last executing test programs:

4m40.129251345s ago: executing program 0 (id=991):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(0x0, r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0)
read$nci(r0, 0x0, 0x0)

4m38.814754909s ago: executing program 0 (id=996):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB="6b6565705f6c6173745f646f74732c756d61736b3d30303030303030303030303030303030303030303030352c757466382c6572726f72733d636f6e74696e75652c696f636861727365743d6d616363656e746575726f2c646973636172642c6572726f72733d72656d6f756e742d726f2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c00e1ee3e46128f3731e7aa706359338a91706d6543fd9e8fc3"], 0x1, 0x151a, &(0x7f0000002280)="$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")
mkdir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000040)={0x7, 0xffffffff, 0x6, {0x7fffffff, 0x28c}, 0x4, 0x1ff})
rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4m37.850496446s ago: executing program 0 (id=1003):
r0 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x15, 0x10, 0x2}, 0x50)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000, 0x3, 0xfffffffd})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x5608, 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000080000000400000008"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r3}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xf, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='syzkaller\x00', 0x2}, 0x94)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f0000001f00)={0x200, 0x3})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg1\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e80)={&(0x7f00000018c0)={0x584, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x464, 0x8, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdaef}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6, @remote, 0x1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4cc}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e5c82a845fd2af303f8d2673ebfba16010433b224d7174b7452af89ea6ee4b57"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @mcast1, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5437a141c1ac3b5e44c67c4dcf1c45d899f2e9d719251e15a63945f484e1109c"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @remote, 0xff}}]}, {0x1a8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b9847b937fc3ad9e98c25768540e4f2965888e584cc892866b7d74f5117dac7e"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0xf4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private1, 0x1000}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0xd4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f0103e71ce689f315cdd24a169d154335251c1b95a3535d6780a74bfaff689a9"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0xd4, 0x8, 0x0, 0x1, [{0x4}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b7e0dc34dbff1aa9415e7d4adc4a8a9c0479e255fd25db6fcda56d090a12e943"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "31198b96e11396ea538c809b842fc17392f1b0fd659d586f80ba4a0d7f9fcd9f"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @private0, 0x6}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x18}]}]}]}, 0x584}, 0x1, 0x0, 0x0, 0x20000040}, 0x40001)
r6 = accept4(r4, 0x0, 0x0, 0x0)
ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000001f40)=0x4)
write(r6, &(0x7f0000000040)="cb", 0xfffffdef)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bond0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r11, @ANYRES16], 0x1c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', <r12=>0x0, 0x4, 0x15, 0x2, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x1, 0x710, 0x7eb, 0x2}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000001800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000017c0)={&(0x7f00000003c0)={0x13d8, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10e0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "a1797014455c971587a2cc9af664981c5d3a46b1ad718a10d5cc072576bb021487251b7f7a617b417a387b3317e7840522c97168bf59a7822429c4af4cb3562043ccc918ddba0575abe025a28d163c1f87d4ccfbf4f86554c9da6f47ffb34188e0d20693f9de958cf9a4e10f497f28537281daf2ca029f58c41324f0164efaf0f11f4c3560936d162bb4d1d44d8b70d9b34769ff9ca6f06264df1cafa1dd25b05bb49d1d4c6bd9c3c3f027b5fdd1d53c989e731812eeb566fdab2bd4f778528501ccb1072ead8301e3a7f25d8a68874f0ab9f864183d365fff2b6b926c4f6b91546a0643d5e85b1645f4d82e9ca9444e2a72690b6ff84a87369f5b3749c7d81886aefcf8293f3b001f3291a4a4659024d72d787a85709e82d9348d21d51cd6b826fed2d1d5512970e4209d5fffb8a6d66d5b75a16aba53fa673b378556583b80cb3479d251df64d9289a4608b838ca16c1670f9e74b33ffe1f6f88ede5a7cfa10163cba7b749563fb86f23bc6c30534dc21c52fe3df23a693b8accb6afe7d5cef5d167f07d7ea37b86fd3175ddacc12137e3e04ddf694d9da69b2bde46fae1eba4a5c1c998ff0c1ebc72270c8055d5e0ab923832c4529ff4a3638c329cb719a2491cb48f3e1d210b6d25156d826e34141bfa703bc87a23475e90ed2c26540ebb392000399a034839de45b5d2513f8021756193f5817709be97280a5fb0dd3462843e79b2488139519223d9cb7f62eccf99ec57d58112bed831e02d3e6de5e92d8ae87fd766728e5946b6912086779e07663e2169951cfdbe1a588f8544e073292ea8d58c635a2e74b5883ca4138f7a4e01f68f407629f6266f9842ae46bd406b8f317c55fa0bc8c7a1ec0a7f517dc32ddc4715791942592c0bbf949a786e45da73de9ccd60b834b5a2b6bde49e34ecf797673926492500c7a44aad7e2933cc05ee01fbbd07e5def87dcc3db8f4831a69bf71a1b5c2fd54d6f82bba27c0c1ddb6b2b126311159de98998572d5b1c40a8b24240f7f91dd76e61f91162cbb7c5f2634682fd1cf36904ffb30643ab8962dc203a3209ce08b66ac19faf557b076efdbd5127fe0615b3bcdafbede0731851acc00f7568ba0fee836fdbef8d144d2e8ee9c4af485830414a17f243db8a7f535f4e6834d97149cd18d85b249fd6ff209f3726c81f752f13243b2f2862b2f882f9d9b97b44484aee1641410c0866ceba701fdfeefb97fb2291559013de713d7e1189908ab02c6988da2fc2f0ddf9b2835ea2bae18ebca42b23d4da81f93531e44b336e87f0788b4b39bf1da3b143cd9b4b82b11398a05adff2962eb5366b6f34a8d6dfe9f6f7047e4fd6806ba235fc4251bcd8a1959fe183c0c451ce82657130fa0d205b063244cc31a23653c22bd8792ff5c8c148dfd3458fce45106f4d87c9e960a14b50f3a1cd337ea260eab349a81d268c46cb89cecaa231e400676ac85569a6d0d454332004fde303bf07abe4a2864e9b58795a8c10a555c122b7a4079e603e80d86bcffa64b73316c50630db6b06f14e7bce89b5dd6afd33b849a3cef147e540662026e5cb0c96cbc52370963ebb3db1549fcc6beff7487eedc3fe958bb40ed54d371cb3d8a5bf5873fabcdfd046c0019e0117454f2d4588d4f94573a309c284d18ae07c800cc96dc2e6374c648725b0b75e361b62968242d7f4ea4b728b5afbb51b0b4fbd46ec2a5999923f75fdabee953997b390f85ea72860ba023f10162e204329b584548ccdab660949cee837e6fd3111b590166d0e14adb56aa7e2a6695b25eb2fefcfd4691cf2f28a5828c9805d1bcf41915500328df032e4f034044097a2eb5f1c3a34ed967c7378a3b094c933f569c1198e864a311a23ec9d54d89f83418721fa829e7733fe7f79f9f1a6c17df55f38ff547a395a609fa3a78b41235849c730109efaac99234102bcbea91d4e6c35ea9295f884ac483bd2430ecab32a0e9faaef4fc337fbf2111d146578be2d95676e0de0a803240e7a002f1ebef4eb1f5ae46e27886a18bbf87602ea209a9446a9f390cb2bf1c085deca464e3090f4ff991431b3d79e5b4eb394bb825b39f74d063dd112d6f008dad70050ff8e26aeb193208db0bb4f7522234d60d1db07bcecf744d9592f1eb6d0a7fd94f246bfe765cc5cef4f2400cf586b40b62aa3ba020b80cb2285fe899f886227233ef8a37754104d8177e57bd4b3fc7536ad1cb5d627947f2fd09c037ffbfda472b0e0ffcf764a2602bbb4ea0c5ce29d1c831d99d85324dca1b8c7aee6818649536a92e21271a72c6c7e06db241dba37b0de0797fed21891e242830b13f3fba67c638f7d71718c3ad885a9a78c483cee58819a132c749ab0404510f5ffa009af7d52f65129fd9fdc2531076d1964d9d517206d2ac364c5284f6b5b30b3bc8ae9bdf82a86bacb3c74f03786f115311c1d75740f8530b16b790b7a22b55249d44f58ca67a87103f0eee3907b5afab5aaa75720f12c37c606d24dd3499038baa5c6473356bc829d59874192b6e1f4fe2d0c74caa30e1e1d713ee371920bf5a993dddc112658d51d4b3e020eb0582331b7e824cf2d9ddd1f07b135e01f0dec9ec62b955cdb4cf8ffdd18c3ac9e37798945bc8caa97de30d12bda4c6fc9c987b1c79a8fb2ec78cfb38314ac7621e4a1d90bde622ceaf00de1b338816ca094cb56f2aa6bc51eaf3ada2124dc17301987877caf57112cc372eb42a5c96ecfdac1b034ca3331111d64b3a68532eebc54f46f29f3a12414745679269f309f7a61dda90881605843b5649a94e5c74a07f463f4bf47a8571578e2e0a5df0af8bc334951035f1c40373993d06c4ac8dea22eb77356e8b4d188854dd8620edf8b939f5964b5d9b61625dc3b82aa64f9c63d525c2120a8b067cdfb033c90fa427d848767d3b8634ab55ba7fda721a2e2bb0fed4ab94e5f50275b1d95eb4b2c50e90eb9230a4218d7a2f5cc4f604f9561e13f84300fdc26fd60548829f034b661e2bb55181176dabed36a8f33fd3e1b2970708921f3027dc5237cfe74408ea5aa9b0fb16d04002f1d5ac062542e3f44b066e88548b7cc3957887af4d6cf4940f5681aa015752bef504800fc39bd0145618e58dc27b45d414d50daf9708990484e0a8d92d67aa88d6e441636e5fda5830d376a9e7f87d0c95f77e042877d2c87385a551be85f9b2bab27d486ea7f2b8e54a490487b764f6be0a66363ae2e80bc9fe9d491deb112d43bab22a272ddb4874fd6e8bd042349ccfa2330f940f0baf9c05506e11ed71aeea0eafe78b63fa19121d96ea9c883e13de75a4a9c6969203d2d056062371ef89719c7dfcc1196ca3ebccc34097ecda1a949d8df2d9246428d68ab81784ed5d6135a542ce7258377864928d4b043451dfb9561d1789cb52c118ccb8c7622b5d0de8eeb7c420bcf8e80b45af332f324fc24fe3ae89d815bdf6534cf74c5141ed3619622c573e4b3d81ced93af84295b31b889f81641dd65975db52b57e08def4edcf439d99abcf3ae3cce6fef2f7bd2590aaa59441428a93626ffbddc35f572324c8e7e171b1ca891f89e6873dc9354fef23cd7fb47623d24e4fd148f61f8a03072acf1c3c82754b3c39b4c3ec90108a4c408501f792b997ce516ba38c6561ca4aa254dd8a583e5e67243c8496ae5de1eb345b653e1596c0ebc89de0ca80adbe30d7e2e83ee6cc5b3f91bdf3417d59e07ad68a24d1da4839599ba506b9d7e249767bf6fb50ab03cbb3c53a60ddd997f8e868b184f2023b67db9f3ddb04c840ba868b0f109df2fce680ecc9ca8c72f71053105d9f9022d46ebdf79c314163d353dc3d7e407380dc0f131566453a4d4f045d0d1eabaff64296a49ffa8f8b795a025e08bf4775a4f0b70b0de25a479e3906d03f071284deb3ba948d7ce214c338c0166656abb984257ede68dd83324edc1ab99c50962fdea65f99760b9188941cf444f4a4dd435047382867345e0a71645f18dd377fb3441b79cf1ce28ef0543a99613081e86f576c12c8a2c8158b84e26e6041205805012a06d1ecc98e421ba8109b9eb1a3d4e6074ea53612a16882e4a47d3b3d182321cfd8243d2e06112c8f86233489b54cffb591ad560a30d6fb0c7f1918ae058f60b6b368b916a972ca4b45e2f618990f55fd5479f93628778d075399fb30b8d6338400b85143d0edfe618082ef8d5a61a98f785a89baddc82e3dede779cb711998e405e69ecd7dca27aab13a034fed1d072dbbfb372d4593c0cb3abcb426d6d141f6b1d0d7c5aabd73fb47eebff6cb3340d69bc5d93caf114612fb0ffa15e083ce411bd12b5f2ad5733c12331bc9a8d57a1c282e73b003d41e48377de47609fb1aa9bd147a1cb367e966512e5c7ad12a837eff46b51bd485ae79cb4306c4c32bfaeacf81c37f8b74e2a807374723920ad08b4a8fb7730757786b9834691e661af7b8569e777e08c1f386ecce4d57799a986c0b11d8011b9721b7dbc7a8368047069683e319fa969638c656216df5385dcdbe1dd7a43dac58cfac377a3d5b56aea616e81d17d901a9254b382b7be36e9ea38ec3917545854e46dedc570d145e34aae3e813ff9074b4aa78b468de751b1c1d6398cb20feab5761209319ec8741ef596f095a3812310ed47a51c6cbc5c3c8cd27779e9aa2521cb4834e574c5f87ee07af9493620a7e12e59aef388e3a896060dd55313870997724779a1f52c7799f1810c0c828023c7d2f20a6403c2becadebd2b4caf6d56451a0ef3791366fffafdd3d128dc2982f98bd6e90319ab27d475078c8375f46b1da51fc61a487de5270b13025c09b49fb9b746cb08cd94662b66130e0bdd3d6897a25529fca06cc0bbeb6113c28f367f16fd1bb190c4991a6d7b4185e25ab2e851b79a6269842c5fb3a88d39009a13380c800e047d62be02f3cb6f5bb1f2fb942838ec9c8736893068f6d7bb201bf7c57b2decd0211e0c2605de93b913f1e306770c02a91cd17e3047cd2d1cb51e1ca7076a2a7028932859796edaee90390618abf1627134df6849bf64dcee0c9e26b8f517e35063ee4a7c1317d80091d4e3fd2ac50d3816804ff54214565c4f3ffb53ac122d5b19d6e40e481cdd30bf8f56e96fc4869dd5b6612fd2da49da38c90a192d74ce7def68801a240857903ecca72a976abb87d8b477a364c896c4af397891b241663307d6e30b3cd8dd95e98719e1d19e4ace99403e2417c5f1e445bd9863d73e07781fb44d8f68e3db657f243c8ed9fe99cfe1fd00cbca0c2849921a437a367c480dd6dbbd4d0cbc6d363477da88bf8349914b1f592fa27f50c93339e377a35097b9816cae22e9efc798c8b02da13796ab994ab47610a67f46d1eaa39b5c79f36174cfec35041d23bf0a9708f8e224022da213fe588343dacd6cb00dc910ab00b4e528e3065223e85105f550f67b9d6305a8c135243db6b14659409aec2f37d24053b60de1f1b7185de30e4f1aa0c9ce1b5ef9d25af303ef0d62d440b277d6a769a30a92029dbcb551c3c3d2ee2bd475b9b3f2b550ff0aaef190c65f748858f109af10bc5d0db962ade9d82643101409bb1838344e7cfcbdd4da1879bad1c4c3a8aec26c0ef902d4f14e93b303ed8de631708b76b4487d3cc50431a8a7361aa0e79ce99d24e540d198bbcf9685511f4642524654b0e4581fceb94fe907944ff65e425eef757485c58d6ca660928b1a087a9459fe2d5a1e5b038a280f2f34ae53483c6de3cee39be7f5292cad9bfd040465daf8ec4be8acaa6cbfa4aa40f5622206ab14d2015c5ea3268f5fab91f159979d4c1bb2237f5"}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "661998a4326c6cd5b3a1c5a6a5a5b2391532b4a8b6d25344e39cee43513012af6121af43e43f2122bd461decdad9bea695e693928ae7262dbc20289935e61ea9bd333c7d61d924d217406d2af8375aa4c9f5d5629203f50b1af221fbeed19d389ff323154d4ef2c329699c9fe94696f632a965b618e65338bd1d34cbf2a079dcc31524c6420d91b80d840d4dd03d0d8c34e90c638c041613089add7a647f5382847a285895a39395ffdbd25a5a84059dae9228ab4f7929d139d4a87a9c31a4ed479b911708a58a77d864df9b082be549df93"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x284, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*-{Q-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-['}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xebf6}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',[#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*#&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x1d4, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':]\xa9.+)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x83, 0x2, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe8d321}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[e[&{\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$#!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x83, 0x2, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}]}, 0x13d8}, 0x1, 0x0, 0x0, 0x800}, 0xc005)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x25a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc5, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x7, 0x1e, 0x1, {0x22, 0x26e}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0x0, 0x25}}}}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

4m34.318865917s ago: executing program 0 (id=1014):
bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x101002)
ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f00000001c0)) (async)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000300)={0xe9, r2, 0x3d, {0x3c, 0x1}, 0x8}, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x6, 0x0, 0x80000000, 0xfffffffd}, 0x10)
write(r0, &(0x7f0000000080)="240000001e005f0214ffffffffe9fff8076000001d000000000004aa0000000072000000", 0x24) (async)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={<r3=>0x0, @private, @empty}, &(0x7f0000000380)=0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="1a4b6a2ef1541ca07de69058e0c986e2e9980af120c216a061db82bf9ba6f7c58adba4492e7e4b0c9b6527378b082bc113696a8ac6de9e2bdb1ea2b8e5240ebe2be77c446a44716a6cd461ac3c16da0007d9eac8a0b3a5c454b65cde33f392ff31c1a990fa76bd6fa43449e1129cf999a7832dd0213389739735c3eadd50e36784b3aae872622cdcd7aea0de193d7380cbb5109c1ba3cce7c42716f30b35a71585bf7d9e790c7278796960b0a0208f370b9706ef188b61a5f7685a51b97da602f014ec47a45351e1f28b7d6e6130b73bef", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES8=r0], 0x0, 0x0, 0xffffffe6, 0x0, 0x0, 0x2c, '\x00', r3}, 0x94) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x16) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x1ff) (async)
pipe2$watch_queue(&(0x7f00000004c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='cq_reschedule\x00', r5, 0x0, 0x4}, 0x18) (async)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x1}) (async)
ioctl$IOMMU_IOAS_IOVA_RANGES(r7, 0x3b84, &(0x7f0000000100)={0x20, r8, 0x0, 0x0, 0x0}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
r9 = syz_open_dev$dri(&(0x7f0000000440), 0x80000001, 0x208040) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000400)={0x0, <r10=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc010640b, &(0x7f0000000480)={r10}) (async)
connect$qrtr(r6, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc)
bind$qrtr(r6, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) (async)
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500))

4m33.966231635s ago: executing program 0 (id=1016):
statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) (fail_nth: 1)

4m33.422867963s ago: executing program 0 (id=1019):
pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x1, 0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000400)={0x3})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$sock_netdev_private(r0, 0x80085502, 0x0)
syz_emit_ethernet(0x100, &(0x7f00000007c0)={@empty, @local, @val={@void}, {@mpls_uc={0x8847, {[], @ipv6=@tcp={0x0, 0x6, "5c030a", 0xc6, 0x6, 0xff, @loopback, @remote, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0xd}, {"da3aee2497e6406fee7c233d4a38714a4f24a37c2841a3f1da4d75d0000f5b8fe1cc3ff05dd52067e6945933e249dbde857545f96ff472265d65db5b7330f76b079c70988bad368dbbe29b918946d64173315605dfdcba187d2c59d3512c6d7d363d91b31fd5224cb7d69803277bad8ec5908dc988a0b63ce534971c61e549dbba9b645f5eeaaca27acc175734309de181ad1c6716c2b536c78af43bbfe3e202a191cb7d386a8e480ee883bbcf017dadcfc9"}}}}}}}}, 0x0)
r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000540)={'syz', 0x0}, &(0x7f00000008c0)="76349c26e37995486b4f4c285cc2cac12714cb63c249729f5285cc4f511330c6ee17eae8ad049e17645c3b668cabc1af03affce6c6b498bedbafaf102c03fe7cd4d1d94ee0a596f56f2c2869ebc01a995c5fd9bd4fc9e064b144c799a0c977891ec872e37637f0ae0a595444adcce05386f1b84f327608a0960a87ece2dd15db50eb7ad2c16d4847e86aedc4d85da6a801fdd27e03004b6403dd394850a43e3a38ead92876212388cd0ea47db171257291916924839a7712179414608f168ac9e41e57512961386852f67326fa775f6507000000000000e87a725fc43129f7e70e9db0c0b3645388f1ac18e27655cbf2bce48786ab29", 0xf6, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd)
r3 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x8000000000000001, 0x400)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/card1/oss_mixer\x00', 0x109041, 0x0)
fcntl$dupfd(r3, 0x0, r4)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$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")
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

4m13.193911582s ago: executing program 32 (id=1019):
pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000340)="527302587e0a4e47ad", 0x9}], 0x1, 0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000400)={0x3})
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$sock_netdev_private(r0, 0x80085502, 0x0)
syz_emit_ethernet(0x100, &(0x7f00000007c0)={@empty, @local, @val={@void}, {@mpls_uc={0x8847, {[], @ipv6=@tcp={0x0, 0x6, "5c030a", 0xc6, 0x6, 0xff, @loopback, @remote, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0xd}, {"da3aee2497e6406fee7c233d4a38714a4f24a37c2841a3f1da4d75d0000f5b8fe1cc3ff05dd52067e6945933e249dbde857545f96ff472265d65db5b7330f76b079c70988bad368dbbe29b918946d64173315605dfdcba187d2c59d3512c6d7d363d91b31fd5224cb7d69803277bad8ec5908dc988a0b63ce534971c61e549dbba9b645f5eeaaca27acc175734309de181ad1c6716c2b536c78af43bbfe3e202a191cb7d386a8e480ee883bbcf017dadcfc9"}}}}}}}}, 0x0)
r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000540)={'syz', 0x0}, &(0x7f00000008c0)="76349c26e37995486b4f4c285cc2cac12714cb63c249729f5285cc4f511330c6ee17eae8ad049e17645c3b668cabc1af03affce6c6b498bedbafaf102c03fe7cd4d1d94ee0a596f56f2c2869ebc01a995c5fd9bd4fc9e064b144c799a0c977891ec872e37637f0ae0a595444adcce05386f1b84f327608a0960a87ece2dd15db50eb7ad2c16d4847e86aedc4d85da6a801fdd27e03004b6403dd394850a43e3a38ead92876212388cd0ea47db171257291916924839a7712179414608f168ac9e41e57512961386852f67326fa775f6507000000000000e87a725fc43129f7e70e9db0c0b3645388f1ac18e27655cbf2bce48786ab29", 0xf6, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340), 0x584, 0xfffffffffffffffd)
r3 = syz_open_dev$video4linux(&(0x7f00000004c0), 0x8000000000000001, 0x400)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000500)='/proc/asound/card1/oss_mixer\x00', 0x109041, 0x0)
fcntl$dupfd(r3, 0x0, r4)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41eff157cfdfcef90a6010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d041a99ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f4436383ee21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4ceafb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5caa71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d5756c9e5442fa3692127266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f32a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b45ea2408d1da65a2ed8cf55a"], 0x4, 0x24e, &(0x7f0000000a00)="$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")
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

2m34.905118304s ago: executing program 4 (id=1259):
syz_open_dev$vcsa(0x0, 0x1, 0x20000)
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b501020301090212"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)

2m29.972651716s ago: executing program 4 (id=1266):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x20040180)

2m29.004042881s ago: executing program 4 (id=1267):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000800)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2m26.899810965s ago: executing program 4 (id=1270):
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8948, &(0x7f0000000080)={'dummy0\x00', 0x6})

2m26.06323074s ago: executing program 4 (id=1271):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0xfffffdfb)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"})
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sync()
sync()
sync()
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43)
unshare(0x22020600)
open$dir(0x0, 0x2e2701, 0x0)
open(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)

2m24.39754185s ago: executing program 4 (id=1274):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
syz_open_dev$cec(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x601)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @buffer={0x0, 0xa9, &(0x7f00000001c0)=""/169}, &(0x7f0000000300)="b945c52f244e", 0x0, 0x101, 0x10016, 0x3, 0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r7, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mkdirat(r7, 0x0, 0x85)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810)

2m6.884438628s ago: executing program 33 (id=1274):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
syz_open_dev$cec(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x601)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @buffer={0x0, 0xa9, &(0x7f00000001c0)=""/169}, &(0x7f0000000300)="b945c52f244e", 0x0, 0x101, 0x10016, 0x3, 0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r7, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mkdirat(r7, 0x0, 0x85)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810)

56.7848209s ago: executing program 3 (id=1429):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
keyctl$link(0x8, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x3000c12, &(0x7f00000003c0)={[{@dmode={'dmode', 0x3d, 0xae}}, {@utf8}, {@overriderock}, {@check_relaxed}, {}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@cruft}, {@nocompress}, {@dmode}, {}, {@overriderock}, {@mode={'mode', 0x3d, 0x1000}}, {}, {@unhide}, {@map_off}]}, 0x1, 0xa2f, &(0x7f00000018c0)="$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")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
mount$overlay(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x4000000, &(0x7f0000000b00)={[{@verity_require}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_off}, {@redirect_dir_follow}, {@metacopy_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@default_permissions}, {@uuid_off}], [{@subj_type={'subj_type', 0x3d, '@'}}]})
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

43.187471248s ago: executing program 3 (id=1439):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0x40184810, 0x0)

39.938881848s ago: executing program 3 (id=1448):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

38.911091561s ago: executing program 3 (id=1450):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x128, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xf8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x30, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x98, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x5, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_FLAGS={0x0, 0x47, 0x3}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x800)

36.693463292s ago: executing program 3 (id=1456):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0)

36.205193373s ago: executing program 3 (id=1460):
r0 = socket$inet6(0x10, 0x3, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff}, 0x50)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)

19.425560585s ago: executing program 34 (id=1460):
r0 = socket$inet6(0x10, 0x3, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
dup(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0xffffffff}, 0x50)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10)

17.289963339s ago: executing program 2 (id=1491):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000010000305000000000000000000cf0000", @ANYBLOB="000000000000000030001280080001006772650024000280060002000600000008000700e000000208000200", @ANYRES32, @ANYBLOB="060011004e2100003800128008000100736974002c0002800800140006000000050009002900000006000e0009000000050009"], 0x90}}, 0x0)

16.588489779s ago: executing program 2 (id=1494):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x44084)

16.086268551s ago: executing program 2 (id=1495):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x2d, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x39596cc5be47277d}}}}]}, 0x40}}, 0x0)

15.113674979s ago: executing program 2 (id=1497):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1)
ioctl$TIOCSETD(r1, 0x5412, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xdb)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340))

14.388223182s ago: executing program 2 (id=1498):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000"], 0xb4}}, 0x200000d4)

13.455465098s ago: executing program 2 (id=1501):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}})
io_uring_enter(r6, 0x3517, 0x173d, 0x42, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05000000000000000000220000000a0001007770616e310000001b605ab3df87942a5811f711753d9841487cde86d42b292e1b104a164561f453"], 0x20}}, 0x2000c094)
syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@remote, 0xfffffffc, 0x0, 0x2, 0x3, 0xe2c3}, 0x20)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0)

11.112261333s ago: executing program 1 (id=1505):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0x1, 0x50ed, &(0x7f0000005180)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$rds(0x15, 0x5, 0x0)
r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r5 = fanotify_init(0xf00, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4)
sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x50, r6, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x0, 0x5, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_FREQ_RANGE_END={0xfffffffffffffd71, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0xfffffffc}]}]}]}, 0x50}}, 0x80)
fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0)
truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x3db1)

6.674762586s ago: executing program 1 (id=1509):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000"], 0xb4}}, 0x200000d4)

6.173170462s ago: executing program 5 (id=1510):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xe8}}, 0x0)

5.717184757s ago: executing program 1 (id=1511):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x128, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xf8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x30, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x98, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x5, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_FLAGS={0x0, 0x47, 0x3}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x800)

5.432099783s ago: executing program 5 (id=1512):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9000000010000305000000000000000000cf0000", @ANYBLOB="000000000000000030001280080001006772650024000280060002000600000008000700e000000208000200", @ANYRES32, @ANYBLOB="060011004e2100003800128008000100736974002c0002800800140006000000050009002900000006000e0009000000050009"], 0x90}}, 0x0)

4.683389662s ago: executing program 1 (id=1513):
io_setup(0x8001, 0xfffffffffffffffc)

4.452332739s ago: executing program 5 (id=1514):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

4.158776484s ago: executing program 1 (id=1515):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1)
ioctl$TIOCSETD(r1, 0x5412, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xdb)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340))

3.803102516s ago: executing program 5 (id=1516):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x19}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000180)='fsi_master_gpio_cmd_rel_addr\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540))
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x40000000015, 0x805, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r5, &(0x7f00000000c0)=@unlock_all, 0xb)
syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd)
syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9)

2.001462156s ago: executing program 1 (id=1517):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25001f29000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="20ab01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x1, 0x4, &(0x7f0000000040)={0x19, "78b3060abe61f6304382447c087935e141a6349f941d4dc197ce00"}})

1.382940567s ago: executing program 5 (id=1518):
socket(0x28, 0x5, 0x0)
socket(0x10, 0x802, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
epoll_create(0x101)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x0, 0x0, [{{r2}, 0x1}]})
ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040))

0s ago: executing program 5 (id=1519):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})

kernel console output (not intermixed with test programs):

8002][ T9466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  596.508111][ T9466] RSP: 002b:00007f1efa90e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  596.508230][ T9466] RAX: ffffffffffffffda RBX: 00007f1ef9db5fa0 RCX: 00007f1ef9b8e929
[  596.508324][ T9466] RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000003
[  596.508406][ T9466] RBP: 00007f1efa90e090 R08: 00000000000002a0 R09: 0000000000000000
[  596.508484][ T9466] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  596.508570][ T9466] R13: 0000000000000000 R14: 00007f1ef9db5fa0 R15: 00007fffa534dcf8
[  596.508682][ T9466]  </TASK>
[  596.812423][ T9456] loop4: detected capacity change from 0 to 4096
[  597.228084][ T9452] XFS (loop1): Ending clean mount
[  597.435211][ T9452] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2d0, xfs_finobt block 0x20 
[  597.447441][ T9452] XFS (loop1): Unmount and run xfs_repair
[  597.453408][ T9452] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  597.461147][ T9452] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  597.470334][ T9452] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  597.479715][ T9452] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  597.488962][ T9452] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  597.498277][ T9452] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  597.508821][ T9452] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  597.518104][ T9452] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  597.529713][ T9452] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  597.539016][ T9452] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x20 len 8 error 74
[  597.682389][ T9475] SET target dimension over the limit!
[  597.884519][ T5795] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  597.915918][ T5795] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  604.437656][ T9487] FAULT_INJECTION: forcing a failure.
[  604.437656][ T9487] name failslab, interval 1, probability 0, space 0, times 0
[  604.450915][ T9487] CPU: 1 UID: 0 PID: 9487 Comm: syz.2.1048 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) 
[  604.451091][ T9487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  604.451172][ T9487] Call Trace:
[  604.451219][ T9487]  <TASK>
[  604.451268][ T9487]  __dump_stack+0x26/0x30
[  604.451440][ T9487]  dump_stack_lvl+0x1df/0x270
[  604.451612][ T9487]  dump_stack+0x1e/0x25
[  604.451763][ T9487]  should_fail_ex+0x7dc/0x8a0
[  604.451949][ T9487]  should_failslab+0x15b/0x200
[  604.452148][ T9487]  __kmalloc_noprof+0x182/0x1310
[  604.452292][ T9487]  ? tomoyo_realpath_from_path+0xeb/0x9f0
[  604.452480][ T9487]  ? tomoyo_path_number_perm+0xf1/0x7d0
[  604.452623][ T9487]  ? filter_irq_stacks+0x49/0x190
[  604.452755][ T9487]  ? kmsan_get_metadata+0xfb/0x160
[  604.452950][ T9487]  tomoyo_realpath_from_path+0xeb/0x9f0
[  604.453127][ T9487]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  604.453366][ T9487]  ? __srcu_read_lock+0x5e/0xd0
[  604.453547][ T9487]  tomoyo_path_number_perm+0x1d0/0x7d0
[  604.453707][ T9487]  ? stack_depot_save_flags+0x35/0x7b0
[  604.453897][ T9487]  ? kmsan_get_metadata+0xfb/0x160
[  604.454084][ T9487]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  604.454345][ T9487]  tomoyo_file_ioctl+0x3d/0x50
[  604.454560][ T9487]  security_file_ioctl+0x141/0x590
[  604.454805][ T9487]  __se_sys_ioctl+0xbb/0x400
[  604.455004][ T9487]  __x64_sys_ioctl+0x97/0xe0
[  604.455189][ T9487]  x64_sys_call+0x1ebe/0x3db0
[  604.455396][ T9487]  do_syscall_64+0xd9/0x210
[  604.455552][ T9487]  ? irqentry_exit+0x16/0x60
[  604.455687][ T9487]  ? clear_bhb_loop+0x40/0x90
[  604.455856][ T9487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  604.456020][ T9487] RIP: 0033:0x7f1ef9b8e929
[  604.456146][ T9487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  604.456278][ T9487] RSP: 002b:00007f1ef79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  604.456444][ T9487] RAX: ffffffffffffffda RBX: 00007f1ef9db6080 RCX: 00007f1ef9b8e929
[  604.456565][ T9487] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000004
[  604.456656][ T9487] RBP: 00007f1ef79f6090 R08: 0000000000000000 R09: 0000000000000000
[  604.456741][ T9487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  604.456853][ T9487] R13: 0000000000000001 R14: 00007f1ef9db6080 R15: 00007fffa534dcf8
[  604.456983][ T9487]  </TASK>
[  604.697553][ T9487] ERROR: Out of memory at tomoyo_realpath_from_path.
[  605.093010][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  605.111601][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  605.152619][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  605.175456][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  605.200709][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  605.724790][ T5876] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  605.983542][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  605.994100][ T5876] usb 3-1: config 0 has no interfaces?
[  606.046687][ T5876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  606.056283][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.065736][ T5876] usb 3-1: Product: syz
[  606.070179][ T5876] usb 3-1: Manufacturer: syz
[  606.076148][ T5876] usb 3-1: SerialNumber: syz
[  606.126713][ T5876] usb 3-1: config 0 descriptor??
[  606.294902][ T9489] chnl_net:caif_netlink_parms(): no params data found
[  606.661341][   T24] usb 3-1: USB disconnect, device number 29
[  607.298497][ T5800] Bluetooth: hci5: command tx timeout
[  607.397492][ T9489] bridge0: port 1(bridge_slave_0) entered blocking state
[  607.405381][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.413206][ T9489] bridge_slave_0: entered allmulticast mode
[  607.423129][ T9489] bridge_slave_0: entered promiscuous mode
[  607.493086][ T9489] bridge0: port 2(bridge_slave_1) entered blocking state
[  607.500915][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.508841][ T9489] bridge_slave_1: entered allmulticast mode
[  607.518597][ T9489] bridge_slave_1: entered promiscuous mode
[  607.689654][ T9489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  607.743028][ T9489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  607.906172][ T9489] team0: Port device team_slave_0 added
[  607.940451][ T9489] team0: Port device team_slave_1 added
[  608.205933][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_0
[  608.213171][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  608.239876][ T9489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  608.339006][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_1
[  608.346441][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  608.374558][ T9489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  608.442590][ T9513] loop2: detected capacity change from 0 to 64
[  608.597384][   T30] audit: type=1800 audit(1750985894.911:326): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1057" name="file2" dev="loop2" ino=6 res=0 errno=0
[  609.016919][ T9489] hsr_slave_0: entered promiscuous mode
[  609.027432][ T9489] hsr_slave_1: entered promiscuous mode
[  609.036413][ T9489] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  609.044640][ T9489] Cannot create hsr debugfs directory
[  609.209141][ T9525] loop1: detected capacity change from 0 to 64
[  609.455417][ T5800] Bluetooth: hci5: command tx timeout
[  609.474999][ T5876] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  609.617070][ T9531] loop3: detected capacity change from 0 to 2048
[  609.764576][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  609.776365][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  609.785966][ T5876] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  609.914805][ T9531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  609.958282][ T5876] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  609.967824][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.976370][ T5876] usb 3-1: Product: syz
[  609.980781][ T5876] usb 3-1: Manufacturer: syz
[  609.985776][ T5876] usb 3-1: SerialNumber: syz
[  610.054310][ T5876] cdc_ncm 3-1:1.0: skipping garbage
[  610.059954][ T5876] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  610.067893][ T5876] cdc_ncm 3-1:1.0: bind() failure
[  610.141569][ T9538] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  610.190720][ T9529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  610.450511][ T9489] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  610.519827][ T9489] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  610.588446][ T9541] FAULT_INJECTION: forcing a failure.
[  610.588446][ T9541] name failslab, interval 1, probability 0, space 0, times 0
[  610.603113][ T9541] CPU: 0 UID: 0 PID: 9541 Comm: syz.2.1060 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) 
[  610.603262][ T9541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  610.603336][ T9541] Call Trace:
[  610.603381][ T9541]  <TASK>
[  610.603423][ T9541]  __dump_stack+0x26/0x30
[  610.603591][ T9541]  dump_stack_lvl+0x1df/0x270
[  610.603770][ T9541]  dump_stack+0x1e/0x25
[  610.603915][ T9541]  should_fail_ex+0x7dc/0x8a0
[  610.604097][ T9541]  should_failslab+0x15b/0x200
[  610.604320][ T9541]  __kmalloc_noprof+0x182/0x1310
[  610.604466][ T9541]  ? tomoyo_encode+0x626/0xa10
[  610.604660][ T9541]  ? kmsan_get_metadata+0xfb/0x160
[  610.604874][ T9541]  ? kmsan_get_metadata+0xfb/0x160
[  610.605099][ T9541]  tomoyo_encode+0x626/0xa10
[  610.605312][ T9541]  tomoyo_realpath_from_path+0x92e/0x9f0
[  610.605515][ T9541]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  610.605764][ T9541]  tomoyo_path_number_perm+0x1d0/0x7d0
[  610.605924][ T9541]  ? stack_depot_save_flags+0x35/0x7b0
[  610.606157][ T9541]  ? kmsan_get_metadata+0xfb/0x160
[  610.606362][ T9541]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  610.606600][ T9541]  tomoyo_file_ioctl+0x3d/0x50
[  610.606777][ T9541]  security_file_ioctl+0x141/0x590
[  610.606989][ T9541]  __se_sys_ioctl+0xbb/0x400
[  610.607162][ T9541]  __x64_sys_ioctl+0x97/0xe0
[  610.607344][ T9541]  x64_sys_call+0x1ebe/0x3db0
[  610.607509][ T9541]  do_syscall_64+0xd9/0x210
[  610.607637][ T9541]  ? irqentry_exit+0x16/0x60
[  610.607745][ T9541]  ? clear_bhb_loop+0x40/0x90
[  610.607878][ T9541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  610.608020][ T9541] RIP: 0033:0x7f1ef9b8e929
[  610.608115][ T9541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  610.608231][ T9541] RSP: 002b:00007f1ef79f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  610.608352][ T9541] RAX: ffffffffffffffda RBX: 00007f1ef9db6080 RCX: 00007f1ef9b8e929
[  610.608445][ T9541] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  610.608522][ T9541] RBP: 00007f1ef79f6090 R08: 0000000000000000 R09: 0000000000000000
[  610.608604][ T9541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  610.608679][ T9541] R13: 0000000000000000 R14: 00007f1ef9db6080 R15: 00007fffa534dcf8
[  610.608795][ T9541]  </TASK>
[  610.685225][   T42] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  610.696335][ T9541] ERROR: Out of memory at tomoyo_realpath_from_path.
[  610.702626][ T9489] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  611.034710][ T9489] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  611.046095][   T42] usb 4-1: Using ep0 maxpacket: 32
[  611.054596][   T42] usb 4-1: too many configurations: 209, using maximum allowed: 8
[  611.074444][   T42] usb 4-1: unable to read config index 0 descriptor/start: -61
[  611.082506][   T42] usb 4-1: can't read configurations, error -61
[  611.312070][   T42] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  611.352764][ T5876] usb 3-1: USB disconnect, device number 30
[  611.515308][   T42] usb 4-1: Using ep0 maxpacket: 32
[  611.527342][   T42] usb 4-1: too many configurations: 209, using maximum allowed: 8
[  611.544554][ T5800] Bluetooth: hci5: command tx timeout
[  611.565623][   T42] usb 4-1: unable to read config index 0 descriptor/start: -61
[  611.574039][   T42] usb 4-1: can't read configurations, error -61
[  611.600914][   T42] usb usb4-port1: attempt power cycle
[  612.004694][   T42] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  612.068966][   T42] usb 4-1: Using ep0 maxpacket: 32
[  612.100658][ T9549] loop4: detected capacity change from 0 to 8
[  612.112164][   T42] usb 4-1: too many configurations: 209, using maximum allowed: 8
[  612.177292][   T42] usb 4-1: unable to read config index 0 descriptor/start: -61
[  612.186349][   T42] usb 4-1: can't read configurations, error -61
[  612.234791][ T9489] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.374610][   T42] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  612.446987][ T9489] 8021q: adding VLAN 0 to HW filter on device team0
[  612.534288][ T4110] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.542055][ T4110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  612.768468][   T42] usb 4-1: device descriptor read/8, error -71
[  612.787255][ T4110] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.795032][ T4110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  612.929877][   T42] usb usb4-port1: unable to enumerate USB device
[  613.009034][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.605545][ T5800] Bluetooth: hci5: command tx timeout
[  613.726534][ T9558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1066'.
[  613.952543][ T9561] overlayfs: failed to resolve './file2/file0': -2
[  614.264508][ T5849] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  614.337079][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1068'.
[  614.446303][ T9559] loop3: detected capacity change from 0 to 4096
[  614.494386][ T5849] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  614.505084][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.574125][ T9559] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  614.597292][ T5849] usb 5-1: config 0 descriptor??
[  615.544846][ T9489] 8021q: adding VLAN 0 to HW filter on device batadv0
[  615.700620][ T5849] usb 5-1: Cannot set autoneg
[  615.706433][ T5849] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[  616.363297][ T9586] IPv6: sit1: Disabled Multicast RS
[  616.590838][ T9589] FAULT_INJECTION: forcing a failure.
[  616.590838][ T9589] name failslab, interval 1, probability 0, space 0, times 0
[  616.604288][ T9589] CPU: 0 UID: 0 PID: 9589 Comm: syz.1.1073 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) 
[  616.604457][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  616.604553][ T9589] Call Trace:
[  616.604611][ T9589]  <TASK>
[  616.604669][ T9589]  __dump_stack+0x26/0x30
[  616.604857][ T9589]  dump_stack_lvl+0x1df/0x270
[  616.605050][ T9589]  dump_stack+0x1e/0x25
[  616.605221][ T9589]  should_fail_ex+0x7dc/0x8a0
[  616.605436][ T9589]  should_failslab+0x15b/0x200
[  616.605679][ T9589]  kmem_cache_alloc_noprof+0xf0/0xec0
[  616.605852][ T9589]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  616.606072][ T9589]  ? mm_alloc+0x59/0x1a0
[  616.606224][ T9589]  ? kmsan_get_metadata+0xfb/0x160
[  616.606437][ T9589]  mm_alloc+0x59/0x1a0
[  616.606599][ T9589]  alloc_bprm+0x721/0xc50
[  616.606810][ T9589]  do_execveat_common+0x28b/0xdf0
[  616.607005][ T9589]  ? getname_flags+0x5f4/0xac0
[  616.607169][ T9589]  __x64_sys_execveat+0x144/0x1e0
[  616.607374][ T9589]  x64_sys_call+0x3a3f/0x3db0
[  616.607551][ T9589]  do_syscall_64+0xd9/0x210
[  616.607684][ T9589]  ? irqentry_exit+0x16/0x60
[  616.607797][ T9589]  ? clear_bhb_loop+0x40/0x90
[  616.607937][ T9589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.608097][ T9589] RIP: 0033:0x7fc5b3b8e929
[  616.608206][ T9589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  616.608328][ T9589] RSP: 002b:00007fc5b19f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  616.608458][ T9589] RAX: ffffffffffffffda RBX: 00007fc5b3db5fa0 RCX: 00007fc5b3b8e929
[  616.608562][ T9589] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  616.608656][ T9589] RBP: 00007fc5b19f6090 R08: 0000000000000000 R09: 0000000000000000
[  616.608742][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  616.608845][ T9589] R13: 0000000000000000 R14: 00007fc5b3db5fa0 R15: 00007ffc96e03348
[  616.608979][ T9589]  </TASK>
[  617.437014][   T11] usb 5-1: USB disconnect, device number 39
[  618.254217][ T9607] loop1: detected capacity change from 0 to 512
[  618.280508][ T9607] EXT4-fs: Ignoring removed mblk_io_submit option
[  618.419154][ T9607] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  618.473009][ T9607] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1078: attempt to clear invalid blocks 2 len 1
[  618.568208][ T9607] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  618.584186][ T9607] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1078: invalid indirect mapped block 1819239214 (level 0)
[  618.619139][ T9607] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1078: invalid indirect mapped block 1819239214 (level 1)
[  618.662055][ T9607] EXT4-fs (loop1): 1 truncate cleaned up
[  618.672032][ T9607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  618.811315][ T9489] veth0_vlan: entered promiscuous mode
[  618.956190][ T9489] veth1_vlan: entered promiscuous mode
[  619.186016][ T9591] loop2: detected capacity change from 0 to 512
[  619.190281][ T9591] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  619.222810][ T9591] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[  619.223425][ T9591] System zones: 1-12
[  619.225770][ T9591] EXT4-fs (loop2): 1 truncate cleaned up
[  619.228110][ T9591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.341267][ T9489] veth0_macvtap: entered promiscuous mode
[  619.382193][ T9489] veth1_macvtap: entered promiscuous mode
[  619.483521][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_0
[  619.548474][ T9614] loop4: detected capacity change from 0 to 1764
[  619.569210][ T9489] batman_adv: batadv0: Interface activated: batadv_slave_1
[  619.672026][ T9489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  619.681222][ T9489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  619.690417][ T9489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  619.699527][ T9489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  620.159668][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.698764][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.514857][ T5849] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  621.617578][ T9636] FAULT_INJECTION: forcing a failure.
[  621.617578][ T9636] name failslab, interval 1, probability 0, space 0, times 0
[  621.630981][ T9636] CPU: 1 UID: 0 PID: 9636 Comm: syz.4.1086 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) 
[  621.631143][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  621.631230][ T9636] Call Trace:
[  621.631285][ T9636]  <TASK>
[  621.631340][ T9636]  __dump_stack+0x26/0x30
[  621.631521][ T9636]  dump_stack_lvl+0x1df/0x270
[  621.631707][ T9636]  dump_stack+0x1e/0x25
[  621.631873][ T9636]  should_fail_ex+0x7dc/0x8a0
[  621.632064][ T9636]  should_failslab+0x15b/0x200
[  621.632289][ T9636]  __kmalloc_noprof+0x182/0x1310
[  621.632427][ T9636]  ? tomoyo_encode+0x626/0xa10
[  621.632608][ T9636]  ? prepend_path+0xff2/0x10c0
[  621.632757][ T9636]  ? kmsan_get_metadata+0xfb/0x160
[  621.632964][ T9636]  ? kmsan_get_metadata+0xfb/0x160
[  621.633174][ T9636]  tomoyo_encode+0x626/0xa10
[  621.633407][ T9636]  tomoyo_realpath_from_path+0x92e/0x9f0
[  621.633642][ T9636]  tomoyo_path_number_perm+0x1d0/0x7d0
[  621.633814][ T9636]  ? stack_depot_save_flags+0x35/0x7b0
[  621.634035][ T9636]  ? kmsan_get_metadata+0xfb/0x160
[  621.634240][ T9636]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  621.634414][ T9637] FAULT_INJECTION: forcing a failure.
[  621.634414][ T9637] name failslab, interval 1, probability 0, space 0, times 0
[  621.634491][ T9636]  tomoyo_file_ioctl+0x3d/0x50
[  621.634701][ T9636]  security_file_ioctl+0x141/0x590
[  621.634972][ T9636]  __se_sys_ioctl+0xbb/0x400
[  621.635199][ T9636]  __x64_sys_ioctl+0x97/0xe0
[  621.635411][ T9636]  x64_sys_call+0x1ebe/0x3db0
[  621.635642][ T9636]  do_syscall_64+0xd9/0x210
[  621.635824][ T9636]  ? irqentry_exit+0x16/0x60
[  621.635964][ T9636]  ? clear_bhb_loop+0x40/0x90
[  621.636132][ T9636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.636302][ T9636] RIP: 0033:0x7f4c5fb8e929
[  621.636416][ T9636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.636553][ T9636] RSP: 002b:00007f4c60a5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  621.636699][ T9636] RAX: ffffffffffffffda RBX: 00007f4c5fdb5fa0 RCX: 00007f4c5fb8e929
[  621.636813][ T9636] RDX: 0000000000000000 RSI: 00000000c0045516 RDI: 0000000000000003
[  621.636912][ T9636] RBP: 00007f4c60a5b090 R08: 0000000000000000 R09: 0000000000000000
[  621.637009][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.637103][ T9636] R13: 0000000000000000 R14: 00007f4c5fdb5fa0 R15: 00007fff4b6e1768
[  621.637244][ T9636]  </TASK>
[  621.637788][ T9636] ERROR: Out of memory at tomoyo_realpath_from_path.
[  621.646889][ T9637] CPU: 0 UID: 0 PID: 9637 Comm: syz.1.1085 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) 
[  621.647029][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  621.647131][ T9637] Call Trace:
[  621.647189][ T9637]  <TASK>
[  621.647239][ T9637]  __dump_stack+0x26/0x30
[  621.647413][ T9637]  dump_stack_lvl+0x1df/0x270
[  621.647595][ T9637]  dump_stack+0x1e/0x25
[  621.647756][ T9637]  should_fail_ex+0x7dc/0x8a0
[  621.647947][ T9637]  should_failslab+0x15b/0x200
[  621.648157][ T9637]  kmem_cache_alloc_noprof+0xf0/0xec0
[  621.648308][ T9637]  ? alloc_vfsmnt+0x59/0xbb0
[  621.648473][ T9637]  ? xas_find_marked+0x1187/0x13e0
[  621.648628][ T9637]  ? kmsan_get_metadata+0xfb/0x160
[  621.648845][ T9637]  ? kmsan_get_metadata+0xfb/0x160
[  621.649067][ T9637]  alloc_vfsmnt+0x59/0xbb0
[  621.649254][ T9637]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  621.649498][ T9637]  clone_mnt+0x7f/0x1ba0
[  621.649693][ T9637]  ? kmsan_get_metadata+0xfb/0x160
[  621.649935][ T9637]  copy_tree+0x23b/0x1540
[  621.650154][ T9637]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  621.650387][ T9637]  ? kmsan_get_metadata+0xfb/0x160
[  621.650600][ T9637]  ? kmsan_get_metadata+0xfb/0x160
[  621.650816][ T9637]  ? kmsan_get_metadata+0xfb/0x160
[  621.651037][ T9637]  copy_mnt_ns+0x2b2/0x1490
[  621.651256][ T9637]  ? kmem_cache_alloc_noprof+0xa49/0xec0
[  621.651454][ T9637]  ? kmsan_get_metadata+0xfb/0x160
[  621.651659][ T9637]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  621.651883][ T9637]  create_new_namespaces+0x129/0xce0
[  621.652077][ T9637]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  621.652306][ T9637]  ? ns_capable+0x129/0x1c0
[  621.652462][ T9637]  unshare_nsproxy_namespaces+0x179/0x2e0
[  621.652685][ T9637]  ksys_unshare+0x8fd/0x12b0
[  621.652871][ T9637]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  621.653125][ T9637]  __x64_sys_unshare+0x47/0x70
[  621.653316][ T9637]  x64_sys_call+0x398b/0x3db0
[  621.653511][ T9637]  do_syscall_64+0xd9/0x210
[  621.653691][ T9637]  ? irqentry_exit+0x16/0x60
[  621.653828][ T9637]  ? clear_bhb_loop+0x40/0x90
[  621.653993][ T9637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.654167][ T9637] RIP: 0033:0x7fc5b3b8e929
[  621.654278][ T9637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.654413][ T9637] RSP: 002b:00007fc5b19f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  621.654560][ T9637] RAX: ffffffffffffffda RBX: 00007fc5b3db5fa0 RCX: 00007fc5b3b8e929
[  621.654698][ T9637] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400
[  621.654809][ T9637] RBP: 00007fc5b19f6090 R08: 0000000000000000 R09: 0000000000000000
[  621.654916][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.655020][ T9637] R13: 0000000000000000 R14: 00007fc5b3db5fa0 R15: 00007ffc96e03348
[  621.655180][ T9637]  </TASK>
[  622.304592][ T5849] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  622.315285][ T5849] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  622.398116][ T5849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  622.407955][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.416410][ T5849] usb 3-1: Product: syz
[  622.420806][ T5849] usb 3-1: Manufacturer: syz
[  622.425840][ T5849] usb 3-1: SerialNumber: syz
[  622.507466][ T5849] usb 3-1: selecting invalid altsetting 1
[  623.438387][ T9640] loop3: detected capacity change from 0 to 32768
[  623.447580][ T9640] XFS: noikeep mount option is deprecated.
[  623.580567][ T9640] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  624.077492][ T9640] XFS (loop3): Ending clean mount
[  624.110687][ T9640] XFS (loop3): Quotacheck needed: Please wait.
[  624.186678][ T9640] XFS (loop3): Quotacheck: Done.
[  624.208632][ T5849] cdc_ncm 3-1:1.0: bind() failure
[  624.286885][ T9640] FAULT_INJECTION: forcing a failure.
[  624.286885][ T9640] name failslab, interval 1, probability 0, space 0, times 0
[  624.300609][ T9640] CPU: 0 UID: 0 PID: 9640 Comm: syz.3.1087 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) 
[  624.300774][ T9640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  624.300866][ T9640] Call Trace:
[  624.300920][ T9640]  <TASK>
[  624.300982][ T9640]  __dump_stack+0x26/0x30
[  624.301167][ T9640]  dump_stack_lvl+0x1df/0x270
[  624.301359][ T9640]  dump_stack+0x1e/0x25
[  624.301530][ T9640]  should_fail_ex+0x7dc/0x8a0
[  624.301734][ T9640]  should_failslab+0x15b/0x200
[  624.301950][ T9640]  __kmalloc_cache_noprof+0xcb/0xed0
[  624.302121][ T9640]  ? xfs_filestream_select_ag+0x208a/0x29e0
[  624.302326][ T9640]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  624.302500][ T9640]  ? kmsan_get_metadata+0xfb/0x160
[  624.302700][ T9640]  xfs_filestream_select_ag+0x208a/0x29e0
[  624.303013][ T9640]  xfs_bmapi_allocate+0x30e6/0x4f50
[  624.303284][ T9640]  xfs_bmapi_convert_delalloc+0xd3e/0x21e0
[  624.303558][ T9640]  xfs_map_blocks+0xbee/0x1390
[  624.303816][ T9640]  ? __pfx_xfs_map_blocks+0x10/0x10
[  624.303992][ T9640]  iomap_writepages+0x24fd/0x5400
[  624.304233][ T9640]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  624.304545][ T9640]  xfs_vm_writepages+0x3a4/0x420
[  624.304752][ T9640]  ? __pfx_xfs_vm_writepages+0x10/0x10
[  624.304922][ T9640]  do_writepages+0x3ef/0x860
[  624.305024][   T30] audit: type=1804 audit(1750985910.621:327): pid=9640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1087" name="/newroot/227/file0/bus" dev="loop3" ino=9290 res=1 errno=0
[  624.305120][ T9640]  ? _raw_spin_unlock+0x30/0x50
[  624.305311][ T9640]  ? wbc_attach_and_unlock_inode+0x131/0x680
[  624.305531][ T9640]  filemap_write_and_wait_range+0x5bb/0x840
[  624.305881][ T9640]  ? kmsan_get_metadata+0xfb/0x160
[  624.306083][ T9640]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  624.306292][ T9640]  __generic_remap_file_range_prep+0x146a/0x1aa0
[  624.306538][ T9640]  generic_remap_file_range_prep+0x5c/0x70
[  624.306720][ T9640]  xfs_reflink_remap_prep+0x46e/0xea0
[  624.306944][ T9640]  xfs_file_remap_range+0x296/0x10e0
[  624.307134][ T9640]  ? kmsan_get_metadata+0xfb/0x160
[  624.307355][ T9640]  ? __pfx_xfs_file_remap_range+0x10/0x10
[  624.307543][ T9640]  vfs_copy_file_range+0x1668/0x24e0
[  624.307785][ T9640]  __se_sys_copy_file_range+0x530/0xa50
[  624.308049][ T9640]  __x64_sys_copy_file_range+0x114/0x1a0
[  624.308280][ T9640]  x64_sys_call+0xa70/0x3db0
[  624.308500][ T9640]  do_syscall_64+0xd9/0x210
[  624.308670][ T9640]  ? irqentry_exit+0x16/0x60
[  624.308817][ T9640]  ? clear_bhb_loop+0x40/0x90
[  624.309014][ T9640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.309193][ T9640] RIP: 0033:0x7f9a68f8e929
[  624.309332][ T9640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  624.309475][ T9640] RSP: 002b:00007f9a69e03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[  624.309638][ T9640] RAX: ffffffffffffffda RBX: 00007f9a691b5fa0 RCX: 00007f9a68f8e929
[  624.309748][ T9640] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000008
[  624.309841][ T9640] RBP: 00007f9a69e03090 R08: 0000000000400000 R09: 0000000000000000
[  624.309938][ T9640] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001
[  624.310044][ T9640] R13: 0000000000000000 R14: 00007f9a691b5fa0 R15: 00007ffdae65a3d8
[  624.310184][ T9640]  </TASK>
[  624.765357][ T5849] usb 3-1: USB disconnect, device number 31
[  624.858037][ T5810] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  624.907875][ T5876] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  625.166905][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  625.177494][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  625.186805][ T5876] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  625.246017][   T24] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  625.319810][ T5876] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  625.329289][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.337841][ T5876] usb 5-1: Product: syz
[  625.342243][ T5876] usb 5-1: Manufacturer: syz
[  625.347260][ T5876] usb 5-1: SerialNumber: syz
[  625.456323][   T24] usb 2-1: Using ep0 maxpacket: 16
[  625.467888][ T5876] cdc_ncm 5-1:1.0: skipping garbage
[  625.473462][ T5876] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  625.482244][ T5876] cdc_ncm 5-1:1.0: bind() failure
[  625.524809][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  625.596172][   T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  625.606724][   T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  625.715622][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  625.726149][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.734619][   T24] usb 2-1: Product: 齛뮼亅貝棠뎸୵움ꖡ᎜䔈晥ᝒ਑숞硻랺撔紹籷ꦄ鰗㔅㺏ᾗ䬨剛韽∩㇝刚쾯栥鰣좿᭿橫븝㮒厴鸗䇗}뎗얶룞휜褘惦摱ꋫ㱱ທ⎏옆遻狅祘ꌧꈵចỘ줴箈䎶멯⼻똿줴䄃餔ᗍ㒐䕱巎딍ᯔ壓雾痞䑠Ⴒ냩轶촴复෌빱跗ᡶ혟卫铩为ᆘ⼂䑑忥ጄ
[  625.768796][   T24] usb 2-1: Manufacturer: 歚㍌ꢫ낑靁ꃷᦽ塶䑞됝Ⳉ꫄괮⠇峁度咟ⲩﵜ쯇੔⊻᧺峥ﾂꎛผ潫즘ƙ丽닱㪁폵信쮵
[  625.785096][   T24] usb 2-1: SerialNumber: syz
[  626.054369][ T5849] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  626.196159][   T24] cdc_ncm 2-1:1.0: bind() failure
[  626.215113][   T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  626.222264][   T24] cdc_ncm 2-1:1.1: bind() failure
[  626.335068][ T5849] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  626.345803][ T5849] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  626.355168][ T5849] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  626.399221][   T42] usb 5-1: USB disconnect, device number 40
[  626.420855][   T24] usb 2-1: USB disconnect, device number 37
[  626.475289][ T5849] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  626.485949][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.494869][ T5849] usb 3-1: Product: syz
[  626.499307][ T5849] usb 3-1: Manufacturer: syz
[  626.504515][ T5849] usb 3-1: SerialNumber: syz
[  626.574805][ T5849] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  626.583332][ T5849] cdc_ncm 3-1:1.0: bind() failure
[  627.575390][ T9685] futex_wake_op: syz.3.1096 tries to shift op by 144; fix this program
[  627.594914][ T5876] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  627.699568][ T5849] usb 3-1: USB disconnect, device number 32
[  627.827785][ T5876] usb 2-1: Using ep0 maxpacket: 16
[  627.906686][ T5876] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  627.923419][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.934273][ T5876] usb 2-1: Product: syz
[  627.938700][ T5876] usb 2-1: Manufacturer: syz
[  627.943639][ T5876] usb 2-1: SerialNumber: syz
[  628.010777][ T5876] usb 2-1: config 0 descriptor??
[  628.085687][   T11] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  628.349772][   T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  628.360392][   T11] usb 5-1: config 0 has no interfaces?
[  628.499769][ T5876] speedtch 2-1:0.0: speedtch_bind: data interface not found!
[  628.507527][ T5876] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  628.540580][   T11] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  628.550062][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.559108][   T11] usb 5-1: Product: syz
[  628.563511][   T11] usb 5-1: Manufacturer: syz
[  628.569023][   T11] usb 5-1: SerialNumber: syz
[  628.606789][   T11] usb 5-1: config 0 descriptor??
[  628.679981][ T4503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.688448][ T4503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.784672][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  628.792923][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  629.094432][ T5876] usb 2-1: USB disconnect, device number 38
[  629.186902][   T11] usb 5-1: USB disconnect, device number 41
[  629.446394][ T9701] loop5: detected capacity change from 0 to 64
[  629.624178][ T5876] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  629.818174][ T9703] 9pnet_fd: Insufficient options for proto=fd
[  629.850023][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  629.868795][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  629.880903][ T5876] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  630.095577][ T5876] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  630.105614][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.114182][ T5876] usb 2-1: Product: syz
[  630.118609][ T5876] usb 2-1: Manufacturer: syz
[  630.121032][ T9703] loop2: detected capacity change from 0 to 512
[  630.123351][ T5876] usb 2-1: SerialNumber: syz
[  630.261723][ T5876] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  630.280747][ T5876] cdc_ncm 2-1:1.0: bind() failure
[  630.305482][ T9703] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only
[  631.175259][ T9724] loop3: detected capacity change from 0 to 128
[  631.186546][ T9703] loop2: detected capacity change from 0 to 4096
[  631.257504][ T9703] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  631.265752][ T9724] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  631.309885][ T5876] usb 2-1: USB disconnect, device number 39
[  631.380853][ T9724] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  631.581025][ T9725] netlink: 'syz.3.1107': attribute type 4 has an invalid length.
[  638.573186][ T9743] sd 0:0:1:0: device reset
[  639.571792][ T9749] 9pnet_fd: Insufficient options for proto=fd
[  641.959116][ T9756] loop3: detected capacity change from 0 to 256
[  643.050605][ T9764] loop2: detected capacity change from 0 to 128
[  644.866069][ T9764] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  647.364834][ T9773] loop4: detected capacity change from 0 to 2048
[  649.755837][ T9773] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  649.756166][ T9773] EXT4-fs: failed to create workqueue
[  649.771929][ T9773] EXT4-fs (loop4): mount failed
[  652.853581][ T9783] loop3: detected capacity change from 0 to 512
[  652.977449][ T9783] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  653.985872][ T5849] IPVS: starting estimator thread 0...
[  654.959429][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  654.966510][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  655.335249][ T9793] IPVS: using max 192 ests per chain, 9600 per kthread
[  655.702170][ T9783] EXT4-fs (loop3): failed to open journal device unknown-block(11,127) -6
[  658.443422][ T9801] loop2: detected capacity change from 0 to 1024
[  658.497319][ T9801] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  658.508767][ T9801] UDF-fs: error (device loop2): udf_read_inode: (ino 832) failed !bh
[  658.517376][ T9801] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=48, partition=0
[  663.744635][ T5876] usb 4-1: new low-speed USB device number 48 using dummy_hcd
[  664.588116][ T5876] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  664.597802][ T5876] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  664.606310][ T5876] usb 4-1: config 0 has no interface number 0
[  664.612659][ T5876] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  664.622923][ T5876] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  664.632387][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  665.136302][ T5876] usb 4-1: config 0 descriptor??
[  665.372763][ T5849] usb 4-1: USB disconnect, device number 48
[  669.932063][ T9865] syz.3.1144 (9865): drop_caches: 2
[  671.604801][ T9867] netlink: 'syz.4.1150': attribute type 5 has an invalid length.
[  671.612818][ T9867] netlink: 'syz.4.1150': attribute type 9 has an invalid length.
[  672.834620][ T5849] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  673.064458][ T5849] usb 6-1: Using ep0 maxpacket: 32
[  673.102039][ T5849] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  673.110722][ T5849] usb 6-1: config 0 has no interface number 0
[  673.162940][ T5849] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  673.174553][ T5849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.182844][ T5849] usb 6-1: Product: syz
[  673.187933][ T5849] usb 6-1: Manufacturer: syz
[  673.192779][ T5849] usb 6-1: SerialNumber: syz
[  673.336718][ T5849] usb 6-1: config 0 descriptor??
[  673.367172][ T5849] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  673.604064][ T5849] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  673.645784][ T5849] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  674.090174][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  674.178094][ T5876] usb 6-1: USB disconnect, device number 2
[  674.311145][ T5876] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  674.354934][ T5876] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  674.356822][ T5876] quatech2 6-1:0.51: device disconnected
[  676.546108][ T5800] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  676.567729][ T5800] Bluetooth: hci2: unexpected event for opcode 0x2062
[  677.234301][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  677.405631][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  677.417123][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  677.427384][ T5876] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  677.437191][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.569668][ T5876] usb 6-1: config 0 descriptor??
[  678.015901][ T5876] kone 0003:1E7D:2CED.0002: unknown main item tag 0x6
[  678.065137][ T5876] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0
[  678.236251][ T5876] usb 6-1: USB disconnect, device number 3
[  679.171243][ T5876] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  679.566857][ T5876] usb 2-1: Using ep0 maxpacket: 16
[  679.656103][ T5876] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  679.667649][ T5876] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  679.678101][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0
[  679.685234][ T5876] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  679.694740][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.169541][ T5876] usb 2-1: config 0 descriptor??
[  680.644618][ T5800] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  680.660951][ T5800] Bluetooth: hci2: Injecting HCI hardware error event
[  680.682236][ T5800] Bluetooth: hci2: hardware error 0x00
[  682.074319][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.095165][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.102477][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.113057][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.120601][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.128058][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.135439][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.142750][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.150175][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.157600][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.165069][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.172350][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.179769][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.200230][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.210946][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.218519][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.225952][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.233235][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.240606][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.247994][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.255429][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.262747][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.270157][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.277516][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.284963][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.307525][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.318536][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.326129][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.333384][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.340847][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.348217][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.355720][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.363062][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.370498][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.377947][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.385392][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.406203][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.413493][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.424360][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.431661][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.439171][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.446566][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.453961][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.461229][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.468665][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.476052][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.483349][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.504135][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.511433][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.522053][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.529770][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.537154][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.544522][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.551804][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.559379][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.566785][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.574210][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.581486][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.588888][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.609173][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.620479][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.627959][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.635393][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.642686][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.650530][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.657975][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.665395][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.672680][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.680306][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.687718][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.695120][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.715506][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.722811][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.734477][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.741798][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.749681][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.757062][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.764561][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.771855][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.779242][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.788957][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.796360][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.816892][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.828002][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.835472][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.842766][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.850124][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.857689][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.865139][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.872453][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.879862][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.887234][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.894621][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.914772][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.922072][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.932591][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.940073][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.947447][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.954894][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.962264][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.969829][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.977305][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.984800][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.992152][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  682.999653][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.020352][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.030996][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.038465][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.045927][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.053378][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.061007][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.068459][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.075856][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.083144][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.090571][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.097954][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.118369][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.129207][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.136772][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.144210][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.151498][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.158887][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.166259][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.173531][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.180908][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.188310][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.195757][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.203072][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.223689][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.234785][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.242072][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.249568][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.256905][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.264298][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.271553][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.278971][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.288105][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.296204][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.303529][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.324866][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.332170][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.342919][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.350304][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.357707][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.365113][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.372516][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.380027][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.387445][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.394949][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.402262][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.409747][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.431679][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.442776][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.450260][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.457787][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.465246][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.472574][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.480081][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.487555][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.495045][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.502398][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.509867][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.531294][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.542103][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.549536][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.556902][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.564287][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.571587][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.579100][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.586507][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.593910][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.601194][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.608611][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.616061][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.636830][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.647653][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.655141][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.662352][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.669654][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.676961][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.684312][ T9955] Bluetooth: hci5: command tx timeout
[  683.684383][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.697211][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.704597][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.711918][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.719783][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.740879][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.752015][ T5800] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  683.758854][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.767214][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.774961][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.784994][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.792402][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.799892][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.807530][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.815000][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.836487][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.848304][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.856356][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.863902][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.871229][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.879140][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.886532][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.893960][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.901246][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.908748][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.916178][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.923465][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.944279][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.951596][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.962570][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.970112][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.977512][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.984957][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.992248][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  683.999689][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.007092][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.014596][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.021925][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.042467][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.056722][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.067847][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.075295][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.082592][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.090040][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.097424][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.104852][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.112280][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.119846][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.127275][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.148253][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.159137][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.166637][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.174035][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.181303][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.188648][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.196079][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.203350][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.210767][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.218275][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.225701][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.246182][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.253455][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.267577][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.278598][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.288414][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.295841][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.303145][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.310581][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.317977][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.325491][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.332926][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.353032][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.363670][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.371103][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.378565][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.386012][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.393297][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.400752][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.408127][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.415536][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.422815][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.430191][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.450347][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.461182][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.468590][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.475985][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.483284][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.490772][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.498255][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.505707][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.513040][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.520543][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.527979][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.535400][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.556862][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.568983][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.577024][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.584500][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.591799][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.599232][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.606628][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.621135][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.628559][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.636042][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.656660][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.667407][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.674840][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.682158][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.689611][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.697073][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.704517][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.711855][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.719384][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.726769][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.734171][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.741448][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.761631][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.772263][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.779688][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.787083][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.796985][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.805407][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.812755][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.820252][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.827917][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.835346][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.842631][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.863333][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.873991][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.881285][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.888757][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.896294][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.903608][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.911053][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.918523][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.926022][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.933310][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.940737][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.948207][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.972739][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.980217][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.987654][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  684.995082][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.002398][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.009856][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.017205][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.024700][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.031997][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.039442][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.046817][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.069019][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.080216][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.087715][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.095208][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.102532][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.110000][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.117497][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.124963][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.132295][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.139827][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.147222][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.167988][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.178706][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.187704][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.195243][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.202546][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.212195][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.215265][ T9969] netlink: 'syz.5.1186': attribute type 1 has an invalid length.
[  685.220320][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.227362][ T9969] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1186'.
[  685.234402][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.243308][ T9969] nbd: illegal input index 393224
[  685.250478][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.283276][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.290778][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.300826][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.308246][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.315723][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.323123][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.330491][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.337886][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.345324][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.352585][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.372685][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.383548][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.391011][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.398400][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.405812][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.413113][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.420501][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.427993][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.435547][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.442847][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.450268][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.457645][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.478148][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.488857][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.496428][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.504022][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.511293][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.520012][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.527376][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.534840][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.542144][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.549532][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.556892][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.577263][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.588105][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.595556][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.602841][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.610280][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.617752][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.625239][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.632547][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.639983][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.647319][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.654739][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.662037][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.682682][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.693329][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.700692][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.708051][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.715519][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.722861][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.730320][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.737695][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.745172][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.752454][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.759884][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.767254][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.787681][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.800650][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.808419][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.815923][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.823198][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.830623][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.838064][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.846428][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.853684][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.861141][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.868597][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.889334][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.900328][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.907754][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.915186][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.922492][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.929988][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.937481][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.945022][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.952306][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.959767][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.967194][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.988404][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  685.999217][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.006652][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.014024][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.021285][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.028745][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.036135][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.043432][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.050884][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.058450][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.065917][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.073204][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.094081][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.101371][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.112498][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x1
[  686.120055][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.127458][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.134899][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.142193][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.149646][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x1
[  686.157048][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.164561][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.171863][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.192991][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.203537][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.210930][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.218334][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.225750][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.233082][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x5
[  686.240612][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.248043][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.255434][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.262730][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.270185][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.277583][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.299264][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.312534][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.320237][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.327734][ T5876] cougar 0003:060B:500A.0003: unknown main item tag 0x0
[  686.335163][ T5876] cougar 0003:060B:500A.0003: unexpected long global item
[  686.413434][ T5876] cougar 0003:060B:500A.0003: parse failed
[  686.420083][ T5876] cougar 0003:060B:500A.0003: probe with driver cougar failed with error -22
[  686.436599][ T5876] usb 2-1: USB disconnect, device number 40
[  687.427579][ T5876] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  687.707960][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.727366][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  687.740507][ T5876] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  687.749990][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.109115][ T5876] usb 3-1: config 0 descriptor??
[  688.601989][ T5876] hid-thrustmaster 0003:044F:B65D.0004: unknown main item tag 0x0
[  689.118160][ T5876] hid-thrustmaster 0003:044F:B65D.0004: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[  689.131432][ T5876] hid-thrustmaster 0003:044F:B65D.0004: Wrong number of endpoints?
[  689.330411][    C0] hid-thrustmaster 0003:044F:B65D.0004: URB to get model id failed with error -71
[  689.354673][ T5849] usb 3-1: USB disconnect, device number 33
[  690.993247][T10006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1200'.
[  691.055336][T10002] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1200'.
[  691.070364][T10005] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1200'.
[  691.737029][T10017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1206'.
[  691.952279][T10018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  692.820905][T10025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  692.904657][ T5876] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  693.005789][T10025] tipc: Started in network mode
[  693.011148][T10025] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  693.021011][T10025] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  693.118097][ T5876] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  693.128993][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.216385][ T5876] usb 6-1: config 0 descriptor??
[  694.942622][ T5849] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  695.020874][T10059] ceph: No mds server is up or the cluster is laggy
[  695.040163][   T11] libceph: connect (1)[c::]:6789 error -101
[  695.047390][   T11] libceph: mon0 (1)[c::]:6789 connect error
[  695.191951][ T5849] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  695.202772][ T5849] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  695.216501][ T5849] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  695.226059][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.322766][ T5876] usb 6-1: Cannot set autoneg
[  695.328841][ T5876] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  695.429226][ T5876] usb 6-1: USB disconnect, device number 4
[  695.659624][ T5849] usb 3-1: usb_control_msg returned -32
[  695.666125][ T5849] usbtmc 3-1:16.0: can't read capabilities
[  697.998584][ T5876] usb 3-1: USB disconnect, device number 34
[  698.154198][   T11] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  698.429232][   T11] usb 2-1: Using ep0 maxpacket: 16
[  698.555348][   T11] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  698.564084][   T11] usb 2-1: config 0 has no interface number 0
[  698.578921][   T11] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  698.593170][   T11] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  698.607335][   T11] usb 2-1: config 0 interface 255 has no altsetting 0
[  698.911615][   T30] audit: type=1326 audit(1750985985.231:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000
[  698.935366][   T30] audit: type=1326 audit(1750985985.231:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000
[  698.958410][   T30] audit: type=1326 audit(1750985985.231:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000
[  698.982959][   T30] audit: type=1326 audit(1750985985.231:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000
[  699.006639][   T30] audit: type=1326 audit(1750985985.231:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000
[  699.029542][   T30] audit: type=1326 audit(1750985985.241:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000
[  699.052686][   T30] audit: type=1326 audit(1750985985.241:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000
[  699.075686][   T30] audit: type=1326 audit(1750985985.241:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000
[  699.100208][   T30] audit: type=1326 audit(1750985985.241:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000
[  699.123844][   T30] audit: type=1326 audit(1750985985.241:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.3.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a68f8e929 code=0x7ffc0000
[  699.761305][   T11] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  699.771006][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.779438][   T11] usb 2-1: Product: syz
[  699.783876][   T11] usb 2-1: Manufacturer: syz
[  699.788685][   T11] usb 2-1: SerialNumber: syz
[  699.809572][   T11] usb 2-1: config 0 descriptor??
[  700.756783][   T11] hub 2-1:0.255: bad descriptor, ignoring hub
[  700.763167][   T11] hub 2-1:0.255: probe with driver hub failed with error -5
[  701.361460][   T11] usb 2-1: USB disconnect, device number 41
[  703.125724][ T5800] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  704.707406][T10139] binder: 10136:10139 ioctl c0306201 200000000240 returned -11
[  704.962012][T10144] loop1: detected capacity change from 0 to 64
[  705.506238][T10137] loop2: detected capacity change from 0 to 4096
[  707.507306][T10137] ntfs3(loop2): Failed to read $UpCase (-4).
[  707.977280][   T11] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  708.191522][   T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  708.210001][   T11] usb 5-1: config 0 has no interfaces?
[  709.295627][T10166] loop5: detected capacity change from 0 to 40427
[  709.333087][T10164] loop1: detected capacity change from 0 to 40427
[  709.371463][T10164] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  709.380014][T10164] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  709.397331][T10164] F2FS-fs (loop1): invalid crc value
[  709.403212][T10166] F2FS-fs (loop5): invalid crc value
[  709.404215][   T11] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[  709.418708][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.435151][   T11] usb 5-1: Product: syz
[  709.442184][   T11] usb 5-1: Manufacturer: syz
[  709.447604][   T11] usb 5-1: SerialNumber: syz
[  709.754934][T10166] F2FS-fs (loop5): Start checkpoint disabled!
[  709.856401][T10166] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  709.961875][   T11] usb 5-1: config 0 descriptor??
[  710.473028][T10164] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  710.486322][T10164] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  710.539954][ T1150] kworker/u8:8: attempt to access beyond end of device
[  710.539954][ T1150] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  710.556799][ T1150] CPU: 1 UID: 0 PID: 1150 Comm: kworker/u8:8 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) 
[  710.556974][ T1150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  710.557106][ T1150] Workqueue: writeback wb_workfn (flush-7:5)
[  710.557303][ T1150] Call Trace:
[  710.557355][ T1150]  <TASK>
[  710.557407][ T1150]  __dump_stack+0x26/0x30
[  710.557583][ T1150]  dump_stack_lvl+0x1df/0x270
[  710.557770][ T1150]  dump_stack+0x1e/0x25
[  710.557948][ T1150]  f2fs_handle_critical_error+0xa6f/0xc20
[  710.558185][ T1150]  f2fs_stop_checkpoint+0x65/0x80
[  710.558379][ T1150]  f2fs_write_end_io+0xb4b/0x1920
[  710.558529][ T1150]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  710.558742][ T1150]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  710.558884][ T1150]  bio_endio+0xe27/0xf80
[  710.559063][ T1150]  submit_bio_noacct+0x214/0x2710
[  710.559288][ T1150]  submit_bio+0x5a9/0x5d0
[  710.559467][ T1150]  f2fs_submit_write_bio+0x92/0x250
[  710.559653][ T1150]  __submit_merged_bio+0x16f/0x6a0
[  710.559832][ T1150]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  710.560079][ T1150]  __submit_merged_write_cond+0x458/0x9a0
[  710.560272][ T1150]  f2fs_write_data_pages+0x4bb2/0x5480
[  710.560577][ T1150]  ? blk_trace_startstop+0x780/0xab0
[  710.560722][ T1150]  ? irqentry_enter+0x2e/0x50
[  710.560839][ T1150]  ? sysvec_apic_timer_interrupt+0x52/0x90
[  710.561037][ T1150]  ? cfg80211_wiphy_work+0x354/0x820
[  710.561210][ T1150]  ? process_scheduled_works+0xb91/0x1d80
[  710.561391][ T1150]  ? kmsan_get_metadata+0xfb/0x160
[  710.561562][ T1150]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  710.561766][ T1150]  ? kmsan_get_metadata+0xfb/0x160
[  710.561955][ T1150]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  710.562143][ T1150]  ? kmsan_get_metadata+0xfb/0x160
[  710.562329][ T1150]  ? kmsan_get_metadata+0xfb/0x160
[  710.562512][ T1150]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  710.562696][ T1150]  ? kmsan_get_metadata+0xfb/0x160
[  710.562884][ T1150]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  710.563073][ T1150]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  710.563271][ T1150]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  710.563469][ T1150]  do_writepages+0x3ef/0x860
[  710.563633][ T1150]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  710.563831][ T1150]  ? writeback_sb_inodes+0x21/0x1c90
[  710.563996][ T1150]  ? kmsan_get_metadata+0xfb/0x160
[  710.564193][ T1150]  __writeback_single_inode+0x101/0x1190
[  710.564370][ T1150]  ? kmsan_get_metadata+0xfb/0x160
[  710.564568][ T1150]  writeback_sb_inodes+0xaa9/0x1c90
[  710.564856][ T1150]  ? kmsan_get_metadata+0xfb/0x160
[  710.565119][ T1150]  wb_writeback+0x4ce/0xc00
[  710.565315][ T1150]  ? queue_io+0x4c1/0x790
[  710.565497][ T1150]  wb_workfn+0x397/0x1910
[  710.565654][ T1150]  ? kmsan_get_metadata+0xfb/0x160
[  710.565905][ T1150]  ? __pfx_wb_workfn+0x10/0x10
[  710.566053][ T1150]  process_scheduled_works+0xb91/0x1d80
[  710.566302][ T1150]  worker_thread+0xedf/0x1590
[  710.566529][ T1150]  kthread+0xd5c/0xf00
[  710.566665][ T1150]  ? __pfx_worker_thread+0x10/0x10
[  710.566861][ T1150]  ? __pfx_kthread+0x10/0x10
[  710.566999][ T1150]  ret_from_fork+0x1e3/0x310
[  710.567131][ T1150]  ? __pfx_kthread+0x10/0x10
[  710.567261][ T1150]  ret_from_fork_asm+0x1a/0x30
[  710.567473][ T1150]  </TASK>
[  710.888409][ T1150] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  711.300709][   T11] usb 5-1: can't set config #0, error -71
[  711.326574][   T11] usb 5-1: USB disconnect, device number 42
[  713.194455][T10184] binder: BINDER_SET_CONTEXT_MGR already set
[  713.201003][T10184] binder: 10183:10184 ioctl 4018620d 200000000040 returned -16
[  713.582614][T10184] binder: 10183:10184 ioctl c0306201 200000000240 returned -11
[  715.957822][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  715.964843][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  716.938716][T10197] loop3: detected capacity change from 0 to 4096
[  717.131045][T10203] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  719.447337][T10214] tipc: Started in network mode
[  719.452548][T10214] tipc: Node identity ac14140f, cluster identity 4711
[  719.472786][T10214] tipc: New replicast peer: 255.255.255.255
[  719.480827][T10214] tipc: Enabled bearer <udp:syz2>, priority 10
[  720.604876][ T1949] tipc: Node number set to 2886997007
[  721.328571][T10232] binder: 10230:10232 ioctl c0306201 200000000240 returned -11
[  721.740847][T10236] loop1: detected capacity change from 0 to 512
[  721.928383][T10236] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.1282: corrupted in-inode xattr: invalid ea_ino
[  722.007039][T10236] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1282: couldn't read orphan inode 15 (err -117)
[  722.096776][T10236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  722.706539][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  728.864398][ T5089] Bluetooth: hci5: command 0x0406 tx timeout
[  730.344899][T10272] binder_alloc: 10271: binder_alloc_buf, no vma
[  736.474453][ T5089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  736.513579][ T5089] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  736.546476][ T5089] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  736.602631][ T5089] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  736.638620][ T5089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  737.241734][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'.
[  737.345770][T10309] binder_alloc: 10305: binder_alloc_buf, no vma
[  738.840516][ T5089] Bluetooth: hci6: command tx timeout
[  740.206190][T10316] loop2: detected capacity change from 0 to 4096
[  740.633044][T10327] loop1: detected capacity change from 0 to 512
[  740.645297][T10301] chnl_net:caif_netlink_parms(): no params data found
[  740.855502][T10327] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.1316: bad orphan inode 17
[  740.894441][ T5089] Bluetooth: hci6: command tx timeout
[  741.006451][T10327] ext4_test_bit(bit=16, block=4) = 1
[  741.012019][T10327] is_bad_inode(inode)=0
[  741.017832][T10327] NEXT_ORPHAN(inode)=0
[  741.022110][T10327] max_ino=32
[  741.026727][T10327] i_nlink=1
[  741.032281][T10327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  743.328369][ T5089] Bluetooth: hci6: command tx timeout
[  744.261543][T10330] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  744.324069][T10346] loop2: detected capacity change from 0 to 128
[  744.355994][ T5795] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  744.438173][T10346] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  744.549438][T10346] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  744.646313][T10350] binder_alloc: 10349: binder_alloc_buf, no vma
[  745.233277][T10301] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.243043][T10301] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.251106][T10301] bridge_slave_0: entered allmulticast mode
[  745.260929][T10301] bridge_slave_0: entered promiscuous mode
[  745.390465][ T5089] Bluetooth: hci6: command tx timeout
[  745.493506][T10301] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.501398][T10301] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.509468][T10301] bridge_slave_1: entered allmulticast mode
[  745.519109][T10301] bridge_slave_1: entered promiscuous mode
[  746.965211][T10301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  747.958285][T10360] loop5: detected capacity change from 0 to 4096
[  748.057205][T10301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  748.118324][ T5801] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  748.424416][T10301] team0: Port device team_slave_0 added
[  748.460203][T10301] team0: Port device team_slave_1 added
[  749.403244][T10301] batman_adv: batadv0: Adding interface: batadv_slave_0
[  749.411604][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  749.438736][T10301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  749.899886][T10301] batman_adv: batadv0: Adding interface: batadv_slave_1
[  749.907404][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  749.934203][T10301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  751.640842][T10380] binder: 10379:10380 ioctl c0306201 200000000240 returned -11
[  752.074599][T10301] hsr_slave_0: entered promiscuous mode
[  752.085542][T10301] hsr_slave_1: entered promiscuous mode
[  752.094799][T10301] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  752.102614][T10301] Cannot create hsr debugfs directory
[  752.867703][T10390] loop1: detected capacity change from 0 to 512
[  752.877072][T10390] ext4: Unknown parameter 'dont_hash'
[  755.478779][T10301] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  756.280698][T10410] loop2: detected capacity change from 0 to 4096
[  756.475828][T10301] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  756.514525][T10301] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  756.554424][T10301] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  757.738639][T10410] ntfs3(loop2): ino=24, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ntfs_rename
[  759.013411][T10301] 8021q: adding VLAN 0 to HW filter on device bond0
[  759.230784][T10428] loop1: detected capacity change from 0 to 128
[  759.536999][T10301] 8021q: adding VLAN 0 to HW filter on device team0
[  759.575507][T10428] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  759.731863][ T3759] bridge0: port 1(bridge_slave_0) entered blocking state
[  759.739447][ T3759] bridge0: port 1(bridge_slave_0) entered forwarding state
[  759.774592][T10428] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  759.923496][ T3759] bridge0: port 2(bridge_slave_1) entered blocking state
[  759.931312][ T3759] bridge0: port 2(bridge_slave_1) entered forwarding state
[  760.454832][ T5795] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  764.729744][T10301] 8021q: adding VLAN 0 to HW filter on device batadv0
[  770.229683][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1368'.
[  773.192109][T10301] veth0_vlan: entered promiscuous mode
[  773.214498][   T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  773.344709][T10301] veth1_vlan: entered promiscuous mode
[  773.404291][   T24] usb 3-1: Using ep0 maxpacket: 8
[  773.418661][   T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  773.503616][   T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  773.513340][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.521941][   T24] usb 3-1: Product: syz
[  773.529872][   T24] usb 3-1: Manufacturer: syz
[  773.535959][   T24] usb 3-1: SerialNumber: syz
[  773.558288][   T24] usb 3-1: config 0 descriptor??
[  773.870465][T10301] veth0_macvtap: entered promiscuous mode
[  773.925468][T10301] veth1_macvtap: entered promiscuous mode
[  774.159382][T10301] batman_adv: batadv0: Interface activated: batadv_slave_0
[  774.237714][T10301] batman_adv: batadv0: Interface activated: batadv_slave_1
[  774.327332][ T9955] Bluetooth: hci3: command 0x1003 tx timeout
[  774.363662][T10301] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  774.373060][T10301] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  774.382258][T10301] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  774.392559][T10301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  775.002761][ T5089] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  777.039128][   T11] usb 3-1: USB disconnect, device number 35
[  778.197329][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  778.204238][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  782.498846][T10558] loop2: detected capacity change from 0 to 65536
[  782.666526][T10558] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  785.212642][T10558] XFS (loop2): Ending clean mount
[  785.391189][ T5801] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  789.859428][T10611] loop5: detected capacity change from 0 to 32768
[  789.869928][T10611] XFS: attr2 mount option is deprecated.
[  789.987645][T10611] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  790.316399][T10611] XFS (loop5): Ending clean mount
[  790.348534][T10611] XFS (loop5): Quotacheck needed: Please wait.
[  790.370091][T10611] XFS (loop5): Quotacheck: Done.
[  792.756864][   T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  794.145507][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  794.156897][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  794.167234][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  794.180728][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  794.190288][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.201076][ T9489] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  794.616451][   T24] usb 2-1: config 0 descriptor??
[  795.568727][   T24] usb 2-1: can't set config #0, error -71
[  795.607816][   T24] usb 2-1: USB disconnect, device number 42
[  796.376585][   T11] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  796.614780][   T11] usb 2-1: Using ep0 maxpacket: 16
[  796.679360][   T11] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  796.690910][   T11] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  796.701141][   T11] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  796.838602][   T11] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  796.851669][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  796.860294][   T11] usb 2-1: Product: syz
[  796.864854][   T11] usb 2-1: Manufacturer: syz
[  796.869710][   T11] usb 2-1: SerialNumber: syz
[  797.447628][ T9955] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  797.475885][ T9955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  797.517205][ T9955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  797.543325][ T9955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  797.564126][ T9955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  797.575748][   T11] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  798.734272][   T11] usb 2-1: current rate 9338450 is different from the runtime rate 9338507
[  799.233072][ T9955] Bluetooth: hci5: unexpected Set CIG Parameters response data
[  799.271867][ T9955] Bluetooth: hci5: unexpected event for opcode 0x2062
[  799.712279][ T9955] Bluetooth: hci3: command tx timeout
[  801.015486][   T11] usb 2-1: USB disconnect, device number 43
[  801.303274][ T9955] Bluetooth: hci5: command 0x0406 tx timeout
[  801.639161][ T1150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.766732][ T9955] Bluetooth: hci3: command tx timeout
[  801.776181][T10656] chnl_net:caif_netlink_parms(): no params data found
[  801.885126][ T1150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  802.033035][ T1150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  802.185745][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  802.495992][ T1150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  802.634885][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  802.646416][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  802.656699][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  802.670163][   T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  802.679735][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.015112][   T24] usb 6-1: config 0 descriptor??
[  803.298596][ T9955] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  803.307618][ T9955] Bluetooth: hci5: Injecting HCI hardware error event
[  803.318710][ T9955] Bluetooth: hci5: hardware error 0x00
[  803.333936][ T1150] bridge_slave_1: left allmulticast mode
[  803.340007][ T1150] bridge_slave_1: left promiscuous mode
[  803.347315][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state
[  803.562125][   T24] usbhid 6-1:0.0: can't add hid device: -71
[  803.569162][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  803.632058][   T24] usb 6-1: USB disconnect, device number 5
[  803.845831][ T5089] Bluetooth: hci3: command tx timeout
[  803.889237][ T1150] bridge_slave_0: left allmulticast mode
[  803.895675][ T1150] bridge_slave_0: left promiscuous mode
[  803.902285][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state
[  806.275788][ T5089] Bluetooth: hci3: command tx timeout
[  806.281881][ T9955] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  806.306334][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  806.459681][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  806.509472][T10693] loop3: detected capacity change from 0 to 1764
[  806.563303][T10693] iso9660: Corrupted directory entry in block 2 of inode 1920
[  806.655648][T10694] iso9660: Corrupted directory entry in block 2 of inode 1920
[  806.663847][T10694] overlayfs: failed to resolve './file1': -2
[  807.562445][ T1150] bond0 (unregistering): Released all slaves
[  807.648032][T10696] iso9660: Corrupted directory entry in block 2 of inode 1920
[  809.726197][ T1150] hsr_slave_0: left promiscuous mode
[  809.854846][ T1150] hsr_slave_1: left promiscuous mode
[  809.863323][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  809.871314][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0
[  810.140327][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  810.148327][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1
[  810.709465][ T1150] veth1_macvtap: left promiscuous mode
[  810.715825][ T1150] veth0_macvtap: left promiscuous mode
[  810.721839][ T1150] veth1_vlan: left promiscuous mode
[  810.727697][ T1150] veth0_vlan: left promiscuous mode
[  816.419419][ T1150] team0 (unregistering): Port device team_slave_1 removed
[  817.420337][ T1150] team0 (unregistering): Port device team_slave_0 removed
[  818.350283][T10721] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1438'.
[  818.359814][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1438'.
[  818.369617][T10721] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1438'.
[  818.390072][T10721] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1438'.
[  818.600692][T10656] bridge0: port 1(bridge_slave_0) entered blocking state
[  818.608570][T10656] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.616707][T10656] bridge_slave_0: entered allmulticast mode
[  818.626539][T10656] bridge_slave_0: entered promiscuous mode
[  818.714741][T10656] bridge0: port 2(bridge_slave_1) entered blocking state
[  818.722418][T10656] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.732788][T10656] bridge_slave_1: entered allmulticast mode
[  818.742495][T10656] bridge_slave_1: entered promiscuous mode
[  819.025040][   T42] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  819.139260][T10656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  819.188191][ T1150] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.264070][   T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  819.276133][   T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  819.286477][   T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  819.301491][   T42] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  819.311478][   T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.374483][T10656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  819.468798][ T1150] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.522700][   T42] usb 4-1: config 0 descriptor??
[  819.716450][ T1150] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.532724][   T42] usbhid 4-1:0.0: can't add hid device: -71
[  820.539653][   T42] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  820.612794][   T42] usb 4-1: USB disconnect, device number 49
[  821.030331][T10656] team0: Port device team_slave_0 added
[  821.135346][ T1150] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  821.271414][T10656] team0: Port device team_slave_1 added
[  822.010976][T10656] batman_adv: batadv0: Adding interface: batadv_slave_0
[  822.018522][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  822.045254][T10656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  822.534430][T10747] evm: overlay not supported
[  822.550245][T10656] batman_adv: batadv0: Adding interface: batadv_slave_1
[  822.557925][T10656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  822.586845][T10656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  822.704688][ T1150] bridge_slave_1: left allmulticast mode
[  822.710653][ T1150] bridge_slave_1: left promiscuous mode
[  822.717438][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state
[  822.739107][ T1150] bridge_slave_0: left allmulticast mode
[  822.745624][ T1150] bridge_slave_0: left promiscuous mode
[  822.752185][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state
[  823.716445][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  823.736329][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  823.770998][ T1150] bond0 (unregistering): Released all slaves
[  824.051644][ T1150] IPVS: stopping master sync thread 9428 ...
[  824.071629][   T11] usb 1-1: USB disconnect, device number 26
[  824.702378][T10656] hsr_slave_0: entered promiscuous mode
[  824.712750][T10656] hsr_slave_1: entered promiscuous mode
[  824.721362][T10656] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  824.737116][T10656] Cannot create hsr debugfs directory
[  824.981049][ T1150] hsr_slave_0: left promiscuous mode
[  825.014050][ T1150] hsr_slave_1: left promiscuous mode
[  825.021889][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  825.030488][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0
[  825.107242][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  825.115169][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1
[  825.140421][   T11] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  825.194087][ T1150] veth1_macvtap: left promiscuous mode
[  825.199863][ T1150] veth0_macvtap: left promiscuous mode
[  825.206210][ T1150] veth1_vlan: left promiscuous mode
[  825.211791][ T1150] veth0_vlan: left promiscuous mode
[  825.450248][   T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  825.461679][   T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  825.471988][   T11] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  825.485323][   T11] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  825.495163][   T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.223232][   T11] usb 6-1: config 0 descriptor??
[  826.691356][   T11] usbhid 6-1:0.0: can't add hid device: -71
[  826.698400][   T11] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  827.158884][   T11] usb 6-1: USB disconnect, device number 6
[  827.175813][ T1150] team0 (unregistering): Port device team_slave_1 removed
[  827.245314][ T1150] team0 (unregistering): Port device team_slave_0 removed
[  829.282649][ T1150] IPVS: stop unused estimator thread 0...
[  829.598904][ T1150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  829.899617][ T1150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.107940][ T1150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.329534][ T1150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  830.694818][ T1150] bridge_slave_1: left allmulticast mode
[  830.700678][ T1150] bridge_slave_1: left promiscuous mode
[  830.708525][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state
[  830.801883][ T1150] bridge_slave_0: left allmulticast mode
[  830.810125][ T1150] bridge_slave_0: left promiscuous mode
[  830.816575][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state
[  831.415474][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  831.500909][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  831.545634][ T1150] bond0 (unregistering): Released all slaves
[  832.243439][T10656] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  832.366303][ T1150] hsr_slave_0: left promiscuous mode
[  832.410844][ T1150] hsr_slave_1: left promiscuous mode
[  832.419419][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  832.427806][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.469440][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  832.477251][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1
[  832.624601][ T1150] veth1_macvtap: left promiscuous mode
[  832.630448][ T1150] veth0_macvtap: left promiscuous mode
[  832.637428][ T1150] veth1_vlan: left promiscuous mode
[  832.643010][ T1150] veth0_vlan: left promiscuous mode
[  835.362542][ T1150] team0 (unregistering): Port device team_slave_1 removed
[  835.517708][ T1150] team0 (unregistering): Port device team_slave_0 removed
[  835.636255][T10656] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  835.759830][T10656] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  835.935228][T10656] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  836.088242][   T11] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  836.376210][   T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  836.387857][   T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  836.404623][   T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  836.419667][   T11] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  836.429117][   T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.640475][   T11] usb 3-1: config 0 descriptor??
[  837.515097][   T11] usbhid 3-1:0.0: can't add hid device: -71
[  837.521633][   T11] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  837.655547][   T11] usb 3-1: USB disconnect, device number 36
[  837.798048][T10656] 8021q: adding VLAN 0 to HW filter on device bond0
[  838.066091][T10656] 8021q: adding VLAN 0 to HW filter on device team0
[  838.160069][T10279] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.167773][T10279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  838.302261][T10279] bridge0: port 2(bridge_slave_1) entered blocking state
[  838.309877][T10279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  838.376797][T10828] fuseblk: Bad value for 'fd'
[  838.837730][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  838.844902][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  839.424569][   T11] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  840.146511][ T9955] Bluetooth: hci0: unexpected Set CIG Parameters response data
[  840.245151][ T9955] Bluetooth: hci0: unexpected event for opcode 0x2062
[  840.925105][   T11] usb 3-1: device descriptor read/64, error -71
[  841.765356][   T11] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  841.954186][   T11] usb 3-1: device descriptor read/64, error -71
[  842.076528][   T11] usb usb3-port1: attempt power cycle
[  842.324037][ T9955] Bluetooth: hci0: command 0x0406 tx timeout
[  842.595510][T10656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  842.814531][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  842.825962][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  842.835490][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  842.847484][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  842.859484][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  842.893458][T10855] overlayfs: workdir and upperdir must reside under the same mount
[  844.215939][T10856] chnl_net:caif_netlink_parms(): no params data found
[  844.234718][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1491'.
[  844.245628][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'.
[  844.334602][ T5089] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  844.343259][ T5089] Bluetooth: hci0: Injecting HCI hardware error event
[  844.352694][ T5089] Bluetooth: hci0: hardware error 0x00
[  844.954391][ T9955] Bluetooth: hci1: command tx timeout
[  845.727903][T10886] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1495'.
[  846.503152][ T5089] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  846.939576][T10856] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.948925][T10856] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.956879][T10856] bridge_slave_0: entered allmulticast mode
[  846.966647][T10856] bridge_slave_0: entered promiscuous mode
[  846.987742][ T5089] Bluetooth: hci1: command tx timeout
[  847.225535][T10856] bridge0: port 2(bridge_slave_1) entered blocking state
[  847.233404][T10856] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.241400][T10856] bridge_slave_1: entered allmulticast mode
[  847.251249][T10856] bridge_slave_1: entered promiscuous mode
[  847.701265][T10656] veth0_vlan: entered promiscuous mode
[  847.881391][ T1150] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.068975][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  848.174832][ T1150] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  848.723330][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  848.751863][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1502'.
[  848.762049][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1502'.
[  848.826872][T10656] veth1_vlan: entered promiscuous mode
[  848.878982][ T1150] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.053964][ T5089] Bluetooth: hci1: command tx timeout
[  849.424174][ T1150] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.050730][T10856] team0: Port device team_slave_0 added
[  850.148489][T10856] team0: Port device team_slave_1 added
[  850.162903][ T1150] bridge_slave_1: left allmulticast mode
[  850.172849][ T1150] bridge_slave_1: left promiscuous mode
[  850.179664][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state
[  850.235994][ T1150] bridge_slave_0: left allmulticast mode
[  850.241893][ T1150] bridge_slave_0: left promiscuous mode
[  850.248444][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state
[  851.015853][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  851.108161][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  851.124800][ T5089] Bluetooth: hci1: command tx timeout
[  851.157685][ T1150] bond0 (unregistering): Released all slaves
[  851.427314][ T1150] tipc: Left network mode
[  851.436331][T10656] veth0_macvtap: entered promiscuous mode
[  851.474701][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0
[  851.481924][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  851.509065][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  853.721735][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1
[  853.729167][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  853.756009][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  853.830196][T10656] veth1_macvtap: entered promiscuous mode
[  853.987728][ T1150] hsr_slave_0: left promiscuous mode
[  854.014206][ T1150] hsr_slave_1: left promiscuous mode
[  854.021450][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  854.029222][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0
[  854.052627][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  854.060560][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1
[  854.110165][ T1150] veth1_macvtap: left promiscuous mode
[  854.117300][ T1150] veth0_macvtap: left promiscuous mode
[  854.123143][ T1150] veth1_vlan: left promiscuous mode
[  854.130482][ T1150] veth0_vlan: left promiscuous mode
[  854.918233][ T1150] team0 (unregistering): Port device team_slave_1 removed
[  854.971482][ T1150] team0 (unregistering): Port device team_slave_0 removed
[  855.353350][T10656] batman_adv: batadv0: Interface activated: batadv_slave_0
[  855.388286][T10656] batman_adv: batadv0: Interface activated: batadv_slave_1
[  855.658655][T10656] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  855.667956][T10656] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  855.677192][T10656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  855.687238][T10656] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  855.746151][T10856] hsr_slave_0: entered promiscuous mode
[  855.759295][T10856] hsr_slave_1: entered promiscuous mode
[  856.224936][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1512'.
[  856.234658][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1512'.
[  857.407276][T10856] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  857.521216][T10856] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  857.659913][T10856] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  858.166276][T10856] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  859.874868][ T9955] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  859.897050][ T9955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  859.917164][ T9955] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  859.930743][ T9955] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  859.943241][ T9955] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  860.839732][ T5876] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  861.104292][ T5876] usb 2-1: Using ep0 maxpacket: 32
[  861.186929][ T5876] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.1f
[  861.196754][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.327663][ T5876] usb 2-1: config 0 descriptor??
[  861.437458][T10953] chnl_net:caif_netlink_parms(): no params data found
[  861.604993][T10856] 8021q: adding VLAN 0 to HW filter on device bond0
[  861.640198][ T5876] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  861.981187][T10959] =====================================================
[  861.988745][T10959] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120
[  861.996437][T10959]  _copy_to_user+0xcc/0x120
[  862.002009][T10959]  i2cdev_ioctl_smbus+0x586/0x660
[  862.007795][T10959]  i2cdev_ioctl+0xa14/0xf40
[  862.012495][T10959]  __se_sys_ioctl+0x23c/0x400
[  862.017587][T10959]  __x64_sys_ioctl+0x97/0xe0
[  862.022490][T10959]  x64_sys_call+0x1ebe/0x3db0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  862.027591][T10959]  do_syscall_64+0xd9/0x210
[  862.032396][T10959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.038753][T10959] 
[  862.041211][T10959] Uninit was stored to memory at:
[  862.046643][T10959]  __i2c_smbus_xfer+0x254d/0x2f60
[  862.051937][T10959]  i2c_smbus_xfer+0x31d/0x4d0
[  862.057068][T10959]  i2cdev_ioctl_smbus+0x4a1/0x660
[  862.062333][T10959]  i2cdev_ioctl+0xa14/0xf40
[  862.067287][T10959]  __se_sys_ioctl+0x23c/0x400
[  862.072231][T10959]  __x64_sys_ioctl+0x97/0xe0
[  862.077313][T10959]  x64_sys_call+0x1ebe/0x3db0
[  862.082283][T10959]  do_syscall_64+0xd9/0x210
[  862.087317][T10959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.093448][T10959] 
[  862.096090][T10959] Local variable msgbuf1.i created at:
[  862.102630][T10959]  __i2c_smbus_xfer+0x86a/0x2f60
[  862.108510][T10959]  i2c_smbus_xfer+0x31d/0x4d0
[  862.113451][T10959] 
[  862.116058][T10959] Bytes 0-1 of 2 are uninitialized
[  862.121329][T10959] Memory access of size 2 starts at ffff88804ebcbd06
[  862.128343][T10959] Data copied to user address 0000200000000040
[  862.134967][T10959] 
[  862.137466][T10959] CPU: 1 UID: 0 PID: 10959 Comm: syz.1.1517 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) 
[  862.150044][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  862.160529][T10959] =====================================================
[  862.168386][T10959] Disabling lock debugging due to kernel taint
[  862.174850][T10959] Kernel panic - not syncing: kmsan.panic set ...
[  862.181481][T10959] CPU: 1 UID: 0 PID: 10959 Comm: syz.1.1517 Tainted: G    B               6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) 
[  862.195517][T10959] Tainted: [B]=BAD_PAGE
[  862.199918][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  862.210278][T10959] Call Trace:
[  862.213716][T10959]  <TASK>
[  862.216809][T10959]  __dump_stack+0x26/0x30
[  862.221419][T10959]  dump_stack_lvl+0x53/0x270
[  862.226285][T10959]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  862.232407][T10959]  dump_stack+0x1e/0x25
[  862.236890][T10959]  panic+0x4bd/0xd50
[  862.241118][T10959]  kmsan_report+0x31c/0x320
[  862.245926][T10959]  ? kmsan_internal_check_memory+0x1e1/0x230
[  862.252140][T10959]  ? kmsan_copy_to_user+0xf1/0x190
[  862.257485][T10959]  ? _copy_to_user+0xcc/0x120
[  862.262380][T10959]  ? i2cdev_ioctl_smbus+0x586/0x660
[  862.267790][T10959]  ? i2cdev_ioctl+0xa14/0xf40
[  862.272686][T10959]  ? __se_sys_ioctl+0x23c/0x400
[  862.277773][T10959]  ? __x64_sys_ioctl+0x97/0xe0
[  862.282749][T10959]  ? x64_sys_call+0x1ebe/0x3db0
[  862.287861][T10959]  ? do_syscall_64+0xd9/0x210
[  862.292772][T10959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.299069][T10959]  ? __pfx_az6027_i2c_xfer+0x10/0x10
[  862.304580][T10959]  ? __i2c_transfer+0x11cd/0x3110
[  862.309862][T10959]  ? kmsan_get_metadata+0xfb/0x160
[  862.315257][T10959]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  862.321889][T10959]  ? kmsan_get_metadata+0xfb/0x160
[  862.327283][T10959]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  862.333408][T10959]  ? __i2c_smbus_xfer+0x1e93/0x2f60
[  862.338924][T10959]  ? kmsan_get_metadata+0xfb/0x160
[  862.344369][T10959]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  862.350484][T10959]  kmsan_internal_check_memory+0x1e1/0x230
[  862.356558][T10959]  kmsan_copy_to_user+0xf1/0x190
[  862.361800][T10959]  _copy_to_user+0xcc/0x120
[  862.366556][T10959]  i2cdev_ioctl_smbus+0x586/0x660
[  862.371883][T10959]  i2cdev_ioctl+0xa14/0xf40
[  862.376627][T10959]  ? kmsan_get_shadow_origin_ptr+0x1/0xb0
[  862.382601][T10959]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  862.388364][T10959]  __se_sys_ioctl+0x23c/0x400
[  862.393329][T10959]  __x64_sys_ioctl+0x97/0xe0
[  862.398190][T10959]  x64_sys_call+0x1ebe/0x3db0
[  862.403141][T10959]  do_syscall_64+0xd9/0x210
[  862.407850][T10959]  ? irqentry_exit+0x16/0x60
[  862.412649][T10959]  ? clear_bhb_loop+0x40/0x90
[  862.417567][T10959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.423773][T10959] RIP: 0033:0x7fc5b3b8e929
[  862.428355][T10959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  862.448181][T10959] RSP: 002b:00007fc5b19f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  862.456808][T10959] RAX: ffffffffffffffda RBX: 00007fc5b3db5fa0 RCX: 00007fc5b3b8e929
[  862.464974][T10959] RDX: 0000200000000140 RSI: 0000000000000720 RDI: 0000000000000004
[  862.473146][T10959] RBP: 00007fc5b3c10b39 R08: 0000000000000000 R09: 0000000000000000
[  862.481289][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  862.489429][T10959] R13: 0000000000000000 R14: 00007fc5b3db5fa0 R15: 00007ffc96e03348
[  862.497603][T10959]  </TASK>
[  862.501140][T10959] Kernel Offset: disabled
[  862.505570][T10959] Rebooting in 86400 seconds..