last executing test programs:

8m8.073165695s ago: executing program 2 (id=3):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x2)
fchdir(r3)
symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlink(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)

8m7.858775347s ago: executing program 2 (id=9):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0)
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x50, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0xff, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x2, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0x64}}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xf, 0x1f, {0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "ad0e475b86ce0000000000004b7feda5"}, @ptm_cap={0x3}]}}, 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

8m4.98852361s ago: executing program 2 (id=14):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

8m4.839880081s ago: executing program 2 (id=15):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0x9c, 0x7f, 0x7}, 0x9c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @empty, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast1, 0x8}, 0x1c)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000200)={<r5=>r4})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x8040)
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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")
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400", @ANYRES16=r7, @ANYBLOB="2000256dbd7000fb"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0)

8m3.814962108s ago: executing program 2 (id=17):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005560ebd70000000000000000000", @ANYRES32=r3, @ANYBLOB="12030000000800000a000100aaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r5 = accept$packet(r2, 0x0, 0x0)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000680)=@req={0xce, 0xe31e, 0x1, 0xc54d}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
fsopen(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}}, 0x884)

8m3.384538676s ago: executing program 2 (id=19):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
dup3(r1, r0, 0x80000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x4)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}])

8m3.033148078s ago: executing program 32 (id=19):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
dup3(r1, r0, 0x80000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x4)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}])

45.023605803s ago: executing program 1 (id=2396):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0x9c, 0x7f, 0x7}, 0x9c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @empty, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast1, 0x8}, 0x1c)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000200)={<r5=>r4})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x8040)
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=")
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400", @ANYRES16=r7, @ANYBLOB="2000256dbd7000fb"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0)

40.853348112s ago: executing program 1 (id=2402):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

39.631985907s ago: executing program 1 (id=2404):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[@ANYBLOB="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"], 0x3, 0x5505, &(0x7f0000000340)="$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")
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./file2\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000080))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8d0010, 0x0, 0x40, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x147142, 0x40)
write$UHID_INPUT(r1, 0x0, 0x0)

35.642495055s ago: executing program 1 (id=2411):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chroot(&(0x7f0000000a40)='./file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10000, &(0x7f00000002c0)={[], [], 0x2c})

30.744866297s ago: executing program 1 (id=2419):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90873a"}, &(0x7f0000000300)=ANY=[@ANYBLOB="2083"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$uac2(r2, 0x0, 0x0)

30.31257435s ago: executing program 1 (id=2425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
pivot_root(&(0x7f0000000000)='./file0\x00', 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x112, 0x2200)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r3, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000080))
readv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000100))
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

29.36074185s ago: executing program 33 (id=2425):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
pivot_root(&(0x7f0000000000)='./file0\x00', 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x112, 0x2200)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r3, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000080))
readv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000100))
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

20.975619085s ago: executing program 3 (id=2444):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[@ANYBLOB="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"], 0x3, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000e)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./file2\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000080))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8d0010, 0x0, 0x40, 0x0, &(0x7f00000000c0))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x147142, 0x40)
write$UHID_INPUT(r1, 0x0, 0x0)

17.487364679s ago: executing program 6 (id=2455):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0x9c, 0x7f, 0x7}, 0x9c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @empty, 0x2}, 0x1c)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast1, 0x8}, 0x1c)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000200)={<r5=>r4})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x8040)
mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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")
r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
write$binfmt_register(r6, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0)

17.420141024s ago: executing program 3 (id=2456):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff000000", 0x46}], 0x1)

17.112681699s ago: executing program 3 (id=2457):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @discrete={0x1, 0x3}})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/\xd15)\xeatn\xa3\x88\x13i\xb6\x7ft\x95\xd7\x01o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x94\x00\x00\x00\x00\x00\x00\x00g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xef\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xba\xec\x99@\xd2\t\n\xb1o', 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x80, 0x0, 0x4, 0xfffd, 0x25, 0x8000, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x0, 0x7fffffff, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000001, 0x9, 0x4, 0x2d57, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x400c, 0x0, 0x3]})
close(0x3)
close(0x3)

16.111925765s ago: executing program 0 (id=2459):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x88}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)

15.946840912s ago: executing program 3 (id=2460):
socket$nl_netfilter(0x10, 0x3, 0xc)
userfaultfd(0x80001)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pipe2$9p(&(0x7f0000002200), 0x0)
pselect6(0x40, &(0x7f0000000240)={0x3, 0xb400, 0xfffffffffffffff1, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000007, 0xb06c}, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)

15.754645311s ago: executing program 6 (id=2461):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000052000100fcffffff0000000002"], 0x1c}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
syz_emit_ethernet(0x1a, &(0x7f0000000100)=ANY=[], 0x0)

15.148658447s ago: executing program 6 (id=2462):
syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a81400810000000800471800300064000004069078e00000017f00000186060000000200004e204e23a1c8fcf65d5c7faed61dde35645e3f4f224049b8ff8e27258e84480ea140664eebeccf1ff866e322e91451b0ba2ea22d589e8ab26f9baf4aa92b5faca748785e487cd5975b2a85ba", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af64", 0x3b}], 0x1}}], 0x1, 0x20000044)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

14.866317788s ago: executing program 0 (id=2463):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
writev(r1, &(0x7f00000000c0)=[{&(0x7f00000006c0)="273eebfecb7c0e923301b61c42cb1d11f43ba3c213961990f536b1211d58311d00bdab2a3d983b065a56a247fdec0e46e138b28fbe6affa6", 0x38}, {0x0}], 0x2)
accept4(r0, 0x0, 0x0, 0x800)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000500", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB="080026006c0900000800a000070000000800a0000100000008009f000600000008009f002acc2a21080035000500000004000a0024006e8004000200040001000400"], 0x74}, 0x1, 0x0, 0x0, 0x24040840}, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x6, 0x1, 0xd, 0x9, 0x0, 0x5, 0x2, 0x4}, &(0x7f0000000040)={0x8, 0x0, 0x3, 0x7fffffff, 0x7fffffff, 0x9, 0xfffffffffffffff7, 0x8001}, 0x0, &(0x7f00000001c0), 0x0)
r6 = dup(r5)
r7 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000200)={0x90000009})
write$P9_RSTATFS(r6, &(0x7f0000000100)={0x43, 0x9, 0x5, {0x569142f7, 0x4, 0x1db, 0x0, 0x81, 0x1, 0x7, 0x1fd, 0x8}}, 0x43)
ioctl$TCSETS(r5, 0x40045431, &(0x7f00000001c0)={0x0, 0x3, 0xff, 0x6, 0x8, "0062637d820700000000000000000000096304"})
ppoll(&(0x7f0000000540)=[{r6, 0x2}, {r7, 0x40a9}, {r6, 0x2}], 0x3, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f0000000600)={[0x2b6b]}, 0x8)
r8 = syz_open_pts(r5, 0x80)
dup3(r8, r5, 0x80000)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000003c0)={0x20001003, 0x4, 0xfffefffe, 0x400c, 0x9, "4698ddc1220200cf0000002c0100", 0xfffffffe, 0xdc2})
read(r5, &(0x7f0000000400)=""/227, 0xe3)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000140))
syz_emit_ethernet(0x46, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

14.769024431s ago: executing program 3 (id=2464):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00')
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x7, 0x2, @SEQ_CONTROLLER=0xfe, 0x10, 0x7, 0x8b})
fsmount(0xffffffffffffffff, 0x0, 0x85)
landlock_restrict_self(0xffffffffffffffff, 0x5)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2, 0xb}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00')
read$FUSE(r3, &(0x7f00000004c0)={0x2020}, 0x2020)

13.231727213s ago: executing program 6 (id=2466):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

12.250092225s ago: executing program 0 (id=2468):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff000000", 0x46}], 0x1)

11.869825797s ago: executing program 0 (id=2470):
socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

10.588674525s ago: executing program 0 (id=2472):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x2}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
ptrace(0x10, 0x0)
ptrace$peekuser(0x3, 0x0, 0x4)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x2, 0x1fe, 0x15})
ioctl$TIOCMSET(r2, 0x5418, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x3a, 0x5d, 0x40, 0x5f9, 0xffff, 0x619f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xbd, 0x0, 0x10, 0x2, "", [{{0x9, 0x4, 0x7f, 0xc7, 0x0, 0xff, 0x2, 0xc1, 0x6}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105200, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x64}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a58000000060a010400000000000000000a0000010900010073797a31000000000900020073797a32000000002c00048010000180090001006d617371000000001800018008000100666962000c0002800800024000000001"], 0x80}, 0x1, 0x0, 0x0, 0x44000846}, 0x24040840)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

9.892706779s ago: executing program 4 (id=2474):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x88}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)

9.601773707s ago: executing program 6 (id=2475):
request_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c"], 0x54}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

9.601358468s ago: executing program 5 (id=2476):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2)
ftruncate(r1, 0xffff)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf)
fcntl$addseals(r1, 0x409, 0x3)
close(0x3)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000})
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f21"], 0x0)
write$char_usb(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

8.962190753s ago: executing program 4 (id=2477):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
pivot_root(&(0x7f0000000000)='./file0\x00', 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x112, 0x2200)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000080))
readv(r4, &(0x7f0000000080)=[{0x0}], 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x2)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, &(0x7f0000000100))
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

7.321939476s ago: executing program 5 (id=2478):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x4, 0xb, 0x3}, 0x2f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40)
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006", 0x14}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9ebd712fe8efb9018244f4f28", 0x30}], 0x2}, 0x8000)

7.276237543s ago: executing program 6 (id=2479):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x84}], 0x1, 0x3ff)
sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x8040, 0x0, 0x0)
listen(0xffffffffffffffff, 0xda90)
getxattr(&(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000400)=""/254, 0xfe)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x7ff, 0xfa11, 0xff7fffff}, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1451c2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x10, @loopback, 0x80000}, 0x2e)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c00)={0x14, &(0x7f0000000ac0)={0x20, 0x4, 0x53, {0x53, 0x2, "d6cad23fb933daccf712fdccfef892b8141e05ca8624a8843961eae9cdff2ba0447c6a6ac2a9d6235188f41247fa018ef22405125f94fe798e71f63ebfa007cf22b4d50fac6429c3fbf1a128c01414d6ba"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000b80)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, 'hM'}, @main=@item_012={0x1, 0x0, 0xa, '$'}, @main=@item_012={0x2, 0x0, 0x9, "ecfc"}]}}, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x272}}}}, &(0x7f0000000e00)={0x18, &(0x7f0000000c40)={0x40, 0x5, 0x51, "710e44b1ac2b5be6a621a9a7a3838e9d24b175f708b5a83daab98359c291f7c15a30312849dea751320d38d42ada585d45b1aa9da6794278bf1c89e03d211d28d4a2b840fbf60b8ce870e28245ae156223"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x1, 0x6a, "d1ab51975d5f002f31807e83159ca3b62a5fd7cdc18f1d8208b65aae6ff7afa1d0f04ed029c9e3ca37a225662753737d4b55480b97c7c3dd84396536803353059ef489aaeb1e97b6584c85203bb1a79969111ab7a43b0e6d350ae62f1c2420c09d946d626cc82765d213"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1, 0x9}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000f80)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0x1, 0x4, 0x9, 0x1, 0x4, 0x7, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0x10, 0x6, 0x3, 0x9, 0x804d7e, 0xff, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd9, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x48, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x1000, 0x1a9e1bfc, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x6ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x4, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x6, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x3, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x1000, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000180))

6.082298541s ago: executing program 4 (id=2480):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netlink(r3, 0x10e, 0xa, &(0x7f0000000040)=""/44, 0x0)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0xc400941b, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r4 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffe, 0x235})
setresuid(0xee00, 0xee00, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5)

4.433940904s ago: executing program 4 (id=2481):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90873a"}, &(0x7f0000000300)=ANY=[@ANYBLOB="2083"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$uac2(r1, 0x0, 0x0)

3.961981528s ago: executing program 5 (id=2482):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/226, 0xe2}, 0x718}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

3.518231929s ago: executing program 3 (id=2483):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x84}], 0x1, 0x3ff)
sendto$inet(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x8040, 0x0, 0x0)
listen(0xffffffffffffffff, 0xda90)
getxattr(&(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000400)=""/254, 0xfe)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x7ff, 0xfa11, 0xff7fffff}, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1451c2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x10, @loopback, 0x80000}, 0x2e)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000c00)={0x14, &(0x7f0000000ac0)={0x20, 0x4, 0x53, {0x53, 0x2, "d6cad23fb933daccf712fdccfef892b8141e05ca8624a8843961eae9cdff2ba0447c6a6ac2a9d6235188f41247fa018ef22405125f94fe798e71f63ebfa007cf22b4d50fac6429c3fbf1a128c01414d6ba"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000b80)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0xc, 'hM'}, @main=@item_012={0x1, 0x0, 0xa, '$'}, @main=@item_012={0x2, 0x0, 0x9, "ecfc"}]}}, &(0x7f0000000bc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x272}}}}, &(0x7f0000000e00)={0x18, &(0x7f0000000c40)={0x40, 0x5, 0x51, "710e44b1ac2b5be6a621a9a7a3838e9d24b175f708b5a83daab98359c291f7c15a30312849dea751320d38d42ada585d45b1aa9da6794278bf1c89e03d211d28d4a2b840fbf60b8ce870e28245ae156223"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d40)={0x20, 0x1, 0x6a, "d1ab51975d5f002f31807e83159ca3b62a5fd7cdc18f1d8208b65aae6ff7afa1d0f04ed029c9e3ca37a225662753737d4b55480b97c7c3dd84396536803353059ef489aaeb1e97b6584c85203bb1a79969111ab7a43b0e6d350ae62f1c2420c09d946d626cc82765d213"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1, 0x9}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000f80)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0x1, 0x4, 0x9, 0x1, 0x4, 0x7, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0x10, 0x6, 0x3, 0x9, 0x804d7e, 0xff, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd9, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x48, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x1000, 0x1a9e1bfc, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x6ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x4, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x6, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x3, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x1000, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})
ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000180))

2.532244715s ago: executing program 5 (id=2484):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socketpair(0x2b, 0x2, 0x2c, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140))
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000003c0)={0xffffffffffffff3d, 0x0, 0x0})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
close(0xffffffffffffffff)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)

2.165417612s ago: executing program 4 (id=2485):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000052000100fcffffff0000000002"], 0x1c}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0xce, r0}, 0x38)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
syz_emit_ethernet(0x1a, &(0x7f0000000100)=ANY=[], 0x0)

1.917157416s ago: executing program 0 (id=2486):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x806, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x34004014)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x4, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
clock_adjtime(0x6, &(0x7f0000000e00)={0xfffffffffffffffe, 0x80000000000000, 0xa6, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x7fffffff, 0x0, 0x0, 0x8000, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x80000001, 0x30, 0x80000001, 0x0, 0x1, 0x6, 0x5, 0xfff, 0xfffffffffffffffd, 0xfffffffffffffdff})
r2 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc4c85513, &(0x7f0000000040)={0x9, 0x2, 0x7, 0x0, 'syz0\x00', 0x33})

1.411877205s ago: executing program 5 (id=2487):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @discrete={0x1, 0x3}})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
r2 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/\xd15)\xeatn\xa3\x88\x13i\xb6\x7ft\x95\xd7\x01o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x94\x00\x00\x00\x00\x00\x00\x00g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xef\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xba\xec\x99@\xd2\t\n\xb1o', 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x80, 0x0, 0x4, 0xfffd, 0x25, 0x8000, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x0, 0x7fffffff, 0xfffffff7, 0x400001, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000001, 0x9, 0x4, 0x2d57, 0x20001e5b, 0x3, 0xe66, 0x3, 0x6, 0x400c, 0x0, 0x3]})
close(0x3)
close(0x3)

1.108027686s ago: executing program 4 (id=2488):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==")
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$eJzs3T9rZFUUAPDzZiaTFy0miI0i+EALq7DR0iZRVhBSCWNjY3BnQWaGhSwMuKJxq/0CWi6Cn8LWztpvIGgp2GWLyJP3L5PnzoTHhiQSfr8mN/fec+959w6T6p18/sZ8eu9BEo9Pfo80TaK3F3vxLInt6EXjuzgJAOD2eJbn8XceERvV70nnyEHv6rICAK5S9fe/ctO5AADX48+f3vtm/+Dg7idZlsZroyeLcRIR8yeLcTW+fz++jFlM4k6M4jQiP1O1P/r44G4MssJ2vD0/XowXrfX3/4qtMn43RrG9On43q9Tx44ji50a8FFns399olhrFq6vj310RH+NhvPPWufx3YhS/fREPYhb3oohdxn+7m2Uf5j+cfP1ZsU0Rn/RivFnOq21F5P1ruxQAAAAAAAAAAAAAAAAAAAAAAG69nSxLqvI9Zf2eoquuv9M/Lcd3ssZ2uz5PFX9WL7iqD5RHXaLnOI+nTX2dO1mW5fXEZfwgXh/E4GaeGgAAAAAAAAAAAAAAAAAAAP5fHn71aHo4m02OXrwxf1otNT2cNdUAmtf6X3TlvUkvmp4349H0sL9+wc3ue52vNlDkeuHkGAziMsfSuRG/bBX5rJnzY51v3dPvfqqby8v9tA5vLuaSOaetj80rH5xlmNVzmkOeHibVXutzTpuhn88PDaNzPknS6invdjY5ysuDOs3bd5q2DnM5NFy3xfdJ+cHucizF1QxfXjn0T57n3R7n/T+qO6p7krLERrfb2agbKx+waKTP3/uv6xdc+5XRv9QXDgAAAAAAAAAAAAAAAAAAsFb7xen/eHxhaO/KkgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAa7b8//9NI42Ids9zjeM6+KI5dWMYRw/bO27dxGMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0bAAD///9/QUk=")
io_setup(0x6, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chroot(&(0x7f0000000a40)='./file0\x00')
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80)
syz_open_dev$tty1(0xc, 0x4, 0x1)
getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011)
pipe2(0x0, 0x80000)
io_submit(0x0, 0x0, 0x0)

0s ago: executing program 5 (id=2489):
bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10)
fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

kernel console output (not intermixed with test programs):

.560268][T11500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.604684][T11500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.633753][ T5790] usb 7-1: USB disconnect, device number 48
[  411.675018][   T29] usbhid 5-1:0.0: can't add hid device: -71
[  411.709869][   T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  411.754514][   T29] usb 5-1: USB disconnect, device number 57
[  413.055643][ T4990]  loop3: p1 < > p3
[  413.081826][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  414.228505][T11568] serio: Serial port ttyS3
[  414.882497][ T5779] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  414.989297][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  416.275690][ T4990]  loop4: p1 < > p3
[  416.314761][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  416.379008][  T993] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  416.560285][ T5634] usb 4-1: new low-speed USB device number 34 using dummy_hcd
[  416.573406][  T993] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  416.675048][  T993] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  416.749383][  T993] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  416.767747][ T5634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  416.812683][  T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.839697][ T5634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  416.899792][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2010'.
[  416.913412][T11576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  416.926541][ T5634] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  416.990533][ T5634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.060648][ T5634] usb 4-1: config 0 descriptor??
[  417.066253][  T993] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  417.338042][T11582] syzkaller0: entered promiscuous mode
[  417.388900][T11582] syzkaller0: entered allmulticast mode
[  417.627817][ T5634] aquacomputer_d5next 0003:0C70:F0B6.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.3-1/input0
[  419.583893][ T4990]  loop3: p1 < > p3
[  419.627587][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  419.807521][ T5779] usb 4-1: USB disconnect, device number 34
[  420.083627][ T5634] usb 1-1: USB disconnect, device number 43
[  420.195580][ T4990]  loop0: p1 < > p3
[  420.204972][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  421.181982][ T4990]  loop0: p1 < > p3
[  421.193280][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  421.917893][ T4990]  loop3: p1 < > p3
[  421.942403][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  422.091326][ T4990]  loop4: p1 < > p3
[  422.111821][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  422.253561][ T4990]  loop3: p1 < > p3
[  422.266450][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  422.349374][ T4990]  loop0: p1 < > p3
[  422.353739][  T993] usb 7-1: new low-speed USB device number 50 using dummy_hcd
[  422.369061][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  422.464119][ T4990]  loop3: p1 < > p3
[  422.479681][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  422.525073][  T805] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  422.541124][  T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  422.570913][  T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  422.590366][  T993] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  422.619342][  T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.654452][  T993] usb 7-1: config 0 descriptor??
[  422.682051][ T4990]  loop4: p1 < > p3
[  422.709963][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  422.733747][  T805] usb 1-1: config 1 interface 0 has no altsetting 0
[  422.762650][  T805] usb 1-1: string descriptor 0 read error: -22
[  422.780930][  T805] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40
[  422.820599][  T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.867287][T11649] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2033'.
[  423.162079][  T993] aquacomputer_d5next 0003:0C70:F0B6.0016: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0
[  423.313868][   T29] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  423.591664][T11655] serio: Serial port ttyS3
[  425.457795][  T805] usbhid 1-1:1.0: can't add hid device: -71
[  425.482522][  T805] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  425.498918][   T29] usb 4-1: Using ep0 maxpacket: 32
[  425.523727][   T29] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7
[  425.596899][  T805] usb 1-1: USB disconnect, device number 44
[  425.634325][   T29] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  425.677792][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.713751][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2036'.
[  425.727174][   T29] usb 4-1: Product: syz
[  425.764220][   T29] usb 4-1: Manufacturer: syz
[  425.800744][   T29] usb 4-1: SerialNumber: syz
[  426.149055][ T5792] usb 7-1: USB disconnect, device number 50
[  426.232092][ T4990]  loop0: p1 < > p3
[  426.271598][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  426.505566][ T4990]  loop4: p1 < > p3
[  426.544173][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  426.775948][ T4990]  loop0: p1 < > p3
[  426.816574][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  427.001978][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'.
[  427.090365][ T4990]  loop4: p1 < > p3
[  427.112009][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  427.347855][ T4990]  loop4: p1 < > p3
[  427.375399][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  427.806104][  T805] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  428.011179][  T805] usb 2-1: Using ep0 maxpacket: 16
[  428.075446][  T805] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  428.109601][ T4990]  loop4: p1 < > p3
[  428.150407][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  428.162728][  T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  428.224807][  T805] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  428.260088][  T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.316167][  T805] usb 2-1: Product: syz
[  428.334789][  T805] usb 2-1: Manufacturer: syz
[  428.355593][  T805] usb 2-1: SerialNumber: syz
[  428.400480][ T5748] usb 7-1: new low-speed USB device number 51 using dummy_hcd
[  428.411059][  T805] usb 2-1: config 0 descriptor??
[  428.452353][  T805] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  428.485066][  T805] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  428.521706][  T993] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  428.595882][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  428.646620][   T29] usb 4-1: can't set config #1, error -71
[  428.653865][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.703349][   T29] usb 4-1: USB disconnect, device number 35
[  428.715382][ T5748] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  428.738867][  T993] usb 5-1: config 1 interface 0 has no altsetting 0
[  428.759184][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.783456][ T4990]  loop3: p1 < > p3
[  428.786415][  T993] usb 5-1: string descriptor 0 read error: -22
[  428.797994][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  428.808301][ T5748] usb 7-1: config 0 descriptor??
[  428.815302][  T993] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40
[  428.852226][  T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.244420][T11720] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2056'.
[  429.320455][ T5748] aquacomputer_d5next 0003:0C70:F0B6.0017: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.6-1/input0
[  429.601369][  T993] usbhid 5-1:1.0: can't add hid device: -71
[  429.669122][  T993] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  429.723310][  T993] usb 5-1: USB disconnect, device number 58
[  430.024733][  T805] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  430.064790][  T805] em28xx 2-1:0.0: Config register raw data: 0x41
[  430.319474][ T4990]  loop4: p1 < > p3
[  430.398749][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  430.651429][T11742] syzkaller0: entered promiscuous mode
[  430.696063][T11742] syzkaller0: entered allmulticast mode
[  430.764720][ T4990]  loop0: p1 < > p3
[  430.797981][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  431.122450][ T4990]  loop4: p1 < > p3
[  431.153564][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  431.963297][   T29] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  432.379608][  T993] usb 7-1: USB disconnect, device number 51
[  433.327444][   T29] usb 1-1: Using ep0 maxpacket: 16
[  433.364738][   T29] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  433.410463][   T29] usb 1-1: config 0 interface 0 has no altsetting 0
[  433.436036][ T4990]  loop4: p1 < > p3
[  433.438512][   T29] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  433.468138][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  433.473306][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2068'.
[  433.494149][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.590786][   T29] usb 1-1: config 0 descriptor??
[  433.591244][  T993] usb 2-1: USB disconnect, device number 41
[  433.665110][  T993] em28xx 2-1:0.0: Disconnecting em28xx
[  433.725065][  T993] em28xx 2-1:0.0: Freeing device
[  433.809339][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2070'.
[  433.947008][ T4990]  loop4: p1 < > p3
[  433.971975][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  434.037990][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2070'.
[  434.136138][   T29] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  434.459567][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2070'.
[  434.727025][T11755] input: syz1 as /devices/virtual/input/input23
[  434.908848][ T4990]  loop3: p1 < > p3
[  434.943374][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  435.104650][T11755] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2064'.
[  435.583911][  T805] usb 2-1: new low-speed USB device number 42 using dummy_hcd
[  435.723867][   T29] usb 1-1: USB disconnect, device number 45
[  435.775519][  T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  435.845162][  T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.886268][  T805] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  435.891940][ T4990]  loop0: p1 < > p3
[  435.932823][  T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.954455][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  436.004688][  T805] usb 2-1: config 0 descriptor??
[  436.147316][T11818] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2081'.
[  436.244633][ T5748] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  436.549093][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2081'.
[  436.629060][ T5748] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  436.663135][  T805] aquacomputer_d5next 0003:0C70:F0B6.0019: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0
[  436.697827][ T5748] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  436.769526][ T5748] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  436.838405][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.864393][  T805] usb 2-1: USB disconnect, device number 42
[  436.885691][ T4990]  loop0: p1 < > p3
[  436.927277][T11814] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  436.972978][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  437.058291][ T5748] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  437.096948][T11826] fido_id[11826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  437.611814][  T805] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[  437.868240][  T805] usb 7-1: Using ep0 maxpacket: 8
[  437.899519][  T805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15
[  437.949863][  T805] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  438.024865][  T805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  438.062550][  T805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  438.117871][  T805] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  438.131552][ T4990]  loop0: p1 < > p3
[  438.136237][  T805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.148836][  T805] usb 7-1: Product: syz
[  438.153311][  T805] usb 7-1: Manufacturer: syz
[  438.161305][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  438.175324][  T805] usb 7-1: SerialNumber: syz
[  438.230887][  T805] usb 7-1: config 0 descriptor??
[  438.262168][T11836] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  438.416240][T11842] syzkaller0: entered promiscuous mode
[  438.445695][T11842] syzkaller0: entered allmulticast mode
[  438.541683][  T805] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  438.555064][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2088'.
[  438.600833][  T805] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24
[  438.731620][ T4990]  loop4: p1 < > p3
[  438.775021][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  439.068433][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2088'.
[  439.132034][ T5634] usb 7-1: USB disconnect, device number 52
[  439.132366][    C1] powermate: config urb returned -71
[  439.143262][    C1] powermate: usb_submit_urb(config) failed
[  439.143500][    C1] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  440.041284][T11859] serio: Serial port ttyS3
[  441.425501][ T4990]  loop4: p1 < > p3
[  441.548998][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  442.144406][ T4990]  loop4: p1 < > p3
[  442.177020][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  442.414160][ T4990]  loop4: p1 < > p3
[  442.457641][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  442.732104][ T4990]  loop0: p1 < > p3
[  442.798662][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  442.991751][ T4990]  loop4: p1 < > p3
[  443.038495][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  443.136478][ T5634] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  443.352508][ T5634] usb 5-1: config 1 interface 0 has no altsetting 0
[  443.380631][ T5634] usb 5-1: string descriptor 0 read error: -22
[  443.414865][ T4990]  loop0: p1 < > p3
[  443.420835][ T5634] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40
[  443.442719][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  443.453190][ T5634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.692573][  T993] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  443.918368][  T993] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  443.986864][  T993] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  444.033633][ T4990]  loop0: p1 < > p3
[  444.040377][  T993] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  444.064046][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  444.076368][  T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.102912][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2103'.
[  444.145118][T11892] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  444.185464][  T993] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  444.202806][ T5634] usbhid 5-1:1.0: can't add hid device: -71
[  444.240963][ T5634] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  444.318814][ T5634] usb 5-1: USB disconnect, device number 59
[  444.557724][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2103'.
[  445.456005][ T4990]  loop0: p1 < > p3
[  445.493373][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  445.667311][  T805] usb 4-1: USB disconnect, device number 36
[  445.846128][ T4990]  loop3: p1 < > p3
[  445.890381][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  446.081955][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2108'.
[  446.158595][ T4990]  loop4: p1 < > p3
[  446.174148][T11926] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2107'.
[  446.240475][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  446.537354][T11929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2107'.
[  446.558171][T11933] syzkaller0: entered promiscuous mode
[  446.575619][ T4990]  loop0: p1 < > p3
[  446.587178][T11933] syzkaller0: entered allmulticast mode
[  446.595971][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  446.778832][ T4990]  loop4: p1 < > p3
[  446.808625][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  447.145329][ T4990]  loop0: p1 < > p3
[  447.166797][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  447.587879][ T5634] usb 2-1: USB disconnect, device number 43
[  448.944419][T11961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2119'.
[  449.086042][T11961] netlink: 'syz.1.2119': attribute type 10 has an invalid length.
[  449.132536][T11961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2119'.
[  449.181903][T11961] dummy0: entered promiscuous mode
[  450.460654][ T4990]  loop3: p1 < > p3
[  450.492679][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  452.819922][ T4990]  loop3: p1 < > p3
[  452.834478][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  453.854401][ T4990]  loop4: p1 < > p3
[  454.075729][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  454.661900][ T4990]  loop3: p1 < > p3
[  454.668528][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  455.103985][ T4990]  loop0: p1 < > p3
[  455.301845][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  455.340970][T12008] serio: Serial port ttyS3
[  455.502056][T12001] binfmt_misc: register: failed to install interpreter file ./file2
[  455.829967][ T4990]  loop0: p1 < > p3
[  455.846073][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  455.890481][T12022] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.2139'.
[  455.971846][ T4990]  loop0: p1 < > p3
[  456.096325][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  456.177081][ T4990]  loop3: p1 < > p3
[  456.207695][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  456.471272][ T4990]  loop3: p1 < > p3
[  456.493759][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  457.676271][T12055] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2146'.
[  457.900350][ T4990]  loop0: p1 < > p3
[  457.930867][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  458.019568][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2146'.
[  458.163663][ T4990]  loop0: p1 < > p3
[  458.200956][ T5634] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  458.202932][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  458.358991][ T4990]  loop4: p1 < > p3
[  458.378292][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  458.420665][ T5634] usb 1-1: config 0 has no interfaces?
[  458.431098][ T5634] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  458.460975][ T5634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.498480][ T5634] usb 1-1: config 0 descriptor??
[  458.597021][ T4990]  loop3: p1 < > p3
[  458.616656][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  458.679184][ T4990]  loop4: p1 < > p3
[  458.705885][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  458.727480][  T188] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  458.765785][T12077] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2155'.
[  458.782966][T12058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.966114][T12058] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.011863][T12080] serio: Serial port ttyS3
[  459.021143][ T5748] usb 1-1: USB disconnect, device number 46
[  459.039819][  T188] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  459.064642][  T188] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  459.077864][  T188] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  459.087385][  T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.241859][ T5764] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  459.279835][T12072] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  459.371584][  T188] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  459.465236][ T5764] usb 4-1: Using ep0 maxpacket: 32
[  459.502510][ T5764] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  459.557946][ T5764] usb 4-1: config 0 interface 0 has no altsetting 0
[  459.577821][ T5764] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  459.595851][  T805] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  459.624592][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.761219][ T5764] usb 4-1: config 0 descriptor??
[  459.840887][  T805] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  459.870083][  T805] usb 1-1: config 220 has an invalid descriptor of length 134, skipping remainder of the config
[  459.912099][  T805] usb 1-1: config 220 has no interface number 2
[  459.935379][  T805] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  460.019678][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.039786][  T805] usb 1-1: config 220 interface 0 has no altsetting 0
[  460.073620][  T805] usb 1-1: config 220 interface 76 has no altsetting 0
[  460.095377][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.126950][  T805] usb 1-1: config 220 interface 1 has no altsetting 0
[  460.134181][T12089] syzkaller0: entered promiscuous mode
[  460.134205][T12089] syzkaller0: entered allmulticast mode
[  460.166720][  T188] usb 2-1: USB disconnect, device number 44
[  460.220328][  T805] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  460.280962][  T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.344748][  T805] usb 1-1: Product: syz
[  460.365516][  T805] usb 1-1: Manufacturer: syz
[  460.378477][  T805] usb 1-1: SerialNumber: syz
[  460.704981][ T4990]  loop4: p1 < > p3
[  460.738884][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  460.739346][  T805] usb 1-1: selecting invalid altsetting 0
[  460.785080][ T5764] corsair-psu 0003:1B1C:1C09.001A: unknown main item tag 0x0
[  460.805521][  T805] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  460.826361][ T5764] corsair-psu 0003:1B1C:1C09.001A: unknown main item tag 0x0
[  460.850893][  T805] uvcvideo 1-1:220.0: No valid video chain found.
[  460.868573][ T5764] corsair-psu 0003:1B1C:1C09.001A: unknown main item tag 0x0
[  460.922891][ T5764] corsair-psu 0003:1B1C:1C09.001A: unknown main item tag 0x0
[  460.940759][  T805] usb 1-1: selecting invalid altsetting 0
[  460.965902][ T5764] corsair-psu 0003:1B1C:1C09.001A: unknown main item tag 0x0
[  460.973504][  T805] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  461.047532][ T5764] corsair-psu 0003:1B1C:1C09.001A: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0
[  461.071590][  T805] usb 1-1: USB disconnect, device number 47
[  461.245268][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  461.256889][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  461.517305][ T5764] corsair-psu 0003:1B1C:1C09.001A: unable to initialize device (-110)
[  461.572119][ T4990]  loop0: p1 < > p3
[  461.599402][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  461.600535][ T5764] corsair-psu 0003:1B1C:1C09.001A: probe with driver corsair-psu failed with error -110
[  461.748387][ T5764] usb 4-1: USB disconnect, device number 37
[  462.000842][  T188] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  462.234297][  T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.280090][  T188] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  462.335913][  T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.424906][T12117] loop6: detected capacity change from 0 to 4096
[  462.468267][  T188] usb 1-1: config 0 descriptor??
[  462.569127][T12117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  462.742945][  T188] usbhid 1-1:0.0: can't add hid device: -71
[  462.789493][  T188] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  462.819742][T12117] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  462.866480][  T188] usb 1-1: USB disconnect, device number 48
[  462.932329][T12130] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  463.249044][ T5924] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.381131][  T188] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  463.587176][  T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  463.629574][  T188] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  463.675008][ T5634] usb 7-1: new high-speed USB device number 53 using dummy_hcd
[  463.691252][  T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.865145][  T188] usb 1-1: config 0 descriptor??
[  463.892914][ T5634] usb 7-1: Using ep0 maxpacket: 16
[  463.916529][ T5634] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  463.955283][ T5634] usb 7-1: config 0 has no interface number 0
[  463.972572][ T5634] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  464.025522][ T5634] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  464.099436][ T5634] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  464.131382][ T5634] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.172239][ T5634] usb 7-1: Product: syz
[  464.210745][ T5634] usb 7-1: Manufacturer: syz
[  464.215744][ T5634] usb 7-1: SerialNumber: syz
[  464.243324][ T5634] usb 7-1: config 0 descriptor??
[  464.272374][T12134] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  464.292095][T12134] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  464.359994][  T188] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0
[  464.408869][  T188] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0
[  464.430654][  T188] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0
[  464.431245][T12136] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2170'.
[  464.470166][  T188] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0
[  464.485000][  T188] logitech-djreceiver 0003:046D:C71F.001B: unknown main item tag 0x0
[  464.538864][T12134] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  464.547089][  T188] logitech-djreceiver 0003:046D:C71F.001B: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0
[  464.563057][T12115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.580577][T12134] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  464.599494][T12115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.740882][  T188] usb 1-1: USB disconnect, device number 49
[  465.325217][ T4990]  loop0: p1 < > p3
[  465.352455][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  465.697110][T12141] serio: Serial port ttyS3
[  465.964628][ T4990]  loop0: p1 < > p3
[  465.980499][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  466.155408][ T5634] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  466.177244][ T5634] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  466.203534][ T5634] asix 7-1:0.34: probe with driver asix failed with error -71
[  466.221988][ T4990]  loop0: p1 < > p3
[  466.231667][ T5634] usb 7-1: USB disconnect, device number 53
[  466.241539][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  466.327068][ T4990]  loop0: p1 < > p3
[  466.341072][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  466.370267][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2176'.
[  466.691594][  T805] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  466.750986][T12147] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2174'.
[  466.859501][  T805] usb 1-1: Using ep0 maxpacket: 16
[  466.867446][  T805] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  466.890601][  T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  466.903846][  T805] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  466.913103][  T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.921118][  T805] usb 1-1: Product: syz
[  466.929306][  T805] usb 1-1: Manufacturer: syz
[  466.933931][  T805] usb 1-1: SerialNumber: syz
[  466.944617][  T805] usb 1-1: config 0 descriptor??
[  466.968623][  T805] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  466.978017][  T805] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  467.584836][ T4990]  loop4: p1 < > p3
[  467.598822][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  467.620891][  T805] em28xx 1-1:0.0: chip ID is em2874
[  467.708994][ T4990]  loop3: p1 < > p3
[  467.723601][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  469.971028][T12165] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2178'.
[  470.261546][T12183] fuse: Bad value for 'fd'
[  470.300620][ T5764] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  470.482141][ T5764] usb 2-1: Using ep0 maxpacket: 32
[  470.522661][ T5764] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7
[  470.563773][ T5764] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  470.743447][T12188] serio: Serial port ttyS3
[  470.771353][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.781858][ T5764] usb 2-1: Product: syz
[  470.786396][ T5764] usb 2-1: Manufacturer: syz
[  470.791282][ T5764] usb 2-1: SerialNumber: syz
[  471.100630][ T5634] usb 1-1: USB disconnect, device number 50
[  471.136738][ T4990]  loop4: p1 < > p3
[  471.157610][ T5634] em28xx 1-1:0.0: Disconnecting em28xx
[  471.170881][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  471.335803][ T5634] em28xx 1-1:0.0: Freeing device
[  471.417156][ T4990]  loop0: p1 < > p3
[  471.439458][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  471.637202][ T4990]  loop4: p1 < > p3
[  471.670107][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  471.765810][T12200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2191'.
[  471.827426][ T4990]  loop0: p1 < > p3
[  471.860770][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  471.876455][T12202] netlink: 'syz.0.2191': attribute type 10 has an invalid length.
[  471.910919][T12202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2191'.
[  471.987154][T12202] dummy0: entered promiscuous mode
[  472.551114][T12207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'.
[  472.635479][T12207] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.647999][T12209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2194'.
[  472.887510][ T4990]  loop3: p1 < > p3
[  472.904226][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  473.145805][  T188] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  473.208332][ T5634] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  473.614077][  T188] usb 5-1: Using ep0 maxpacket: 16
[  473.621184][ T5634] usb 4-1: Using ep0 maxpacket: 16
[  473.650952][  T188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  473.665093][ T5634] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  473.696348][ T5764] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  473.714342][  T188] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  473.725278][ T5634] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  473.746118][T12191] loop6: detected capacity change from 0 to 40427
[  473.766145][  T188] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  473.782096][ T5634] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  473.804285][  T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.814758][ T5634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.828443][  T188] usb 5-1: Product: syz
[  473.846744][  T188] usb 5-1: Manufacturer: syz
[  473.862475][ T5634] usb 4-1: config 0 descriptor??
[  473.871936][T12191] F2FS-fs: heap/no_heap options were deprecated
[  473.886757][  T188] usb 5-1: SerialNumber: syz
[  473.907921][T12224] loop1: detected capacity change from 0 to 256
[  473.951703][ T5634] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  473.968004][T12191] F2FS-fs (loop6): build fault injection rate: 19
[  473.977435][  T188] usb 5-1: config 0 descriptor??
[  474.020801][T12191] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  474.053915][T12191] F2FS-fs (loop6): invalid crc value
[  474.097934][ T5764] usb 2-1: USB disconnect, device number 45
[  474.120022][T12191] f2fs_printk: 3 callbacks suppressed
[  474.120043][T12191] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  474.217366][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  474.363530][T12191] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  474.411727][T12191] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  474.429573][T12191] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  475.133719][ T4990]  loop0: p1 < > p3
[  475.155819][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  475.396980][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2201'.
[  475.472435][ T5764] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  475.643781][ T5764] usb 1-1: Using ep0 maxpacket: 16
[  475.661332][ T5764] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.700509][ T5764] usb 1-1: config 0 interface 0 has no altsetting 0
[  475.723006][ T5764] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  475.742022][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.771162][ T5764] usb 1-1: config 0 descriptor??
[  475.963960][ T5634] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[  476.099907][T11713] usb 5-1: USB disconnect, device number 60
[  476.135037][ T5634] usb 7-1: Using ep0 maxpacket: 16
[  476.153470][ T5634] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  476.193513][ T4990]  loop4: p1 < > p3
[  476.203241][ T5634] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  476.223539][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  476.255165][ T5634] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  476.257004][ T5748] usb 4-1: USB disconnect, device number 38
[  476.294245][ T5764] nzxt-smart2 0003:1E71:2009.001C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  476.312764][ T5634] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.374665][ T5634] usb 7-1: Product: syz
[  476.388438][ T4990]  loop3: p1 < > p3
[  476.401888][ T5634] usb 7-1: Manufacturer: syz
[  476.409035][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  476.418647][ T5634] usb 7-1: SerialNumber: syz
[  476.459065][ T5634] usb 7-1: config 0 descriptor??
[  476.484721][ T5634] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  476.510927][ T5634] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  476.562713][ T4990]  loop4: p1 < > p3
[  476.597968][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  476.847061][T12249] input: syz1 as /devices/virtual/input/input25
[  477.795895][ T5634] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  477.830706][ T5634] em28xx 7-1:0.0: Config register raw data: 0x41
[  478.169676][ T4990]  loop3: p1 < > p3
[  478.174439][T12249] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2206'.
[  478.197184][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  478.445629][  T188] usb 1-1: USB disconnect, device number 51
[  478.751321][ T4990]  loop0: p1 < > p3
[  478.766083][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  479.050102][ T4990]  loop3: p1 < > p3
[  479.081100][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  479.096015][T12285] serio: Serial port ttyS3
[  479.221867][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'.
[  479.264297][ T4990]  loop0: p1 < > p3
[  479.288034][T12288] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2218'.
[  479.309592][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  479.362598][ T5748] usb 7-1: USB disconnect, device number 54
[  479.402381][ T5748] em28xx 7-1:0.0: Disconnecting em28xx
[  479.440454][ T5748] em28xx 7-1:0.0: Freeing device
[  479.487491][ T4990]  loop3: p1 < > p3
[  479.505558][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  479.599605][ T5764] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  479.617555][ T4990]  loop4: p1 < > p3
[  479.633417][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  479.770234][ T4990]  loop0: p1 < > p3
[  479.790943][ T5764] usb 4-1: config 0 has no interfaces?
[  479.807622][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  479.822968][ T5764] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  479.870799][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.894555][T11713] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  479.938606][ T5764] usb 4-1: config 0 descriptor??
[  480.199061][T12292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.252670][ T4990]  loop4: p1 < > p3
[  480.258904][T12292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.277885][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  480.288484][ T5634] usb 4-1: USB disconnect, device number 39
[  480.293117][T11713] usb 1-1: Using ep0 maxpacket: 16
[  480.335538][ T5764] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  480.452270][T11713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  480.643640][T11713] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  480.677671][ T5764] usb 2-1: Using ep0 maxpacket: 16
[  480.813654][ T5764] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  481.336931][ T5764] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  481.350863][ T5764] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  481.359977][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.381881][T11713] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  481.417982][T11713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.471964][ T5764] usb 2-1: config 0 descriptor??
[  481.482793][T11713] usb 1-1: Product: syz
[  481.518415][T11713] usb 1-1: Manufacturer: syz
[  481.537343][T12295] loop6: detected capacity change from 0 to 32768
[  481.554639][ T5764] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  481.581851][T11713] usb 1-1: SerialNumber: syz
[  481.679741][T11713] usb 1-1: config 0 descriptor??
[  481.784389][T12295] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  482.345225][T12293] syz.5.2219: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  482.500913][T12293] CPU: 0 UID: 0 PID: 12293 Comm: syz.5.2219 Not tainted syzkaller #0 PREEMPT(full) 
[  482.500947][T12293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  482.500962][T12293] Call Trace:
[  482.500972][T12293]  <TASK>
[  482.500983][T12293]  dump_stack_lvl+0xe8/0x150
[  482.501026][T12293]  warn_alloc+0x24c/0x270
[  482.501060][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  482.501089][T12293]  ? stack_depot_save_flags+0x33/0x800
[  482.501123][T12293]  ? __pfx_warn_alloc+0x10/0x10
[  482.501156][T12293]  ? kasan_save_track+0x3e/0x80
[  482.501187][T12293]  ? __kasan_kmalloc+0x93/0xb0
[  482.501231][T12293]  ? xsk_setsockopt+0x52a/0x960
[  482.501263][T12293]  ? do_sock_setsockopt+0x17c/0x1b0
[  482.501300][T12293]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  482.501338][T12293]  ? do_syscall_64+0x174/0x580
[  482.501375][T12293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.501413][T12293]  __vmalloc_node_range_noprof+0x12c/0x1730
[  482.501479][T12293]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  482.501515][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  482.501545][T12293]  ? __kasan_kmalloc+0x93/0xb0
[  482.501581][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  482.501610][T12293]  ? __kmalloc_cache_noprof+0x32d/0x660
[  482.501645][T12293]  ? __kmalloc_cache_noprof+0x150/0x660
[  482.501681][T12293]  vmalloc_user_noprof+0xad/0xe0
[  482.501713][T12293]  ? xskq_create+0xbf/0x170
[  482.501749][T12293]  xskq_create+0xbf/0x170
[  482.501788][T12293]  xsk_init_queue+0x8a/0xe0
[  482.501826][T12293]  xsk_setsockopt+0x52a/0x960
[  482.501858][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  482.501892][T12293]  ? __pfx_xsk_setsockopt+0x10/0x10
[  482.501924][T12293]  ? __pfx_aa_sk_perm+0x10/0x10
[  482.501963][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  482.501998][T12293]  ? aa_sock_opt_perm+0xff/0x1a0
[  482.502027][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  482.502061][T12293]  ? srso_alias_return_thunk+0x5/0xfbef5
[  482.502092][T12293]  ? __pfx_xsk_setsockopt+0x10/0x10
[  482.502127][T12293]  do_sock_setsockopt+0x17c/0x1b0
[  482.502172][T12293]  __x64_sys_setsockopt+0x13d/0x1b0
[  482.502221][T12293]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.502249][T12293]  do_syscall_64+0x174/0x580
[  482.502286][T12293]  ? trace_irq_disable+0x3b/0x140
[  482.502326][T12293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.502352][T12293] RIP: 0033:0x7f136979de99
[  482.502375][T12293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.502397][T12293] RSP: 002b:00007f136a5d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  482.502423][T12293] RAX: ffffffffffffffda RBX: 00007f1369a26090 RCX: 00007f136979de99
[  482.502442][T12293] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  482.502458][T12293] RBP: 00007f1369833eaf R08: 0000000000000029 R09: 0000000000000000
[  482.502475][T12293] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  482.502491][T12293] R13: 00007f1369a26128 R14: 00007f1369a26090 R15: 00007ffc7160ede8
[  482.502533][T12293]  </TASK>
[  482.858613][T12293] Mem-Info:
[  482.877148][T12293] active_anon:33965 inactive_anon:0 isolated_anon:0
[  482.877148][T12293]  active_file:0 inactive_file:55788 isolated_file:0
[  482.877148][T12293]  unevictable:768 dirty:290 writeback:0
[  482.877148][T12293]  slab_reclaimable:11142 slab_unreclaimable:148259
[  482.877148][T12293]  mapped:36871 shmem:26015 pagetables:4005
[  482.877148][T12293]  sec_pagetables:0 bounce:0
[  482.877148][T12293]  kernel_misc_reclaimable:0
[  482.877148][T12293]  free:1218250 free_pcp:9573 free_cma:0
[  483.113823][T12293] Node 0 active_anon:143660kB inactive_anon:0kB active_file:0kB inactive_file:222960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147484kB dirty:1160kB writeback:0kB shmem:103424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13908kB pagetables:15884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  483.212952][T12293] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  483.266208][ T5790] usb 1-1: USB disconnect, device number 52
[  483.350755][ T5764] usb 2-1: USB disconnect, device number 46
[  483.378125][T12293] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  483.378208][ T4990]  loop3: p1 < > p3
[  483.492795][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  483.524758][   T30] audit: type=1800 audit(1784360339.914:19): pid=12295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2222" name="file1" dev="loop6" ino=17061 res=0 errno=0
[  483.583471][T12293] lowmem_reserve[]: 0 2488 2489 2489 2489
[  483.600259][ T4990]  loop0: p1 < > p3
[  483.614174][T12293] Node 0 DMA32 free:914344kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:143156kB inactive_anon:0kB active_file:0kB inactive_file:223044kB unevictable:1536kB writepending:1180kB zspages:0kB present:3129332kB managed:2548708kB mlocked:0kB bounce:0kB free_pcp:31480kB local_pcp:11376kB free_cma:0kB
[  483.654372][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  483.663010][T12293] lowmem_reserve[]: 0 0 0 0 0
[  483.691293][T12293] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  483.728014][T12293] lowmem_reserve[]: 0 0 0 0 0
[  483.734745][T12293] Node 1 Normal free:3940256kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  483.745301][T12328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2230'.
[  483.766952][ T4990]  loop4: p1 < > p3
[  483.790657][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  483.846368][T12293] lowmem_reserve[]: 0 0 0 0 0
[  483.889193][T12293] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 
[  483.889678][ T4990]  loop3: p1 < > p3
[  483.899297][T12293] 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  483.939937][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  483.949603][T12293] Node 0 DMA32: 247*4kB (UE) 611*8kB (UM) 906*16kB (U) 687*32kB (UME) 910*64kB (UME) 741*128kB (UM) 464*256kB (UM) 252*512kB (UME) 92*1024kB (UM) 5*2048kB (UE) 90*4096kB (UM) = 916340kB
[  484.053418][T12293] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  484.083012][ T5924] ocfs2: Unmounting device (7,6) on (node local)
[  484.103158][T12293] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 13*16kB (UM) 5*32kB (UM) 6*64kB (UM) 7*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3940256kB
[  484.129093][T12293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  484.144517][ T4990]  loop0: p1 < > p3
[  484.151494][T12293] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  484.184641][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  484.192310][T12293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  484.211051][T12331] syzkaller0: entered promiscuous mode
[  484.221907][T12293] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  484.236972][T12331] syzkaller0: entered allmulticast mode
[  484.253044][T12293] 82215 total pagecache pages
[  484.286757][T12293] 0 pages in swap cache
[  484.295885][T12293] Free swap  = 124996kB
[  484.303780][T12293] Total swap = 124996kB
[  484.317521][T12293] 2097051 pages RAM
[  484.336441][T12293] 0 pages HighMem/MovableOnly
[  484.349273][T12293] 428194 pages reserved
[  484.360562][T12293] 0 pages cma reserved
[  484.387888][ T4990]  loop3: p1 < > p3
[  484.405756][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  484.614028][ T4990]  loop0: p1 < > p3
[  484.640091][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  484.750973][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'.
[  484.824258][T12335] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2234'.
[  486.301770][T12354] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2237'.
[  486.686510][ T4990]  loop0: p1 < > p3
[  486.724484][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  487.013375][ T5764] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  487.207466][ T5764] usb 1-1: Using ep0 maxpacket: 16
[  487.241502][ T5764] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  487.298458][ T5764] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  487.362959][ T5764] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  487.411447][ T5764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.469106][ T5764] usb 1-1: config 0 descriptor??
[  487.526553][ T5764] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  487.576790][ T4990]  loop4: p1 < > p3
[  487.615897][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  488.167192][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'.
[  488.353314][ T4990]  loop3: p1 < > p3
[  488.393342][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  488.548560][T12380] syzkaller0: entered promiscuous mode
[  488.578199][T12380] syzkaller0: entered allmulticast mode
[  488.677808][ T4990]  loop4: p1 < > p3
[  488.698916][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  488.840350][ T4990]  loop3: p1 < > p3
[  489.031846][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  489.327543][T12383] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2247'.
[  489.837496][ T4990]  loop3: p1 < > p3
[  489.870199][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  490.043713][ T5764] usb 1-1: USB disconnect, device number 53
[  490.119572][ T4990]  loop0: p1 < > p3
[  490.138853][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  490.180808][T12403] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2251'.
[  490.539224][ T4990]  loop4: p1 < > p3
[  490.575111][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  490.666786][T12407] binfmt_misc: register: failed to install interpreter file ./file2
[  490.720303][ T4990]  loop3: p1 < > p3
[  490.728324][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  490.807178][ T5790] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  490.860561][ T4990]  loop3: p1 < > p3
[  490.878167][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  490.975468][ T4990]  loop4: p1 < > p3
[  490.976961][T12420] team0: Port device syz_tun added
[  490.988053][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  490.999469][ T5790] usb 1-1: Using ep0 maxpacket: 16
[  491.017011][ T5790] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  491.043448][ T5790] usb 1-1: config 0 has no interface number 0
[  491.065917][ T5790] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  491.115649][ T5790] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  491.170257][ T5790] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  491.215924][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.251340][ T5790] usb 1-1: Product: syz
[  491.276229][ T5790] usb 1-1: Manufacturer: syz
[  491.302094][ T5790] usb 1-1: SerialNumber: syz
[  491.321612][ T5790] usb 1-1: config 0 descriptor??
[  491.342914][T12411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  491.365213][T12411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  491.723259][T12411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  491.752561][T12411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  492.071946][  T188] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  493.173922][ T4990]  loop4: p1 < > p3
[  493.217943][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  493.235268][  T188] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  493.296985][  T188] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  493.334746][  T188] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  493.382374][  T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.445917][T12432] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  493.484667][ T4990]  loop3: p1 < > p3
[  493.508045][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  493.550111][  T188] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  493.670822][ T5764] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  493.874051][T12417] loop1: detected capacity change from 0 to 40427
[  493.883777][ T5764] usb 5-1: Using ep0 maxpacket: 16
[  493.914489][ T5764] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  493.932167][T12417] F2FS-fs: heap/no_heap options were deprecated
[  493.965530][ T5764] usb 5-1: config 0 has no interface number 0
[  493.971973][T12417] F2FS-fs (loop1): Unable to read 2th superblock
[  493.990648][ T5764] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  494.003526][T12417] F2FS-fs (loop1): build fault injection rate: 19
[  494.019289][T12417] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  494.027825][ T5764] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  494.042733][T12417] F2FS-fs (loop1): invalid crc value
[  494.055472][ T5764] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  494.073187][T12417] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4)
[  494.097250][ T5764] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.131492][ T5764] usb 5-1: Product: syz
[  494.144688][ T5764] usb 5-1: Manufacturer: syz
[  494.150673][ T5764] usb 5-1: SerialNumber: syz
[  494.165406][ T5764] usb 5-1: config 0 descriptor??
[  494.210219][T12443] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  494.246255][T12443] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  494.310268][ T5790] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  494.333078][  T993] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  494.354805][ T5790] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  494.415830][ T5790] asix 1-1:0.34: probe with driver asix failed with error -71
[  494.473561][ T5790] usb 1-1: USB disconnect, device number 54
[  494.509687][T12443] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  494.524172][T12443] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  494.538680][  T993] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  494.591835][  T993] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  494.650064][  T993] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  494.689737][  T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.737794][  T993] usb 4-1: config 0 descriptor??
[  494.787788][  T993] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  495.061118][ T4990]  loop0: p1 < > p3
[  495.077205][T12458] loop1: detected capacity change from 0 to 4096
[  495.086063][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  495.118193][T12458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  495.173117][T12458] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  495.197300][T12458] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  495.389152][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.678409][ T4990]  loop0: p1 < > p3
[  495.710510][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  496.957602][ T5764] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  497.053350][ T5764] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  497.199874][ T5764] asix 5-1:0.34: probe with driver asix failed with error -71
[  497.538344][ T5764] usb 5-1: USB disconnect, device number 61
[  497.805223][ T5748] usb 4-1: USB disconnect, device number 41
[  497.969220][ T4990]  loop4: p1 < > p3
[  497.991438][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  498.164376][ T4990]  loop3: p1 < > p3
[  498.185758][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  498.357497][ T4990]  loop0: p1 < > p3
[  498.381105][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  498.613896][ T4990]  loop0: p1 < > p3
[  498.635801][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  498.823623][ T4990]  loop3: p1 < > p3
[  498.873211][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  499.028806][ T4990]  loop4: p1 < > p3
[  499.051201][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  500.333157][ T4990]  loop4: p1 < > p3
[  500.363765][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  500.514922][ T4990]  loop3: p1 < > p3
[  500.546005][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  500.725189][ T5634] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  500.912644][T12520] binfmt_misc: register: failed to install interpreter file ./file2
[  500.948528][ T5634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  501.018513][ T5634] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  501.068813][ T5634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.126771][ T5634] usb 5-1: config 0 descriptor??
[  501.249093][ T5748] usb 7-1: USB disconnect, device number 55
[  501.577040][ T5634] usbhid 5-1:0.0: can't add hid device: -71
[  501.592598][ T5634] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  501.621017][ T5634] usb 5-1: USB disconnect, device number 62
[  502.310645][T12528] syzkaller0: entered promiscuous mode
[  502.336979][T12528] syzkaller0: entered allmulticast mode
[  502.624038][ T4990]  loop3: p1 < > p3
[  502.649779][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  502.799009][ T5634] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  502.995755][ T5634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  503.062073][ T5634] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  503.112199][ T5634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.154193][ T5634] usb 5-1: config 0 descriptor??
[  503.747478][T12563] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2294'.
[  503.965135][ T5634] hid_parser_main: 453 callbacks suppressed
[  503.965157][ T5634] logitech-djreceiver 0003:046D:C71F.001D: unknown main item tag 0x0
[  504.021742][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'.
[  504.049078][T12519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.064431][ T5634] logitech-djreceiver 0003:046D:C71F.001D: unknown main item tag 0x0
[  504.079058][ T5634] logitech-djreceiver 0003:046D:C71F.001D: unknown main item tag 0x0
[  504.081237][T12519] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.087163][ T5634] logitech-djreceiver 0003:046D:C71F.001D: unknown main item tag 0x0
[  504.105406][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'.
[  504.106914][ T5634] logitech-djreceiver 0003:046D:C71F.001D: unknown main item tag 0x0
[  504.125863][ T5634] logitech-djreceiver 0003:046D:C71F.001D: unknown main item tag 0x0
[  504.139230][ T5634] logitech-djreceiver 0003:046D:C71F.001D: unknown main item tag 0x0
[  504.153000][ T5634] logitech-djreceiver 0003:046D:C71F.001D: unknown main item tag 0x0
[  504.162554][ T5634] logitech-djreceiver 0003:046D:C71F.001D: unknown main item tag 0x0
[  504.273048][ T5634] logitech-djreceiver 0003:046D:C71F.001D: unknown main item tag 0x0
[  504.455119][ T5790] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  504.474479][ T5634] usb 5-1: USB disconnect, device number 63
[  504.696951][ T5790] usb 1-1: Using ep0 maxpacket: 32
[  504.787947][ T5790] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7
[  504.952926][ T5790] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  505.003019][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.015477][ T4990]  loop4: p1 < > p3
[  505.040561][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  505.057764][ T5790] usb 1-1: Product: syz
[  505.084971][ T5790] usb 1-1: Manufacturer: syz
[  505.094483][ T5790] usb 1-1: SerialNumber: syz
[  505.277452][ T5748] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  505.418832][T12589] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2302'.
[  505.509183][ T5748] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[  505.509253][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.509285][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.509314][ T5748] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  505.509363][ T5748] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  505.509392][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.529189][ T5748] usb 7-1: config 0 descriptor??
[  505.565445][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2303'.
[  505.565473][T12591] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2303'.
[  505.735529][ T5634] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  505.952798][ T5634] usb 5-1: Using ep0 maxpacket: 32
[  505.965495][ T5634] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7
[  505.995903][ T5634] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  505.995940][ T5634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.995966][ T5634] usb 5-1: Product: syz
[  505.995986][ T5634] usb 5-1: Manufacturer: syz
[  505.996029][ T5634] usb 5-1: SerialNumber: syz
[  506.386877][ T4990]  loop3: p1 < > p3
[  506.441344][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  506.804813][T11713] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  506.897493][T12603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2307'.
[  506.979123][T12605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2307'.
[  506.996572][T11713] usb 4-1: Using ep0 maxpacket: 16
[  507.017248][T11713] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  507.056092][T11713] usb 4-1: config 0 interface 0 has no altsetting 0
[  507.081508][T11713] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  507.119881][T11713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.174566][T11713] usb 4-1: config 0 descriptor??
[  508.485730][T12599] input: syz1 as /devices/virtual/input/input26
[  508.534862][ T5748] usbhid 7-1:0.0: can't add hid device: -71
[  508.544813][ T5748] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  508.557350][ T5748] usb 7-1: USB disconnect, device number 56
[  508.570963][T11713] nzxt-smart2 0003:1E71:2009.001E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  509.140056][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2310'.
[  509.646441][T12599] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2305'.
[  509.848493][T12621] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  510.047415][ T5748] usb 4-1: USB disconnect, device number 42
[  510.088175][  T993] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  510.153253][ T4990]  loop3: p1 < > p3
[  510.231731][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  510.355512][  T993] usb 7-1: Using ep0 maxpacket: 16
[  510.407375][  T993] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  510.496894][  T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  510.586118][  T993] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  510.630069][  T993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.642512][ T5790] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  510.700825][  T993] usb 7-1: Product: syz
[  510.745667][  T993] usb 7-1: Manufacturer: syz
[  510.778694][  T993] usb 7-1: SerialNumber: syz
[  510.849298][ T4990]  loop0: p1 < > p3
[  510.878239][  T993] usb 7-1: config 0 descriptor??
[  510.900882][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  510.960241][  T993] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  511.007352][  T993] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  511.091152][T12637] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2313'.
[  511.093072][ T5634] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  511.123435][ T5790] usb 1-1: USB disconnect, device number 55
[  511.171770][ T4990]  loop3: p1 < > p3
[  511.209253][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2316'.
[  511.210023][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  511.252967][T12641] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2316'.
[  511.346155][  T188] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  511.432428][ T5634] usb 5-1: USB disconnect, device number 64
[  511.510578][ T4990]  loop4: p1 < > p3
[  511.536858][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  511.576063][  T188] usb 2-1: config 0 has no interfaces?
[  511.587920][  T188] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  511.599058][  T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.637099][  T188] usb 2-1: config 0 descriptor??
[  511.675444][ T4990]  loop0: p1 < > p3
[  511.684128][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  511.719807][ T4990]  loop4: p1 < > p3
[  511.739883][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  511.810546][ T4990]  loop4: p1 < > p3
[  511.820054][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  511.881811][  T993] em28xx 7-1:0.0: chip ID is em2874
[  511.890974][T12638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.902639][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  511.937437][T12638] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.972623][  T993] usb 2-1: USB disconnect, device number 47
[  512.039855][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  512.565420][  T993] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  513.348896][ T4990]  loop3: p1 < > p3
[  513.555705][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  513.557179][T12662] fuse: Bad value for 'rootmode'
[  513.620619][ T5748] usb 7-1: USB disconnect, device number 57
[  513.681742][ T5748] em28xx 7-1:0.0: Disconnecting em28xx
[  513.778587][  T993] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  513.905936][  T993] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  514.074358][  T993] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  514.196724][ T4990]  loop0: p1 < > p3
[  514.236353][  T993] usb 2-1: config 220 has no interface number 2
[  514.386142][  T993] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  514.415478][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  514.625501][  T993] usb 2-1: config 220 interface 0 has no altsetting 0
[  514.697573][ T5748] em28xx 7-1:0.0: Freeing device
[  514.725134][  T993] usb 2-1: config 220 interface 76 has no altsetting 0
[  514.752369][  T993] usb 2-1: config 220 interface 1 has no altsetting 0
[  514.766053][T12670] fuse: Bad value for 'fd'
[  515.412283][T12675] syzkaller0: entered promiscuous mode
[  515.430112][ T4990]  loop3: p1 < > p3
[  515.435837][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  515.444998][T12675] syzkaller0: entered allmulticast mode
[  515.461285][  T993] usb 2-1: string descriptor 0 read error: -71
[  515.467599][  T993] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  515.486284][  T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.519833][T12678] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2329'.
[  515.536400][  T993] usb 2-1: can't set config #220, error -71
[  515.563069][  T993] usb 2-1: USB disconnect, device number 48
[  515.603704][ T4990]  loop4: p1 < > p3
[  515.645269][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  515.850103][ T4990]  loop0: p1 < > p3
[  515.885188][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  516.239753][ T5748] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  516.433836][   T29] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  516.462540][ T5748] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  516.527184][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  516.562758][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  516.589988][ T5748] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  516.633808][ T5748] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  516.667748][   T29] usb 4-1: unable to get BOS descriptor or descriptor too short
[  516.695114][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.710389][   T29] usb 4-1: config 189 has an invalid interface number: 127 but max is 0
[  516.755204][   T29] usb 4-1: config 189 has no interface number 0
[  516.783100][ T5748] usb 7-1: config 0 descriptor??
[  516.789176][   T29] usb 4-1: config 189 interface 127 has no altsetting 0
[  516.813992][   T29] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f
[  516.829547][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.838413][   T29] usb 4-1: Product: syz
[  516.844752][   T29] usb 4-1: Manufacturer: syz
[  516.864008][   T29] usb 4-1: SerialNumber: syz
[  517.051989][T11713] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  517.417682][ T5748] usbhid 7-1:0.0: can't add hid device: -71
[  517.423902][ T5748] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  517.480647][T11713] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  517.511729][ T5748] usb 7-1: USB disconnect, device number 58
[  517.529519][T11713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  517.543985][   T29] usbserial_generic 4-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  517.602434][T11713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  517.616220][   T29] usbserial_generic 4-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  517.642762][T11713] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  517.661157][   T29] usbserial_generic 4-1:189.127: device has no bulk endpoints
[  517.680048][   T29] safe_serial 4-1:189.127: safe_serial converter detected
[  517.689696][T11713] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  517.715557][   T29] safe_serial 4-1:189.127: probe with driver safe_serial failed with error -22
[  517.727016][T11713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.739956][ T4990]  loop0: p1 < > p3
[  517.767318][   T29] usb 4-1: USB disconnect, device number 43
[  517.782358][T11713] usb 5-1: config 0 descriptor??
[  517.788203][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  517.799996][T12710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2340'.
[  518.237980][  T188] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  518.289922][T11713] hid_parser_main: 462 callbacks suppressed
[  518.289948][T11713] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[  518.356411][T11713] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[  518.387243][T11713] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[  518.408991][T11713] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[  518.411093][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2342'.
[  518.441503][  T188] usb 2-1: Using ep0 maxpacket: 16
[  518.456575][ T4990]  loop3: p1 < > p3
[  518.475948][  T188] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  518.481047][T11713] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[  518.506523][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  518.522836][  T188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  518.530641][T12717] netlink: 'syz.6.2342': attribute type 10 has an invalid length.
[  518.553693][T11713] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[  518.563282][  T188] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  518.590057][T11713] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[  518.593086][  T188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.640216][T11713] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[  518.648785][  T188] usb 2-1: Product: syz
[  518.652276][T12717] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2342'.
[  518.681743][T11713] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[  518.683169][  T188] usb 2-1: Manufacturer: syz
[  518.722797][  T188] usb 2-1: SerialNumber: syz
[  518.729627][   T29] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  518.741523][T11713] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[  518.754542][  T188] usb 2-1: config 0 descriptor??
[  518.773775][T12717] dummy0: entered promiscuous mode
[  518.785506][  T188] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  518.817318][  T188] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  518.916295][T11713] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  518.930184][   T29] usb 4-1: Using ep0 maxpacket: 16
[  518.957787][   T29] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.983124][ T4990]  loop0: p1 < > p3
[  518.987034][   T29] usb 4-1: config 0 interface 0 has no altsetting 0
[  518.996375][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  519.017680][   T29] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  519.063788][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.098380][   T29] usb 4-1: config 0 descriptor??
[  519.103693][T12725] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2345'.
[  519.353388][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2348'.
[  519.381672][T12729] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2348'.
[  519.388367][ T4990]  loop0: p1 < > p3
[  519.399278][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  519.416670][  T188] em28xx 2-1:0.0: chip ID is em2874
[  519.578455][   T29] nzxt-smart2 0003:1E71:2009.0020: hidraw1: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  519.723789][  T188] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[  519.898670][  T188] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  519.910487][  T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  519.921658][  T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  519.935585][  T188] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  519.946332][  T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.954410][  T188] usb 1-1: Product: syz
[  519.958723][  T188] usb 1-1: Manufacturer: syz
[  519.963339][  T188] usb 1-1: SerialNumber: syz
[  519.971971][  T188] usb 1-1: config 0 descriptor??
[  519.977793][T12733] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  520.004285][   T29] usb 5-1: USB disconnect, device number 65
[  520.060498][T12716] input: syz1 as /devices/virtual/input/input28
[  520.062726][ T4990]  loop4: p1 < > p3
[  520.111723][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  520.142822][  T188] rc_core: IR keymap rc-streamzap not found
[  520.167471][  T188] Registered IR keymap rc-empty
[  520.217836][  T188] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  520.310315][  T188] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27
[  520.340871][T12716] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2343'.
[  520.624934][  T188] usb 1-1: USB disconnect, device number 56
[  521.109772][T12747] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2352'.
[  521.246392][T12747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'.
[  521.269951][   T29] usb 2-1: USB disconnect, device number 49
[  521.330771][  T993] usb 4-1: USB disconnect, device number 44
[  521.340203][   T29] em28xx 2-1:0.0: Disconnecting em28xx
[  521.570940][   T29] em28xx 2-1:0.0: Freeing device
[  522.399145][ T4990]  loop3: p1 < > p3
[  522.428922][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  522.643037][ T5790] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  522.702695][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'.
[  522.728740][ T4990]  loop0: p1 < > p3
[  522.758822][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  522.772068][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2357'.
[  522.867792][ T5790] usb 7-1: Using ep0 maxpacket: 16
[  522.874483][T12774] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2360'.
[  522.906598][ T5790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  522.981453][ T5790] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  523.078418][ T5790] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  523.182867][ T5790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.267386][ T5790] usb 7-1: config 0 descriptor??
[  523.312409][ T5790] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  523.469082][ T4990]  loop3: p1 < > p3
[  523.488742][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  523.606365][ T5790] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  523.794766][ T5790] usb 1-1: Using ep0 maxpacket: 16
[  523.817481][ T5790] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  523.852364][ T5790] usb 1-1: config 0 has no interface number 0
[  523.871312][ T5790] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  523.898293][ T5790] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  523.931279][ T5790] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  523.962735][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.984780][ T5790] usb 1-1: Product: syz
[  524.001154][ T5790] usb 1-1: Manufacturer: syz
[  524.017814][ T5790] usb 1-1: SerialNumber: syz
[  524.068205][ T5790] usb 1-1: config 0 descriptor??
[  524.083543][T12780] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  524.108428][T12780] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  524.171034][T12759] loop1: detected capacity change from 0 to 40427
[  524.188484][T12759] F2FS-fs: heap/no_heap options were deprecated
[  524.240124][T12759] F2FS-fs (loop1): build fault injection rate: 19
[  524.264697][T12759] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  524.291802][T12759] F2FS-fs (loop1): invalid crc value
[  524.351423][T12759] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  524.423111][T12780] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  524.453243][T12780] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  524.636789][T12759] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  524.714451][T12759] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  524.774900][T12759] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  524.962795][T11713] usb 7-1: USB disconnect, device number 59
[  525.234943][ T4990]  loop4: p1 < > p3
[  525.255264][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  525.492532][T11713] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[  525.878874][T11713] usb 7-1: Using ep0 maxpacket: 8
[  525.977460][T11713] usb 7-1: config 0 has an invalid interface number: 255 but max is 14
[  526.069903][T11713] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  526.134615][T11713] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15
[  526.228147][T11713] usb 7-1: config 0 has no interface number 0
[  526.281992][T11713] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  526.356695][T11713] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  526.396217][ T5790] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  526.400251][T11713] usb 7-1: config 0 interface 255 has no altsetting 0
[  526.406938][ T5790] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  526.425144][ T5790] asix 1-1:0.34: probe with driver asix failed with error -71
[  526.446085][ T5790] usb 1-1: USB disconnect, device number 57
[  526.564695][T11713] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  526.592230][T11713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.617489][T11713] usb 7-1: Product: syz
[  526.624924][T11713] usb 7-1: Manufacturer: syz
[  526.636359][T11713] usb 7-1: SerialNumber: syz
[  526.681284][T11713] usb 7-1: config 0 descriptor??
[  526.707307][T11713] powermate 7-1:0.255: probe with driver powermate failed with error -22
[  526.854739][ T4990]  loop4: p1 < > p3
[  526.864841][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  526.900017][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  526.906638][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  527.200702][ T4990]  loop3: p1 < > p3
[  527.214231][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  528.075518][ T4990]  loop0: p1 < > p3
[  528.098551][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  528.509458][  T993] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  529.073724][  T993] usb 4-1: Using ep0 maxpacket: 8
[  529.087125][T12822] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2374'.
[  529.117796][  T993] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15
[  529.149548][  T993] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  529.198012][ T4990]  loop4: p1 < > p3
[  529.216267][  T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  529.234322][T12825] syzkaller0: entered promiscuous mode
[  529.249050][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  529.266715][T12825] syzkaller0: entered allmulticast mode
[  529.279956][  T993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  529.322563][  T188] usb 7-1: USB disconnect, device number 60
[  529.346767][  T993] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  529.378985][  T993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.404668][  T993] usb 4-1: Product: syz
[  529.428261][  T993] usb 4-1: Manufacturer: syz
[  529.456715][ T4990]  loop0: p1 < > p3
[  529.458805][  T993] usb 4-1: SerialNumber: syz
[  529.465057][T12837] fuse: Unknown parameter 'use00000000000000000000'
[  529.713548][   T29] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  529.731262][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  529.735556][  T993] usb 4-1: config 0 descriptor??
[  529.759267][T12813] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  529.904179][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.107136][   T29] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  530.410478][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.533421][  T993] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  530.541721][   T29] usb 1-1: config 0 descriptor??
[  530.555091][  T993] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input29
[  530.557665][ T4990]  loop4: p1 < > p3
[  530.608545][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  531.187097][   T29] usbhid 1-1:0.0: can't add hid device: -71
[  531.823529][   T29] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  531.834596][   T29] usb 1-1: USB disconnect, device number 58
[  531.994267][    C0] powermate: config urb returned -71
[  531.995563][ T4990]  loop4: p1 < > p3
[  532.001932][    C0] powermate: config urb returned -71
[  532.011132][    C0] powermate: config urb returned -71
[  532.022521][    C0] powermate: config urb returned -71
[  532.028199][  T993] usb 4-1: USB disconnect, device number 45
[  532.034231][    C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  532.144504][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'.
[  532.146892][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  532.245526][T12858] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2384'.
[  532.271857][T12863] loop1: detected capacity change from 0 to 1024
[  532.290705][   T29] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  532.318295][T12863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  532.337244][ T4990]  loop4: p1 < > p3
[  532.348050][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  532.589493][  T993] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  532.765394][T12871] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  533.394863][   T29] usb 1-1: device descriptor read/all, error -71
[  533.466314][  T993] usb 5-1: Using ep0 maxpacket: 32
[  533.486016][  T993] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7
[  533.526139][  T993] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  533.542162][T12874] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2390'.
[  533.558301][  T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.588055][  T993] usb 5-1: Product: syz
[  533.603047][  T993] usb 5-1: Manufacturer: syz
[  533.620505][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.631176][  T993] usb 5-1: SerialNumber: syz
[  533.641361][ T4990]  loop0: p1 < > p3
[  533.650014][  T188] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  533.652010][ T4990] loop0: p3 size 134217728 extends beyond EOD, 
[  533.909108][  T188] usb 4-1: Using ep0 maxpacket: 16
[  534.317269][ T4990] truncated
[  534.412973][  T188] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  534.620941][  T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  534.701668][  T188] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  534.738648][  T188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.791705][  T188] usb 4-1: Product: syz
[  535.241292][  T188] usb 4-1: Manufacturer: syz
[  535.246987][  T188] usb 4-1: SerialNumber: syz
[  535.254951][  T188] usb 4-1: config 0 descriptor??
[  535.269491][  T188] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  535.281430][  T188] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  535.625807][  T188] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  535.680035][  T188] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  535.747100][  T188] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  535.790406][ T4990]  loop3: p1 < > p3
[  535.805290][  T188] em28xx 4-1:0.0: No AC97 audio processor
[  535.836389][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  535.868509][  T188] usb 4-1: USB disconnect, device number 46
[  535.913780][  T188] em28xx 4-1:0.0: Disconnecting em28xx
[  535.948678][  T188] em28xx 4-1:0.0: Freeing device
[  536.030511][ T5790] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  536.392519][ T5790] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  536.541236][ T5790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  536.950586][ T5790] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  537.027003][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  537.061195][ T5790] usb 1-1: Product: syz
[  537.068654][ T5790] usb 1-1: Manufacturer: syz
[  537.083981][T12893] loop1: detected capacity change from 0 to 4096
[  537.092226][ T5790] usb 1-1: SerialNumber: syz
[  537.127705][ T5790] usb 1-1: config 0 descriptor??
[  537.302387][ T5790] hub 1-1:0.0: bad descriptor, ignoring hub
[  537.343892][T12893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  537.347794][T12889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  537.399157][ T5790] hub 1-1:0.0: probe with driver hub failed with error -5
[  537.528489][T12893] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  537.673322][T12902] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  539.897269][ T5625] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.025026][ T5634] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[  540.108725][  T993] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  540.116024][ T5790] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  540.253689][  T188] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  540.283677][ T5634] usb 7-1: Using ep0 maxpacket: 16
[  540.289757][ T5790] usb 1-1: USB disconnect, device number 61
[  540.316545][ T5634] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  540.373555][ T5634] usb 7-1: config 0 interface 0 has no altsetting 0
[  540.406218][ T5634] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  540.475387][ T5634] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.491800][  T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  540.959114][  T188] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  540.992988][  T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.033010][ T5634] usb 7-1: config 0 descriptor??
[  541.056557][T12920] loop9: detected capacity change from 0 to 2640
[  541.099453][  T188] usb 4-1: config 0 descriptor??
[  541.120551][T12920] buffer_io_error: 5 callbacks suppressed
[  541.163327][T12920] Buffer I/O error on dev loop9, logical block 0, async page read
[  541.230278][T12920] Buffer I/O error on dev loop9, logical block 0, async page read
[  541.308730][T12920] Buffer I/O error on dev loop9, logical block 0, async page read
[  541.345871][T12920] Buffer I/O error on dev loop9, logical block 0, async page read
[  541.367690][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  541.435577][  T188] usbhid 4-1:0.0: can't add hid device: -71
[  541.463898][  T188] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  541.571144][T12920] Buffer I/O error on dev loop9, logical block 0, async page read
[  541.619440][   T29] usb 5-1: USB disconnect, device number 66
[  541.628421][T12920] Buffer I/O error on dev loop9, logical block 0, async page read
[  541.642828][  T188] usb 4-1: USB disconnect, device number 47
[  541.692620][T12920] Buffer I/O error on dev loop9, logical block 0, async page read
[  541.709904][ T5634] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0
[  541.756960][ T4990]  loop4: p1 < > p3
[  541.764388][T12920] Buffer I/O error on dev loop9, logical block 0, async page read
[  541.795162][T12920] ldm_validate_partition_table(): Disk read failed.
[  541.806886][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  541.827828][T12920] Buffer I/O error on dev loop9, logical block 0, async page read
[  541.843329][T12920] Buffer I/O error on dev loop9, logical block 0, async page read
[  541.876495][T12920] Dev loop9: unable to read RDB block 0
[  541.903312][ T5905] udevd[5905]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  542.245137][T12920]  loop9: unable to read partition table
[  542.329230][T12920] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  542.816176][  T188] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  543.005060][  T188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  543.077751][  T188] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  543.155366][  T188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.253737][  T188] usb 4-1: config 0 descriptor??
[  543.333771][  T188] usb 4-1: can't set config #0, error -71
[  543.340972][ T4990]  loop4: p1 < > p3
[  543.386607][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  543.517797][T12910] input: syz1 as /devices/virtual/input/input30
[  543.528041][  T188] usb 4-1: USB disconnect, device number 48
[  543.565411][T12928] netlink: 192 bytes leftover after parsing attributes in process `syz.6.2400'.
[  544.708384][T12934] syzkaller0: entered promiscuous mode
[  544.730394][T11713] usb 7-1: USB disconnect, device number 61
[  544.740038][ T4990]  loop3: p1 < > p3
[  544.754459][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  544.761257][T12934] syzkaller0: entered allmulticast mode
[  544.937459][ T4990]  loop0: p1 < > p3
[  544.961804][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  546.668159][T12950] loop1: detected capacity change from 0 to 256
[  549.713438][T12957] overlay: filesystem on ./file0 not supported
[  549.879435][  T993] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  549.941932][ T4990]  loop0: p1 < > p3
[  549.983737][ T5625] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  549.992485][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  550.017771][ T5625] FAT-fs (loop1): Filesystem has been set read-only
[  550.037364][ T5625] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  550.063941][  T993] usb 5-1: unable to get BOS descriptor or descriptor too short
[  550.073888][  T993] usb 5-1: config 189 has an invalid interface number: 127 but max is 0
[  550.094669][  T993] usb 5-1: config 189 has no interface number 0
[  550.111258][  T993] usb 5-1: config 189 interface 127 has no altsetting 0
[  550.143605][  T993] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f
[  550.169288][  T805] usb 7-1: new full-speed USB device number 62 using dummy_hcd
[  550.172640][  T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.193251][  T993] usb 5-1: Product: syz
[  550.198431][ T4990]  loop0: p1 < > p3
[  550.206092][  T993] usb 5-1: Manufacturer: syz
[  550.217799][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  550.230894][  T993] usb 5-1: SerialNumber: syz
[  550.351076][ T4990]  loop4: p1 < > p3
[  550.395126][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  550.419428][  T805] usb 7-1: config 0 has no interfaces?
[  550.429697][  T805] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  550.442773][  T805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.461034][  T805] usb 7-1: config 0 descriptor??
[  550.672836][ T4990]  loop3: p1 < > p3
[  550.761579][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  550.828276][T12967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.872422][  T993] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  550.931960][  T993] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  550.937927][T12967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.004489][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.020552][  T805] usb 7-1: USB disconnect, device number 62
[  551.026605][ T4990]  loop0: p1 < > p3
[  551.041608][  T993] usbserial_generic 5-1:189.127: device has no bulk endpoints
[  551.063108][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  551.083983][  T993] safe_serial 5-1:189.127: safe_serial converter detected
[  551.110092][  T993] safe_serial 5-1:189.127: probe with driver safe_serial failed with error -22
[  551.155927][  T993] usb 5-1: USB disconnect, device number 67
[  551.188442][ T4990]  loop3: p1 < > p3
[  551.202209][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  551.252196][ T4990]  loop0: p1 < > p3
[  551.259772][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  551.297944][ T4990]  loop3: p1 < > p3
[  551.312415][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  551.320558][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.583667][  T805] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[  552.865284][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.963801][T12995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  552.995301][T12995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  553.003855][T12995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  553.014824][T12995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  553.022909][T12995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  553.381577][  T805] usb 7-1: device descriptor read/all, error -71
[  553.442581][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  553.513262][T11713] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  553.705031][T11713] usb 5-1: Using ep0 maxpacket: 32
[  553.735103][T11713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.791343][T11713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.824410][T13005] loop6: detected capacity change from 0 to 4096
[  553.832647][T11713] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  553.877302][T11713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.908200][   T29] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  553.941367][T13005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  553.956857][T11713] usb 5-1: config 0 descriptor??
[  554.035125][T13005] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  554.079440][T13011] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  554.089861][   T29] usb 4-1: Using ep0 maxpacket: 8
[  554.112295][   T29] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15
[  554.155352][   T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  554.197971][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  554.237732][   T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  554.296146][ T5924] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.316955][   T29] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  554.354434][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.394429][   T29] usb 4-1: Product: syz
[  554.410026][T11713] usbhid 5-1:0.0: can't add hid device: -71
[  554.428521][   T29] usb 4-1: Manufacturer: syz
[  554.441592][T11713] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  554.458247][   T29] usb 4-1: SerialNumber: syz
[  554.499082][T11713] usb 5-1: USB disconnect, device number 68
[  554.521385][   T29] usb 4-1: config 0 descriptor??
[  554.554063][T13006] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  554.820496][   T29] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  554.838965][   T29] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input31
[  555.191112][T12995] Bluetooth: hci2: command tx timeout
[  555.205129][ T4990]  loop4: p1 < > p3
[  555.246137][    C1] powermate: config urb returned -71
[  555.247212][  T993] usb 4-1: USB disconnect, device number 49
[  555.251460][    C1] powermate: usb_submit_urb(config) failed
[  555.257602][    C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  555.276666][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  555.328523][T13034] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2435'.
[  555.428494][ T4990]  loop0: p1 < > p3
[  555.463230][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  555.483780][   T12] bridge_slave_1: left allmulticast mode
[  555.502751][   T12] bridge_slave_1: left promiscuous mode
[  555.590350][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.714157][  T188] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  556.134770][ T5634] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[  556.160955][  T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  556.277483][  T188] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  556.346370][  T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.414823][   T12] bridge_slave_0: left allmulticast mode
[  556.443292][ T5634] usb 7-1: Using ep0 maxpacket: 32
[  556.485814][   T12] bridge_slave_0: left promiscuous mode
[  556.599200][  T188] usb 5-1: config 0 descriptor??
[  556.604454][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.643406][ T5634] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7
[  556.835808][ T5634] usb 7-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  556.866297][ T4990]  loop0: p1 < > p3
[  556.875490][ T5634] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.894429][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  556.907871][  T188] usbhid 5-1:0.0: can't add hid device: -71
[  556.930149][  T188] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  556.939816][ T5634] usb 7-1: Product: syz
[  556.958036][ T5634] usb 7-1: Manufacturer: syz
[  557.068228][ T5634] usb 7-1: SerialNumber: syz
[  557.434496][T12995] Bluetooth: hci2: command tx timeout
[  557.738284][  T188] usb 5-1: USB disconnect, device number 69
[  558.064954][  T188] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  558.138438][ T4990]  loop3: p1 < > p3
[  558.221776][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  558.281323][  T188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  558.292897][  T188] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  558.382608][  T188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.413704][  T188] usb 5-1: config 0 descriptor??
[  558.439541][ T4990]  loop0: p1 < > p3
[  558.493670][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  559.759779][  T188] usbhid 5-1:0.0: can't add hid device: -71
[  559.822157][  T188] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  559.865114][ T4990]  loop0: p1 < > p3
[  559.892691][T12995] Bluetooth: hci2: command tx timeout
[  559.911240][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  559.929650][  T188] usb 5-1: USB disconnect, device number 70
[  560.123671][ T4990]  loop3: p1 < > p3
[  560.163440][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  560.175429][T13074] process 'syz.4.2445' launched './file0' with NULL argv: empty string added
[  560.375443][ T4990]  loop4: p1 < > p3
[  560.413115][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  560.491510][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  560.549178][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  560.617327][   T12] bond0 (unregistering): Released all slaves
[  560.757308][   T12] bond1 (unregistering): Released all slaves
[  561.316190][ T4990]  loop4: p1 < > p3
[  561.333937][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  561.688264][T11713] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  561.895676][T11713] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  561.939476][ T5285] 8021q: adding VLAN 0 to HW filter on device eth5
[  561.952212][T11713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  561.963044][T13090] syzkaller0: entered promiscuous mode
[  561.978770][T13090] syzkaller0: entered allmulticast mode
[  561.995094][T11713] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  562.089146][T11713] usb 5-1: config 0 interface 0 has no altsetting 0
[  562.120158][T12995] Bluetooth: hci2: command tx timeout
[  562.151817][T11713] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  562.175719][ T5634] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  562.199215][T11713] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  562.247356][T11713] usb 5-1: Product: syz
[  562.266315][T11713] usb 5-1: Manufacturer: syz
[  562.284874][ T4990]  loop3: p1 < > p3
[  562.289346][T11713] usb 5-1: SerialNumber: syz
[  562.306763][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  562.318217][T11713] usb 5-1: config 0 descriptor??
[  562.351019][T11713] hub 5-1:0.0: bad descriptor, ignoring hub
[  562.374004][ T5634] usb 7-1: USB disconnect, device number 65
[  562.381351][T13098] loop6: detected capacity change from 0 to 1024
[  562.381838][T11713] hub 5-1:0.0: probe with driver hub failed with error -5
[  562.412808][T13098] EXT4-fs: Ignoring removed orlov option
[  562.543763][T13098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  562.547613][ T4990]  loop0: p1 < > p3
[  562.610403][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  562.694410][T13106] fuse: Unknown parameter 'user_id00000000000000000000'
[  562.892738][T11713] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  562.945563][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  562.981357][   T12] hsr_slave_0: left promiscuous mode
[  562.993243][ T4990]  loop0: p1 < > p3
[  563.017943][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  563.036665][   T12] hsr_slave_1: left promiscuous mode
[  563.051368][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  563.079993][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  563.105747][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  563.145919][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  563.153652][T11713] usb 5-1: reset high-speed USB device number 71 using dummy_hcd
[  563.236026][   T12] veth1_macvtap: left promiscuous mode
[  563.254527][ T5924] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.277929][   T12] veth0_macvtap: left promiscuous mode
[  563.308662][   T12] veth1_vlan: left promiscuous mode
[  563.340569][   T12] veth0_vlan: left promiscuous mode
[  563.744947][T11713] usb 5-1: failed to restore interface 0 altsetting 251 (error=-71)
[  563.784623][T11713] usb 5-1: USB disconnect, device number 71
[  564.346884][T13119] loop6: detected capacity change from 0 to 4096
[  564.390705][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  564.454261][T13119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  564.576613][ T4990]  loop4: p1 < > p3
[  564.618145][T13119] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  564.673055][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  564.709592][T13129] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  564.993842][T13138] fuse: Unknown parameter 'user_i00000000000000000000'
[  565.015776][ T5924] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.034877][ T4990]  loop3: p1 < > p3
[  565.038993][T11713] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  565.097804][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  565.227668][T11713] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  565.248307][T11713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.348307][T11713] usb 5-1: config 0 descriptor??
[  565.409989][T11713] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  565.903148][ T4990]  loop0: p1 < > p3
[  565.931833][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  566.120923][ T4990]  loop3: p1 < > p3
[  566.136835][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  566.305623][ T5634] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  566.370006][   T12] team0 (unregistering): Port device team_slave_1 removed
[  566.490360][   T12] team0 (unregistering): Port device team_slave_0 removed
[  566.493907][T11713] gspca_stv06xx: HDCS-1000/1100 sensor detected
[  566.514658][ T5634] usb 1-1: Using ep0 maxpacket: 8
[  566.539431][ T5634] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15
[  566.565119][   T29] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  566.566098][ T5634] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  566.633276][ T5634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  566.687517][ T5634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  566.728142][ T5634] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  566.756707][ T5634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.791591][ T5634] usb 1-1: Product: syz
[  566.805440][ T5634] usb 1-1: Manufacturer: syz
[  566.816475][ T5634] usb 1-1: SerialNumber: syz
[  566.854409][ T5634] usb 1-1: config 0 descriptor??
[  566.869510][T13147] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  566.920185][   T29] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  566.964546][   T29] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  567.006067][   T29] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  567.017923][   T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.046153][T13151] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  567.078048][   T29] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  567.117964][ T5634] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  567.173057][ T5634] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input32
[  567.318551][ T5285] 8021q: adding VLAN 0 to HW filter on device eth6
[  567.746713][    C0] powermate: config urb returned -71
[  567.748282][ T5748] usb 1-1: USB disconnect, device number 62
[  567.752055][    C0] powermate: usb_submit_urb(config) failed
[  567.752118][    C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  567.919932][   T29] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[  568.103348][   T29] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  568.146097][   T29] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  568.176418][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.218246][   T29] usb 7-1: config 0 descriptor??
[  568.251369][   T29] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  568.491339][ T4990]  loop0: p1 < > p3
[  568.499931][T12992] bridge0: port 1(bridge_slave_0) entered blocking state
[  568.546744][T12992] bridge0: port 1(bridge_slave_0) entered disabled state
[  568.550198][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  568.581276][T12992] bridge_slave_0: entered allmulticast mode
[  568.618317][T12992] bridge_slave_0: entered promiscuous mode
[  568.683914][T12992] bridge0: port 2(bridge_slave_1) entered blocking state
[  568.728988][T12992] bridge0: port 2(bridge_slave_1) entered disabled state
[  568.766984][T12992] bridge_slave_1: entered allmulticast mode
[  568.821337][T12992] bridge_slave_1: entered promiscuous mode
[  569.024687][T11713] STV06xx 5-1:0.0: probe with driver STV06xx failed with error -71
[  569.273779][T11713] usb 5-1: USB disconnect, device number 72
[  570.194278][T12992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  570.285321][T12992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  570.434136][ T4990]  loop4: p1 < > p3
[  570.468476][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  570.496326][T12992] team0: Port device team_slave_0 added
[  570.526014][T12992] team0: Port device team_slave_1 added
[  570.710928][  T188] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  570.777125][T12992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  570.814608][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  570.907020][T12992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  570.933076][  T188] usb 1-1: unable to get BOS descriptor or descriptor too short
[  570.958965][  T188] usb 1-1: config 189 has an invalid interface number: 127 but max is 0
[  570.995679][T12992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  571.004868][  T188] usb 1-1: config 189 has no interface number 0
[  571.025526][  T188] usb 1-1: config 189 interface 127 has no altsetting 0
[  571.035632][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  571.071374][  T993] usb 7-1: USB disconnect, device number 66
[  571.112202][  T188] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f
[  571.153908][  T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.174041][  T188] usb 1-1: Product: syz
[  571.182114][T12992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  571.192848][  T188] usb 1-1: Manufacturer: syz
[  571.200844][  T188] usb 1-1: SerialNumber: syz
[  571.297400][T13206] loop6: detected capacity change from 0 to 1024
[  571.340698][T13206] EXT4-fs: Ignoring removed orlov option
[  571.431050][T13206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  571.640031][T12992] hsr_slave_0: entered promiscuous mode
[  571.668084][T12992] hsr_slave_1: entered promiscuous mode
[  571.704880][T12992] debugfs: 'hsr0' already exists in 'hsr'
[  571.734501][T12992] Cannot create hsr debugfs directory
[  571.772389][ T4990]  loop4: p1 < > p3
[  571.814054][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  571.834213][ T5285] 8021q: adding VLAN 0 to HW filter on device eth8
[  574.419052][ T5924] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.663404][  T188] usbserial_generic 1-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  576.675299][  T188] usbserial_generic 1-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  576.720293][  T188] usbserial_generic 1-1:189.127: device has no bulk endpoints
[  576.744165][  T993] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  576.821862][  T188] safe_serial 1-1:189.127: safe_serial converter detected
[  576.865884][  T188] safe_serial 1-1:189.127: probe with driver safe_serial failed with error -22
[  576.986500][  T993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  577.061226][  T993] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  577.119773][  T805] usb 4-1: USB disconnect, device number 50
[  577.122473][  T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.233751][  T993] usb 5-1: config 0 descriptor??
[  577.242803][ T4990]  loop3: p1 < > p3
[  577.272430][ T4990] loop3: p3 size 134217728 extends beyond EOD, truncated
[  577.465623][T12992] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  577.490661][T13245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  577.538150][T12992] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  577.547621][T13245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  577.610152][T12992] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  577.637611][T13245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  577.717861][T13245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  577.758321][T12992] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  577.848118][T12992] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  577.860941][  T993] usbhid 5-1:0.0: can't add hid device: -71
[  577.874797][  T993] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  577.936873][  T993] usb 5-1: USB disconnect, device number 73
[  577.971250][T12992] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  578.023421][T12992] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  578.066624][T12992] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  578.402455][T12992] 8021q: adding VLAN 0 to HW filter on device bond0
[  578.548729][T12992] 8021q: adding VLAN 0 to HW filter on device team0
[  578.581701][ T4990]  loop4: p1 < > p3
[  578.626590][ T4990] loop4: p3 size 134217728 extends beyond EOD, truncated
[  578.636927][   T47] bridge0: port 1(bridge_slave_0) entered blocking state
[  578.644098][   T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[  578.773813][  T993] usb 1-1: USB disconnect, device number 63
[  578.789657][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.796962][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  579.136156][ T5285] 8021q: adding VLAN 0 to HW filter on device eth7
[  579.214255][ T4990]  loop0: p1 < > p3
[  579.251961][ T4990] loop0: p3 size 134217728 extends beyond EOD, truncated
[  581.195270][ T4990]  loop4: p1 < > p3
[  581.264453][    C1] ==================================================================
[  581.272548][    C1] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[  581.281931][    C1] Read of size 1 at addr ffff88802870a010 by task syz.5.2489/13291
[  581.289817][    C1] 
[  581.292125][    C1] CPU: 1 UID: 0 PID: 13291 Comm: syz.5.2489 Not tainted syzkaller #0 PREEMPT(full) 
[  581.292147][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  581.292160][    C1] Call Trace:
[  581.292168][    C1]  <IRQ>
[  581.292176][    C1]  dump_stack_lvl+0xe8/0x150
[  581.292208][    C1]  print_address_description+0x55/0x1e0
[  581.292236][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[  581.292258][    C1]  print_report+0x58/0x70
[  581.292282][    C1]  kasan_report+0x117/0x150
[  581.292314][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[  581.292340][    C1]  llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[  581.292364][    C1]  llc_conn_state_process+0x4fb/0x1380
[  581.292394][    C1]  llc_conn_tmr_common_cb+0x34a/0x780
[  581.292421][    C1]  call_timer_fn+0x192/0x5e0
[  581.292449][    C1]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  581.292472][    C1]  ? call_timer_fn+0xd4/0x5e0
[  581.292500][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  581.292533][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  581.292557][    C1]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  581.292586][    C1]  __run_timer_base+0x652/0x8b0
[  581.292612][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.292641][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  581.292668][    C1]  ? ktime_get+0x1f5/0x220
[  581.292691][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.292713][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.292738][    C1]  run_timer_softirq+0xb7/0x170
[  581.292764][    C1]  handle_softirqs+0x225/0x840
[  581.292787][    C1]  ? __irq_exit_rcu+0xca/0x220
[  581.292812][    C1]  __irq_exit_rcu+0xca/0x220
[  581.292833][    C1]  irq_exit_rcu+0x9/0x30
[  581.292853][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  581.292880][    C1]  </IRQ>
[  581.292886][    C1]  <TASK>
[  581.292894][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  581.292914][    C1] RIP: 0010:strnlen+0x3d/0x90
[  581.292934][    C1] Code: f6 74 5e 4c 8d 34 37 49 bf 00 00 00 00 00 fc ff df 48 89 fb 48 89 f8 48 89 d9 48 c1 e9 03 42 0f b6 0c 39 84 c9 75 12 80 38 00 <74> 35 48 ff c0 48 ff c3 48 ff ce 75 e0 eb 25 89 da 80 e2 07 38 ca
[  581.292950][    C1] RSP: 0018:ffffc9000f2f6f88 EFLAGS: 00000202
[  581.292967][    C1] RAX: ffff888020798920 RBX: ffff888020798920 RCX: 0000000000000000
[  581.292981][    C1] RDX: ffffc90006a94000 RSI: 0000000000000010 RDI: ffff888020798920
[  581.292995][    C1] RBP: 0000000000000000 R08: ffffffff823df4ca R09: 0000000000000000
[  581.293007][    C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000000
[  581.293020][    C1] R13: 0000000000000001 R14: ffff888020798930 R15: dffffc0000000000
[  581.293037][    C1]  ? __update_page_owner_handle+0x5a/0x580
[  581.293066][    C1]  ? page_ext_lookup+0x127/0x180
[  581.293090][    C1]  ? __update_page_owner_handle+0x5a/0x580
[  581.293114][    C1]  __update_page_owner_handle+0x282/0x580
[  581.293140][    C1]  ? __update_page_owner_handle+0x5a/0x580
[  581.293168][    C1]  __set_page_owner+0x10a/0x4c0
[  581.293195][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  581.293218][    C1]  ? seqcount_lockdep_reader_access+0x89/0xc0
[  581.293239][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.293260][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  581.293286][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.293314][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.293338][    C1]  post_alloc_hook+0x1f9/0x250
[  581.293362][    C1]  get_page_from_freelist+0x21fa/0x2270
[  581.293400][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.293426][    C1]  ? prepare_alloc_pages+0x230/0x650
[  581.293454][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[  581.293482][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  581.293510][    C1]  ? __pfx_policy_nodemask+0x10/0x10
[  581.293537][    C1]  ? irqentry_exit+0x218/0x8f0
[  581.293564][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.293586][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.293607][    C1]  ? irqentry_exit+0x218/0x8f0
[  581.293635][    C1]  alloc_pages_mpol+0x212/0x380
[  581.293665][    C1]  folio_alloc_mpol_noprof+0x39/0x160
[  581.293695][    C1]  shmem_alloc_and_add_folio+0x43e/0xf60
[  581.293715][    C1]  ? filemap_get_entry+0xcd/0x3f0
[  581.293736][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.293760][    C1]  ? __pfx_filemap_get_entry+0x10/0x10
[  581.293778][    C1]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  581.293800][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.293822][    C1]  ? shmem_allowable_huge_orders+0x628/0x6c0
[  581.293854][    C1]  shmem_get_folio_gfp+0x5da/0x16d0
[  581.293893][    C1]  shmem_fault+0x179/0x390
[  581.293916][    C1]  __do_fault+0x138/0x2a0
[  581.293941][    C1]  ? do_pte_missing+0x140c/0x34b0
[  581.293964][    C1]  do_pte_missing+0x2215/0x34b0
[  581.293991][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.294015][    C1]  ? handle_mm_fault+0xec/0x3080
[  581.294036][    C1]  handle_mm_fault+0x1b36/0x3080
[  581.294063][    C1]  ? handle_mm_fault+0xec/0x3080
[  581.294086][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  581.294105][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.294127][    C1]  ? follow_page_pte+0x6ce/0xe70
[  581.294151][    C1]  ? __pfx_follow_page_pte+0x10/0x10
[  581.294172][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.294198][    C1]  __get_user_pages+0x1678/0x2720
[  581.294243][    C1]  populate_vma_page_range+0x2be/0x3c0
[  581.294274][    C1]  ? __pfx_populate_vma_page_range+0x10/0x10
[  581.294305][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.294330][    C1]  ? down_read+0x2be/0x330
[  581.294349][    C1]  __mm_populate+0x25f/0x390
[  581.294379][    C1]  ? __pfx___mm_populate+0x10/0x10
[  581.294408][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.294431][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.294455][    C1]  vm_mmap_pgoff+0x353/0x4e0
[  581.294482][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.294507][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  581.294534][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  581.294563][    C1]  ? rcu_is_watching+0x15/0xb0
[  581.294593][    C1]  ? ksys_mmap_pgoff+0xf3/0x760
[  581.294612][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  581.294633][    C1]  ? __x64_sys_mmap+0x7f/0x140
[  581.294661][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.294681][    C1]  do_syscall_64+0x174/0x580
[  581.294709][    C1]  ? trace_irq_disable+0x3b/0x140
[  581.294735][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.294754][    C1] RIP: 0033:0x7f136979de99
[  581.294770][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  581.294785][    C1] RSP: 002b:00007f136a5f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  581.294803][    C1] RAX: ffffffffffffffda RBX: 00007f1369a25fa0 RCX: 00007f136979de99
[  581.294817][    C1] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000
[  581.294831][    C1] RBP: 00007f1369833eaf R08: ffffffffffffffff R09: 0000000000000000
[  581.294844][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  581.294856][    C1] R13: 00007f1369a26038 R14: 00007f1369a25fa0 R15: 00007ffc7160ede8
[  581.294879][    C1]  </TASK>
[  581.294885][    C1] 
[  581.973954][    C1] Allocated by task 13281:
[  581.978346][    C1]  kasan_save_track+0x3e/0x80
[  581.983038][    C1]  __kasan_kmalloc+0x93/0xb0
[  581.987620][    C1]  __kmalloc_cache_noprof+0x32d/0x660
[  581.992979][    C1]  llc_sap_open+0xe1/0x3b0
[  581.997384][    C1]  llc_ui_autobind+0x1f1/0x560
[  582.002141][    C1]  llc_ui_connect+0x1d7/0xd50
[  582.006832][    C1]  __sys_connect+0x323/0x460
[  582.011410][    C1]  __x64_sys_connect+0x7a/0x90
[  582.016293][    C1]  do_syscall_64+0x174/0x580
[  582.020876][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.026777][    C1] 
[  582.029101][    C1] Freed by task 5627:
[  582.033061][    C1]  kasan_save_track+0x3e/0x80
[  582.037724][    C1]  kasan_save_free_info+0x40/0x50
[  582.042736][    C1]  __kasan_slab_free+0x5c/0x80
[  582.047492][    C1]  __rcu_free_sheaf_prepare+0x12d/0x2a0
[  582.053027][    C1]  rcu_free_sheaf+0x31/0x200
[  582.057631][    C1]  rcu_core+0x78b/0x10a0
[  582.061907][    C1]  handle_softirqs+0x225/0x840
[  582.066670][    C1]  do_softirq+0x76/0xd0
[  582.070821][    C1]  __local_bh_enable_ip+0xf8/0x130
[  582.075993][    C1]  tcp_close+0x28/0x110
[  582.080148][    C1]  inet_release+0x143/0x190
[  582.084649][    C1]  sock_close+0xad/0x220
[  582.088884][    C1]  __fput+0x418/0xa50
[  582.092856][    C1]  fput_close_sync+0x11f/0x240
[  582.097629][    C1]  __x64_sys_close+0x7e/0x110
[  582.102328][    C1]  do_syscall_64+0x174/0x580
[  582.107086][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.112963][    C1] 
[  582.115269][    C1] The buggy address belongs to the object at ffff88802870a000
[  582.115269][    C1]  which belongs to the cache kmalloc-2k of size 2048
[  582.129333][    C1] The buggy address is located 16 bytes inside of
[  582.129333][    C1]  freed 2048-byte region [ffff88802870a000, ffff88802870a800)
[  582.143140][    C1] 
[  582.145458][    C1] The buggy address belongs to the physical page:
[  582.151879][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28708
[  582.160655][    C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  582.169143][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  582.176673][    C1] page_type: f5(slab)
[  582.180645][    C1] raw: 00fff00000000040 ffff88801b005000 dead000000000100 dead000000000122
[  582.189225][    C1] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[  582.197796][    C1] head: 00fff00000000040 ffff88801b005000 dead000000000100 dead000000000122
[  582.206542][    C1] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000
[  582.215219][    C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  582.223907][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  582.232556][    C1] page dumped because: kasan: bad access detected
[  582.239126][    C1] page_owner tracks the page as allocated
[  582.244820][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 153, tgid 153 (kworker/u8:8), ts 6673698570, free_ts 6658923115
[  582.265927][    C1]  post_alloc_hook+0x1f9/0x250
[  582.270696][    C1]  get_page_from_freelist+0x21fa/0x2270
[  582.276233][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[  582.282035][    C1]  allocate_slab+0x79/0x5e0
[  582.286517][    C1]  refill_objects+0x2d5/0x350
[  582.291185][    C1]  __pcs_replace_empty_main+0x2bf/0x6b0
[  582.296734][    C1]  __kmalloc_noprof+0x485/0x720
[  582.301578][    C1]  scsi_alloc_target+0x138/0xbd0
[  582.306517][    C1]  __scsi_scan_target+0x164/0xe10
[  582.311600][    C1]  scsi_scan_host_selected+0x3d3/0x7a0
[  582.317061][    C1]  do_scan_async+0x10e/0x660
[  582.321671][    C1]  async_run_entry_fn+0x9d/0x430
[  582.326605][    C1]  process_scheduled_works+0xa8e/0x14e0
[  582.332140][    C1]  worker_thread+0xa47/0xfb0
[  582.336725][    C1]  kthread+0x388/0x470
[  582.340879][    C1]  ret_from_fork+0x514/0xb70
[  582.345462][    C1] page last free pid 24 tgid 24 stack trace:
[  582.351431][    C1]  free_pages_prepare+0x960/0xa60
[  582.356461][    C1]  __free_contig_range_common+0x174/0x340
[  582.362193][    C1]  free_pages_bulk+0x48/0x120
[  582.366895][    C1]  vfree+0x224/0x4a0
[  582.370903][    C1]  delayed_vfree_work+0x55/0x80
[  582.375754][    C1]  process_scheduled_works+0xa8e/0x14e0
[  582.381318][    C1]  worker_thread+0xa47/0xfb0
[  582.385982][    C1]  kthread+0x388/0x470
[  582.390045][    C1]  ret_from_fork+0x514/0xb70
[  582.394713][    C1]  ret_from_fork_asm+0x1a/0x30
[  582.399502][    C1] 
[  582.401806][    C1] Memory state around the buggy address:
[  582.407412][    C1]  ffff888028709f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  582.415481][    C1]  ffff888028709f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  582.423719][    C1] >ffff88802870a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  582.431893][    C1]                          ^
[  582.436460][    C1]  ffff88802870a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  582.444608][    C1]  ffff88802870a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  582.452665][    C1] ==================================================================
[  582.460765][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  582.467943][    C1] CPU: 1 UID: 0 PID: 13291 Comm: syz.5.2489 Not tainted syzkaller #0 PREEMPT(full) 
[  582.477303][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026
[  582.487352][    C1] Call Trace:
[  582.490628][    C1]  <IRQ>
[  582.493453][    C1]  vpanic+0x56c/0xa60
[  582.497516][    C1]  ? rcu_is_watching+0x15/0xb0
[  582.502273][    C1]  ? __pfx_vpanic+0x10/0x10
[  582.506774][    C1]  panic+0xc5/0xd0
[  582.510488][    C1]  ? __pfx_panic+0x10/0x10
[  582.514922][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[  582.521866][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[  582.528461][    C1]  check_panic_on_warn+0x89/0xb0
[  582.533398][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[  582.539972][    C1]  end_report+0x73/0x170
[  582.544210][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[  582.550864][    C1]  kasan_report+0x128/0x150
[  582.555445][    C1]  ? llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[  582.562157][    C1]  llc_conn_ac_send_sabme_cmd_p_set_x+0x38a/0x420
[  582.568572][    C1]  llc_conn_state_process+0x4fb/0x1380
[  582.574032][    C1]  llc_conn_tmr_common_cb+0x34a/0x780
[  582.579412][    C1]  call_timer_fn+0x192/0x5e0
[  582.584008][    C1]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  582.589632][    C1]  ? call_timer_fn+0xd4/0x5e0
[  582.594370][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  582.599500][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  582.604695][    C1]  ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10
[  582.610350][    C1]  __run_timer_base+0x652/0x8b0
[  582.615196][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.620888][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  582.626274][    C1]  ? ktime_get+0x1f5/0x220
[  582.630691][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.636338][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.642168][    C1]  run_timer_softirq+0xb7/0x170
[  582.647019][    C1]  handle_softirqs+0x225/0x840
[  582.651775][    C1]  ? __irq_exit_rcu+0xca/0x220
[  582.656637][    C1]  __irq_exit_rcu+0xca/0x220
[  582.661369][    C1]  irq_exit_rcu+0x9/0x30
[  582.665606][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  582.671274][    C1]  </IRQ>
[  582.674193][    C1]  <TASK>
[  582.677104][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  582.683073][    C1] RIP: 0010:strnlen+0x3d/0x90
[  582.687755][    C1] Code: f6 74 5e 4c 8d 34 37 49 bf 00 00 00 00 00 fc ff df 48 89 fb 48 89 f8 48 89 d9 48 c1 e9 03 42 0f b6 0c 39 84 c9 75 12 80 38 00 <74> 35 48 ff c0 48 ff c3 48 ff ce 75 e0 eb 25 89 da 80 e2 07 38 ca
[  582.707357][    C1] RSP: 0018:ffffc9000f2f6f88 EFLAGS: 00000202
[  582.713413][    C1] RAX: ffff888020798920 RBX: ffff888020798920 RCX: 0000000000000000
[  582.721367][    C1] RDX: ffffc90006a94000 RSI: 0000000000000010 RDI: ffff888020798920
[  582.729334][    C1] RBP: 0000000000000000 R08: ffffffff823df4ca R09: 0000000000000000
[  582.737299][    C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000000
[  582.745258][    C1] R13: 0000000000000001 R14: ffff888020798930 R15: dffffc0000000000
[  582.753255][    C1]  ? __update_page_owner_handle+0x5a/0x580
[  582.759067][    C1]  ? page_ext_lookup+0x127/0x180
[  582.763997][    C1]  ? __update_page_owner_handle+0x5a/0x580
[  582.769799][    C1]  __update_page_owner_handle+0x282/0x580
[  582.775509][    C1]  ? __update_page_owner_handle+0x5a/0x580
[  582.781315][    C1]  __set_page_owner+0x10a/0x4c0
[  582.786257][    C1]  ? __pfx___set_page_owner+0x10/0x10
[  582.791626][    C1]  ? seqcount_lockdep_reader_access+0x89/0xc0
[  582.797696][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.803323][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  582.808536][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.814157][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.819780][    C1]  post_alloc_hook+0x1f9/0x250
[  582.824539][    C1]  get_page_from_freelist+0x21fa/0x2270
[  582.830090][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.835711][    C1]  ? prepare_alloc_pages+0x230/0x650
[  582.840986][    C1]  __alloc_frozen_pages_noprof+0x18d/0x380
[  582.846793][    C1]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  582.853212][    C1]  ? __pfx_policy_nodemask+0x10/0x10
[  582.858505][    C1]  ? irqentry_exit+0x218/0x8f0
[  582.863287][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.868912][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.874570][    C1]  ? irqentry_exit+0x218/0x8f0
[  582.879346][    C1]  alloc_pages_mpol+0x212/0x380
[  582.884195][    C1]  folio_alloc_mpol_noprof+0x39/0x160
[  582.889561][    C1]  shmem_alloc_and_add_folio+0x43e/0xf60
[  582.895177][    C1]  ? filemap_get_entry+0xcd/0x3f0
[  582.900182][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.905803][    C1]  ? __pfx_filemap_get_entry+0x10/0x10
[  582.911242][    C1]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  582.917401][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.923022][    C1]  ? shmem_allowable_huge_orders+0x628/0x6c0
[  582.929002][    C1]  shmem_get_folio_gfp+0x5da/0x16d0
[  582.934201][    C1]  shmem_fault+0x179/0x390
[  582.938628][    C1]  __do_fault+0x138/0x2a0
[  582.942944][    C1]  ? do_pte_missing+0x140c/0x34b0
[  582.947955][    C1]  do_pte_missing+0x2215/0x34b0
[  582.952797][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.958437][    C1]  ? handle_mm_fault+0xec/0x3080
[  582.963467][    C1]  handle_mm_fault+0x1b36/0x3080
[  582.968420][    C1]  ? handle_mm_fault+0xec/0x3080
[  582.973359][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  582.978640][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  582.984263][    C1]  ? follow_page_pte+0x6ce/0xe70
[  582.989194][    C1]  ? __pfx_follow_page_pte+0x10/0x10
[  582.994471][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  583.000097][    C1]  __get_user_pages+0x1678/0x2720
[  583.005226][    C1]  populate_vma_page_range+0x2be/0x3c0
[  583.010685][    C1]  ? __pfx_populate_vma_page_range+0x10/0x10
[  583.016675][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  583.022351][    C1]  ? down_read+0x2be/0x330
[  583.026766][    C1]  __mm_populate+0x25f/0x390
[  583.031368][    C1]  ? __pfx___mm_populate+0x10/0x10
[  583.036473][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  583.042093][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  583.047751][    C1]  vm_mmap_pgoff+0x353/0x4e0
[  583.052412][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  583.058209][    C1]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  583.063321][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  583.068513][    C1]  ? rcu_is_watching+0x15/0xb0
[  583.073301][    C1]  ? ksys_mmap_pgoff+0xf3/0x760
[  583.078137][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  583.083756][    C1]  ? __x64_sys_mmap+0x7f/0x140
[  583.088593][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.094697][    C1]  do_syscall_64+0x174/0x580
[  583.099379][    C1]  ? trace_irq_disable+0x3b/0x140
[  583.104405][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.110300][    C1] RIP: 0033:0x7f136979de99
[  583.114707][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  583.134305][    C1] RSP: 002b:00007f136a5f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  583.142765][    C1] RAX: ffffffffffffffda RBX: 00007f1369a25fa0 RCX: 00007f136979de99
[  583.150749][    C1] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000
[  583.158713][    C1] RBP: 00007f1369833eaf R08: ffffffffffffffff R09: 0000000000000000
[  583.166665][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  583.174630][    C1] R13: 00007f1369a26038 R14: 00007f1369a25fa0 R15: 00007ffc7160ede8
[  583.182616][    C1]  </TASK>
[  583.186007][    C1] Kernel Offset: disabled
[  583.190322][    C1] Rebooting in 86400 seconds..