last executing test programs:

9m34.138907077s ago: executing program 32 (id=587):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x42, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)

8m23.392697058s ago: executing program 2 (id=752):
syz_emit_ethernet(0xbe, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

8m23.005717557s ago: executing program 2 (id=754):
socket(0x10, 0x3, 0x0)
r0 = msgget$private(0x0, 0x1ba)
msgsnd(r0, 0x0, 0x0, 0x800)
msgrcv(r0, 0x0, 0x0, 0x3, 0x1c00)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, 0x0, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0x43)
syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x40, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x180)
socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000f8100000086dd60fec00000103a0020010000000000000000000000000001ff0200000000000000000000000000019000907800010002000000e7ff000a6f"], 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e)

8m20.387689699s ago: executing program 2 (id=759):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sk_reuseport=0x5a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r4, 0x0, 0x0)
lseek(r4, 0xfffffffffffffff5, 0x1)
syz_open_procfs(0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"})
mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3a85821, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

8m12.897701166s ago: executing program 2 (id=777):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
socket(0x11, 0x2, 0xd)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a5a440000000010109024400010100000009040000030306000005240600"], 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x4000, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x200009, @loopback={0xff00000000000000}, 0x2}, 0x1c)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0)
preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x70, 0x0)

8m6.666474223s ago: executing program 2 (id=792):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r3}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x2}}}}}, 0x0)

8m4.137583713s ago: executing program 2 (id=798):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
sendmmsg$inet6(r1, &(0x7f0000000a80), 0x0, 0x4c040)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neonbs\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r0, 0x0, 0x0, 0x80800)
r5 = fcntl$getown(r0, 0x9)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r5)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x8201, 0x0)
ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000000)={0x1c, 0xffffffff, 0x11, 0x12, 0x5, 0x8, 0x0, 0x126, 0xffffffffffffffff})

8m3.659267604s ago: executing program 33 (id=798):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
sendmmsg$inet6(r1, &(0x7f0000000a80), 0x0, 0x4c040)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neonbs\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r0, 0x0, 0x0, 0x80800)
r5 = fcntl$getown(r0, 0x9)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r5)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0), 0x8201, 0x0)
ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000000)={0x1c, 0xffffffff, 0x11, 0x12, 0x5, 0x8, 0x0, 0x126, 0xffffffffffffffff})

7m56.736681858s ago: executing program 5 (id=819):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0)
socket(0x15, 0x5, 0x0)
write(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/my_zoned_dev/zoned\x00', 0x200802, 0x26)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b33, &(0x7f0000000000)={'wlan1\x00'})
write(r1, &(0x7f0000000240)='1\x00', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0)
fanotify_init(0x0, 0x1)
write(r2, &(0x7f00000002c0)='1', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/my_zoned_dev\x00', 0x2, 0x0)
read(r3, &(0x7f0000000400), 0x200)

7m54.796902414s ago: executing program 5 (id=822):
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r4}, 0xb)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r4, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r5, 0x5)
poll(&(0x7f0000000180)=[{r5, 0x6046}], 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x400}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x80401, 0x11b)

7m53.595231312s ago: executing program 5 (id=823):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000900)="91f8b984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922d7a597332207a21108fa20bf1f802970700f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb5221c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de9851ff5c85244beacba25d854577d68ca555e88fc249340ab9be88680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1ffffffffacaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314020000000000000026283f803d9c60eb5e9320574a599d763952148fb2bd655e900c850243e43246c70a3b726706317b0d87a001ce1972a24ba7a5e294243829ead8f34d4d74010168", 0x1ba}, {&(0x7f0000000640)="44900001000056ee66c372f3105eb186dd8062fad2d5b59fb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8bba4154f0013000000000000000000001c8a9f7956583e", 0xd5}], 0x2}}], 0x1, 0x420d1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)
write(r0, &(0x7f0000001e00)="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", 0x314)

7m53.25218416s ago: executing program 5 (id=824):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

7m52.723865813s ago: executing program 5 (id=825):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r0=>0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r0}, 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x1, 0x355, 0x40000507, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x20048090)

7m47.900271567s ago: executing program 5 (id=833):
syz_emit_vhci(0x0, 0x7)

7m46.423720662s ago: executing program 34 (id=833):
syz_emit_vhci(0x0, 0x7)

6m57.903386608s ago: executing program 0 (id=929):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1e0, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1a4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x194, 0x1, [@m_tunnel_key={0x190, 0xf, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x11c, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xec}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x200000c1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4204, r3, 0x405, &(0x7f0000000000)={0x0})
r4 = socket(0x10, 0x803, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x0, 0x0, 0x32315659, 0x7, 0x0, [{}, {0xfffffffd}, {0x0, 0x1}, {}, {}, {}, {}, {0x80000000, 0xffff}]}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000050900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0)
sendto(r4, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0)

6m55.467535695s ago: executing program 0 (id=934):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@local, 0x4d4, 0x32}, @in=@empty, {0x7, 0x0, 0xfffffffffffffff6, 0x8, 0xa, 0x0, 0x0, 0x3}, {0x703, 0x0, 0x5, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd2c, 0x0, 0x2, 0x1, 0x0, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, 0x0)
r8 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)

6m50.918845943s ago: executing program 0 (id=941):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c080}, 0x200000c1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
ptrace(0x10, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000050900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0)
sendto(r3, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

6m45.636266328s ago: executing program 0 (id=945):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000800000008"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10)

6m43.980189327s ago: executing program 0 (id=951):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@local, 0x4d4, 0x32}, @in=@empty, {0x7, 0x0, 0xfffffffffffffff6, 0x8, 0xa, 0x0, 0x0, 0x3}, {0x703, 0x0, 0x5, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd2c, 0x0, 0x2, 0x1, 0x0, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, 0x0)
r8 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)

6m39.595902741s ago: executing program 0 (id=955):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1e0, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1a4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x194, 0x1, [@m_tunnel_key={0x190, 0xf, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x11c, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xec}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x200000c1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4204, r3, 0x405, &(0x7f0000000000)={0x0})
r4 = socket(0x10, 0x803, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x0, 0x0, 0x32315659, 0x7, 0x0, [{}, {0xfffffffd}, {0x0, 0x1}, {}, {}, {}, {}, {0x80000000, 0xffff}]}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000050900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0)
sendto(r4, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0)

6m21.948867027s ago: executing program 35 (id=955):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1e0, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1a4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x194, 0x1, [@m_tunnel_key={0x190, 0xf, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x11c, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xec}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x200000c1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4204, r3, 0x405, &(0x7f0000000000)={0x0})
r4 = socket(0x10, 0x803, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000003c0)={0x2, @pix_mp={0x0, 0x0, 0x32315659, 0x7, 0x0, [{}, {0xfffffffd}, {0x0, 0x1}, {}, {}, {}, {}, {0x80000000, 0xffff}]}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000050900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0)
sendto(r4, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0)

3m27.046674849s ago: executing program 7 (id=1406):

3m26.741960557s ago: executing program 7 (id=1409):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x174, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x138, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x128, 0x1, [@m_tunnel_key={0x124, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0xf3, 0x6, "49faabd009eada9d7be60c407dafa92f49e8cd3a8f4fa8421129f6125120e80ad1f39b81fe547f4b02f63246313a813a99ecef91e6d9ef24aa123d4ec0ae96adae785c4e501ba800b202cd14d8c0016fc9c4f3ebc53feced9d30abb38c8943dce2293b002415feb1aef9c5838b7441da572c3dbb88fe9a038660b5a726819d6ad3215a715506b990b3cb6a94b4814c025cfb8359678b0dd3a6886ec72652cec96df5e599c2c7d49b94ccd0116b5bcb9e6a48d3be2143e13600975b0c946fb2fcae25e81417995eedb102167ea7b317003e635164b818a467e27cc7199cf942f5ce1fa46815aff9391dd97ef585c6a2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xec}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x174}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3m25.593296513s ago: executing program 7 (id=1413):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m25.500695396s ago: executing program 7 (id=1414):
socket$packet(0x11, 0x3, 0x300)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
socket(0x11, 0x2, 0xd)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000303060000052406000005240000000d24"], 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
shutdown(0xffffffffffffffff, 0x1)
sendto$inet6(0xffffffffffffffff, 0x0, 0x4000, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x200009, @loopback={0xff00000000000000}, 0x2}, 0x1c)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0)
preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x70, 0x0)

3m22.103501746s ago: executing program 7 (id=1417):
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='0fc5:1227:id', 0xc)

3m19.144091206s ago: executing program 7 (id=1426):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)

3m16.938323918s ago: executing program 36 (id=1426):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)

1m36.235207977s ago: executing program 9 (id=1773):
openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x40600, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
setsockopt(r1, 0x84, 0x7f, &(0x7f00000001c0), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(r0, 0x5, &(0x7f0000000100)=0x8001)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0)

1m32.623184132s ago: executing program 9 (id=1778):
syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x7, 0xc9, 0x2, 0xfffd}}}, 0x9)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

1m31.88015486s ago: executing program 9 (id=1782):
getpid()
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1)
r1 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={<r2=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r3 = socket$inet6(0xa, 0x3, 0x3c)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r2})
r4 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4)
ioctl(r4, 0x8916, &(0x7f0000000000))
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
setrlimit(0x7, 0x0)
sendmmsg$inet6(r5, &(0x7f00000056c0), 0x0, 0x8804)

1m31.482358239s ago: executing program 9 (id=1785):
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x800010, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x47c, &(0x7f0000000640)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x8, &(0x7f0000000e00)=<r1=>0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x100001, 0x6200, 0x0, 0x0, 0x18, 0x0, "ef359f415eb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e60600000005b9aafab4af903018e2f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4]})
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0xffef, 0x0, 0x0, r2}])

1m30.483834993s ago: executing program 9 (id=1789):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sk_reuseport=0x5a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r4, 0x0, 0x0)
lseek(r4, 0xfffffffffffffff5, 0x1)
syz_open_procfs(0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x949, 0x0, 0x2}]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"})
mount$bpf(0x0, 0x0, 0x0, 0x3a85821, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

1m29.77611884s ago: executing program 9 (id=1790):
syz_usb_connect(0x0, 0x32, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000440)={[{@nobarrier}, {@nodatasum}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@nodatacow}, {@flushoncommit}, {@datacow}, {@space_cache_v1}, {@nodiscard}, {@clear_cache}, {@enospc_debug}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendfile(r0, r2, 0x0, 0x20fffe82)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0xc400941b, &(0x7f0000000000)={0x1, 0x1400})

1m29.245879892s ago: executing program 37 (id=1790):
syz_usb_connect(0x0, 0x32, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000440)={[{@nobarrier}, {@nodatasum}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {@nodatacow}, {@flushoncommit}, {@datacow}, {@space_cache_v1}, {@nodiscard}, {@clear_cache}, {@enospc_debug}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendfile(r0, r2, 0x0, 0x20fffe82)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0xc400941b, &(0x7f0000000000)={0x1, 0x1400})

8.803877433s ago: executing program 8 (id=2061):
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x2)
keyctl$read(0x1d, 0x0, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r2 = syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(0x0, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRES16=r3, @ANYRES32], 0x1, 0x26c, &(0x7f0000000340)="$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")
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0)
setreuid(0x0, 0x0)

5.981615719s ago: executing program 4 (id=2076):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000050)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2020, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="2000000010000107000000000000000003"], 0x20}}, 0x4000084)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ppoll(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0xfc92)

5.816106043s ago: executing program 3 (id=2078):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x188, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x178, 0x1, [@m_tunnel_key={0x174, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x141, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xec}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})

5.480282101s ago: executing program 3 (id=2080):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000180)={[{@lazytime}, {@errors_remount}, {@noquota}, {@lazytime}], [{@obj_role={'obj_role', 0x3d, 'lazytime'}}, {@euid_lt={'euid<', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}]}, 0x2, 0x54a, &(0x7f0000000b40)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000380)={[{@stripe={'stripe', 0x3d, 0x1}}, {@acl}, {@inlinecrypt}, {@delalloc}, {@noacl}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@grpquota}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x3, 0x100000008, 0x0, 0x1, 0x5, 0x3, 0xc, 0x37b7, 0xe9, 0x7f, 0x6, 0x7, 0x0, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40})
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x3}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
lchown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0)
chdir(&(0x7f0000000300)='./file0\x00')
open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)

5.419897832s ago: executing program 8 (id=2081):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
setuid(0xee01)
fchown(r0, 0x0, 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x1d0, 0x1d0, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xa8, 0x6b}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@srh={{}, {0xc, 0x2, 0x4, 0x3, 0x9, 0x2, 0x3008}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x186)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff})
readv(r2, &(0x7f0000000740)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000500)=""/4092, 0x100000})
sendto$inet6(r1, 0x0, 0x0, 0x20004001, 0x0, 0x0)

5.167466368s ago: executing program 3 (id=2082):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='iocharset=euc-jp,codepage=macturkish,gid=', @ANYRESHEX=0x0, @ANYBLOB=',quiet,file_umask=00000000000000000000010,dir_umask=00000000000000000000010,part=0x0000000000000008,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c00b5da9d1423dd002677aa1201e709a1d87a5d98dd2d573f736e6187cdccc9836cd3a59342771e3be9d5a347f287a519daaae09a721e14b3df1c8b3936683409026968b019ef655268ae6bc2e6538f397c76c0376ccefb655a71bea92591b7cef711e5315a9e43e69a9ff0c92afd7c8092f1d092e2bf4a38695f12f941e2ea2b7514287242d039208f3a91ce5865b6d0650372cc6345c31c475e32bcfae8d07db6"], 0x5, 0x2d1, &(0x7f0000000600)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, 0x0, 0x0, 0x2000, 0x0, 0x3)

5.119114859s ago: executing program 6 (id=2083):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x6, 0x10000}, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

4.940031674s ago: executing program 3 (id=2084):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_remount}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f00000003c0)={{0x6, 0x2}, 0x100, './file2\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r3 = io_uring_setup(0x52f1, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e})
io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x13, &(0x7f0000001bc0), 0x2)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', <r5=>0x0})
r6 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCMSET(r6, 0x5418, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x9, 0xfff1}}}, 0x24}}, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000500)=@v2={0x2000000, [{0x0, 0x7}, {0x2, 0x6}]}, 0x14, 0x3)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000100))

4.881574805s ago: executing program 4 (id=2085):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000040000000e"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

4.844984476s ago: executing program 6 (id=2087):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfffffffb, @private2}, 0x1c)

4.588124832s ago: executing program 6 (id=2088):
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28010000010201020000000000000000000000060900060073797a30000000000800084000000002bc0001"], 0x128}}, 0x800)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x44)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33)

4.532674133s ago: executing program 4 (id=2090):
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33)
recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {0x0}, {0x0}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x7}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42)
recvmsg(r0, &(0x7f0000002f00)={0x0, 0x0, 0x0}, 0x20)

4.318356808s ago: executing program 6 (id=2092):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x800000, @rand_addr, 0xcbc2}, 0x1c)
listen(r0, 0x3)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)
syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x351, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x80, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x401, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb, 0x2, 0xfb, {0x7, 0x25, 0x1, 0x4, 0xd, 0x7ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x4, 0x1, {0x7, 0x25, 0x1, 0x8, 0xa, 0x1000}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
shutdown(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x9}}}}}}, 0x0)

4.200111741s ago: executing program 4 (id=2093):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}, [{0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040851}, 0x4045080)

3.576101006s ago: executing program 1 (id=2096):
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_int(r1, 0x1, 0x4a, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xaa3ffbcefb348c97}}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), 0x0, 0x2}, 0x20)

3.575803306s ago: executing program 8 (id=2097):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

3.561683376s ago: executing program 4 (id=2098):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, 0x0, 0x0}, 0x20)

3.174619855s ago: executing program 4 (id=2099):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="20014000000020"], 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20012900000005"], 0x0})

3.068118008s ago: executing program 8 (id=2100):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000040000000e"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

2.844531243s ago: executing program 8 (id=2101):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed)
mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/25/smp_affinity\x00', 0x1, 0x4)
write(r1, &(0x7f0000000300), 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc"], 0xfc}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x81, 0x800001000891}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
getegid()
writev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="69d5aa68e89fbc2d8db729bf2a0b113a96475ccf3e62c93d6f18bfc6635cb9e889daedfe5db71564af26d0edeb7cc48ae5b9d19e2e6d1927c25a94b3dee13969fc", 0x41}, {&(0x7f0000000480)}], 0x3)
mount(0x0, 0x0, &(0x7f0000000040)='pstore\x00', 0x43010, 0x0)
mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00')

2.568346019s ago: executing program 6 (id=2102):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

1.773534299s ago: executing program 1 (id=2103):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.570539804s ago: executing program 8 (id=2104):
r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000840)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, &(0x7f0000000100)={0x0, 0x6, 0x2, {0x2, 0x22}}, 0x0}, &(0x7f0000000680)={0x44, &(0x7f0000000440)={0x0, 0x13, 0xc, "a14a5f1f133c7d401a542d74"}, 0x0, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xb0}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x89, 0x2}})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)

1.500126875s ago: executing program 1 (id=2105):
getpid()
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
r1 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={<r2=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r3 = socket$inet6(0xa, 0x3, 0x3c)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r2})
r4 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0)
ioctl(r4, 0x8916, &(0x7f0000000000))
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
setrlimit(0x7, 0x0)
sendmmsg$inet6(r5, &(0x7f00000056c0), 0x0, 0x8804)

1.196804432s ago: executing program 1 (id=2106):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='iocharset=euc-jp,codepage=macturkish,gid=', @ANYRESHEX=0x0, @ANYBLOB=',quiet,file_umask=00000000000000000000010,dir_umask=00000000000000000000010,part=0x0000000000000008,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c00b5da9d1423dd002677aa1201e709a1d87a5d98dd2d573f736e6187cdccc9836cd3a59342771e3be9d5a347f287a519daaae09a721e14b3df1c8b3936683409026968b019ef655268ae6bc2e6538f397c76c0376ccefb655a71bea92591b7cef711e5315a9e43e69a9ff0c92afd7c8092f1d092e2bf4a38695f12f941e2ea2b7514287242d039208f3a91ce5865b6d0650372cc6345c31c475e32bcfae8d07db6"], 0x5, 0x2d1, &(0x7f0000000600)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, 0x0, 0x0, 0x2000, 0x0, 0x3)

1.111767794s ago: executing program 3 (id=2107):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0)
r1 = syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276", @ANYBLOB="7ed4555f5cda4ad6fffa06007c08910fee0c584d70b633fa2cff63b62203a2a17b4e158f40576256fd59903626fe76262552fa2965391e4daeb9f0aa3241d85987eff7d9155347c6a7ae07082fc4d1f5d99dd830abc96cd96d18bdbc", @ANYBLOB, @ANYRES64=r0, @ANYRES32=r0], 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000380)={0x20, 0x17, 0x98, "c96a6401cba6760d815fc0bc7719039576f54c397a725b0bad1019a058c108d3bfaf784d70d159fdd8bf0b69bf7adc21dbd01e25f976d2d72b9ff5af28071c7e9b3fd15cb04bc1f565a92e9bb5225a8850c0209c00666486cce5de49a22ed54e944581d84d8a36b11a07d18b06a733e0e74bedd5dc96e20d568063e3a03d2022bc51911b46ae3a09bd5073072cba5301b7611831e7a59f06"}, 0x0, 0x0})
r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0xf, 0x6c, 0x26, 0x20, 0xccd, 0xab, 0x9938, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x80, 0x9, 0x0, 0x0, "", [{{0x9, 0x4, 0x22, 0x9, 0x0, 0x1, 0xd1, 0x41, 0x4}}]}}]}}, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, &(0x7f0000001c40)={0x14, 0x0, &(0x7f0000001c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000002cc0)={0x24, 0x0, &(0x7f0000002c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0}, 0x0)
syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0)
syz_usb_disconnect(r3)
r4 = syz_open_dev$evdev(0x0, 0x2, 0x862b01)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x52, 0xfffb, 0x1, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x23, 0x0, 0x2a, 0x4, 0x8000, 0x400}, {0xf, 0x9, 0x4, 0xffff, 0x6, 0x731}]})
write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="2013052f4b3000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

944.144648ms ago: executing program 1 (id=2108):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}, [{0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040851}, 0x4045080)

329.293202ms ago: executing program 1 (id=2109):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0)
syz_usb_connect(0x5, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001d4f86540d804830047da000003010902380001020840b3090400b201020201e6022406"], 0x0)
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)="fe")
r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0xffff, 0x2])

112.902408ms ago: executing program 6 (id=2110):
r0 = syz_usb_connect_ath9k(0x3, 0xb7, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45}}]}}, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r2, 0x5b02, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r0)
r3 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_connect(0x5, 0xda, 0x0, 0x0)
write$char_usb(r4, &(0x7f0000000340)="3bcc2e920728d006b961b4a5e8882773ebf10eb8e6c959d829f4fb6eb1fe13f1f1000000808a579990bf74ea1fedd6a22b2b0609800d4a7744bebbe2843df8ec73345f1a42f5", 0x46)
syz_usb_disconnect(r3)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x300, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_connect$hid(0x3, 0x36, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef"], 0x0)
r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x7, 0x80140)
r7 = syz_open_dev$hidraw(&(0x7f0000000640), 0x100000000, 0x420082)
write$hidraw(r7, &(0x7f00000008c0)="88277b25593416685e8965e458f831d73642e99fd8157b596a50cac4536db431746698ed10ad4e006ef159dd017501364c21ed5b825090db34e72dac11017aca24367855587820736efb09c40497b7631e1d2a5591bad595e88801ba6ab3dc9e7d2a0305a4219ae7527734e9a40948223dc03b590c8fb1b94321", 0x7a)
ioctl$HIDIOCGVERSION(r6, 0x80044801, &(0x7f0000000240))
syz_usb_connect$uac2(0x2, 0x98, &(0x7f0000000000)=ANY=[], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x7, [{0xc4, &(0x7f0000000100)=@string={0xc4, 0x3, "08b5bb1b30286f80b7591098afb82cc465c603a8bfb5c09c14e0dabb354574fc9bf5e94e76e0e0bb0dab081461f3087313937deadcc4135372044def4b15ae2706bd397e3f7dca7812cb1dfac88eeb54116c5dcdd72c6f76d7c1e7fc793443229e4aec66e4e84625792d0af820e1bb97c3507fd2419c278efb9cde7feb7b02fa5668111563373cc773032c6850e1817c7db5ed652e685e34c078b67eb645a536e9b9daf92f2de43fbbba71becfef0110640fcbabc06208f7d5b644e30d5645a89ff6"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c29}}, {0x13, &(0x7f00000004c0)=@string={0x13, 0x3, "4ffcf52c2451fee524c8f1b5e149aaaa04"}}, {0xc5, &(0x7f0000000500)=@string={0xc5, 0x3, "5c2fdb8e2affa3fbc190294800cdf57da0a8af3fa15f6219db90f1f579760805b861fe022b08a001a27ba62a2e348c2659e916eebbe1b9d156b59b4b430dd4ed61ff8e24bca407dd2e7fed841b6c931613e616e891038b8f270050e1076af4984b5482b1ab49a060e350a5f12aaf4fb036c5b569e5d1e4b43b066609aa7bfa6c6649c8d3c72cecdfb51a95e9f52ce0f6bb68783e8cb2b63eaa53312954f96436cabec236a5192606498f92daf7c0527b9f1fea70a807d27c75f956588694647fe08630"}}, {0xc0, &(0x7f0000000740)=@string={0xc0, 0x3, "6e1bb824291728df23976a2ce9375f2a47092b9f1b86bb686648bcfe654b06ac7a08c8dde6b90f940de64f446c7c4d9fedf687ddf8920aa33d79e81e1e5ac6f6ade1e6cb51e6e11f003eb0570ce0ed082a29ef5e0879847334e54de6285b395b49087430b034e7c7d5a7630e673bd44bc104849effe4796f34af2ebe8db15f1affbad4ae676dcd25b52bab95448c3f2a416bdcd088ac635cf4e2f888f05d5958b313ceac34ba83f80e8c86b0a22014ababe4c14b3db5c5d693233db98069"}}, {0x1d, &(0x7f0000000800)=@string={0x1d, 0x3, "ada990e1b6cde65fd04c3714e6315e83e1a67ac11b00302b6fac72"}}]})
r8 = syz_open_dev$evdev(&(0x7f0000005bc0), 0x4, 0x100)
ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f0000000040)={0x8, 0x12, 0xf, 0xfffffe00, "20d5907eab8a72ce0d1da80da3f1dcb6f73cbbc8af6df1cc7a71b3fd92a5cd22"})

0s ago: executing program 3 (id=2111):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200008c6, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61736b3d309a02003030303030303030303135322c696f63686172e8ffffff69736f383835392d312c6769643d00000000000000", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRESOCT], 0x81, 0x14ff, &(0x7f0000002a80)="$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")
lchown(&(0x7f0000000140)='./file0/file0\x00', 0xee00, 0x0)
fdatasync(r1)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000380), &(0x7f00000000c0)=r3}, 0x20)
ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$inet6(0xa, 0x2, 0x3a)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0xfffffffb, @private2}, 0x1c)

kernel console output (not intermixed with test programs):

71361][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  586.690016][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  586.712462][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  586.719797][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  586.970050][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.7.984'.
[  588.064908][ T4491] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.549643][ T4288] Bluetooth: hci2: Unknown advertising packet type: 0x20
[  588.549766][ T4288] Bluetooth: hci2: Malformed LE Event: 0x0d
[  588.782285][ T4288] Bluetooth: hci5: command 0x0409 tx timeout
[  591.133427][ T4286] Bluetooth: hci5: command 0x041b tx timeout
[  591.352463][ T4491] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.615660][ T4491] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.839912][ T4491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.374213][ T8157] chnl_net:caif_netlink_parms(): no params data found
[  592.830657][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.871315][ T8157] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.901629][ T8157] device bridge_slave_0 entered promiscuous mode
[  592.972491][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.979628][ T8157] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.059578][ T8157] device bridge_slave_1 entered promiscuous mode
[  593.201206][ T4286] Bluetooth: hci5: command 0x040f tx timeout
[  593.508736][ T8232] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8232]
[  593.892739][ T4288] Bluetooth: hci4: Malformed LE Event: 0x0d
[  593.976897][ T8157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  594.277663][ T8157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  594.345800][ T8239] loop7: detected capacity change from 0 to 128
[  594.441448][ T8239] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  594.506767][ T8239] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  594.541937][ T8157] team0: Port device team_slave_0 added
[  594.590127][ T8157] team0: Port device team_slave_1 added
[  595.246061][ T4288] Bluetooth: hci2: Unknown advertising packet type: 0x20
[  595.246171][ T4288] Bluetooth: hci2: Malformed LE Event: 0x0d
[  595.261347][ T4286] Bluetooth: hci5: command 0x0419 tx timeout
[  595.486203][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  595.522977][ T7475] EXT4-fs (loop7): unmounting filesystem.
[  595.567616][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  596.376988][ T8157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  596.662916][ T8157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  596.670178][ T8157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  597.602254][ T8157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  597.707330][ T8157] device hsr_slave_0 entered promiscuous mode
[  597.722269][ T8157] device hsr_slave_1 entered promiscuous mode
[  597.737135][ T8157] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  597.752116][ T8157] Cannot create hsr debugfs directory
[  598.763599][ T4491] device hsr_slave_0 left promiscuous mode
[  598.787589][ T4491] device hsr_slave_1 left promiscuous mode
[  599.004425][ T4491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  599.021213][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_0
[  599.032602][ T4491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  599.040083][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_1
[  599.057257][ T4491] device bridge_slave_1 left promiscuous mode
[  599.063726][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.079561][ T4491] device bridge_slave_0 left promiscuous mode
[  599.086571][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.129142][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d
[  599.403689][ T4491] device veth1_macvtap left promiscuous mode
[  599.872350][ T4491] device veth0_macvtap left promiscuous mode
[  599.898982][ T4491] device veth1_vlan left promiscuous mode
[  599.962390][ T4491] device veth0_vlan left promiscuous mode
[  600.055312][ T8298] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7351] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8298]
[  600.551103][ T8300] overlayfs: failed to clone upperpath
[  601.294878][ T4290] Bluetooth: hci4: Unknown advertising packet type: 0x20
[  601.294994][ T4290] Bluetooth: hci4: Malformed LE Event: 0x0d
[  603.811910][   T26] audit: type=1800 audit(1786422401.547:86): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1019" name="memory_backed" dev="configfs" ino=46191 res=0 errno=0
[  603.871194][   T26] audit: type=1800 audit(1786422401.567:87): pid=8333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1019" name="power" dev="configfs" ino=46195 res=0 errno=0
[  606.186415][ T4491] team0 (unregistering): Port device team_slave_1 removed
[  606.351587][ T4491] team0 (unregistering): Port device team_slave_0 removed
[  606.531586][ T4491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  606.695567][ T8350] overlayfs: failed to clone upperpath
[  607.021311][ T4290] Bluetooth: hci4: Malformed LE Event: 0x0d
[  607.389507][ T4491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  609.751492][ T4491] bond0 (unregistering): Released all slaves
[  610.078035][ T8157] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  611.351005][ T4290] Bluetooth: hci1: command 0x0406 tx timeout
[  611.442174][ T8157] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  611.537113][ T8157] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  611.601598][ T8157] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  611.856758][ T8157] 8021q: adding VLAN 0 to HW filter on device bond0
[  611.949619][ T8157] 8021q: adding VLAN 0 to HW filter on device team0
[  611.994286][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  612.022499][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  612.051305][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  612.078555][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  612.126853][ T4524] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.134116][ T4524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  612.408834][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  612.442292][ T4288] Bluetooth: hci2: Malformed LE Event: 0x0d
[  612.543453][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  612.736970][ T4524] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.744189][ T4524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  612.971676][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  613.328709][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  614.472752][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  614.524775][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  614.564879][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  614.682237][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  614.701655][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  614.822002][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  614.830890][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  614.864724][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  615.353535][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  615.669224][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  616.573610][ T4288] Bluetooth: hci3: Unknown advertising packet type: 0x20
[  616.573650][ T4288] Bluetooth: hci3: Malformed LE Event: 0x0d
[  617.831549][ T4288] Bluetooth: hci3: Malformed LE Event: 0x0d
[  618.741413][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  618.774076][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  618.928641][ T8157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  620.809049][ T4288] Bluetooth: hci2: Unknown advertising packet type: 0x20
[  620.809193][ T4288] Bluetooth: hci2: Malformed LE Event: 0x0d
[  621.563530][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1054'.
[  622.027265][ T4288] Bluetooth: hci2: Malformed LE Event: 0x0d
[  623.547097][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  623.575928][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  623.757908][ T8157] device veth0_vlan entered promiscuous mode
[  623.765646][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  623.777433][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  623.795157][ T8157] device veth1_vlan entered promiscuous mode
[  623.812935][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  623.822452][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  623.891667][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  624.048537][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  624.096390][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  624.126834][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  624.137794][ T8157] device veth0_macvtap entered promiscuous mode
[  624.224262][ T8157] device veth1_macvtap entered promiscuous mode
[  624.304632][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.311858][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  624.339916][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.531004][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.561006][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.709718][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.771006][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  624.838631][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  624.905967][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  624.998612][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  625.022140][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  625.126750][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  625.140300][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  625.189775][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  625.388258][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  625.522936][ T4290] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  625.522979][ T4290] Bluetooth: hci1: Malformed LE Event: 0x0d
[  625.742899][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  625.802505][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  625.992953][ T8157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  626.055374][ T8157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  626.141582][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d
[  626.500988][ T4290] Bluetooth: hci4: command 0x0406 tx timeout
[  626.802548][ T8157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  626.817812][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  626.862999][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  626.910184][ T8157] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  626.941257][ T8157] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  627.021268][ T8157] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  627.063672][ T8157] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  628.354003][ T7971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.392909][ T7971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.478647][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  628.517575][ T7971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.561837][ T7971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.641615][ T7971] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  629.713074][ T4290] Bluetooth: hci1: Malformed LE Event: 0x0d
[  632.471455][ T4290] Bluetooth: hci4: Unknown advertising packet type: 0x20
[  632.471569][ T4290] Bluetooth: hci4: Malformed LE Event: 0x0d
[  634.199690][ T4290] Bluetooth: hci2: Malformed LE Event: 0x0d
[  648.084258][ T8744] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  648.242095][   T26] audit: type=1800 audit(1786422445.977:88): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1119" name="memory_backed" dev="configfs" ino=46924 res=0 errno=0
[  648.364917][   T26] audit: type=1800 audit(1786422446.007:89): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1119" name="power" dev="configfs" ino=46928 res=0 errno=0
[  648.645506][ T8787] netlink: 'syz.8.1123': attribute type 10 has an invalid length.
[  648.715390][ T8787] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1123'.
[  648.741358][ T8787] device team0 entered promiscuous mode
[  648.761588][ T8787] device team_slave_0 entered promiscuous mode
[  648.811332][ T8787] device team_slave_1 entered promiscuous mode
[  648.848560][ T8787] bridge0: port 3(team0) entered blocking state
[  648.894975][ T8787] bridge0: port 3(team0) entered disabled state
[  648.919689][ T8787] bridge0: port 3(team0) entered blocking state
[  648.926162][ T8787] bridge0: port 3(team0) entered forwarding state
[  652.792020][ T8817] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  654.174889][   T26] audit: type=1800 audit(1786422451.907:90): pid=8851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1133" name="memory_backed" dev="configfs" ino=47035 res=0 errno=0
[  654.247664][   T26] audit: type=1800 audit(1786422451.907:91): pid=8851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1133" name="power" dev="configfs" ino=47039 res=0 errno=0
[  658.602131][ T8877] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  659.492166][   T26] audit: type=1800 audit(1786422457.227:92): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1152" name="memory_backed" dev="configfs" ino=47981 res=0 errno=0
[  659.524480][ T8899] netlink: 'syz.1.1153': attribute type 10 has an invalid length.
[  659.597004][   T26] audit: type=1800 audit(1786422457.247:93): pid=8897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1152" name="power" dev="configfs" ino=47986 res=0 errno=0
[  659.682066][ T8899] team0: Port device virt_wifi0 added
[  662.016864][ T8922] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  662.724130][   T26] audit: type=1800 audit(1786422460.457:94): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1165" name="memory_backed" dev="configfs" ino=48033 res=0 errno=0
[  662.841126][   T26] audit: type=1800 audit(1786422460.467:95): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1165" name="power" dev="configfs" ino=48037 res=0 errno=0
[  664.743006][ T8966] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  666.522924][ T8990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1179'.
[  666.571139][ T8990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1179'.
[  666.627541][ T8991] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1179'.
[  666.692309][ T8990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1179'.
[  666.928280][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1180'.
[  666.951163][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1180'.
[  668.609993][ T9017] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  668.780126][   T26] audit: type=1800 audit(1786422466.507:96): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1178" name="memory_backed" dev="configfs" ino=49172 res=0 errno=0
[  668.937366][   T26] audit: type=1800 audit(1786422466.537:97): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1178" name="power" dev="configfs" ino=49176 res=0 errno=0
[  669.104151][ T9041] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1192'.
[  672.735818][ T9073] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  672.925717][ T9085] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1204'.
[  673.664995][ T9102] netlink: 'syz.7.1211': attribute type 1 has an invalid length.
[  673.921015][ T9102] netlink: 64399 bytes leftover after parsing attributes in process `syz.7.1211'.
[  675.957755][ T9118] loop7: detected capacity change from 0 to 512
[  676.125253][ T9118] EXT4-fs (loop7): 1 orphan inode deleted
[  676.150959][ T9118] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  676.176886][ T4401] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  676.240389][ T4401] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1
[  676.253227][ T9118] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  677.023643][ T7475] EXT4-fs (loop7): unmounting filesystem.
[  678.588006][ T9132] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  678.655158][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'.
[  678.964173][ T9147] netlink: 'syz.8.1215': attribute type 10 has an invalid length.
[  681.314543][ T9168] loop8: detected capacity change from 0 to 1024
[  681.362329][ T9168] EXT4-fs: Ignoring removed bh option
[  681.560859][ T9168] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  682.423991][ T8157] EXT4-fs (loop8): unmounting filesystem.
[  684.123409][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1229'.
[  684.694687][   T26] audit: type=1800 audit(1786422482.427:98): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1220" name="memory_backed" dev="configfs" ino=49342 res=0 errno=0
[  685.743738][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  685.750112][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  686.233066][   T26] audit: type=1800 audit(1786422483.487:99): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1220" name="power" dev="configfs" ino=48435 res=0 errno=0
[  690.548641][ T9240] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  692.262468][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1248'.
[  693.157227][ T9279] binder: 9277:9279 ioctl c0306201 200000000080 returned -14
[  693.288660][ T9279] binder: 9277:9279 ioctl c0306201 2000000003c0 returned -14
[  693.584374][ T9287] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  696.629320][ T9298] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  696.802198][ T4290] Bluetooth: Wrong link type (-22)
[  701.026436][ T9344] netlink: 'syz.7.1267': attribute type 4 has an invalid length.
[  701.083362][ T9344] netlink: 'syz.7.1267': attribute type 4 has an invalid length.
[  701.500819][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1260'.
[  701.871687][ T4290] Bluetooth: hci3: Unknown advertising packet type: 0x20
[  701.871801][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d
[  702.731137][ T4290] Bluetooth: min 0 < 6
[  705.946583][ T4290] Bluetooth: hci2: command 0x2021 tx timeout
[  707.070474][ T4290] Bluetooth: hci4: Unknown advertising packet type: 0x20
[  707.070515][ T4290] Bluetooth: hci4: Malformed LE Event: 0x0d
[  707.230307][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1285'.
[  708.813211][ T9421] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  708.961001][ T4320] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  709.192138][ T4320] usb 9-1: unable to get BOS descriptor or descriptor too short
[  709.214763][ T4320] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  709.240981][ T4320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.281026][ T4320] usb 9-1: Product: syz
[  709.285261][ T4320] usb 9-1: Manufacturer: syz
[  709.289879][ T4320] usb 9-1: SerialNumber: syz
[  709.601539][ T4320] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  709.610530][ T4320] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  710.026886][ T4320] usb 9-1: USB disconnect, device number 2
[  711.674159][ T4288] Bluetooth: hci3: Unknown advertising packet type: 0x20
[  711.674199][ T4288] Bluetooth: hci3: Malformed LE Event: 0x0d
[  711.891142][ T4320] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  712.784469][ T4320] usb 9-1: config 0 has an invalid interface number: 207 but max is 0
[  712.794179][ T4320] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  712.807322][ T4320] usb 9-1: config 0 has no interface number 0
[  712.823422][ T4320] usb 9-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd
[  712.851726][ T9476] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  712.880418][ T4320] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.931182][ T4320] usb 9-1: Product: syz
[  712.947165][ T9486] netlink: 'syz.1.1301': attribute type 4 has an invalid length.
[  712.971921][ T4320] usb 9-1: Manufacturer: syz
[  712.977216][ T4320] usb 9-1: SerialNumber: syz
[  713.043852][ T4320] usb 9-1: config 0 descriptor??
[  714.378822][ T4288] Bluetooth: hci5: command 0x0406 tx timeout
[  714.393768][ T4320] qmi_wwan: probe of 9-1:0.207 failed with error -22
[  714.425079][ T9401] udevd[9401]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  714.428929][ T9486] netlink: 'syz.1.1301': attribute type 4 has an invalid length.
[  714.566403][   T41] usb 9-1: USB disconnect, device number 3
[  717.986771][ T4288] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  717.986884][ T4288] Bluetooth: hci1: Malformed LE Event: 0x0d
[  721.437345][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1316'.
[  721.460122][ T9534] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  725.016377][ T9573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1324'.
[  725.025784][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1324'.
[  725.035289][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'.
[  725.044310][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'.
[  726.035006][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1329'.
[  727.423134][ T9600] loop8: detected capacity change from 0 to 512
[  727.613422][ T9599] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  727.811525][ T4288] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  727.811640][ T4288] Bluetooth: hci1: Malformed LE Event: 0x0d
[  727.984572][ T9600] EXT4-fs (loop8): 1 orphan inode deleted
[  728.041778][ T4401] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  728.400935][ T9600] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  728.456578][ T4401] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1
[  728.471672][ T9600] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  729.404850][ T9638] netlink: 'syz.7.1342': attribute type 1 has an invalid length.
[  729.431897][ T9638] netlink: 64399 bytes leftover after parsing attributes in process `syz.7.1342'.
[  729.882172][ T8157] EXT4-fs (loop8): unmounting filesystem.
[  730.536115][ T4288] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  730.536258][ T4288] Bluetooth: hci1: Malformed LE Event: 0x0d
[  732.394290][ T9646] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  733.110788][ T4317] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  734.393441][ T9675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1336'.
[  734.402545][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1336'.
[  734.411760][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'.
[  734.421000][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1336'.
[  734.668289][ T9683] loop7: detected capacity change from 0 to 512
[  734.865513][ T9683] EXT4-fs (loop7): 1 orphan inode deleted
[  734.932150][ T9683] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  734.951706][ T4401] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  734.971840][ T9683] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  735.021482][ T4401] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1
[  736.608320][ T7475] EXT4-fs (loop7): unmounting filesystem.
[  738.342896][ T9711] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  740.455432][ T4288] Bluetooth: min 199 > max 0
[  741.305876][ T9738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1364'.
[  741.314929][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1364'.
[  741.324519][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'.
[  741.333476][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'.
[  741.648779][ T9746] loop7: detected capacity change from 0 to 512
[  741.778081][ T9746] EXT4-fs (loop7): 1 orphan inode deleted
[  741.787385][ T9746] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  741.811007][ T9746] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  741.822088][ T4384] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  741.901007][ T4384] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 1
[  742.461436][ T4288] Bluetooth: hci4: command 0x2021 tx timeout
[  746.918458][ T7475] EXT4-fs (loop7): unmounting filesystem.
[  748.021959][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  748.028322][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  748.862468][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1382'.
[  748.943351][ T9810] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  750.161733][ T9838] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1378'.
[  752.406385][ T9849] loop7: detected capacity change from 0 to 512
[  752.523921][ T9849] EXT4-fs (loop7): 1 orphan inode deleted
[  752.591127][   T54] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  752.601459][ T9849] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  752.641375][   T54] EXT4-fs error (device loop7): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1
[  752.680046][ T9849] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  756.650372][ T9889] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1399'.
[  757.957793][ T7475] EXT4-fs (loop7): unmounting filesystem.
[  761.379988][ T4281] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  761.582703][ T4281] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  761.601392][ T4281] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  761.649197][ T4281] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  761.672244][ T4281] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  761.687199][ T4281] usb 8-1: SerialNumber: syz
[  761.705615][ T4281] usb-storage 8-1:1.0: USB Mass Storage device detected
[  761.828530][ T4281] usb-storage 8-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  762.030687][ T4281] usbhid 8-1:1.0: couldn't find an input interrupt endpoint
[  762.866146][ T9961] netlink: 'syz.3.1411': attribute type 1 has an invalid length.
[  762.921094][ T9961] netlink: 64399 bytes leftover after parsing attributes in process `syz.3.1411'.
[  764.447855][  T127] usb 8-1: USB disconnect, device number 4
[  764.788750][ T1113] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  765.188461][ T4288] Bluetooth: hci5: Unknown advertising packet type: 0x20
[  765.188597][ T4288] Bluetooth: hci5: Malformed LE Event: 0x0d
[  766.086922][ T1113] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  767.862962][ T1113] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.145965][ T1113] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  768.291315][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'.
[  768.963385][ T4290] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  768.974442][ T4290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  768.983058][ T4290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  769.001312][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  769.009874][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  769.018568][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  769.990772][ T4288] Bluetooth: hci2: Unknown advertising packet type: 0x20
[  769.990908][ T4288] Bluetooth: hci2: Malformed LE Event: 0x0d
[  771.101080][ T4288] Bluetooth: hci0: command 0x0409 tx timeout
[  772.215329][T10015] chnl_net:caif_netlink_parms(): no params data found
[  773.905155][ T4288] Bluetooth: hci0: command 0x041b tx timeout
[  774.458246][T10015] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.481222][T10015] bridge0: port 1(bridge_slave_0) entered disabled state
[  774.579396][T10015] device bridge_slave_0 entered promiscuous mode
[  774.738508][T10015] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.751001][T10015] bridge0: port 2(bridge_slave_1) entered disabled state
[  774.759330][T10015] device bridge_slave_1 entered promiscuous mode
[  775.485071][T10015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  775.594960][T10015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  775.981934][ T4290] Bluetooth: hci0: command 0x040f tx timeout
[  776.885786][T10015] team0: Port device team_slave_0 added
[  776.938443][T10015] team0: Port device team_slave_1 added
[  777.472585][ T1113] device hsr_slave_0 left promiscuous mode
[  777.572016][ T4290] Bluetooth: hci5: Unknown advertising packet type: 0x20
[  777.572129][ T4290] Bluetooth: hci5: Malformed LE Event: 0x0d
[  778.061498][ T4290] Bluetooth: hci0: command 0x0419 tx timeout
[  778.315909][ T1113] device hsr_slave_1 left promiscuous mode
[  778.334525][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  778.388001][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0
[  778.457350][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  778.480647][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1
[  778.579036][ T1113] device bridge_slave_1 left promiscuous mode
[  778.595712][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state
[  778.720526][ T1113] device bridge_slave_0 left promiscuous mode
[  778.921229][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.066410][ T1113] device veth1_macvtap left promiscuous mode
[  779.080371][ T1113] device veth0_macvtap left promiscuous mode
[  780.443667][ T1113] device veth1_vlan left promiscuous mode
[  780.449502][ T1113] device veth0_vlan left promiscuous mode
[  784.925297][ T1113] team0 (unregistering): Port device team_slave_1 removed
[  784.997897][ T1113] team0 (unregistering): Port device team_slave_0 removed
[  785.081368][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  785.147555][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  785.613066][ T1113] bond0 (unregistering): Released all slaves
[  785.685983][T10015] batman_adv: batadv0: Adding interface: batadv_slave_0
[  785.696138][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  785.723878][T10015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  785.743543][T10098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'.
[  785.759073][T10145] netlink: 64595 bytes leftover after parsing attributes in process `syz.8.1457'.
[  785.783401][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1458'.
[  785.820749][T10015] batman_adv: batadv0: Adding interface: batadv_slave_1
[  785.857993][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  785.986159][T10015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  786.164581][T10015] device hsr_slave_0 entered promiscuous mode
[  787.061621][T10015] device hsr_slave_1 entered promiscuous mode
[  787.149890][T10015] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  787.181069][T10015] Cannot create hsr debugfs directory
[  787.385179][T10189] loop6: detected capacity change from 0 to 512
[  787.522057][T10189] EXT4-fs (loop6): 1 orphan inode deleted
[  787.529081][T10189] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  787.553270][T10189] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  787.571297][ T4401] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  787.678695][T10015] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  787.770315][T10015] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  787.789147][ T4401] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1
[  788.358110][T10015] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  788.396592][ T7351] EXT4-fs (loop6): unmounting filesystem.
[  788.416573][T10015] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  789.141408][T10015] 8021q: adding VLAN 0 to HW filter on device bond0
[  789.191978][T10212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1470'.
[  789.233909][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  789.257647][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  789.310535][T10015] 8021q: adding VLAN 0 to HW filter on device team0
[  789.359603][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  789.390527][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  789.503799][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state
[  789.511011][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state
[  789.558464][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  789.597646][T10215] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1471'.
[  789.677659][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  789.713531][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  789.770797][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state
[  789.778223][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state
[  789.875769][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  790.720613][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  790.770245][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  790.815090][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  790.844335][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  790.879214][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  790.941399][T10228] netlink: 'syz.6.1473': attribute type 4 has an invalid length.
[  790.962243][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  790.978302][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  790.998599][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  791.029833][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  791.048959][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  791.079409][T10015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  791.171636][T10231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  791.257585][T10236] loop6: detected capacity change from 0 to 512
[  791.268852][T10231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  791.378845][T10236] EXT4-fs (loop6): 1 orphan inode deleted
[  791.386494][T10236] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  791.401131][ T1113] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  791.437384][ T1113] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 1
[  791.451653][T10236] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  792.308238][ T7351] EXT4-fs (loop6): unmounting filesystem.
[  793.121716][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  793.139485][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  793.178678][T10015] 8021q: adding VLAN 0 to HW filter on device batadv0
[  793.254118][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1482'.
[  793.880617][T10288] netlink: 64595 bytes leftover after parsing attributes in process `syz.3.1485'.
[  794.748075][T10294] loop6: detected capacity change from 0 to 512
[  794.885185][T10294] EXT4-fs (loop6): 1 orphan inode deleted
[  794.900963][T10294] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  794.976185][ T4384] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  794.976727][T10294] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  795.038504][ T4384] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 1
[  795.377009][ T7351] EXT4-fs (loop6): unmounting filesystem.
[  795.928832][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  795.949481][ T1113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  796.048286][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  796.064861][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  796.098310][T10015] device veth0_vlan entered promiscuous mode
[  796.132335][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  796.161028][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  796.217417][T10015] device veth1_vlan entered promiscuous mode
[  796.283172][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  796.299896][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  796.324166][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  796.361566][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  796.395626][T10015] device veth0_macvtap entered promiscuous mode
[  796.409587][T10015] device veth1_macvtap entered promiscuous mode
[  796.523352][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  796.556400][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.590964][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  796.630939][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.657773][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  796.676556][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  796.704124][T10015] batman_adv: batadv0: Interface activated: batadv_slave_0
[  796.729368][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1496'.
[  796.751379][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  796.766358][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  796.792418][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  796.835666][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  796.996025][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  797.008126][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  797.027906][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  797.055758][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  797.092620][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  797.124379][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  797.154830][T10366] loop6: detected capacity change from 0 to 512
[  797.169545][T10015] batman_adv: batadv0: Interface activated: batadv_slave_1
[  797.201012][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  797.230739][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  797.307327][T10366] EXT4-fs (loop6): 1 orphan inode deleted
[  797.318311][T10015] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  797.333759][ T4384] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  797.408369][T10366] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  797.431020][T10015] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  797.460567][ T4384] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:9: Failed to release dquot type 1
[  797.477877][T10015] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  797.487073][T10366] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  797.526371][T10015] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  797.799222][ T7351] EXT4-fs (loop6): unmounting filesystem.
[  798.701339][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  798.736167][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  798.830520][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  798.894785][ T4337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  798.909517][ T4337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  798.918641][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  799.566634][ T4288] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  799.566672][ T4288] Bluetooth: hci1: Malformed LE Event: 0x0d
[  800.477662][T10421] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1514'.
[  803.382287][T10458] netlink: 'syz.8.1525': attribute type 4 has an invalid length.
[  805.017386][T10464] loop6: detected capacity change from 0 to 512
[  805.153700][T10464] EXT4-fs (loop6): 1 orphan inode deleted
[  805.159612][T10464] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  805.171466][ T4337] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  805.182742][T10464] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  805.269636][ T4337] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:7: Failed to release dquot type 1
[  807.103992][ T4288] Bluetooth: hci2: command 0x2021 tx timeout
[  807.115378][ T7351] EXT4-fs (loop6): unmounting filesystem.
[  808.048566][   T26] audit: type=1326 audit(1786422605.777:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.8.1538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6220b9e0d9 code=0x7ffc0000
[  808.107966][ T4290] Bluetooth: hci2: Unknown advertising packet type: 0x20
[  808.108006][ T4290] Bluetooth: hci2: Malformed LE Event: 0x0d
[  808.179479][   T26] audit: type=1326 audit(1786422605.777:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.8.1538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6220b9e0d9 code=0x7ffc0000
[  808.267692][   T26] audit: type=1326 audit(1786422605.777:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.8.1538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6220b9e0d9 code=0x7ffc0000
[  808.310526][   T26] audit: type=1326 audit(1786422605.777:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.8.1538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6220b9e0d9 code=0x7ffc0000
[  808.435150][   T26] audit: type=1326 audit(1786422605.777:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.8.1538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6220b9e0d9 code=0x7ffc0000
[  808.448384][T10523] loop9: detected capacity change from 0 to 1024
[  808.535101][   T26] audit: type=1326 audit(1786422605.777:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.8.1538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f6220b9e0d9 code=0x7ffc0000
[  808.592118][T10523] EXT4-fs: Ignoring removed bh option
[  808.624145][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  808.630549][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  808.698207][   T26] audit: type=1326 audit(1786422605.777:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.8.1538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6220b9e0d9 code=0x7ffc0000
[  808.758794][T10523] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  808.811739][   T26] audit: type=1326 audit(1786422605.777:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.8.1538" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f6220b9e0d9 code=0x7ffc0000
[  809.451672][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1542'.
[  809.748262][T10015] EXT4-fs (loop9): unmounting filesystem.
[  810.033820][T10549] loop9: detected capacity change from 0 to 512
[  810.145093][T10549] EXT4-fs (loop9): 1 orphan inode deleted
[  810.157325][T10555] netlink: 64595 bytes leftover after parsing attributes in process `syz.1.1547'.
[  810.181008][ T4401] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  810.191324][T10549] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  810.241749][T10549] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  810.261344][ T4401] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1
[  811.805662][T10015] EXT4-fs (loop9): unmounting filesystem.
[  813.279083][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'.
[  813.887754][T10603] loop6: detected capacity change from 0 to 512
[  814.037045][T10603] EXT4-fs (loop6): 1 orphan inode deleted
[  814.071517][   T54] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  814.097975][T10603] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  814.109031][T10603] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  814.116221][   T54] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:4: Failed to release dquot type 1
[  815.545262][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1565'.
[  815.583925][ T7351] EXT4-fs (loop6): unmounting filesystem.
[  817.158126][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1573'.
[  817.588154][T10663] loop9: detected capacity change from 0 to 512
[  817.736350][T10663] EXT4-fs (loop9): 1 orphan inode deleted
[  817.747381][T10663] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  817.759977][   T47] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  817.770376][T10668] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10668]
[  817.804503][T10663] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  817.804586][   T47] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1
[  817.830619][T10671] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1578'.
[  819.374383][T10015] EXT4-fs (loop9): unmounting filesystem.
[  820.635176][T10700] Bluetooth: MGMT ver 1.22
[  820.719929][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'.
[  821.021553][T10713] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1590'.
[  821.247821][T10718] loop8: detected capacity change from 0 to 512
[  821.378944][T10718] EXT4-fs (loop8): 1 orphan inode deleted
[  821.415881][T10718] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  821.441693][ T4491] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  821.514153][T10718] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  821.537601][ T4491] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:14: Failed to release dquot type 1
[  822.139434][ T8157] EXT4-fs (loop8): unmounting filesystem.
[  824.572858][T10766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1604'.
[  824.631362][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1603'.
[  824.842763][T10773] loop9: detected capacity change from 0 to 512
[  825.077010][T10773] EXT4-fs (loop9): 1 orphan inode deleted
[  825.093371][   T47] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  825.121005][T10773] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  825.131337][T10773] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  825.160916][   T47] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1
[  825.219813][ T4290] Bluetooth: hci2: Malformed LE Event: 0x0d
[  825.954249][T10015] EXT4-fs (loop9): unmounting filesystem.
[  826.118983][T10788] loop6: detected capacity change from 0 to 1024
[  826.182032][T10788] EXT4-fs: Ignoring removed bh option
[  826.253879][T10788] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  826.412245][T10795] netlink: 64595 bytes leftover after parsing attributes in process `syz.3.1611'.
[  826.581945][T10798] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10798]
[  827.187395][ T7351] EXT4-fs (loop6): unmounting filesystem.
[  829.079569][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1620'.
[  829.241337][ T4290] Bluetooth: hci5: Malformed LE Event: 0x0d
[  830.361677][T10846] netlink: 64595 bytes leftover after parsing attributes in process `syz.8.1623'.
[  830.470231][T10848] loop9: detected capacity change from 0 to 1024
[  830.499084][T10848] EXT4-fs: Ignoring removed bh option
[  830.616069][T10848] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  831.442633][T10015] EXT4-fs (loop9): unmounting filesystem.
[  831.872432][ T4290] Bluetooth: min 0 < 6
[  832.281526][ T4290] Bluetooth: hci1: Malformed LE Event: 0x0d
[  832.414800][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1634'.
[  833.325911][T10899] netlink: 64595 bytes leftover after parsing attributes in process `syz.3.1638'.
[  833.411637][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'.
[  834.107081][ T4290] Bluetooth: hci5: command 0x2021 tx timeout
[  835.011433][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1647'.
[  835.458031][T10947] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1652'.
[  835.631076][   T22] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  835.717019][T10956] netlink: 64595 bytes leftover after parsing attributes in process `syz.1.1654'.
[  835.821210][   T22] usb 9-1: Using ep0 maxpacket: 16
[  835.828518][   T22] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  835.876031][   T22] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  836.028681][   T22] usb 9-1: config 0 interface 0 has no altsetting 0
[  836.054605][   T22] usb 9-1: New USB device found, idVendor=044f, idProduct=b300, bcdDevice= 0.00
[  837.036690][   T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.056895][   T22] usb 9-1: config 0 descriptor??
[  837.508944][   T22] usbhid 9-1:0.0: can't add hid device: -71
[  837.524349][   T22] usbhid: probe of 9-1:0.0 failed with error -71
[  837.578633][   T22] usb 9-1: USB disconnect, device number 4
[  838.313842][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1666'.
[  841.066133][T11031] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  841.906148][T11053] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1683'.
[  843.010315][T11064] netlink: 64595 bytes leftover after parsing attributes in process `syz.8.1686'.
[  845.005484][T11105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1698'.
[  846.580838][    C1] hrtimer: interrupt took 56599 ns
[  846.591285][ T4290] Bluetooth: hci5: Unknown advertising packet type: 0x20
[  846.591322][ T4290] Bluetooth: hci5: Malformed LE Event: 0x0d
[  848.301145][ T4316] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  848.493269][ T4316] usb 9-1: unable to get BOS descriptor or descriptor too short
[  848.514327][ T4316] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  848.557422][T11166] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11166]
[  848.579184][ T4316] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.614429][ T4316] usb 9-1: Product: syz
[  848.639185][ T4316] usb 9-1: Manufacturer: syz
[  848.687845][ T4316] usb 9-1: SerialNumber: syz
[  848.981788][ T4316] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  849.043542][ T4316] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  849.208787][ T4316] usb 9-1: USB disconnect, device number 5
[  851.787266][T11195] loop8: detected capacity change from 0 to 512
[  852.054711][T11195] EXT4-fs (loop8): 1 orphan inode deleted
[  852.060986][T11195] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  852.071486][ T4401] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  852.109613][T11195] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  852.133374][ T4401] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1
[  852.798205][ T8157] EXT4-fs (loop8): unmounting filesystem.
[  853.659899][ T4290] Bluetooth: hci3: Unknown advertising packet type: 0x20
[  853.659940][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d
[  855.436763][T11243] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1726'.
[  858.511986][T11280] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1734'.
[  858.781991][T11289] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8157] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11289]
[  858.832381][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1737'.
[  859.445863][ T4290] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  859.445902][ T4290] Bluetooth: hci1: Malformed LE Event: 0x0d
[  860.273870][T11322] loop9: detected capacity change from 0 to 512
[  860.350992][   T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  860.582790][   T22] usb 7-1: unable to get BOS descriptor or descriptor too short
[  860.651720][   T22] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  860.691780][T11322] EXT4-fs (loop9): 1 orphan inode deleted
[  860.722193][T11322] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  860.872069][   T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.941258][T11322] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  860.952013][   T22] usb 7-1: Product: syz
[  860.956219][   T22] usb 7-1: Manufacturer: syz
[  861.117646][   T22] usb 7-1: SerialNumber: syz
[  861.132492][ T4401] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  861.599780][ T4401] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:11: Failed to release dquot type 1
[  861.637027][T10015] EXT4-fs (loop9): unmounting filesystem.
[  861.787170][   T22] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  861.814311][   T22] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  861.906173][   T22] usb 7-1: USB disconnect, device number 2
[  862.217040][T11348] sctp: [Deprecated]: syz.3.1751 (pid 11348) Use of struct sctp_assoc_value in delayed_ack socket option.
[  862.217040][T11348] Use struct sctp_sack_info instead
[  862.599200][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d
[  863.717037][ T4290] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  863.717076][ T4290] Bluetooth: hci1: Malformed LE Event: 0x0d
[  864.982357][T11391] loop8: detected capacity change from 0 to 512
[  865.136163][T11391] EXT4-fs (loop8): 1 orphan inode deleted
[  865.148149][T11391] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  865.171428][T11391] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  865.194670][ T7971] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  865.370954][ T7971] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 1
[  865.977497][ T8157] EXT4-fs (loop8): unmounting filesystem.
[  866.391056][T11414] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1764'.
[  866.418678][T11414] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1764'.
[  866.454950][T11414] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1764'.
[  866.511005][ T4321] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  866.901321][ T4321] usb 9-1: unable to get BOS descriptor or descriptor too short
[  866.923490][ T4321] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  866.940910][ T4321] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.949053][ T4321] usb 9-1: Product: syz
[  867.008516][ T4290] Bluetooth: hci1: Malformed LE Event: 0x0d
[  867.816679][ T4321] usb 9-1: Manufacturer: syz
[  867.835419][ T4321] usb 9-1: SerialNumber: syz
[  868.093274][ T4321] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  868.276426][ T4290] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  868.276456][ T4290] Bluetooth: hci1: Malformed LE Event: 0x0d
[  868.321377][ T4321] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  868.479068][ T4321] usb 9-1: USB disconnect, device number 6
[  868.985249][T11439] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11439]
[  869.011642][T11445] loop9: detected capacity change from 0 to 512
[  871.064910][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  871.071323][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  871.111559][T11445] EXT4-fs (loop9): 1 orphan inode deleted
[  871.117495][T11445] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  871.132509][ T4491] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  871.142549][T11445] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  871.168058][ T4491] EXT4-fs error (device loop9): ext4_release_dquot:6877: comm kworker/u4:14: Failed to release dquot type 1
[  872.161271][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d
[  872.383074][T10015] EXT4-fs (loop9): unmounting filesystem.
[  873.242805][T11481] netlink: 'syz.9.1782': attribute type 4 has an invalid length.
[  873.368553][ T4290] Bluetooth: hci2: Unknown advertising packet type: 0x20
[  873.368593][ T4290] Bluetooth: hci2: Malformed LE Event: 0x0d
[  873.656937][T11489] loop9: detected capacity change from 0 to 512
[  873.706182][T11489] EXT4-fs (loop9): invalid journal inode
[  873.773215][T11489] EXT4-fs (loop9): can't get journal size
[  873.836806][T11489] EXT4-fs (loop9): 1 truncate cleaned up
[  873.960910][T11489] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  874.140928][T11489] loop9: detected capacity change from 512 to 0
[  874.240911][T10971] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  874.440956][T10971] usb 7-1: Using ep0 maxpacket: 16
[  874.449187][T10971] usb 7-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config
[  874.470110][T10971] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  874.489874][T10015] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  874.512846][T10971] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  874.522474][T10971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  874.541865][T10971] usb 7-1: Product: syz
[  874.546614][T10971] usb 7-1: Manufacturer: syz
[  874.580999][T10971] usb 7-1: SerialNumber: syz
[  874.755183][T10693] EXT4-fs (loop9): unmounting filesystem.
[  874.814158][T10971] usb 7-1: 0:2 : does not exist
[  874.861182][T10971] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  874.913647][T10971] usb 7-1: USB disconnect, device number 3
[  875.165017][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  875.314500][ T4427] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.458897][ T4427] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.729433][ T4427] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.108539][ T4290] Bluetooth: hci1: Unknown advertising packet type: 0x20
[  876.108580][ T4290] Bluetooth: hci1: Malformed LE Event: 0x0d
[  876.353772][ T4427] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  877.191598][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  877.209420][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  877.221135][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  877.230484][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  877.238151][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  877.245583][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  877.718995][T11530] loop6: detected capacity change from 0 to 32768
[  877.830564][T11530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1794 (11530)
[  877.876325][T11545] netlink: 'syz.1.1796': attribute type 4 has an invalid length.
[  877.918848][T11530] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  877.954824][T11530] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  877.966529][T11530] BTRFS info (device loop6): turning on sync discard
[  877.974161][T11530] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  877.984571][T11530] BTRFS info (device loop6): use zstd compression, level 3
[  877.992147][T11530] BTRFS info (device loop6): enabling auto defrag
[  877.998915][T11530] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  878.010331][T11530] BTRFS info (device loop6): trying to use backup root at mount time
[  878.018764][T11530] BTRFS info (device loop6): turning on async discard
[  878.026690][T11530] BTRFS info (device loop6): using free space tree
[  878.400391][ T4384] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  878.421216][T11530] BTRFS error (device loop6): failed to load root extent
[  878.428362][T11530] BTRFS warning (device loop6): try to load backup roots slot 1
[  878.547921][   T54] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  878.597241][T11530] BTRFS warning (device loop6): couldn't read tree root
[  878.606033][T11530] BTRFS warning (device loop6): try to load backup roots slot 2
[  878.614775][T11580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  878.645946][T11534] chnl_net:caif_netlink_parms(): no params data found
[  878.674806][T11530] BTRFS error (device loop6): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  878.751861][T11530] BTRFS warning (device loop6): couldn't read tree root
[  878.758917][T11530] BTRFS warning (device loop6): try to load backup roots slot 3
[  878.970287][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  878.989065][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.036113][T11530] BTRFS info (device loop6): rebuilding free space tree
[  879.052388][   T54] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  879.165139][T11534] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.176712][T11530] BTRFS info (device loop6): checking UUID tree
[  879.324440][T11534] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.341617][ T4290] Bluetooth: hci0: command 0x0409 tx timeout
[  879.368490][T11534] device bridge_slave_0 entered promiscuous mode
[  879.379767][T11534] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.410314][T11534] bridge0: port 2(bridge_slave_1) entered disabled state
[  879.453065][T11534] device bridge_slave_1 entered promiscuous mode
[  879.944326][T11619] netlink: 'syz.8.1806': attribute type 4 has an invalid length.
[  880.005336][T11534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  880.042550][ T7351] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  880.088184][ T4427] device hsr_slave_0 left promiscuous mode
[  880.162646][ T4427] device hsr_slave_1 left promiscuous mode
[  880.181053][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  880.221233][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0
[  880.577024][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  880.619287][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1
[  880.631915][T11641] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  880.706282][ T4427] device bridge_slave_1 left promiscuous mode
[  880.721227][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state
[  880.772022][ T4427] device bridge_slave_0 left promiscuous mode
[  880.778303][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state
[  880.924555][ T4427] device veth1_macvtap left promiscuous mode
[  880.947019][ T4427] device veth0_macvtap left promiscuous mode
[  880.953456][ T4427] device veth1_vlan left promiscuous mode
[  880.959314][ T4427] device veth0_vlan left promiscuous mode
[  881.421441][ T4290] Bluetooth: hci0: command 0x041b tx timeout
[  881.737720][T11651] loop6: detected capacity change from 0 to 32768
[  881.795272][T11651] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1813 (11651)
[  882.041341][T11651] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  882.065544][T11651] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  882.103179][T11651] BTRFS info (device loop6): setting nodatacow, compression disabled
[  882.143594][T11651] BTRFS info (device loop6): setting datasum, datacow enabled
[  882.319332][T11651] BTRFS info (device loop6): force clearing of disk cache
[  882.432840][T11651] BTRFS info (device loop6): enabling ssd optimizations
[  882.536853][T11651] BTRFS info (device loop6): using spread ssd allocation scheme
[  882.669393][T11651] BTRFS info (device loop6): turning on sync discard
[  882.697646][T11651] BTRFS info (device loop6): turning off barriers
[  882.731007][T11651] BTRFS info (device loop6): setting nodatacow, compression disabled
[  882.770685][T11651] BTRFS info (device loop6): not using ssd optimizations
[  882.802625][T11651] BTRFS info (device loop6): not using spread ssd allocation scheme
[  882.851451][T11654] loop8: detected capacity change from 0 to 32768
[  882.855191][T11651] BTRFS info (device loop6): using free space tree
[  883.092539][   T26] audit: type=1800 audit(1786422680.827:108): pid=11654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1815" name="file1" dev="loop8" ino=4 res=0 errno=0
[  883.129363][T11651] BTRFS info (device loop6): rebuilding free space tree
[  883.511407][ T4290] Bluetooth: hci0: command 0x040f tx timeout
[  884.117419][ T4427] team0 (unregistering): Port device team_slave_1 removed
[  884.288075][ T4427] team0 (unregistering): Port device team_slave_0 removed
[  884.420718][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  884.528942][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  884.811239][ T7351] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  885.314625][ T4290] Bluetooth: hci5: Unknown advertising packet type: 0x20
[  885.314669][ T4290] Bluetooth: hci5: Malformed LE Event: 0x0d
[  885.580976][ T4290] Bluetooth: hci0: command 0x0419 tx timeout
[  885.922090][ T4427] bond0 (unregistering): Released all slaves
[  886.137888][T11534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  886.189609][T11663] netlink: 64595 bytes leftover after parsing attributes in process `syz.1.1818'.
[  886.208427][T11698] netlink: 'syz.6.1820': attribute type 4 has an invalid length.
[  886.371872][T11534] team0: Port device team_slave_0 added
[  886.385739][T11703] loop8: detected capacity change from 0 to 8192
[  886.416644][T11534] team0: Port device team_slave_1 added
[  886.498467][T11703] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  886.544414][T11534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  886.582964][T11703] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  886.591989][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  886.602987][T11703] FAT-fs (loop8): Filesystem has been set read-only
[  886.677597][T11703] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  886.701844][T11709] loop6: detected capacity change from 0 to 1024
[  886.714545][T11703] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  886.731983][T11709] EXT4-fs: Ignoring removed bh option
[  886.751367][T11534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  886.791341][T11703] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  886.800291][T11703] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  886.856294][T11534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  886.875054][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  886.881355][T11703] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  886.923118][T11703] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  886.941263][T11703] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  886.961500][T11709] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  886.972921][T11534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  887.040857][T11703] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  887.171014][T11703] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  887.253053][   T26] audit: type=1800 audit(1786422684.987:109): pid=11703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1823" name="file2" dev="loop8" ino=1049352 res=0 errno=0
[  887.308536][T11534] device hsr_slave_0 entered promiscuous mode
[  887.370578][T11534] device hsr_slave_1 entered promiscuous mode
[  887.394588][T11703] syz.8.1823 (11703) used greatest stack depth: 19504 bytes left
[  887.411378][T11534] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  887.461607][T11534] Cannot create hsr debugfs directory
[  887.640442][T11725] syz.8.1826 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  887.971421][T10971] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  888.161073][T10971] usb 9-1: Using ep0 maxpacket: 32
[  888.174877][T10971] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  888.211137][T10971] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  888.279251][T10971] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 106, changing to 10
[  888.297234][T10971] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255
[  888.348089][T10971] usb 9-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00
[  888.376837][T10971] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.416848][T10971] usb 9-1: config 0 descriptor??
[  889.498486][T10971] saitek 0003:06A3:0CFA.0003: item fetching failed at offset 0/6
[  889.551618][T10971] saitek 0003:06A3:0CFA.0003: parse failed
[  889.557622][T10971] saitek: probe of 0003:06A3:0CFA.0003 failed with error -22
[  889.866751][T11726] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1826'.
[  889.890365][ T4354] usb 9-1: USB disconnect, device number 7
[  890.544071][T11534] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  890.556037][T11534] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  890.671374][ T4290] Bluetooth: hci2: Malformed LE Event: 0x0d
[  890.711844][ T7351] EXT4-fs (loop6): unmounting filesystem.
[  890.720731][T11534] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  890.991218][T11534] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  891.532066][T11534] 8021q: adding VLAN 0 to HW filter on device bond0
[  891.586830][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  891.645768][T11772] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  891.661990][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  891.717719][T11534] 8021q: adding VLAN 0 to HW filter on device team0
[  891.768811][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  891.809574][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  891.831866][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state
[  891.839136][ T4427] bridge0: port 1(bridge_slave_0) entered forwarding state
[  891.869375][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  891.889553][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  891.902948][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  891.941980][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state
[  891.949148][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state
[  891.999956][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  892.031092][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  892.078160][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  892.115814][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  892.142187][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  892.173483][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  892.202215][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  892.224637][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  892.254963][T11534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  892.298110][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  892.478221][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  892.487438][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  892.496135][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  893.819652][T11784] loop8: detected capacity change from 0 to 32768
[  894.080399][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  894.099640][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  894.145222][T11534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  894.249766][T11779] loop6: detected capacity change from 0 to 40427
[  894.300748][T11779] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  894.441032][T11779] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  895.206226][ T4290] Bluetooth: hci5: Malformed LE Event: 0x0d
[  895.351507][T11779] F2FS-fs (loop6): invalid crc value
[  895.373395][T11779] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-12)
[  896.461150][ T7542] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  896.653199][ T7542] usb 7-1: unable to get BOS descriptor or descriptor too short
[  896.681833][ T7542] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  896.710169][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  896.722219][ T7542] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  896.730283][ T7542] usb 7-1: Product: syz
[  896.738069][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  896.770857][ T7542] usb 7-1: Manufacturer: syz
[  896.775527][ T7542] usb 7-1: SerialNumber: syz
[  896.833595][T11534] device veth0_vlan entered promiscuous mode
[  896.837598][T11843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1855'.
[  896.854225][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  896.875170][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  896.909400][T11534] device veth1_vlan entered promiscuous mode
[  896.989705][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  897.006450][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  897.048528][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  897.099244][ T7542] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  897.112255][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  897.121211][ T7542] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  897.125412][T11824] loop8: detected capacity change from 0 to 32768
[  897.213513][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  897.742893][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  897.763733][T11824] (syz.8.1849,11824,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  897.778299][ T7542] usb 7-1: USB disconnect, device number 4
[  897.857538][T11534] device veth0_macvtap entered promiscuous mode
[  897.870589][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  897.961459][T11824] (syz.8.1849,11824,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  898.181786][T11824] (syz.8.1849,11824,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  898.213062][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d
[  898.227635][T11534] device veth1_macvtap entered promiscuous mode
[  898.300155][T11824] JBD2: Ignoring recovery information on journal
[  898.335772][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  898.405980][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.456612][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  898.495359][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.515820][T11824] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  898.548494][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  898.610874][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.662155][T11534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  898.671266][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  898.709519][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  898.754802][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  898.786490][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.801052][T11824] (syz.8.1849,11824,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  898.833186][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  898.888938][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  898.939771][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  898.976117][T11874] (syz.8.1849,11874,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  899.011536][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  899.025009][T11534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  899.036126][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  899.075572][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  899.139700][T11824] (syz.8.1849,11824,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb68296ec, computed 0xec517776. Applying ECC.
[  899.157813][T11534] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  899.166952][T11534] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  899.177718][T11534] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  899.186579][T11534] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  899.253650][T11824] (syz.8.1849,11824,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb68296ec, computed 0xccb4c126
[  899.274138][T11874] (syz.8.1849,11874,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  899.348671][T11874] (syz.8.1849,11874,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  899.381082][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  899.388964][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  899.400870][T11824] (syz.8.1849,11824,1):ocfs2_search_chain:1783 ERROR: status = -5
[  899.409891][T11824] (syz.8.1849,11824,1):ocfs2_search_chain:1893 ERROR: status = -5
[  899.419844][T11874] (syz.8.1849,11874,0):ocfs2_quota_read:201 ERROR: status = -5
[  899.442084][T10884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  899.478489][T11874] Quota error (device loop8): find_next_id: Can't read quota tree block 5
[  899.481012][T11824] (syz.8.1849,11824,1):ocfs2_claim_suballoc_bits:1997 ERROR: status = -5
[  899.521573][T10884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  899.537306][T11874] (syz.8.1849,11874,0):ocfs2_get_next_id:909 ERROR: status = -5
[  899.560889][T10884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  899.582156][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  899.621219][T11824] (syz.8.1849,11824,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5
[  899.638986][T11824] (syz.8.1849,11824,0):__ocfs2_claim_clusters:2387 ERROR: status = -5
[  899.718515][T11824] (syz.8.1849,11824,0):__ocfs2_claim_clusters:2395 ERROR: status = -5
[  899.778457][T11824] (syz.8.1849,11824,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -5
[  899.827974][T11824] (syz.8.1849,11824,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -5
[  899.858607][T11824] (syz.8.1849,11824,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -5
[  899.985890][T11824] (syz.8.1849,11824,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5
[  900.010287][T11889] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[11534] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11889]
[  900.097030][T11824] (syz.8.1849,11824,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5
[  900.145920][T11824] (syz.8.1849,11824,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5
[  900.231103][T11824] (syz.8.1849,11824,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -5
[  900.250682][T11824] (syz.8.1849,11824,1):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -5
[  900.285900][T11824] (syz.8.1849,11824,1):ocfs2_expand_inline_dir:2857 ERROR: status = -5
[  900.286236][T11865] loop6: detected capacity change from 0 to 40427
[  900.301314][T11824] (syz.8.1849,11824,1):ocfs2_extend_dir:3204 ERROR: status = -5
[  900.332126][T11824] (syz.8.1849,11824,1):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -5
[  900.360992][T11824] (syz.8.1849,11824,1):ocfs2_symlink:1864 ERROR: status = -5
[  900.369609][T11865] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  900.381883][T11824] (syz.8.1849,11824,1):ocfs2_symlink:2065 ERROR: status = -5
[  900.458881][T11865] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  900.522065][T11824] syz.8.1849 (11824) used greatest stack depth: 18944 bytes left
[  900.547105][T11865] F2FS-fs (loop6): Found nat_bits in checkpoint
[  900.584028][T11903] loop4: detected capacity change from 0 to 512
[  900.673398][ T8157] ocfs2: Unmounting device (7,8) on (node local)
[  900.755758][T11903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  900.812480][T11903] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  900.847664][T11865] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  900.921291][T11865] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  902.129999][T11534] EXT4-fs (loop4): unmounting filesystem.
[  902.142397][ T4290] Bluetooth: hci5: Unknown advertising packet type: 0x20
[  902.142435][ T4290] Bluetooth: hci5: Malformed LE Event: 0x0d
[  902.680978][T11632] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  902.925749][T11632] usb 5-1: unable to get BOS descriptor or descriptor too short
[  902.952952][T11632] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  902.990852][T11632] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.998973][T11632] usb 5-1: Product: syz
[  903.040841][T11632] usb 5-1: Manufacturer: syz
[  903.045509][T11632] usb 5-1: SerialNumber: syz
[  903.376978][T11632] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  903.401227][T11632] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  903.463330][T11632] usb 5-1: USB disconnect, device number 3
[  903.693826][T11937] udevd[11937]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  904.981488][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d
[  905.510426][T11964] loop6: detected capacity change from 0 to 1024
[  905.618866][T11964] EXT4-fs: Ignoring removed bh option
[  905.790219][T11964] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  907.338185][T11994] loop4: detected capacity change from 0 to 512
[  907.473998][T11996] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[8157] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[11996]
[  907.677864][T11994] EXT4-fs (loop4): 1 orphan inode deleted
[  907.697922][   T11] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  907.739222][   T11] EXT4-fs error (device loop4): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1
[  907.758713][T11994] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  907.917630][T11994] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  909.745260][T10971] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  909.903808][T11534] EXT4-fs (loop4): unmounting filesystem.
[  909.924472][ T7351] EXT4-fs (loop6): unmounting filesystem.
[  909.985825][T10971] usb 9-1: unable to get BOS descriptor or descriptor too short
[  910.064111][T10971] usb 9-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  910.103164][T10971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.150899][T10971] usb 9-1: Product: syz
[  910.161248][T10971] usb 9-1: Manufacturer: syz
[  910.176108][T10971] usb 9-1: SerialNumber: syz
[  910.231771][T12026] netlink: 'syz.6.1890': attribute type 4 has an invalid length.
[  910.367373][T12026] netlink: 'syz.6.1890': attribute type 4 has an invalid length.
[  910.412362][T10971] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  910.451436][T10971] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  910.512477][T10971] usb 9-1: USB disconnect, device number 8
[  910.623472][T11937] udevd[11937]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  910.957859][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1896'.
[  911.312249][T12024] loop4: detected capacity change from 0 to 32768
[  911.362456][T12024] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1888 (12024)
[  911.570461][T12024] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  911.605442][T12024] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  911.625555][T12024] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  911.638400][ T4290] Bluetooth: hci5: Unknown advertising packet type: 0x20
[  911.638439][ T4290] Bluetooth: hci5: Malformed LE Event: 0x0d
[  911.665998][T12024] BTRFS info (device loop4): use zstd compression, level 3
[  911.683748][T12024] BTRFS info (device loop4): using free space tree
[  911.704954][T12055] loop6: detected capacity change from 0 to 512
[  911.801913][T12055] EXT4-fs (loop6): 1 orphan inode deleted
[  911.813112][T12055] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  911.823068][   T11] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  911.854697][   T11] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:1: Failed to release dquot type 1
[  911.875757][T12055] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  912.854342][ T7351] EXT4-fs (loop6): unmounting filesystem.
[  912.971089][T12024] BTRFS info (device loop4): enabling ssd optimizations
[  913.115416][   T26] audit: type=1800 audit(1786422710.847:110): pid=12024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1888" name="file1" dev="loop4" ino=260 res=0 errno=0
[  913.329909][T12099] netlink: 'syz.6.1904': attribute type 4 has an invalid length.
[  913.543106][T11534] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  913.622670][T12103] netlink: 'syz.6.1904': attribute type 4 has an invalid length.
[  914.035954][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1908'.
[  914.932320][ T4290] Bluetooth: hci2: Unknown advertising packet type: 0x20
[  914.932362][ T4290] Bluetooth: hci2: Malformed LE Event: 0x0d
[  915.097904][T12136] loop6: detected capacity change from 0 to 512
[  915.484102][T12136] EXT4-fs (loop6): 1 orphan inode deleted
[  915.489943][T12136] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  915.511183][   T47] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  915.538001][T12146] loop4: detected capacity change from 0 to 64
[  915.610966][   T47] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1
[  915.639744][T12136] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  915.877864][   T26] audit: type=1800 audit(1786422713.607:111): pid=12146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1915" name="bus" dev="loop4" ino=21 res=0 errno=0
[  916.580176][ T7351] EXT4-fs (loop6): unmounting filesystem.
[  916.966013][T12179] autofs4:pid:12179:autofs_fill_super: called with bogus options
[  917.173191][T12181] loop6: detected capacity change from 0 to 512
[  917.192929][T12181] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  918.498553][T12187] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4278] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12187]
[  919.574074][T12168] loop4: detected capacity change from 0 to 32768
[  919.977729][T11937] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (11937)
[  920.668456][T12190] loop6: detected capacity change from 0 to 32768
[  921.136184][T12190] JBD2: Ignoring recovery information on journal
[  921.490614][T12190] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  921.649445][T12190] (syz.6.1926,12190,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1
[  921.701008][T12190] (syz.6.1926,12190,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  921.709786][T12190] (syz.6.1926,12190,1):ocfs2_mknod:298 ERROR: status = -2
[  921.800845][T12190] (syz.6.1926,12190,1):ocfs2_mknod:502 ERROR: status = -2
[  921.828193][T12239] netlink: 64399 bytes leftover after parsing attributes in process `syz.4.1940'.
[  921.849759][T12190] (syz.6.1926,12190,1):ocfs2_mkdir:659 ERROR: status = -2
[  922.009290][ T7351] ocfs2: Unmounting device (7,6) on (node local)
[  922.056395][T12243] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12243]
[  923.560876][ T7542] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  923.775747][ T7542] usb 7-1: unable to get BOS descriptor or descriptor too short
[  923.830938][ T7542] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  923.840201][ T7542] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  923.878996][ T7542] usb 7-1: Product: syz
[  923.893197][ T7542] usb 7-1: Manufacturer: syz
[  923.898027][T12272] loop4: detected capacity change from 0 to 1024
[  923.917296][ T7542] usb 7-1: SerialNumber: syz
[  924.006086][T12272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  924.149507][ T7542] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  924.190406][ T7542] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  924.286608][ T7542] usb 7-1: USB disconnect, device number 5
[  925.237228][T11534] EXT4-fs (loop4): unmounting filesystem.
[  925.426927][T12288] netlink: 'syz.4.1954': attribute type 4 has an invalid length.
[  925.534284][T12288] netlink: 'syz.4.1954': attribute type 4 has an invalid length.
[  925.885844][T12298] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7351] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12298]
[  928.280203][T12314] loop8: detected capacity change from 0 to 4096
[  928.288344][T12319] loop6: detected capacity change from 0 to 512
[  928.340706][T12314] EXT4-fs: inline encryption not supported
[  928.379356][T12314] ext4: Unknown parameter 'noacl'
[  930.288307][T12319] FAT-fs (loop6): error, corrupted file size (i_pos 53, 9216)
[  930.403078][T12343] loop4: detected capacity change from 0 to 4096
[  930.425043][T12343] ntfs3: Unknown parameter 'windows_names'
[  930.838307][T12353] capability: warning: `syz.1.1971' uses 32-bit capabilities (legacy support in use)
[  931.505512][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  931.512054][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  932.107273][T12373] netlink: 64399 bytes leftover after parsing attributes in process `syz.3.1978'.
[  933.507694][T12383] loop8: detected capacity change from 0 to 8192
[  933.695656][T12383]  loop8: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p
[  933.695781][T12383] loop8: partition table partially beyond EOD, 
[  933.714082][T12393] device syzkaller0 entered promiscuous mode
[  933.876169][T12383] truncated
[  933.890644][T12383] loop8: p1 start 51379968 is beyond EOD, truncated
[  934.397565][T12383] loop8: p3 size 100663552 extends beyond EOD, truncated
[  934.545820][T12383] loop8: p5 start 51379968 is beyond EOD, truncated
[  934.569789][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.578548][ T4320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.614538][T12383] loop8: p7 start 51379968 is beyond EOD, truncated
[  934.661523][T12383] loop8: p9 start 51379968 is beyond EOD, truncated
[  934.726413][T12383] loop8: p11 start 51379968 is beyond EOD, truncated
[  934.778076][T12383] loop8: p13 start 51379968 is beyond EOD, truncated
[  934.854151][T12383] loop8: p15 start 51379968 is beyond EOD, truncated
[  934.946387][ T4290] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  935.018444][T12383] loop8: p17 start 51379968 is beyond EOD, truncated
[  935.260612][T12383] loop8: p19 start 51379968 is beyond EOD, truncated
[  935.463746][T12383] loop8: p21 start 51379968 is beyond EOD, truncated
[  935.569349][T12383] loop8: p23 start 51379968 is beyond EOD, truncated
[  935.618715][T12383] loop8: p25 start 51379968 is beyond EOD, truncated
[  935.679359][T12409] loop4: detected capacity change from 0 to 64
[  935.691684][T12383] loop8: p27 start 51379968 is beyond EOD, truncated
[  935.751112][T12383] loop8: p29 start 51379968 is beyond EOD, truncated
[  935.795625][T12383] loop8: p31 start 51379968 is beyond EOD, truncated
[  935.825262][T12383] loop8: p33 start 51379968 is beyond EOD, truncated
[  935.847180][T12383] loop8: p35 start 51379968 is beyond EOD, truncated
[  935.901326][T12383] loop8: p37 start 51379968 is beyond EOD, truncated
[  935.941397][T12383] loop8: p39 start 51379968 is beyond EOD, truncated
[  936.005971][T12383] loop8: p41 start 51379968 is beyond EOD, truncated
[  936.069329][T12383] loop8: p43 start 51379968 is beyond EOD, truncated
[  936.142138][T12383] loop8: p45 start 51379968 is beyond EOD, truncated
[  936.243686][ T4290] Bluetooth: hci3: Malformed LE Event: 0x0d
[  936.487227][T12383] loop8: p47 start 51379968 is beyond EOD, truncated
[  936.542210][T12412] 9pnet: Could not find request transport: xen
[  936.709160][T12383] loop8: p49 start 51379968 is beyond EOD, truncated
[  936.804368][T12383] loop8: p51 start 51379968 is beyond EOD, truncated
[  936.855904][T12383] loop8: p53 start 51379968 is beyond EOD, truncated
[  936.904581][T12383] loop8: p55 start 51379968 is beyond EOD, truncated
[  936.942159][T12383] loop8: p57 start 51379968 is beyond EOD, truncated
[  936.965262][T12383] loop8: p59 start 51379968 is beyond EOD, truncated
[  936.974135][T12383] loop8: p61 start 51379968 is beyond EOD, truncated
[  936.995050][T12383] loop8: p63 start 51379968 is beyond EOD, truncated
[  937.002963][T12383] loop8: p65 start 51379968 is beyond EOD, truncated
[  937.022244][T12383] loop8: p67 start 51379968 is beyond EOD, truncated
[  937.042360][T12383] loop8: p69 start 51379968 is beyond EOD, truncated
[  937.061423][T12383] loop8: p71 start 51379968 is beyond EOD, truncated
[  937.847573][T12383] loop8: p73 start 51379968 is beyond EOD, truncated
[  937.871838][T12383] loop8: p75 start 51379968 is beyond EOD, truncated
[  937.924056][T12383] loop8: p77 start 51379968 is beyond EOD, truncated
[  937.960090][T12383] loop8: p79 start 51379968 is beyond EOD, truncated
[  938.038940][T12383] loop8: p81 start 51379968 is beyond EOD, truncated
[  938.047484][T12383] loop8: p83 start 51379968 is beyond EOD, truncated
[  938.056086][T12383] loop8: p85 start 51379968 is beyond EOD, truncated
[  938.064742][T12383] loop8: p87 start 51379968 is beyond EOD, truncated
[  938.084730][T12421] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  938.085616][T12383] loop8: p89 start 51379968 is beyond EOD, truncated
[  938.103298][T12383] loop8: p91 start 51379968 is beyond EOD, truncated
[  938.129594][T12383] loop8: p93 start 51379968 is beyond EOD, truncated
[  938.141499][T12421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  938.171563][T12383] loop8: p95 start 51379968 is beyond EOD, truncated
[  938.201619][T12383] loop8: p97 start 51379968 is beyond EOD, truncated
[  938.220207][T12383] loop8: p99 start 51379968 is beyond EOD, truncated
[  938.246628][T12383] loop8: p101 start 51379968 is beyond EOD, truncated
[  938.262618][T12383] loop8: p103 start 51379968 is beyond EOD, truncated
[  938.281148][T12383] loop8: p105 start 51379968 is beyond EOD, truncated
[  938.302656][T12383] loop8: p107 start 51379968 is beyond EOD, truncated
[  938.331151][T12383] loop8: p109 start 51379968 is beyond EOD, truncated
[  938.355669][T12383] loop8: p111 start 51379968 is beyond EOD, truncated
[  938.380585][T12383] loop8: p113 start 51379968 is beyond EOD, truncated
[  938.387774][T11690] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  938.418713][T12383] loop8: p115 start 51379968 is beyond EOD, truncated
[  938.442949][T12383] loop8: p117 start 51379968 is beyond EOD, truncated
[  938.462813][T12383] loop8: p119 start 51379968 is beyond EOD, truncated
[  938.481669][T12383] loop8: p121 start 51379968 is beyond EOD, truncated
[  938.501498][T12383] loop8: p123 start 51379968 is beyond EOD, truncated
[  938.510220][T12383] loop8: p125 start 51379968 is beyond EOD, truncated
[  938.530358][T12383] loop8: p127 start 51379968 is beyond EOD, truncated
[  938.571787][T12383] loop8: p129 start 51379968 is beyond EOD, truncated
[  938.580854][T11690] usb 7-1: Using ep0 maxpacket: 16
[  938.587851][T11690] usb 7-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config
[  938.602273][T12383] loop8: p131 start 51379968 is beyond EOD, truncated
[  938.609848][T11690] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  938.619846][T12383] loop8: p133 start 51379968 is beyond EOD, truncated
[  938.641942][T12383] loop8: p135 start 51379968 is beyond EOD, truncated
[  938.653125][T11690] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  938.678034][T12383] loop8: p137 start 51379968 is beyond EOD, truncated
[  938.696968][T11690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  938.707064][T12448] loop4: detected capacity change from 0 to 512
[  938.719995][T12383] loop8: p139 start 51379968 is beyond EOD, truncated
[  938.726951][T11690] usb 7-1: Product: syz
[  938.737952][T11690] usb 7-1: Manufacturer: syz
[  938.743669][T12383] loop8: p141 start 51379968 is beyond EOD, truncated
[  938.755310][T11690] usb 7-1: SerialNumber: syz
[  938.768072][T12383] loop8: p143 start 51379968 is beyond EOD, truncated
[  938.792092][T12383] loop8: p145 start 51379968 is beyond EOD, truncated
[  938.802453][T12383] loop8: p147 start 51379968 is beyond EOD, truncated
[  938.827786][T12383] loop8: p149 start 51379968 is beyond EOD, truncated
[  938.837726][T12444] 9pnet: Could not find request transport: xen
[  938.852239][T12383] loop8: p151 start 51379968 is beyond EOD, truncated
[  938.867246][T12448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  938.881460][T12383] loop8: p153 start 51379968 is beyond EOD, truncated
[  938.888939][T12448] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  938.910206][T12383] loop8: p155 start 51379968 is beyond EOD, truncated
[  939.076306][T12383] loop8: p157 start 51379968 is beyond EOD, truncated
[  940.009685][T12383] loop8: p159 start 51379968 is beyond EOD, truncated
[  940.046027][T12383] loop8: p161 start 51379968 is beyond EOD, truncated
[  940.072538][T12383] loop8: p163 start 51379968 is beyond EOD, truncated
[  940.091798][T12383] loop8: p165 start 51379968 is beyond EOD, truncated
[  940.109388][T12383] loop8: p167 start 51379968 is beyond EOD, truncated
[  940.138087][T12383] loop8: p169 start 51379968 is beyond EOD, truncated
[  940.179203][T12383] loop8: p171 start 51379968 is beyond EOD, truncated
[  940.230398][T12383] loop8: p173 start 51379968 is beyond EOD, truncated
[  940.266608][T12383] loop8: p175 start 51379968 is beyond EOD, truncated
[  940.301968][T12383] loop8: p177 start 51379968 is beyond EOD, truncated
[  940.330611][T12383] loop8: p179 start 51379968 is beyond EOD, truncated
[  940.360219][T12383] loop8: p181 start 51379968 is beyond EOD, truncated
[  940.385221][T12383] loop8: p183 start 51379968 is beyond EOD, truncated
[  940.412532][T12383] loop8: p185 start 51379968 is beyond EOD, truncated
[  940.447807][T12383] loop8: p187 start 51379968 is beyond EOD, truncated
[  940.472530][T12383] loop8: p189 start 51379968 is beyond EOD, truncated
[  940.511262][T12383] loop8: p191 start 51379968 is beyond EOD, truncated
[  940.540230][T12383] loop8: p193 start 51379968 is beyond EOD, truncated
[  940.580170][T12383] loop8: p195 start 51379968 is beyond EOD, truncated
[  940.613354][T12383] loop8: p197 start 51379968 is beyond EOD, truncated
[  940.641673][T12383] loop8: p199 start 51379968 is beyond EOD, truncated
[  940.663172][T12383] loop8: p201 start 51379968 is beyond EOD, truncated
[  940.691637][T12383] loop8: p203 start 51379968 is beyond EOD, truncated
[  940.710633][T12383] loop8: p205 start 51379968 is beyond EOD, truncated
[  940.756741][T12383] loop8: p207 start 51379968 is beyond EOD, truncated
[  940.782509][T12383] loop8: p209 start 51379968 is beyond EOD, truncated
[  940.811860][T12383] loop8: p211 start 51379968 is beyond EOD, truncated
[  940.841226][T12383] loop8: p213 start 51379968 is beyond EOD, truncated
[  940.852561][T12383] loop8: p215 start 51379968 is beyond EOD, truncated
[  940.875564][T12383] loop8: p217 start 51379968 is beyond EOD, truncated
[  940.894657][T12383] loop8: p219 start 51379968 is beyond EOD, truncated
[  940.913812][T12383] loop8: p221 start 51379968 is beyond EOD, truncated
[  940.932341][T12383] loop8: p223 start 51379968 is beyond EOD, truncated
[  940.953363][T12383] loop8: p225 start 51379968 is beyond EOD, truncated
[  940.974076][T12383] loop8: p227 start 51379968 is beyond EOD, truncated
[  941.005053][T12383] loop8: p229 start 51379968 is beyond EOD, truncated
[  941.052628][T12383] loop8: p231 start 51379968 is beyond EOD, truncated
[  941.098412][T12383] loop8: p233 start 51379968 is beyond EOD, truncated
[  941.121113][T12383] loop8: p235 start 51379968 is beyond EOD, truncated
[  941.138556][T12383] loop8: p237 start 51379968 is beyond EOD, truncated
[  941.151110][T12383] loop8: p239 start 51379968 is beyond EOD, truncated
[  941.220584][ T4290] Bluetooth: hci2: ACL packet for unknown connection handle 0
[  941.329531][T12383] loop8: p241 start 51379968 is beyond EOD, truncated
[  941.487243][T12383] loop8: p243 start 51379968 is beyond EOD, truncated
[  941.694610][T12383] loop8: p245 start 51379968 is beyond EOD, truncated
[  941.785429][T12383] loop8: p247 start 51379968 is beyond EOD, truncated
[  941.846085][T12383] loop8: p249 start 51379968 is beyond EOD, truncated
[  941.922008][T12383] loop8: p251 start 51379968 is beyond EOD, truncated
[  941.949448][T12383] loop8: p253 start 51379968 is beyond EOD, truncated
[  941.975957][T12383] loop8: p255 start 51379968 is beyond EOD, truncated
[  942.082523][T11534] EXT4-fs (loop4): unmounting filesystem.
[  942.108035][T11690] usb 7-1: 0:2 : does not exist
[  942.130725][T11690] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  942.224660][T11690] usb 7-1: USB disconnect, device number 6
[  942.242095][T12469] mmap: syz.1.1994 (12469) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  942.540999][T11301] udevd[11301]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  942.666503][ T4290] Bluetooth: hci1: Malformed LE Event: 0x0d
[  943.519121][T12503] loop4: detected capacity change from 0 to 1024
[  943.569279][T12503] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  943.588020][T12505] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4274] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12505]
[  943.667834][T12503] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  943.709578][   T26] audit: type=1800 audit(1786422741.437:112): pid=12503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2006" name="file1" dev="loop4" ino=15 res=0 errno=0
[  943.767407][T11534] EXT4-fs (loop4): unmounting filesystem.
[  944.043383][T12515] device syzkaller0 entered promiscuous mode
[  944.071310][T11635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  944.080083][T11635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  944.723405][ T4290] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  945.608147][T11937] udevd[11937]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  945.608280][T11301] udevd[11301]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  945.672757][T11265] udevd[11265]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  945.686098][T11343] udevd[11343]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory
[  945.700490][T11515] udevd[11515]: inotify_add_watch(7, /dev/loop8p8, 10) failed: No such file or directory
[  945.867658][T12534] udevd[12534]: inotify_add_watch(7, /dev/loop8p12, 10) failed: No such file or directory
[  945.892824][T12533] udevd[12533]: inotify_add_watch(7, /dev/loop8p10, 10) failed: No such file or directory
[  945.898495][T12535] udevd[12535]: inotify_add_watch(7, /dev/loop8p14, 10) failed: No such file or directory
[  945.930643][T11937] udevd[11937]: inotify_add_watch(7, /dev/loop8p24, 10) failed: No such file or directory
[  946.730948][T11637] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  947.004764][T12568] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7351] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12568]
[  947.024818][ T4290] Bluetooth: hci5: ACL packet for unknown connection handle 0
[  947.122207][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'.
[  947.171001][T11637] usb 5-1: Using ep0 maxpacket: 8
[  947.338930][T11637] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  947.517873][T11637] usb 5-1: config 179 has no interface number 0
[  947.733307][T11637] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  947.876436][T11637] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  948.040849][T11637] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  948.998553][T12587] tipc: Started in network mode
[  949.071136][T12587] tipc: Node identity b20384f06f9d, cluster identity 4711
[  949.147239][T12587] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  949.334985][T12586] tipc: Disabling bearer <eth:syzkaller0>
[  949.451638][T11637] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  949.463166][T11637] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  949.481751][T11637] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  949.491035][T11637] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.926920][T12600] devpts: called with bogus options
[  950.272228][T11637] usb 5-1: can't set config #179, error -71
[  950.279366][T11637] usb 5-1: USB disconnect, device number 4
[  951.911227][T12628] loop8: detected capacity change from 0 to 512
[  951.918875][T12629] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[7351] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[12629]
[  951.932695][T11637] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  951.957018][T12628] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  952.121003][T11637] usb 5-1: Using ep0 maxpacket: 16
[  952.128199][T11637] usb 5-1: config 1 has an invalid descriptor of length 242, skipping remainder of the config
[  952.166149][T11637] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  952.213623][T11637] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  952.247008][T11637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.275527][T11637] usb 5-1: Product: syz
[  952.291486][T11637] usb 5-1: Manufacturer: syz
[  952.296152][T11637] usb 5-1: SerialNumber: syz
[  952.563799][T11637] usb 5-1: 0:2 : does not exist
[  952.611819][T11637] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  952.701408][T11637] usb 5-1: USB disconnect, device number 5
[  953.002762][T11937] udevd[11937]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  953.170055][T12644] loop6: detected capacity change from 0 to 4096
[  953.213131][T12644] EXT4-fs: inline encryption not supported
[  953.219030][T12644] ext4: Unknown parameter 'noacl'
[  953.352058][T12647] loop4: detected capacity change from 0 to 64
[  953.587115][T12653] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.2045'.
[  953.613473][T12656] loop8: detected capacity change from 0 to 512
[  953.740137][T12656] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  953.812243][T12656] FAT-fs (loop8): Filesystem has been set read-only
[  953.837145][T12659] loop4: detected capacity change from 0 to 512
[  953.851835][T12656] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  953.931055][T12656] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 548)
[  953.932219][T12659] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.2048: iget: bad i_size value: 38620345925642
[  953.960592][T12659] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2048: couldn't read orphan inode 15 (err -117)
[  953.984523][T12659] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  954.202714][T12666] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.2048: bg 0: block 5: invalid block bitmap
[  954.284117][T12666] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 180 with error 28
[  954.433269][T12666] EXT4-fs (loop4): This should not happen!! Data will be lost
[  954.433269][T12666] 
[  954.484091][T12666] EXT4-fs (loop4): Total free blocks count 0
[  954.490161][T12666] EXT4-fs (loop4): Free/Dirty block details
[  954.559415][T12666] EXT4-fs (loop4): free_blocks=0
[  954.629531][ T4290] Bluetooth: hci5: Malformed LE Event: 0x0d
[  955.375924][T12666] EXT4-fs (loop4): dirty_blocks=184
[  955.400959][T12666] EXT4-fs (loop4): Block reservation details
[  955.407059][T12666] EXT4-fs (loop4): i_reserved_data_blocks=184
[  955.466047][T12681] loop8: detected capacity change from 0 to 256
[  955.491240][T12659] EXT4-fs (loop4): shut down requested (0)
[  955.571537][T12681] FAT-fs (loop8): Directory bread(block 64) failed
[  955.641097][T12681] FAT-fs (loop8): Directory bread(block 65) failed
[  955.648529][T12681] FAT-fs (loop8): Directory bread(block 66) failed
[  955.661013][T12681] FAT-fs (loop8): Directory bread(block 67) failed
[  955.667722][T12681] FAT-fs (loop8): Directory bread(block 68) failed
[  955.734552][T12681] FAT-fs (loop8): Directory bread(block 69) failed
[  955.778117][T12681] FAT-fs (loop8): Directory bread(block 70) failed
[  955.809341][T12681] FAT-fs (loop8): Directory bread(block 71) failed
[  955.868592][T12681] FAT-fs (loop8): Directory bread(block 72) failed
[  955.890957][T12681] FAT-fs (loop8): Directory bread(block 73) failed
[  956.123821][T12697] netlink: 'syz.3.2059': attribute type 4 has an invalid length.
[  956.210598][T12697] netlink: 'syz.3.2059': attribute type 4 has an invalid length.
[  956.941431][ T4290] Bluetooth: hci2: Malformed LE Event: 0x0d
[  958.314551][T12740] loop4: detected capacity change from 0 to 64
[  959.147732][T12759] loop6: detected capacity change from 0 to 512
[  960.485405][T12798] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.2088'.
[  960.585777][T12802] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2090'.
[  960.978755][T12779] loop8: detected capacity change from 0 to 40427
[  961.028049][T12779] F2FS-fs (loop8): build fault injection attr: rate: 19, type: 0x3ffff
[  961.061707][ T4318] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  961.273394][ T4318] usb 7-1: unable to get BOS descriptor or descriptor too short
[  961.315426][ T4318] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  961.360847][ T4318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.392519][ T4318] usb 7-1: Product: syz
[  961.396752][ T4318] usb 7-1: Manufacturer: syz
[  961.440849][ T4318] usb 7-1: SerialNumber: syz
[  961.717826][ T4318] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  961.772917][ T4318] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  961.909747][ T4318] usb 7-1: USB disconnect, device number 7
[  962.018656][T12541] udevd[12541]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  962.257289][T11635] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  963.465946][T11635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  963.497419][T11635] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  963.523942][T11635] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  963.560741][T11635] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.560973][T12855] netlink: 'syz.1.2105': attribute type 4 has an invalid length.
[  963.569394][   T41] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  963.626160][T11635] usb 5-1: config 0 descriptor??
[  963.684946][T12855] netlink: 'syz.1.2105': attribute type 4 has an invalid length.
[  963.797221][   T41] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  963.821174][   T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.868398][   T41] usb 7-1: config 0 descriptor??
[  963.913154][   T41] cp210x 7-1:0.0: cp210x converter detected
[  964.064975][T11635] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  964.100993][T11635] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  964.123553][T11635] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  964.146402][T11635] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  964.164301][T11635] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0
[  964.209111][T11635] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  964.319166][   T41] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  964.334863][   T41] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71
[  964.351409][   T41] cp210x 7-1:0.0: GPIO initialisation failed: -71
[  964.385275][   T41] usb 7-1: cp210x converter now attached to ttyUSB0
[  964.428336][   T41] usb 7-1: USB disconnect, device number 8
[  964.481621][   T41] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  964.516042][   T41] cp210x 7-1:0.0: device disconnected
[  964.736297][T11635] playstation 0003:054C:0DF2.0004: Invalid gyro calibration data for axis (3), disabling calibration.
[  964.755106][T11635] playstation 0003:054C:0DF2.0004: Invalid gyro calibration data for axis (4), disabling calibration.
[  964.770355][T11635] playstation 0003:054C:0DF2.0004: Invalid gyro calibration data for axis (5), disabling calibration.
[  964.789382][T11635] playstation 0003:054C:0DF2.0004: Invalid accelerometer calibration data for axis (0), disabling calibration.
[  964.811071][T11635] playstation 0003:054C:0DF2.0004: Invalid accelerometer calibration data for axis (1), disabling calibration.
[  964.828613][T11635] playstation 0003:054C:0DF2.0004: Invalid accelerometer calibration data for axis (2), disabling calibration.
[  964.846509][T11635] input: HID 054c:0df2 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0004/input/input7
[  964.883566][T11635] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0004/input/input8
[  964.973017][T11635] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:0DF2.0004/input/input9
[  965.017432][ T4318] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  965.036449][T11635] playstation 0003:054C:0DF2.0004: Registered DualSense controller hw_version=0x00000000 fw_version=0x00000000
[  965.101386][T11635] usb 5-1: USB disconnect, device number 6
[  965.185473][T12888] 
[  965.187951][T12888] ======================================================
[  965.195017][T12888] WARNING: possible circular locking dependency detected
[  965.202128][T12888] syzkaller #0 Not tainted
[  965.206547][T12888] ------------------------------------------------------
[  965.213571][T12888] syz.3.2111/12888 is trying to acquire lock:
[  965.219639][T12888] ffff88802f59ea58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60
[  965.229379][T12888] 
[  965.229379][T12888] but task is already holding lock:
[  965.237277][T12888] ffff8880522da870 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0
[  965.248258][T12888] 
[  965.248258][T12888] which lock already depends on the new lock.
[  965.248258][T12888] 
[  965.258757][T12888] 
[  965.258757][T12888] the existing dependency chain (in reverse order) is:
[  965.267777][T12888] 
[  965.267777][T12888] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}:
[  965.276478][T12888]        down_write+0x36/0x60
[  965.281219][T12888]        process_measurement+0x3af/0x1c40
[  965.286992][T12888]        ima_file_mmap+0xe9/0x140
[  965.292021][T12888]        __se_sys_remap_file_pages+0x55a/0x7b0
[  965.298185][T12888]        do_syscall_64+0x4c/0xa0
[  965.303149][T12888]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  965.309593][T12888] 
[  965.309593][T12888] -> #0 (&mm->mmap_lock){++++}-{3:3}:
[  965.317171][T12888]        __lock_acquire+0x2d18/0x7c40
[  965.322568][T12888]        lock_acquire+0x1bb/0x4a0
[  965.327601][T12888]        down_read_killable+0x4c/0x340
[  965.333063][T12888]        mmap_read_lock_killable+0x1d/0x60
[  965.338964][T12888]        lock_mm_and_find_vma+0x2b1/0x2f0
[  965.344801][T12888]        do_user_addr_fault+0x2e8/0xb20
[  965.350366][T12888]        exc_page_fault+0x60/0x100
[  965.355481][T12888]        asm_exc_page_fault+0x22/0x30
[  965.360862][T12888]        fault_in_readable+0x13e/0x1f0
[  965.366363][T12888]        fault_in_iov_iter_readable+0xbf/0x2f0
[  965.372569][T12888]        generic_perform_write+0x1f1/0x5c0
[  965.378579][T12888]        __generic_file_write_iter+0x148/0x2a0
[  965.384741][T12888]        generic_file_write_iter+0xab/0x2e0
[  965.390640][T12888]        vfs_write+0x482/0x9a0
[  965.395473][T12888]        ksys_write+0x14d/0x260
[  965.400344][T12888]        do_syscall_64+0x4c/0xa0
[  965.405290][T12888]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  965.411710][T12888] 
[  965.411710][T12888] other info that might help us debug this:
[  965.411710][T12888] 
[  965.421939][T12888]  Possible unsafe locking scenario:
[  965.421939][T12888] 
[  965.429396][T12888]        CPU0                    CPU1
[  965.434757][T12888]        ----                    ----
[  965.440118][T12888]   lock(&sb->s_type->i_mutex_key#13);
[  965.445675][T12888]                                lock(&mm->mmap_lock);
[  965.452526][T12888]                                lock(&sb->s_type->i_mutex_key#13);
[  965.460513][T12888]   lock(&mm->mmap_lock);
[  965.464941][T12888] 
[  965.464941][T12888]  *** DEADLOCK ***
[  965.464941][T12888] 
[  965.473172][T12888] 3 locks held by syz.3.2111/12888:
[  965.478376][T12888]  #0: ffff888026a679e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360
[  965.487841][T12888]  #1: ffff888054ab0460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0
[  965.496752][T12888]  #2: ffff8880522da870 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0
[  965.508120][T12888] 
[  965.508120][T12888] stack backtrace:
[  965.514032][T12888] CPU: 1 PID: 12888 Comm: syz.3.2111 Not tainted syzkaller #0
[  965.521508][T12888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  965.531571][T12888] Call Trace:
[  965.534920][T12888]  <TASK>
[  965.537916][T12888]  dump_stack_lvl+0x188/0x24e
[  965.542664][T12888]  ? load_image+0x410/0x410
[  965.547191][T12888]  ? show_regs_print_info+0x12/0x12
[  965.552400][T12888]  ? print_circular_bug+0x12b/0x1a0
[  965.557618][T12888]  check_noncircular+0x296/0x330
[  965.562571][T12888]  ? add_chain_block+0x9b0/0x9b0
[  965.567522][T12888]  ? lockdep_lock+0xf1/0x1f0
[  965.572127][T12888]  ? _find_first_zero_bit+0xd2/0x100
[  965.577425][T12888]  __lock_acquire+0x2d18/0x7c40
[  965.582294][T12888]  ? verify_lock_unused+0x140/0x140
[  965.587701][T12888]  ? verify_lock_unused+0x140/0x140
[  965.592909][T12888]  ? verify_lock_unused+0x140/0x140
[  965.598119][T12888]  lock_acquire+0x1bb/0x4a0
[  965.602639][T12888]  ? mmap_read_lock_killable+0x1d/0x60
[  965.608105][T12888]  ? read_lock_is_recursive+0x10/0x10
[  965.613483][T12888]  ? cmp_ex_search+0x1a/0x70
[  965.618104][T12888]  ? bsearch+0x86/0xb0
[  965.622182][T12888]  ? fault_in_readable+0x13e/0x1f0
[  965.627300][T12888]  ? search_extable+0x8c/0xd0
[  965.631986][T12888]  ? trim_init_extable+0x3b0/0x3b0
[  965.637111][T12888]  ? mmap_read_lock_killable+0x1d/0x60
[  965.642582][T12888]  down_read_killable+0x4c/0x340
[  965.647524][T12888]  ? mmap_read_lock_killable+0x1d/0x60
[  965.652985][T12888]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  965.658976][T12888]  mmap_read_lock_killable+0x1d/0x60
[  965.664276][T12888]  lock_mm_and_find_vma+0x2b1/0x2f0
[  965.669484][T12888]  do_user_addr_fault+0x2e8/0xb20
[  965.674520][T12888]  ? _raw_spin_unlock_irq+0x1f/0x40
[  965.679733][T12888]  ? lockdep_hardirqs_on+0x94/0x140
[  965.684936][T12888]  exc_page_fault+0x60/0x100
[  965.689537][T12888]  asm_exc_page_fault+0x22/0x30
[  965.694402][T12888] RIP: 0010:fault_in_readable+0x13e/0x1f0
[  965.700194][T12888] Code: a8 53 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 87 53 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 6a 53
[  965.719959][T12888] RSP: 0018:ffffc9000cc27ab0 EFLAGS: 00050287
[  965.726081][T12888] RAX: ffffffff81bdda99 RBX: 0000000000001000 RCX: 0000000000080000
[  965.734070][T12888] RDX: ffffc9000e42b000 RSI: 000000000000b6af RDI: 000000000000b6b0
[  965.742057][T12888] RBP: 0000000000000000 R08: ffff888025505a00 R09: 0000000000000002
[  965.750034][T12888] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000067000
[  965.758095][T12888] R13: dffffc0000000000 R14: 0000200000065040 R15: 0000200000066000
[  965.766076][T12888]  ? fault_in_readable+0x139/0x1f0
[  965.771204][T12888]  fault_in_iov_iter_readable+0xbf/0x2f0
[  965.776858][T12888]  generic_perform_write+0x1f1/0x5c0
[  965.782154][T12888]  ? generic_file_direct_write+0x330/0x330
[  965.787968][T12888]  ? __file_remove_privs+0x5f0/0x5f0
[  965.793344][T12888]  ? rwsem_write_trylock+0x135/0x1c0
[  965.798636][T12888]  ? clear_nonspinnable+0x60/0x60
[  965.803663][T12888]  ? generic_write_checks_count+0x363/0x440
[  965.809562][T12888]  __generic_file_write_iter+0x148/0x2a0
[  965.815204][T12888]  generic_file_write_iter+0xab/0x2e0
[  965.820583][T12888]  vfs_write+0x482/0x9a0
[  965.824836][T12888]  ? file_end_write+0x250/0x250
[  965.829697][T12888]  ? __fget_files+0x3fc/0x460
[  965.834382][T12888]  ? __fdget_pos+0x2ae/0x360
[  965.838976][T12888]  ? ksys_write+0x70/0x260
[  965.843403][T12888]  ksys_write+0x14d/0x260
[  965.847740][T12888]  ? __ia32_sys_read+0x80/0x80
[  965.852510][T12888]  ? lockdep_hardirqs_on+0x94/0x140
[  965.857715][T12888]  do_syscall_64+0x4c/0xa0
[  965.862136][T12888]  ? clear_bhb_loop+0x60/0xb0
[  965.866820][T12888]  ? clear_bhb_loop+0x60/0xb0
[  965.871589][T12888]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  965.877488][T12888] RIP: 0033:0x7f105879e0d9
[  965.882083][T12888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  965.901696][T12888] RSP: 002b:00007f1059663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  965.910114][T12888] RAX: ffffffffffffffda RBX: 00007f1058a25fa0 RCX: 00007f105879e0d9
[  965.918090][T12888] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000006
[  965.926068][T12888] RBP: 00007f1058835024 R08: 0000000000000000 R09: 0000000000000000
[  965.934045][T12888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  965.942021][T12888] R13: 00007f1058a26038 R14: 00007f1058a25fa0 R15: 00007fffd54daa18
[  965.950004][T12888]  </TASK>
[  965.954386][ T4318] usb 9-1: Using ep0 maxpacket: 32
[  965.959651][T11690] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  965.979425][ T4318] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  966.000082][ T4318] usb 9-1: config 0 has no interface number 0
[  966.014223][ T4318] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  966.035800][ T4318] usb 9-1: config 0 interface 1 has no altsetting 0
[  966.056480][ T4318] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  966.074535][ T4318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.083075][ T4318] usb 9-1: Product: syz
[  966.087496][T12889] fido_id[12889]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  966.105314][ T4318] usb 9-1: Manufacturer: syz
[  966.110028][ T4318] usb 9-1: SerialNumber: syz
[  966.135432][ T4318] usb 9-1: config 0 descriptor??
[  966.174095][T11690] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  966.189324][T11690] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  966.207565][T11690] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  966.217803][T11690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.226293][T11690] usb 7-1: Product: syz
[  966.230596][T11690] usb 7-1: Manufacturer: syz
[  966.235612][T11690] usb 7-1: SerialNumber: syz
[  966.254870][T11690] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  966.347080][ T4318] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  966.361354][ T4318] cx231xx 9-1:0.1: Failed to read PCB config
[  966.375333][ T4318] cx231xx: probe of 9-1:0.1 failed with error -71
[  966.385345][T11690] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  966.403842][ T4318] usb 9-1: USB disconnect, device number 9
[  966.595118][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  966.606584][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  966.831805][   T41] usb 7-1: USB disconnect, device number 9
[  966.960938][ T4318] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  967.140849][ T4318] usb 9-1: Using ep0 maxpacket: 32
[  967.147704][ T4318] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  967.157809][ T4318] usb 9-1: config 0 has no interface number 0
[  967.164465][ T4318] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping
[  967.176967][ T4318] usb 9-1: config 0 interface 1 has no altsetting 0
[  967.189508][ T4318] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  967.200543][ T4318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.212302][ T4318] usb 9-1: Product: syz
[  967.216903][ T4318] usb 9-1: Manufacturer: syz
[  967.221850][ T4318] usb 9-1: SerialNumber: syz
[  967.228099][ T4318] usb 9-1: config 0 descriptor??
[  967.420811][T11690] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  967.428017][T11690] ath9k_htc: Failed to initialize the device
[  967.438340][   T41] usb 7-1: ath9k_htc: USB layer deinitialized
[  967.449573][ T4318] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  967.464420][T12881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  967.473971][ T4318] cx231xx 9-1:0.1: Failed to read PCB config
[  967.480379][ T4318] cx231xx: probe of 9-1:0.1 failed with error -32
[  967.487906][T12881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  967.810878][   T41] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  967.990816][   T41] usb 7-1: Using ep0 maxpacket: 32
[  967.997480][   T41] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  968.008049][   T41] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[  968.026378][   T41] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08
[  968.044806][   T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.063243][   T41] usb 7-1: Product: syz
[  968.067459][   T41] usb 7-1: Manufacturer: syz
[  968.072443][   T41] usb 7-1: SerialNumber: syz
[  968.078546][   T41] usb 7-1: can't set config #1, error -71
[  968.093858][   T41] usb 7-1: USB disconnect, device number 10
[  968.880635][T11637] usb 9-1: USB disconnect, device number 10