18574] ERROR: (device loop9): release_metapage: metapage_write_one() failed
[ 1179.552318][T18574] 
[ 1179.554918][T18574] ERROR: (device loop9): diWrite: ixpxd invalid
[ 1179.554918][T18574] 
[ 1179.554983][T18574] ERROR: (device loop9): txAbort: 
[ 1179.554983][T18574] 
[ 1179.594015][T11854] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00
[ 1179.595490][T11854] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1179.595556][T11854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1179.595567][T18615] ERROR: (device loop9): diWrite: ixpxd invalid
[ 1179.595567][T18615] 
[ 1179.595595][T11854] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 1179.595624][T18615] ERROR: (device loop9): txAbort: 
[ 1179.595624][T18615] 
[ 1179.595636][T11854] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1179.599060][T11854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.599106][T11854] usb 4-1: Product: syz
[ 1179.599132][T11854] usb 4-1: Manufacturer: syz
[ 1179.599157][T11854] usb 4-1: SerialNumber: syz
[ 1179.681475][T18574] 
[ 1179.681475][T18574]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1179.681475][T18574] 
[ 1179.689558][T18574] 
[ 1179.689558][T18574]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1179.689558][T18574] 
[ 1179.774492][T11854] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes.
[ 1179.774626][T11854] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[ 1179.774939][T11854] usbserial_generic 4-1:1.0: generic converter detected
[ 1180.507520][T11854] usb 4-1: generic converter now attached to ttyUSB0
[ 1180.554050][T11854] usb 4-1: USB disconnect, device number 15
[ 1180.599334][T11854] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[ 1180.600102][T11854] usbserial_generic 4-1:1.0: device disconnected
[ 1180.968782][ T9694] 
[ 1180.968782][ T9694]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1180.968782][ T9694] 
[ 1180.969315][ T9694] 
[ 1180.969315][ T9694]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1180.969315][ T9694] 
[ 1181.101548][T18640] loop7: detected capacity change from 0 to 2048
[ 1181.102729][T18640] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1181.218909][T18640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1181.314736][T18647] lo: entered allmulticast mode
[ 1181.370365][T18646] lo: left allmulticast mode
[ 1182.754519][T18639] EXT4-fs error (device loop7): ext4_validate_block_bitmap:435: comm syz.7.3000: bg 0: block 2: invalid block bitmap
[ 1183.463073][T18639] EXT4-fs (loop7): Remounting filesystem read-only
[ 1183.463578][T18639] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 18, error -30)
[ 1183.554540][T18645] netlink: 'syz.1.3003': attribute type 29 has an invalid length.
[ 1183.633829][T18659] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1183.731560][ T7072] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1184.100718][  T187] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1184.166800][T18660] netlink: 'syz.9.3002': attribute type 29 has an invalid length.
[ 1184.250684][  T187] usb 3-1: Using ep0 maxpacket: 16
[ 1184.251422][  T187] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[ 1184.252772][  T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1184.252824][  T187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1184.252871][  T187] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1184.252937][  T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.260135][  T187] usb 3-1: config 0 descriptor??
[ 1185.530155][  T187] nintendo 0003:057E:2019.0012: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0
[ 1186.795565][  T187] nintendo 0003:057E:2019.0012: Failed to get joycon info; ret=-71
[ 1186.795733][  T187] nintendo 0003:057E:2019.0012: Failed to retrieve controller info; ret=-71
[ 1186.795812][  T187] nintendo 0003:057E:2019.0012: Failed to initialize controller; ret=-71
[ 1187.963508][  T187] nintendo 0003:057E:2019.0012: probe - fail = -71
[ 1187.963775][  T187] nintendo 0003:057E:2019.0012: probe with driver nintendo failed with error -71
[ 1188.008438][  T187] usb 3-1: USB disconnect, device number 19
[ 1188.066904][T18705] fido_id[18705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[ 1188.468001][T18725] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1188.483974][   T12] IPVS: starting estimator thread 0...
[ 1190.039853][T18735] IPVS: using max 22 ests per chain, 52800 per kthread
[ 1190.277312][T18727] netlink: 'syz.2.3016': attribute type 29 has an invalid length.
[ 1190.725741][T18742] netlink: 'syz.3.3022': attribute type 29 has an invalid length.
[ 1190.742515][  T187] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1190.972741][  T187] usb 8-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1190.974090][  T187] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1190.974153][  T187] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1190.974194][  T187] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1190.974238][  T187] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1190.974303][  T187] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1191.003032][T18724] loop9: detected capacity change from 0 to 32768
[ 1191.048878][T18724] BTRFS info: device /dev/loop9 (7:9) using temp-fsid 04a411a4-b469-4ff3-8066-588469261f12
[ 1191.048957][T18724] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3017 (18724)
[ 1191.132546][T18724] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1191.132596][T18724] BTRFS info (device loop9): using sha256 checksum algorithm
[ 1192.311102][  T187] gud 8-1:1.0: probe with driver gud failed with error -121
[ 1192.379910][T18724] BTRFS error (device loop9): open_ctree failed: -EINTR
[ 1192.632432][  T187] usb 8-1: USB disconnect, device number 16
[ 1194.210878][T18793] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1194.579807][T18815] loop9: detected capacity change from 0 to 256
[ 1194.624232][T18815] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[ 1194.732406][T18815] exFAT-fs (loop9): start_clu is invalid cluster(0xffffffff)
[ 1194.737575][T18821] loop7: detected capacity change from 0 to 256
[ 1194.846409][T18821] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8948a13b, utbl_chksum : 0xe619d30d)
[ 1194.970419][T18821] exFAT-fs (loop7): error, in sector 160, dentry 9 should be unused, but 0x85
[ 1194.970461][T18821] exFAT-fs (loop7): Filesystem has been set read-only
[ 1195.273875][T18816] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[ 1195.372648][T18828] loop9: detected capacity change from 0 to 2048
[ 1195.389313][T18828] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1195.445446][T18828] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1196.619029][ T9694] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1196.996843][T18856] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 1196.997032][T18856] overlayfs: failed to set uuid (362/file2, err=-1); falling back to uuid=null.
[ 1197.621094][  T187] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1197.814624][  T187] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 1197.884261][  T187] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1197.884489][  T187] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1197.884545][  T187] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1197.884643][  T187] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1197.884771][  T187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1197.939195][T18870] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1198.478302][  T187] gud 4-1:1.0: probe with driver gud failed with error -121
[ 1199.382628][T18882] loop7: detected capacity change from 0 to 131072
[ 1199.404445][T18882] F2FS-fs (loop7): invalid crc value
[ 1199.502292][T18882] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1199.506513][  T187] usb 4-1: USB disconnect, device number 16
[ 1199.511087][T18882] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[ 1199.561921][T17926] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[ 1199.712917][T17926] usb 2-1: not running at top speed; connect to a high speed hub
[ 1199.712965][T17926] usb 2-1: New USB device found, idVendor=046d, idProduct=152d, bcdDevice=ef.8f
[ 1199.713024][T17926] usb 2-1: too many configurations: 241, using maximum allowed: 8
[ 1199.713716][T17926] usb 2-1: config 0 has no interfaces?
[ 1200.738774][T17926] usb 2-1: config 0 has no interfaces?
[ 1200.750861][T17926] usb 2-1: config 0 has no interfaces?
[ 1200.751642][T17926] usb 2-1: config 0 has no interfaces?
[ 1200.780848][T17926] usb 2-1: config 0 has no interfaces?
[ 1200.788043][T17926] usb 2-1: config 0 has no interfaces?
[ 1200.789308][T17926] usb 2-1: config 0 has no interfaces?
[ 1200.789965][T17926] usb 2-1: config 0 has no interfaces?
[ 1200.816791][T17926] usb 2-1: New USB device strings: Mfr=179, Product=45, SerialNumber=160
[ 1200.816832][T17926] usb 2-1: Product: syz
[ 1200.816858][T17926] usb 2-1: Manufacturer: syz
[ 1200.816885][T17926] usb 2-1: SerialNumber: syz
[ 1200.895164][T17926] usb 2-1: config 0 descriptor??
[ 1201.599418][T13408] usb 2-1: USB disconnect, device number 13
[ 1201.648023][T18886] netlink: 'syz.2.3056': attribute type 29 has an invalid length.
[ 1201.843816][T18902] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1201.844021][T18902] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1201.844199][T18902] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1201.847106][T18902] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1202.775637][T18902] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1203.321853][T18930] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1203.881446][ T4930] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1203.881515][ T4930] Bluetooth: hci4: command 0x0406 tx timeout
[ 1203.881571][ T4930] Bluetooth: hci6: command 0x0406 tx timeout
[ 1204.222122][ T5849] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[ 1204.374601][ T5849] usb 10-1: not running at top speed; connect to a high speed hub
[ 1204.374668][ T5849] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[ 1204.379266][ T5849] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1204.502685][ T5849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1204.502837][ T5849] usb 10-1: Product: syz
[ 1204.502913][ T5849] usb 10-1: Manufacturer: syz
[ 1204.502988][ T5849] usb 10-1: SerialNumber: syz
[ 1205.006802][ T5849] oti6858 10-1:1.0: oti6858 converter detected
[ 1205.229097][ T5849] usb 10-1: oti6858 converter now attached to ttyUSB0
[ 1205.402878][T18974] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[ 1205.434690][ T8600] IPVS: starting estimator thread 0...
[ 1205.562404][T18976] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1205.961716][T11035] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1205.985185][  T187] usb 10-1: USB disconnect, device number 17
[ 1206.718339][T18989] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1206.768491][  T187] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[ 1206.769133][  T187] oti6858 10-1:1.0: device disconnected
[ 1207.014835][T18998] syzkaller1: entered promiscuous mode
[ 1207.016493][T18998] syzkaller1: entered allmulticast mode
[ 1208.755735][T11035] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1209.111844][ T5828] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1209.283893][T19002] netlink: 'syz.2.3093': attribute type 29 has an invalid length.
[ 1209.291087][ T5828] usb 1-1: Using ep0 maxpacket: 32
[ 1209.293792][ T5828] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1209.295178][ T5828] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1209.295219][ T5828] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1209.295261][ T5828] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1209.309228][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1209.309265][ T5828] usb 1-1: Product: syz
[ 1209.309291][ T5828] usb 1-1: Manufacturer: syz
[ 1209.309317][ T5828] usb 1-1: SerialNumber: syz
[ 1209.357785][ T5828] usb 1-1: config 0 descriptor??
[ 1209.509221][T19012] loop7: detected capacity change from 0 to 512
[ 1209.538339][T19012] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1209.584447][T19012] EXT4-fs (loop7): 1 truncate cleaned up
[ 1209.610555][T19012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1209.638274][T19015] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1209.664117][T19012] EXT4-fs (loop7): shut down requested (1)
[ 1209.858501][ T5828] gs_usb 1-1:0.0: Configuring for 63 interfaces
[ 1210.819604][ T5828] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[ 1210.851179][ T7072] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1210.915428][T19011] netlink: 'syz.9.3095': attribute type 29 has an invalid length.
[ 1211.168585][ T5828] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[ 1211.205759][ T5828] usb 1-1: USB disconnect, device number 3
[ 1211.234967][T19034] loop7: detected capacity change from 0 to 256
[ 1211.331353][T19034] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[ 1211.395671][ T5849] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1211.439945][   T31] audit: type=1800 audit(1791263758.514:51): pid=19034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3098" name="file1" dev="loop7" ino=1048910 res=0 errno=0
[ 1211.580808][ T5849] usb 3-1: Using ep0 maxpacket: 8
[ 1211.582932][ T5849] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 1211.592094][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1211.592133][ T5849] usb 3-1: Product: syz
[ 1211.592159][ T5849] usb 3-1: Manufacturer: syz
[ 1211.592186][ T5849] usb 3-1: SerialNumber: syz
[ 1211.626191][ T5849] usb 3-1: config 0 descriptor??
[ 1211.633434][  T187] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1211.649705][ T5849] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 1211.791878][  T187] usb 10-1: Using ep0 maxpacket: 32
[ 1211.792720][  T187] usb 10-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40
[ 1211.794259][  T187] usb 10-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[ 1211.794310][  T187] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1211.797588][  T187] usb 10-1: string descriptor 0 read error: -22
[ 1211.797734][  T187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1212.120858][T17926] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[ 1212.455669][T17926] usb 1-1: not running at top speed; connect to a high speed hub
[ 1212.455718][T17926] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[ 1212.588855][T17926] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1212.833790][T17926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1212.833867][T17926] usb 1-1: Product: syz
[ 1212.833894][T17926] usb 1-1: Manufacturer: syz
[ 1212.833921][T17926] usb 1-1: SerialNumber: syz
[ 1212.875580][T17926] oti6858 1-1:1.0: oti6858 converter detected
[ 1212.889883][T17926] usb 1-1: oti6858 converter now attached to ttyUSB0
[ 1212.929451][  T187] vrc2 0003:07C0:1125.0013: fixing up VRC-2 report descriptor
[ 1212.944770][  T187] input: HID 07c0:1125 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/0003:07C0:1125.0013/input/input71
[ 1212.972602][  T187] vrc2 0003:07C0:1125.0013: input,hidraw0: USB HID vff.7f Joystick [HID 07c0:1125] on usb-dummy_hcd.9-1/input0
[ 1213.040876][ T5849] gspca_sonixj: reg_w1 err -71
[ 1213.080949][ T5849] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[ 1213.084474][ T5849] usb 3-1: USB disconnect, device number 20
[ 1213.279833][T13408] usb 10-1: USB disconnect, device number 18
[ 1213.567591][T19051] netlink: 'syz.1.3107': attribute type 29 has an invalid length.
[ 1213.822745][T19062] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1213.822800][T19062] overlayfs: failed to set xattr on upper
[ 1213.822813][T19062] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1213.822827][T19062] overlayfs: ...falling back to index=off.
[ 1213.824066][T19062] overlayfs: maximum fs stacking depth exceeded
[ 1213.912774][ T5754] usb 1-1: USB disconnect, device number 4
[ 1213.947903][ T5754] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[ 1213.964317][ T5754] oti6858 1-1:1.0: device disconnected
[ 1215.100175][T13408] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1215.261125][T13408] usb 10-1: Using ep0 maxpacket: 16
[ 1215.261959][T13408] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1215.263345][T13408] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1215.263391][T13408] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1215.263427][T13408] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1215.263489][T13408] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1215.267774][T19070] FAULT_INJECTION: forcing a failure.
[ 1215.267774][T19070] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1215.267827][T19070] CPU: 0 UID: 0 PID: 19070 Comm: syz.0.3112 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1215.267881][T19070] Tainted: [L]=SOFTLOCKUP
[ 1215.267895][T19070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1215.267919][T19070] Call Trace:
[ 1215.267931][T19070]  <TASK>
[ 1215.267946][T19070]  dump_stack_lvl+0x100/0x190
[ 1215.268006][T19070]  should_fail_ex.cold+0x5/0xa
[ 1215.268049][T19070]  ? prepare_alloc_pages+0x16d/0x5b0
[ 1215.268099][T19070]  should_fail_alloc_page+0xeb/0x140
[ 1215.268151][T19070]  prepare_alloc_pages+0x1f0/0x5b0
[ 1215.268205][T19070]  __alloc_frozen_pages_noprof+0x1e9/0x3300
[ 1215.268271][T19070]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1215.268331][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.268386][T19070]  ? __pfx___css_rstat_updated+0x10/0x10
[ 1215.268445][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.268492][T19070]  ? __lock_acquire+0x5c0/0x1f40
[ 1215.268540][T19070]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1215.268611][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.268658][T19070]  ? __lock_acquire+0x5c0/0x1f40
[ 1215.268702][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.268759][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.268820][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.268866][T19070]  ? find_held_lock+0x2b/0x80
[ 1215.268920][T19070]  ? xa_load+0x149/0x2c0
[ 1215.268978][T19070]  ? xa_load+0x149/0x2c0
[ 1215.269033][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.269080][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.269126][T19070]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1215.269174][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.269220][T19070]  ? policy_nodemask+0xed/0x4f0
[ 1215.269271][T19070]  alloc_pages_mpol+0x201/0x550
[ 1215.269320][T19070]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1215.269364][T19070]  ? folio_memcg_list_lru_alloc+0x2ea/0x7d0
[ 1215.269438][T19070]  alloc_pages_noprof+0x1a/0x160
[ 1215.269492][T19070]  pte_alloc_one+0x1c/0x3d0
[ 1215.269556][T19070]  do_huge_pmd_anonymous_page+0x323/0x15b0
[ 1215.269630][T19070]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[ 1215.269686][T19070]  ? __pfx_do_huge_pmd_anonymous_page+0x10/0x10
[ 1215.269751][T19070]  ? pgd_none+0x9f/0xe0
[ 1215.269801][T19070]  ? __pfx_pgd_none+0x10/0x10
[ 1215.269850][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.269896][T19070]  ? find_held_lock+0x2b/0x80
[ 1215.269960][T19070]  __handle_mm_fault+0x2134/0x2f60
[ 1215.270022][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.270071][T19070]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1215.270130][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.270176][T19070]  ? __lock_acquire+0x5c0/0x1f40
[ 1215.270233][T19070]  ? pmdp_set_access_flags+0x12d/0x1a0
[ 1215.270291][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.270348][T19070]  handle_mm_fault+0x363/0xa20
[ 1215.270409][T19070]  __get_user_pages+0x8ae/0x2c30
[ 1215.270468][T19070]  ? __pfx___get_user_pages+0x10/0x10
[ 1215.270516][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.270578][T19070]  populate_vma_page_range+0x267/0x3f0
[ 1215.270626][T19070]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1215.270669][T19070]  ? __pfx_find_vma_intersection+0x10/0x10
[ 1215.270723][T19070]  __mm_populate+0x107/0x3a0
[ 1215.270768][T19070]  ? __pfx___mm_populate+0x10/0x10
[ 1215.270812][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.270861][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.270907][T19070]  ? up_write+0x2dc/0x5b0
[ 1215.270958][T19070]  do_mlock+0x3f0/0x800
[ 1215.271013][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.271058][T19070]  ? do_futex+0x190/0x440
[ 1215.271112][T19070]  ? __pfx_do_mlock+0x10/0x10
[ 1215.271163][T19070]  ? __pfx_do_futex+0x10/0x10
[ 1215.271220][T19070]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1215.271282][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.271329][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.271375][T19070]  ? __x64_sys_futex+0x358/0x4d0
[ 1215.271438][T19070]  __x64_sys_mlock+0xce/0x120
[ 1215.271495][T19070]  ? __pfx___x64_sys_mlock+0x10/0x10
[ 1215.271565][T19070]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1215.271620][T19070]  do_syscall_64+0x123/0x790
[ 1215.271676][T19070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1215.271717][T19070] RIP: 0033:0x7f101859e199
[ 1215.271747][T19070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1215.271785][T19070] RSP: 002b:00007f10167f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[ 1215.271822][T19070] RAX: ffffffffffffffda RBX: 00007f1018825fa0 RCX: 00007f101859e199
[ 1215.271848][T19070] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[ 1215.271873][T19070] RBP: 00007f10186358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1215.271898][T19070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1215.271921][T19070] R13: 00007f1018826038 R14: 00007f1018825fa0 R15: 00007fff9e280578
[ 1215.271974][T19070]  </TASK>
[ 1215.286625][T13408] usb 10-1: config 0 descriptor??
[ 1215.935417][T13408] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max
[ 1215.942290][T13408] microsoft 0003:045E:07DA.0014: unsupported Resolution Multiplier 0
[ 1216.117578][T13408] microsoft 0003:045E:07DA.0014: unsupported Resolution Multiplier 0
[ 1216.149545][T13408] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[ 1216.188277][T19072] netlink: 'syz.2.3114': attribute type 29 has an invalid length.
[ 1216.270613][T19082] block device autoloading is deprecated and will be removed.
[ 1216.271432][T19082] device-mapper: table: 248:0: thin-pool: Error getting data device (-EBUSY)
[ 1216.271465][T19082] device-mapper: ioctl: error adding target to table
[ 1216.408978][T19087] netlink: 'syz.1.3118': attribute type 3 has an invalid length.
[ 1216.409004][T19087] netlink: 'syz.1.3118': attribute type 1 has an invalid length.
[ 1216.409022][T19087] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3118'.
[ 1216.409047][T19087] NCSI netlink: No device for ifindex 2147483648
[ 1216.536579][ T5849] usb 10-1: USB disconnect, device number 19
[ 1216.679312][T19085] fido_id[19085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1218.679346][ T5754] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1218.762815][T13408] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1218.821554][ T5754] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1218.823058][ T5754] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1218.823125][ T5754] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1218.823174][ T5754] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59391, setting to 1024
[ 1218.825834][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.825873][ T5754] usb 1-1: Product: syz
[ 1218.825900][ T5754] usb 1-1: Manufacturer: syz
[ 1218.825927][ T5754] usb 1-1: SerialNumber: syz
[ 1218.911893][T13408] usb 4-1: New USB device found, idVendor=0499, idProduct=1020, bcdDevice= 0.40
[ 1218.913476][T13408] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64
[ 1218.918610][T13408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.918650][T13408] usb 4-1: Product: syz
[ 1218.918677][T13408] usb 4-1: Manufacturer: syz
[ 1218.918703][T13408] usb 4-1: SerialNumber: syz
[ 1218.921773][ T5754] cdc_ncm 1-1:1.0: skipping garbage
[ 1218.960570][T19095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1219.127181][T19094] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1219.300377][T19103] loop7: detected capacity change from 0 to 128
[ 1219.372959][T19103] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[ 1219.379812][T19103] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1219.418374][T13408] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1219.501135][T13408] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[ 1219.509287][T13408] usb 4-1: USB disconnect, device number 17
[ 1219.601409][T18429] udevd[18429]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1219.771116][T19094] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1219.836785][T19107] netlink: 'syz.9.3126': attribute type 29 has an invalid length.
[ 1219.840871][T17926] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1219.942647][ T7072] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1219.981571][ T5754] cdc_ncm 1-1:1.0: bind() failure
[ 1219.990838][T17926] usb 3-1: Using ep0 maxpacket: 32
[ 1220.006542][T17926] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1220.024489][T17926] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[ 1220.024529][T17926] usb 3-1: config 0 has no interface number 0
[ 1220.024586][T17926] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1220.024626][T17926] usb 3-1: config 0 interface 85 has no altsetting 0
[ 1220.027142][T17926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1220.027180][T17926] usb 3-1: Product: syz
[ 1220.027206][T17926] usb 3-1: Manufacturer: syz
[ 1220.027231][T17926] usb 3-1: SerialNumber: syz
[ 1220.108245][ T5754] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1220.110804][ T5754] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1220.118189][T17926] usb 3-1: config 0 descriptor??
[ 1220.121767][ T5754] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[ 1220.189960][ T5754] usb 1-1: USB disconnect, device number 5
[ 1220.785176][T17926] appletouch 3-1:0.85: Geyser mode initialized.
[ 1220.810949][T17926] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input72
[ 1221.004436][T17926] usb 3-1: USB disconnect, device number 21
[ 1221.102889][T17926] appletouch 3-1:0.85: input: appletouch disconnected
[ 1221.266784][T19127] netlink: 'syz.0.3134': attribute type 29 has an invalid length.
[ 1221.356338][T19135] IPv6: addrconf: prefix option has invalid lifetime
[ 1222.263764][T19155] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1222.264110][T19155] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1222.264365][T19155] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1222.453490][ T6823] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1222.854891][ T6823] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.107099][T19167] loop0: detected capacity change from 0 to 512
[ 1223.163634][ T6823] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.259701][T19167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1223.259853][T19167] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1223.280436][  T187] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[ 1223.464283][ T6823] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1223.486764][  T187] usb 2-1: not running at top speed; connect to a high speed hub
[ 1223.486808][  T187] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[ 1223.499774][  T187] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1223.527428][  T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.527469][  T187] usb 2-1: Product: syz
[ 1223.527495][  T187] usb 2-1: Manufacturer: syz
[ 1223.527522][  T187] usb 2-1: SerialNumber: syz
[ 1223.543391][ T4930] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1223.550032][ T4930] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1223.554656][ T4930] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1223.558249][ T4930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1223.559111][ T4930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1223.592159][  T187] oti6858 2-1:1.0: oti6858 converter detected
[ 1223.618638][  T187] usb 2-1: oti6858 converter now attached to ttyUSB0
[ 1223.890438][T17599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1224.116639][T19180] netlink: 'syz.9.3152': attribute type 29 has an invalid length.
[ 1224.281066][T11035] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1224.281116][T11035] Bluetooth: hci4: command 0x0406 tx timeout
[ 1224.281153][T11035] Bluetooth: hci6: command 0x0406 tx timeout
[ 1224.393657][ T6823] bridge_slave_1: left allmulticast mode
[ 1224.393695][ T6823] bridge_slave_1: left promiscuous mode
[ 1224.393976][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1224.412131][ T6823] bridge_slave_0: left allmulticast mode
[ 1224.412162][ T6823] bridge_slave_0: left promiscuous mode
[ 1224.412385][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1224.568079][ T5733] usb 2-1: USB disconnect, device number 14
[ 1224.649361][ T5733] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[ 1224.653088][ T5733] oti6858 2-1:1.0: device disconnected
[ 1224.903058][T19200] netlink: 'syz.9.3156': attribute type 29 has an invalid length.
[ 1225.639782][ T6823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1225.650431][ T4930] Bluetooth: hci0: command tx timeout
[ 1225.667613][ T6823] bond0 (unregistering): Released all slaves
[ 1225.789012][T19205] syzkaller1: entered promiscuous mode
[ 1225.789050][T19205] syzkaller1: entered allmulticast mode
[ 1225.953679][T19221] FAULT_INJECTION: forcing a failure.
[ 1225.953679][T19221] name failslab, interval 1, probability 0, space 0, times 0
[ 1225.953729][T19221] CPU: 0 UID: 0 PID: 19221 Comm: syz.1.3164 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1225.953773][T19221] Tainted: [L]=SOFTLOCKUP
[ 1225.953785][T19221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1225.953804][T19221] Call Trace:
[ 1225.953814][T19221]  <TASK>
[ 1225.953827][T19221]  dump_stack_lvl+0x100/0x190
[ 1225.953878][T19221]  should_fail_ex.cold+0x5/0xa
[ 1225.953914][T19221]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1225.953967][T19221]  should_failslab+0xc2/0x120
[ 1225.954008][T19221]  __kmalloc_node_track_caller_noprof+0xfa/0x870
[ 1225.954068][T19221]  ? setup_ipc_sysctls+0x5e/0x300
[ 1225.954118][T19221]  kmemdup_noprof+0x29/0x60
[ 1225.954164][T19221]  setup_ipc_sysctls+0x5e/0x300
[ 1225.954211][T19221]  copy_ipcs+0x57a/0x7e0
[ 1225.954266][T19221]  create_new_namespaces+0x20a/0xac0
[ 1225.954304][T19221]  ? security_capable+0x80/0x260
[ 1225.954359][T19221]  unshare_nsproxy_namespaces+0xf2/0x220
[ 1225.954405][T19221]  ksys_unshare+0x4a2/0xa70
[ 1225.954444][T19221]  ? __pfx_ksys_unshare+0x10/0x10
[ 1225.954479][T19221]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1225.954534][T19221]  __x64_sys_unshare+0x31/0x40
[ 1225.954571][T19221]  do_syscall_64+0x123/0x790
[ 1225.954620][T19221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1225.954653][T19221] RIP: 0033:0x7f803f79e199
[ 1225.954679][T19221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1225.954712][T19221] RSP: 002b:00007f80405aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1225.954745][T19221] RAX: ffffffffffffffda RBX: 00007f803fa25fa0 RCX: 00007f803f79e199
[ 1225.954768][T19221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600
[ 1225.954788][T19221] RBP: 00007f803f8358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1225.954810][T19221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1225.954831][T19221] R13: 00007f803fa26038 R14: 00007f803fa25fa0 R15: 00007ffd831c56d8
[ 1225.954874][T19221]  </TASK>
[ 1226.602136][T17926] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[ 1226.783843][T17926] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[ 1226.787567][T17926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1226.787616][T17926] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1226.787651][T17926] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1226.787680][T17926] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1226.787715][T17926] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1226.787752][T17926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1227.047302][T17926] usb 2-1: config 0 descriptor??
[ 1227.227375][ T6823] hsr_slave_0: left promiscuous mode
[ 1227.250468][ T6823] hsr_slave_1: left promiscuous mode
[ 1227.254958][ T6823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1227.254982][ T6823] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1227.296260][ T6823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1227.296291][ T6823] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1227.319030][ T6823] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1227.375624][ T6823] veth1_macvtap: left allmulticast mode
[ 1227.375692][ T6823] veth1_macvtap: left promiscuous mode
[ 1227.375736][ T6823] veth0_macvtap: left promiscuous mode
[ 1227.375895][ T6823] veth1_vlan: left promiscuous mode
[ 1227.376013][ T6823] veth0_vlan: left promiscuous mode
[ 1227.456397][T19236] netlink: 'syz.2.3168': attribute type 29 has an invalid length.
[ 1227.648661][T17926] logitech-djreceiver 0003:046D:C53A.0015: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0
[ 1227.721926][ T4930] Bluetooth: hci0: command tx timeout
[ 1227.748097][T19256] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1228.275115][ T5733] usb 2-1: USB disconnect, device number 15
[ 1228.480929][T13408] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[ 1228.490695][ T5849] usb 10-1: new full-speed USB device number 20 using dummy_hcd
[ 1228.553413][ T6823] team0 (unregistering): Port device team_slave_1 removed
[ 1228.577889][ T6823] team0 (unregistering): Port device team_slave_0 removed
[ 1228.632259][T13408] usb 8-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[ 1228.634162][T13408] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[ 1228.634226][T13408] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1228.634358][T13408] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 1228.634403][T13408] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[ 1228.634447][T13408] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24929, setting to 1024
[ 1228.634495][T13408] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[ 1228.634536][T13408] usb 8-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[ 1228.638132][T13408] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1228.638170][T13408] usb 8-1: Product: syz
[ 1228.638197][T13408] usb 8-1: Manufacturer: syz
[ 1228.638224][T13408] usb 8-1: SerialNumber: syz
[ 1228.642840][ T5849] usb 10-1: not running at top speed; connect to a high speed hub
[ 1228.642880][ T5849] usb 10-1: New USB device found, idVendor=046d, idProduct=152d, bcdDevice=ef.8f
[ 1228.642929][ T5849] usb 10-1: too many configurations: 241, using maximum allowed: 8
[ 1228.643634][ T5849] usb 10-1: config 0 has no interfaces?
[ 1228.644284][ T5849] usb 10-1: config 0 has no interfaces?
[ 1228.644921][ T5849] usb 10-1: config 0 has no interfaces?
[ 1228.645620][ T5849] usb 10-1: config 0 has no interfaces?
[ 1228.646264][ T5849] usb 10-1: config 0 has no interfaces?
[ 1228.646958][ T5849] usb 10-1: config 0 has no interfaces?
[ 1228.647631][ T5849] usb 10-1: config 0 has no interfaces?
[ 1228.648323][ T5849] usb 10-1: config 0 has no interfaces?
[ 1228.651114][ T5849] usb 10-1: New USB device strings: Mfr=179, Product=45, SerialNumber=160
[ 1228.651153][ T5849] usb 10-1: Product: syz
[ 1228.651179][ T5849] usb 10-1: Manufacturer: syz
[ 1228.651204][ T5849] usb 10-1: SerialNumber: syz
[ 1228.694289][ T5849] usb 10-1: config 0 descriptor??
[ 1228.695551][T19274] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1228.695758][T19274] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1228.696002][T19274] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1228.696188][T19274] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1228.712451][T13408] keyspan 8-1:1.0: Keyspan 1 port adapter converter detected
[ 1228.713175][T13408] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[ 1228.727573][T13408] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 82
[ 1228.729667][T13408] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[ 1228.765666][T13408] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1229.213532][ T5849] usb 10-1: USB disconnect, device number 20
[ 1229.348163][T19281] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1229.354774][T13408] usb 8-1: USB disconnect, device number 17
[ 1229.395152][T13408] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1229.414480][T13408] keyspan 8-1:1.0: device disconnected
[ 1229.519582][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1229.520034][T19175] lo speed is unknown, defaulting to 1000
[ 1229.802879][ T4930] Bluetooth: hci0: command tx timeout
[ 1230.158539][T19300] hsr0: entered allmulticast mode
[ 1230.158570][T19300] hsr_slave_0: entered allmulticast mode
[ 1230.158592][T19300] hsr_slave_1: entered allmulticast mode
[ 1230.166475][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3184'.
[ 1230.211664][ T6823] IPVS: stop unused estimator thread 0...
[ 1230.232254][T19300] hsr_slave_0: left promiscuous mode
[ 1230.249538][T19300] hsr_slave_1: left promiscuous mode
[ 1231.444917][T19303] netlink: 'syz.9.3185': attribute type 29 has an invalid length.
[ 1231.881818][ T4930] Bluetooth: hci0: command tx timeout
[ 1232.246340][T19175] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1232.246553][T19175] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1232.246723][T19175] bridge_slave_0: entered allmulticast mode
[ 1232.282208][T19175] bridge_slave_0: entered promiscuous mode
[ 1232.303684][T19175] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1232.303882][T19175] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1232.304045][T19175] bridge_slave_1: entered allmulticast mode
[ 1232.332670][T19175] bridge_slave_1: entered promiscuous mode
[ 1234.835952][T19175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1234.904493][T19175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1234.942559][T19357] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3190'.
[ 1235.051469][T19357] netlink: 'syz.7.3190': attribute type 1 has an invalid length.
[ 1235.051501][T19357] netlink: 'syz.7.3190': attribute type 2 has an invalid length.
[ 1235.199838][T19175] team0: Port device team_slave_0 added
[ 1235.212674][T19175] team0: Port device team_slave_1 added
[ 1235.276356][T19175] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1235.276381][T19175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1235.276428][T19175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1235.278609][T19175] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1235.278631][T19175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1235.278677][T19175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1235.706875][T19175] hsr_slave_0: entered promiscuous mode
[ 1235.708222][T19175] hsr_slave_1: entered promiscuous mode
[ 1235.740404][T19175] debugfs: 'hsr0' already exists in 'hsr'
[ 1235.740436][T19175] Cannot create hsr debugfs directory
[ 1235.986488][T19372] block nbd0: shutting down sockets
[ 1236.751360][ T5747] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1236.899270][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1236.904659][ T5747] usb 10-1: Using ep0 maxpacket: 32
[ 1236.906137][ T5747] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1236.907524][ T5747] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1236.907577][ T5747] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1236.907633][ T5747] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1236.941296][ T5747] usb 10-1: config 0 descriptor??
[ 1236.953159][ T5747] hub 10-1:0.0: USB hub found
[ 1237.014503][T19385] FAULT_INJECTION: forcing a failure.
[ 1237.014503][T19385] name failslab, interval 1, probability 0, space 0, times 0
[ 1237.014562][T19385] CPU: 1 UID: 0 PID: 19385 Comm: syz.0.3201 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1237.014617][T19385] Tainted: [L]=SOFTLOCKUP
[ 1237.014631][T19385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1237.014655][T19385] Call Trace:
[ 1237.014667][T19385]  <TASK>
[ 1237.014682][T19385]  dump_stack_lvl+0x100/0x190
[ 1237.014744][T19385]  should_fail_ex.cold+0x5/0xa
[ 1237.014792][T19385]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1237.014847][T19385]  should_failslab+0xc2/0x120
[ 1237.014894][T19385]  __kmalloc_cache_noprof+0x91/0x6d0
[ 1237.014952][T19385]  ? alloc_ucounts+0x13d/0x5c0
[ 1237.015013][T19385]  alloc_ucounts+0x13d/0x5c0
[ 1237.015074][T19385]  ? __pfx_alloc_ucounts+0x10/0x10
[ 1237.015132][T19385]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1237.015187][T19385]  set_cred_ucounts+0xcd/0x200
[ 1237.015256][T19385]  __sys_setuid+0x2a8/0x440
[ 1237.015299][T19385]  do_syscall_64+0x123/0x790
[ 1237.015356][T19385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.015396][T19385] RIP: 0033:0x7f101859e199
[ 1237.015426][T19385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1237.015464][T19385] RSP: 002b:00007f10167f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069
[ 1237.015501][T19385] RAX: ffffffffffffffda RBX: 00007f1018825fa0 RCX: 00007f101859e199
[ 1237.015526][T19385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[ 1237.015550][T19385] RBP: 00007f10186358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1237.015575][T19385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1237.015598][T19385] R13: 00007f1018826038 R14: 00007f1018825fa0 R15: 00007fff9e280578
[ 1237.015651][T19385]  </TASK>
[ 1237.288704][ T5747] hub 10-1:0.0: 1 port detected
[ 1237.351607][T19382] netlink: 'syz.7.3200': attribute type 29 has an invalid length.
[ 1237.630950][T17926] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[ 1237.760942][T19397] FAULT_INJECTION: forcing a failure.
[ 1237.760942][T19397] name failslab, interval 1, probability 0, space 0, times 0
[ 1237.760997][T19397] CPU: 0 UID: 0 PID: 19397 Comm: syz.7.3205 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1237.761049][T19397] Tainted: [L]=SOFTLOCKUP
[ 1237.761062][T19397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1237.761085][T19397] Call Trace:
[ 1237.761098][T19397]  <TASK>
[ 1237.761110][T19397]  dump_stack_lvl+0x100/0x190
[ 1237.761161][T19397]  should_fail_ex.cold+0x5/0xa
[ 1237.761201][T19397]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1237.761252][T19397]  should_failslab+0xc2/0x120
[ 1237.761293][T19397]  __kvmalloc_node_noprof+0x113/0x9b0
[ 1237.761352][T19397]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[ 1237.761408][T19397]  ? io_uring_setup.cold+0x1f4/0x1cde
[ 1237.761474][T19397]  io_uring_setup.cold+0x1f4/0x1cde
[ 1237.761539][T19397]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1237.761580][T19397]  ? find_held_lock+0x2b/0x80
[ 1237.761637][T19397]  ? __pfx_io_uring_setup+0x10/0x10
[ 1237.761689][T19397]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1237.761724][T19397]  ? do_futex+0x190/0x440
[ 1237.761767][T19397]  ? __pfx_do_futex+0x10/0x10
[ 1237.761824][T19397]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1237.761859][T19397]  ? xfd_validate_state+0x129/0x190
[ 1237.761899][T19397]  __x64_sys_io_uring_setup+0xc2/0x170
[ 1237.761948][T19397]  do_syscall_64+0x123/0x790
[ 1237.761991][T19397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.762023][T19397] RIP: 0033:0x7f4be319e199
[ 1237.762046][T19397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1237.762075][T19397] RSP: 002b:00007f4be3fd6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1237.762104][T19397] RAX: ffffffffffffffda RBX: 0000200000000180 RCX: 00007f4be319e199
[ 1237.762124][T19397] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000000000000020
[ 1237.762142][T19397] RBP: 00007f4be32358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1237.762161][T19397] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000040
[ 1237.762179][T19397] R13: 0000200000000140 R14: 0000200000000000 R15: 00007ffdb942cf58
[ 1237.762217][T19397]  </TASK>
[ 1237.803786][T17926] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1237.805238][T17926] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1237.805281][T17926] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1237.836050][T17926] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1237.836090][T17926] usb 2-1: Product: syz
[ 1237.836116][T17926] usb 2-1: Manufacturer: syz
[ 1237.836142][T17926] usb 2-1: SerialNumber: syz
[ 1237.901131][T11854] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1237.908239][T17926] usb 2-1: config 0 descriptor??
[ 1237.989771][T17926] usb 2-1: selecting invalid altsetting 0
[ 1237.993901][ T5754] hub 10-1:0.0: activate --> -90
[ 1238.043890][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.043956][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.073909][T11854] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[ 1238.076999][T11854] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1238.077063][T11854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1238.374476][T11854] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device
[ 1238.378255][T17926] usb 2-1: USB disconnect, device number 16
[ 1238.449061][ T5754] usb 10-1-port1: connect-debounce failed
[ 1238.454045][ T5754] usb 10-1-port1: cannot disable (err = -71)
[ 1238.479882][ T5754] usb 10-1: USB disconnect, device number 21
[ 1238.482604][  T992] usb 10-1: Failed to suspend device, error -71
[ 1238.526585][T11854] wwan wwan0: port wwan0qmi0 attached
[ 1238.812959][T19406] udevd[19406]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1238.830041][T11854] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 8a:89:16:45:f7:da
[ 1238.840261][T11854] usb 1-1: USB disconnect, device number 6
[ 1238.859183][T11854] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device
[ 1240.305323][T11854] wwan wwan0: port wwan0qmi0 disconnected
[ 1240.404565][T19436] 
[ 1240.406541][T19435] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1240.413677][T19436] ======================================================
[ 1240.420693][T19436] WARNING: possible circular locking dependency detected
[ 1240.427741][T19436] syzkaller #0 Tainted: G             L     
[ 1240.433723][T19436] ------------------------------------------------------
[ 1240.440739][T19436] syz.9.3213/19436 is trying to acquire lock:
[ 1240.446803][T19436] ffff88803ba080b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110
[ 1240.455990][T19436] 
[ 1240.455990][T19436] but task is already holding lock:
[ 1240.463353][T19436] ffffffff90f871a0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0
[ 1240.472372][T19436] 
[ 1240.472372][T19436] which lock already depends on the new lock.
[ 1240.472372][T19436] 
[ 1240.482767][T19436] 
[ 1240.482767][T19436] the existing dependency chain (in reverse order) is:
[ 1240.491771][T19436] 
[ 1240.491771][T19436] -> #2 (rfcomm_mutex){+.+.}-{4:4}:
[ 1240.499176][T19436]        lock_acquire+0x1d1/0x380
[ 1240.504211][T19436]        __mutex_lock+0x1a4/0x1bd0
[ 1240.509338][T19436]        rfcomm_security_cfm+0x3f/0x4b0
[ 1240.514895][T19436]        hci_encrypt_cfm+0x18e/0x740
[ 1240.520202][T19436]        hci_encrypt_change_evt+0x3e1/0xfb0
[ 1240.526124][T19436]        hci_event_packet+0x8e9/0xcd0
[ 1240.531498][T19436]        hci_rx_work+0x451/0xfc0
[ 1240.536467][T19436]        process_one_work+0xac7/0x1b10
[ 1240.541949][T19436]        worker_thread+0x5ef/0xe50
[ 1240.547081][T19436]        kthread+0x373/0x450
[ 1240.551688][T19436]        ret_from_fork+0x730/0xd60
[ 1240.556806][T19436]        ret_from_fork_asm+0x1a/0x30
[ 1240.562100][T19436] 
[ 1240.562100][T19436] -> #1 (hci_cb_list_lock){+.+.}-{4:4}:
[ 1240.569858][T19436]        lock_acquire+0x1d1/0x380
[ 1240.574894][T19436]        __mutex_lock+0x1a4/0x1bd0
[ 1240.580032][T19436]        hci_remote_features_evt+0x485/0x9b0
[ 1240.586045][T19436]        hci_event_packet+0x8e9/0xcd0
[ 1240.591424][T19436]        hci_rx_work+0x451/0xfc0
[ 1240.596395][T19436]        process_one_work+0xac7/0x1b10
[ 1240.601879][T19436]        worker_thread+0x5ef/0xe50
[ 1240.607017][T19436]        kthread+0x373/0x450
[ 1240.611632][T19436]        ret_from_fork+0x730/0xd60
[ 1240.616753][T19436]        ret_from_fork_asm+0x1a/0x30
[ 1240.622041][T19436] 
[ 1240.622041][T19436] -> #0 (&hdev->lock){+.+.}-{4:4}:
[ 1240.629380][T19436]        check_prev_add+0xeb/0xe60
[ 1240.634499][T19436]        __lock_acquire+0x1528/0x1f40
[ 1240.639879][T19436]        lock_acquire+0x1d1/0x380
[ 1240.644908][T19436]        __mutex_lock+0x1a4/0x1bd0
[ 1240.650035][T19436]        l2cap_chan_connect+0xac/0x2110
[ 1240.655590][T19436]        l2cap_sock_connect+0x37a/0x770
[ 1240.661151][T19436]        kernel_connect+0x107/0x160
[ 1240.666356][T19436]        rfcomm_dlc_open+0x838/0xac0
[ 1240.671650][T19436]        rfcomm_sock_connect+0x42c/0x690
[ 1240.677302][T19436]        __sys_connect_file+0x146/0x1a0
[ 1240.682869][T19436]        __sys_connect+0x141/0x170
[ 1240.688002][T19436]        __x64_sys_connect+0x72/0xb0
[ 1240.693314][T19436]        do_syscall_64+0x123/0x790
[ 1240.698451][T19436]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1240.704872][T19436] 
[ 1240.704872][T19436] other info that might help us debug this:
[ 1240.704872][T19436] 
[ 1240.715091][T19436] Chain exists of:
[ 1240.715091][T19436]   &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex
[ 1240.715091][T19436] 
[ 1240.727635][T19436]  Possible unsafe locking scenario:
[ 1240.727635][T19436] 
[ 1240.735096][T19436]        CPU0                    CPU1
[ 1240.740454][T19436]        ----                    ----
[ 1240.745808][T19436]   lock(rfcomm_mutex);
[ 1240.749968][T19436]                                lock(hci_cb_list_lock);
[ 1240.756995][T19436]                                lock(rfcomm_mutex);
[ 1240.763674][T19436]   lock(&hdev->lock);
[ 1240.767748][T19436] 
[ 1240.767748][T19436]  *** DEADLOCK ***
[ 1240.767748][T19436] 
[ 1240.775879][T19436] locks held by syz.9.3213/19436: 1, last CPU#1:
[ 1240.782202][T19436]  #0: ffffffff90f871a0 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0
[ 1240.791564][T19436] 
[ 1240.791564][T19436] stack backtrace:
[ 1240.797477][T19436] CPU: 1 UID: 0 PID: 19436 Comm: syz.9.3213 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1240.808427][T19436] Tainted: [L]=SOFTLOCKUP
[ 1240.812742][T19436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026
[ 1240.822795][T19436] Call Trace:
[ 1240.826072][T19436]  <TASK>
[ 1240.828996][T19436]  dump_stack_lvl+0x100/0x190
[ 1240.833697][T19436]  print_circular_bug.cold+0x178/0x1be
[ 1240.839188][T19436]  check_noncircular+0x146/0x160
[ 1240.844140][T19436]  check_prev_add+0xeb/0xe60
[ 1240.848737][T19436]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1240.854386][T19436]  __lock_acquire+0x1528/0x1f40
[ 1240.859257][T19436]  lock_acquire+0x1d1/0x380
[ 1240.863768][T19436]  ? l2cap_chan_connect+0xac/0x2110
[ 1240.868976][T19436]  ? __pfx___might_resched+0x10/0x10
[ 1240.874292][T19436]  __mutex_lock+0x1a4/0x1bd0
[ 1240.878901][T19436]  ? l2cap_chan_connect+0xac/0x2110
[ 1240.884106][T19436]  ? l2cap_chan_connect+0xac/0x2110
[ 1240.889311][T19436]  ? hci_get_route+0x368/0x520
[ 1240.894081][T19436]  ? hci_get_route+0x368/0x520
[ 1240.898859][T19436]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1240.904529][T19436]  ? __pfx___mutex_lock+0x10/0x10
[ 1240.909575][T19436]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1240.915221][T19436]  ? _raw_read_unlock+0x28/0x50
[ 1240.920085][T19436]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1240.925730][T19436]  ? hci_get_route+0x368/0x520
[ 1240.930502][T19436]  ? __pfx_hci_get_route+0x10/0x10
[ 1240.935626][T19436]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1240.941274][T19436]  ? reacquire_held_locks+0xdd/0x1f0
[ 1240.946572][T19436]  ? release_sock+0x21/0x280
[ 1240.951169][T19436]  ? l2cap_chan_connect+0xac/0x2110
[ 1240.956374][T19436]  l2cap_chan_connect+0xac/0x2110
[ 1240.961412][T19436]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1240.967083][T19436]  ? __local_bh_enable_ip+0xa5/0x120
[ 1240.972378][T19436]  l2cap_sock_connect+0x37a/0x770
[ 1240.977447][T19436]  ? __pfx_l2cap_sock_connect+0x10/0x10
[ 1240.983010][T19436]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1240.988663][T19436]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1240.994483][T19436]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1241.000131][T19436]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1241.005952][T19436]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1241.011608][T19436]  kernel_connect+0x107/0x160
[ 1241.016298][T19436]  ? __pfx_kernel_connect+0x10/0x10
[ 1241.021514][T19436]  ? timer_init_key+0x150/0x310
[ 1241.026383][T19436]  rfcomm_dlc_open+0x838/0xac0
[ 1241.031164][T19436]  ? __pfx_rfcomm_dlc_open+0x10/0x10
[ 1241.036462][T19436]  ? rfcomm_sock_connect+0x3e8/0x690
[ 1241.041765][T19436]  ? find_held_lock+0x2b/0x80
[ 1241.046466][T19436]  ? rfcomm_sock_connect+0x3e8/0x690
[ 1241.051771][T19436]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1241.057417][T19436]  ? __local_bh_enable_ip+0xa5/0x120
[ 1241.062714][T19436]  rfcomm_sock_connect+0x42c/0x690
[ 1241.067849][T19436]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1241.073498][T19436]  __sys_connect_file+0x146/0x1a0
[ 1241.078552][T19436]  __sys_connect+0x141/0x170
[ 1241.083166][T19436]  ? __pfx___sys_connect+0x10/0x10
[ 1241.088317][T19436]  __x64_sys_connect+0x72/0xb0
[ 1241.093105][T19436]  ? lockdep_hardirqs_on+0x7d/0x110
[ 1241.098321][T19436]  do_syscall_64+0x123/0x790
[ 1241.102934][T19436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1241.108839][T19436] RIP: 0033:0x7efe4899e199
[ 1241.113254][T19436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1241.132870][T19436] RSP: 002b:00007efe497e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1241.141312][T19436] RAX: ffffffffffffffda RBX: 00007efe48c25fa0 RCX: 00007efe4899e199
[ 1241.149286][T19436] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000004
[ 1241.157256][T19436] RBP: 00007efe48a358e0 R08: 0000000000000000 R09: 0000000000000000
[ 1241.165225][T19436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1241.173195][T19436] R13: 00007efe48c26038 R14: 00007efe48c25fa0 R15: 00007ffd9e925328
[ 1241.181181][T19436]  </TASK>
[ 1241.633169][T19443] netlink: 'syz.7.3216': attribute type 29 has an invalid length.
[ 1241.675943][ T5275] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1241.932719][T19175] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1241.954072][T19175] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1241.958015][T19175] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1241.986988][T19175] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1241.987929][T19175] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1242.006010][T19175] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1242.008402][T19175] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1242.025273][T19175] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1242.105037][T19175] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1242.118829][T19175] 8021q: adding VLAN 0 to HW filter on device team0
[ 1242.135289][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1242.135370][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1242.159231][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1242.159314][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1242.418788][ T5275] 8021q: adding VLAN 0 to HW filter on device eth4
[ 1242.625053][T19175] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1242.898800][T19175] veth0_vlan: entered promiscuous mode
[ 1242.907087][T19175] veth1_vlan: entered promiscuous mode
[ 1242.937108][T19175] veth0_macvtap: entered promiscuous mode
[ 1242.941302][T19175] veth1_macvtap: entered promiscuous mode
[ 1242.954624][T19175] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1242.962815][T19175] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1242.981989][  T992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.982845][  T992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.982904][  T992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.982960][  T992] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1243.017260][T19175] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht'
[ 1243.052671][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1243.052699][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1243.058463][T19175] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht'
[ 1243.086465][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1243.086492][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50