last executing test programs:

4m45.132970575s ago: executing program 3 (id=299):
r0 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r0, 0x29, 0x32, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
setreuid(0x0, 0xee00)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000ff000000000000000000000000ac1414bb00002ae61b5cb734e4e80000000000000000000000000000000000000000000000000000b483b3341a27ca22169d0446034fe59937028ac531bef5b23ba2924be7e3ac17dfe139cbfb6168f539e0e5368bdf758b81fffc5a554423e9b43083e84d2e9ab65487d600000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r1], 0xf0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
r3 = syz_clone(0x100000, &(0x7f0000000c00), 0x0, 0x0, 0x0, 0x0)
get_robust_list(r3, &(0x7f0000000100)=&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000140)=0x18)

4m44.478119406s ago: executing program 3 (id=303):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x15, 0x3e2}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0x0, 0x5ac8, &(0x7f00000006c0)="$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")

4m43.803426706s ago: executing program 3 (id=304):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
r0 = inotify_init()
fcntl$setlease(r0, 0x400, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000e80))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088471b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2], 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, <r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001080), r5)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x54, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000e40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40000c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000440)='./file1\x00', 0x208410, &(0x7f0000000540)=ANY=[], 0x1, 0x5a7d, &(0x7f0000022340)="$eJzs3X+QHNV9IPDXM7Pa1a5+rAQ2MpjVIqOE4Nha8av8IxUrucROgeOSyykHcbJhQSsiWxIq/QggkyBy4LMK7MIpUglO/iAuzB1GcVEFF6NQJvw4ibOxVVx81BXmzs5h/+ErwqEKoKNcnPdqZ/rNzvRMb8/OzgpJfD4lbU+/efPt16/f9PT3zexOAAAA4G3h8G27jn3izN/93p9NvH7z7/3DtlvCULlaPhArDKfLG96qFnI89VdWVJfZcfGrX/jmz0av+e3vPjj4jTcObTpn849+57RrHv3cpQfv/usnXlv88C9fLIobx9P50+vJy0kIA985+hdfPPTMGVNlyZKpn6V9ISxLlj+xLAnh1sYQY78IIWxKV1Zk4j/0+oWbp5a33N7fVL40U894f3ubOs59IYS9x65/b/jxb2249Qcrv/V3fQde2jddJRloGE8hLLmq8fFTj12Y/p8SR1scj0m6XB9CGGx43AcK2vWeDtu/Jmf9rHS5IF0OFcSJ96/KrJcy9bLrUV9mOViwvbnKa0e39YosyqwnPYob5bUzli9Ll99Ol+fPMn453YdyEkpJqNSbvzWZHiOh4bglIakey4H6eql+bEO6/5n1JLNeyqyX+zL7Vd1uOtDKSdJcHutlyuPpuJKWn9N4rm7jUw23G+u9K5alT9Q3snUyQYdabtT3qyq26+gMbTkeSg3noHbl9QOfHoyhtGwoWd7ymMk24n2HNtyxurzxycPDOe1IHkzS+ElX8fd+f9mizz6wf0/2db0e/6pSGr/UVfyfXHbklSv2f/1rufHvjPHLXcW/4LHBly976rZVuf1zNPZPpav44y8+/eWVp199ILf998T4A13FX3fwSP/iY489ntv+sdg/C7uK/8KHP/rT+5975KXc+CHGH+wq/saDO77SP3LsvNz4j8f+Gepu/Lx64JLnR0Z+PpoX/9kYf3FX8e/b1/+he5fefmnu8V0f+2e4q/gfP/fRWxcde+TsvHNnck+vXjkB3p5OS6+xvpSud5tnzlVDvvBXo5XaNd+i9P/iXm4oc/GZzRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoBfe8d7/8rH/9enhlyvpen9644VSbRnLF4SQLAwh7No9vnP3lu3Xjn7uuj07t49vHR3fPTqxfffOG0cv+vXRnRM7to7fOHXv2PsurD1ueUhqy+Tslm33T05Oloaby+L2/s25B368+gP/+19CGHvHD0cque1fc/e2e09v8zMjWTf5kW17PvHDi/823a/htF3Dbdo1OTk5GXLa9X8uf/PePz/6s/NCGHvnTO16+oXf/MemBlULpuOkSv2h1qD+ZLBtO+qtTtsT+6uyecvWibGZ+3fq8eWc/fi3X3jpF5tv+Oqbtf4dyN2PDvt34brJraW/3PDx//eXN9UKitr1Vh33ov6OexHbF/tvIO3vJel+LcnZr0rOft32g8ef+86Z+1/bF8Yqr65s3XbRfvWlA6AveVdH241bGEyWNZUPpPXjEY+PW7N72441u27c+74t28avnbh2YvsH11609pKxiy+5eE11z9f0eP/j9n+lw/0/PuNp6R/v+3b82dl4am7Xgqkqs+qPqXYV90dji/Kef4Of+uJdH7z7qU/UCorGeaxdP59Ul8mbg1PHeW1oGG+tfdVuv4qOTwhhtF0/vPLapeGM/77l1qLzUOORafyZkaybfGbVv/7tB/5mxW/UCo7Leb6xQV2e5+utnm5Ptb8G0uMxeYL2b38op/s11LZda595qu+Ow//yJ/X2LVgQbhjfvXvn2trPRWlLFyVn3dyuXWdl1uN+raz+LNefbvVh2ma8TukLtfZlz5+xerZXh9L7hpLlbfcrK953aMMdq8sbnzyc19PJg7UtLgyLa8vk3Tk1t2YeWK43uN32T9TnX9H4GPnY3zz86Yf//qKW8XFB7WfRfiU5+/Wt5+676xtf/fd/37v9+thvHhn+1//5R6trBSf8eaVca0i91Wl7ksbzygUhNDz/2rZjZWi/H7nPv1L7/Sl6/mW3M12/fbzRzPpQKHf1fL3gscGXL3vqtlW5z9ejMz1fG3f2pqbHlQueryfK+Mk+v5JKczvm7/nVNFCSdZPf/dJp+564ef2ZtYKi18t67Xbj+sIO8o+c/frHK54fuW703/233p03vvnrD135o/F1f1or6P64x7b05rgPpP07kNO/9VbHvLOxf99/zXVbN9XKi/r5rbv+TZcF+U88ley6ce/nx7dundi5q7P96vT1NG4n28vdvp7Gs9vygv0qtezX/N3opL86fb7F9m/qur+an29DIenqdWHv95ct+uwD+/cMtzwq3dBVpTR+qav4P7nsyCtX7P/613Lj3xnjV7qKP/7i019eefrVB3Lj35Ok8QeK4y8JLfHXHTzSv/jYY4/nxh+L7V/YVftf+PBHf3r/c4+8lBs/xPhD3fX/qwcueX5k5Oe58Z9N0u1MXSOF8NDrF26urSehL32+xXb0NbUrZNeTzHops15uXC+lswhxA+UkaS6P9dLycxra0s4f5pTHq7CBFbXlG3E9ZG/MXH6iKTWc+9uVF12nAgCc6uL7//EaNL7/P5FeKOXPNMC0ueZhK3Lixjxsej5nQdP9K9L48fFxHnDk/WFsannLaO1Cf7bvI8TnQ3aeM27nvPc0x2g7P3GwcSPV7bfMcxbNv6/KrMd21ebLKw15aKo1r6mEDubfW7cz8/x7ZveL388a/VJLs0Yb5q2yx68vnTFr93mHTHsrUxHyxkd2Xix+nmNkSVhf3V6H4yP7OZp4HLKfo4nbOTNz4uz2czR542O4tR+a2hXHR6w3w/ioNrn4/cjW4xdm6N/p49c+Wvb4zeJ4D0zVn+/3Z3swb9j2lHb85g3n9/2wE2Jesk384zwvuaglfvoEO9HnDWN57KdKh/OJn84p79V8YjxdxHYdnaEtx4P5ROBUFfP/+Boxlf9PXYD/30y9ojwle9UY4+V+Tqjcvj1FeUfr5/QGu3od33hwx1f6R46dl3ud83inn9Pb0bQ2WPC5n6J+XJ1ZL+zHnAmaonwvu52ifs9+LmMoLO6q3+/bd/eH7l16+6W5/b6+9kJa3O93Na0tLuj3kyBfaB9fvnAq5Qut8Xv0OYai+bP8fKRcb8e85CPpB5/mKx/5g5zy2eYjgy036vtVdeLmI9MvpE35SN/xbRcAcPKI+X/9/bM0///neGGRXkcU5a3nZ9ZjvNy8Nef6JC9v/f10eUOm/lD6GxWzvW7++LmP3rro2CNn5+Yt93Sah/7HprXhwjx0bnlzbh6xvjefF8/NI+p51tzyxNz21/PEueXpOW/TNuTpc8ujc/unnkc3zwPcdWQ605gpfpwHyI1fnwfoYZ77y+lKxy/PLZivy2wsrnY6X3e88+ipkr4lzfvZnBcP9iaPTn99dr7y6E/llM82jx5quVHfr6oTN49uLpdHAwCnqpj/x8u4av7fH8JTscLCeGNu77Pn5gU9um7P/j2Qevxn5yWvnI7fo/d/i/O++c5b5zuvn+95iZP9/d/5nhcarv4Bz+7myXKCN8yTvWWfd52XvPif67c6zovTjcqLAQA4kcX8P6b58f3/pzL15pqftORvfbVLyOn85OTLzxvrncT5+eXheOXn/Sdzfn6yz3/N7+dkTq38f1qX74u/MXkK5//VNsv/AQBOSjH/j7/2GP/+339O17N/t77DPP2e7Md5vY/uffQgT+8gT+/xPFuM3/g5gJN4HqB8cs0D1G4snK5/Ks0DVPUFkwEAACeBvmqm1Pp79p9Jl9nfs8/7vfwr0mUScr96d0aV9PL46t07Jyau3LNj0/juiSu3X7dpYteV1+/csnv3RP3aeW55Y27ekuaNfaGS9kf7etm8bWn69xCW5vw9hGz9GPas6o3Wv4eQ3ezCgr8jMH38Omtv3vErzVC/3fiIx7vT8fGHOfWj+vG/5o8uuHLzriu3bN+ye8v41i17J5rrDVd/k7rz782M43FW35ea+dGiNPvv74yHZ27tKLW0oy/tj7zvZ08y7ViWtmRZ3vcf5LT7e//1z//43Mk37w9h7B3ld8+p/5J1k//p8onf3334hzum2l+asf31mmm7ir6vNFs/7k9l63W7dr9383V7tme/UbI7cT6jVF+fp881pE//cofzExtzymf7+/vllhsnpo7nJwAAaBLf/4/Xs/H9w6+mF1CxvDBP316rN9f3j3Pz9LHO8vTs95IV5enZ+nF/O83TB+aYp2e3X5Snt6vfLk/Py7vz4v9BTv3Z6nycdPE5j0raDw/s35M7Tq7qbJxkv8+gaJxk6892nCRzHCfZ7ReNk3b1242TvOOeF/+TOfXzFI2HSn08zO1zObnj4c7OxsOvZdaLxkO2/mzHQ2mO4yG7/aLx0K5+u/GQd3xb4zdPEHR73mgeH1MDozouJq68/rqdn2+oN9/ffxFaP5LRSfsWTD92fr//o1ud9+/8fu5r7u0PYV21JK/98f2BBbNqf6efK5t7+4v6fxafK1sSWj5Xltv+Z+c2E9Z5++f3+10y8qq3Pv54zdemw67o82dF87gbcspnO4+7oOXGick8Lrx1Yv4fr+Zi/n97uuz120An//ekdfE6F8/Bvscsv/87vI55272eZ99y93oOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEror6yoLg/ftuvYJ8783e/92cTrN//eP2y75Ve/8M2fjV7z2999cPAbbxzadM7mH/3Oadc8+rlLD97910+8tvjhX75YGHi4+rNyfro6EELychLCwHeO/sUXDz1zxlRZEkIoJ8P7QliWLH9iWZKJMPaLEMKmejub73zo9Qs3Ty1vub2/qXxpJkh2v8JQObansZ0h3DDz7gwU7jAnooF0nO09dv17w49/a8OtP1j5rb/rO/DSvukqyUDDeAphyVWNj+8LISxM/0+Jo21FfHC6XB9CGGx43AcK2vWeDtu/Jmf9rHS5IF0OFcSJ96/KrJcy9bLrUV9m2bCvCws23ZW8dnRbr8iizHr2ZDRXee2M5cvS5bfT5fmzjF+O/5NQSkKl3vytSXWMvPN/pOvxuCUhqR7Lgfp6qX5sQ7r/mfUks17KrJf7MvtVHZvpQCsnSXN5rJcpj6fjSlp+TsG591M55e9KlwPpE/WNuB6yN2qGWm7U96sqtuvoDG1J/Yf2xZXiR3ag1HAOaldeP/DpwRhKy4aS5S2PmWwj3ndowx2ryxufPDyc047kwSSNn7SLXymKv/f7yxZ99oH9e1bkxb+qlMYvddX+n1x25JUr9n/9a7nx74zxy13Fv+CxwZcve+q2Vbn9czT2T6Wr+OMvPv3lladffSC3/ffE+ANdxV938Ej/4mOPPZ7b/rHYPwu7iv/Chz/60/ufe+Sl3Pghxh/sKv7Ggzu+0j9y7Lzc+I/H/hnqbvy8euCS50dGfj6aF//ZGH9xV/Hv23f3h+5devulucd3feyf4a7if/zcR29ddOyRs/POnck9vXrlBHh7Oi29xvpSuj5jntmXn2fOVUO+8Fejldo136L0/+JebihjajtL5jE+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnpn+66aLPXP6RT26oJCEkOXUm24j3lResWzfaxXbHX3z6yytPv/pAY9mKLuIAAAAAxWIeXqqXDIQV4fpkYTirbf04R3BWXEuay7NzCDFOdo6g2zilNnFKXcQp96g9lR7F6etRnAU9itPfozgDBXEGQmdxFs4QpzI1Ajpsz+CM7ek8zlCP4izqUZzFmRDdxlnSo/Ys7VGc4RnjdD4Ol/UozvIexTmtR3FO71Gcd/Qozjt7FOeMHsXJzinPdhwuTmuemReneqNcGKeSlOt3tJtPPyPdztlz3M5QwXYWF70ed7idhR1u5z2Zx5VmuZ2BDrfzK3PcTtLhdn5tjtspFWwnjtsbsu2L24lrHY7/G3sUZ2+P4nyhR3Fu6lGcP+lRnD/tUZybQ/PF6WzjAHQq5v/T+d5w6K/8RhhMzzjZWYCY766s/mx9vcs7IcV4786ULyiKl03UM/FWzrZ92QmETLxVmfK+pniVej4yQ7yBxnirM3fOtL8fXte+bY3xzs+U988Qr2kHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA4+KebLvrM5R/55IaQhKl/VeVMnck24n3lBevWjXax3UMb7lhd3vjk4cay/kpXuwAAAAAUiHl4X71kIPRX1ob+ZEFTvYF0HmAgXS8P15YjS8L6qWUyWqquDybLZnxcJX3cmt3bdqzZdePe923ZNn7txLUT2z+49qK1l4xdfMnFazZv2ToxVvsZQn9BvBBCdfph1417Pz++devEzl21wmz7V6SPW5GuJ+njRt4fxqaWt6TtX16wvVLL9ubvRvHRAwAAAAAAAAAAAAAAAAAAAP4/u3YbKllZBwD8f2bmzoxXN2/4Ni7uOqyrWFnpdg0t8R4IEnxZvAgx17rJkitJV3fRXTGbdCE1pQiUhWXDD22YpElffEmJfGHBMEvobhIq5Yf6UGgZKn4IZeLOnTNvd2bnNom72u/3YZ4z/+f/PP/zHJaF/5kLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALy/FuvT87WZ2bnJJCIZktMYIJvLF9O0Okbdrzy+/Qel9W+f3h0rFcbYCAAAABgp68Mn2pFylAr5yMeJzW8bomsiOn0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/2exPj1fm5mdOzKJSIbkNAbI5vLFNK2OUfeVNx/87Ivr1/+tO1YZYx8AAABgtKwPz7Uj5ajEKTGRnLjU+bej2buBtX3rl/M6sn3WrTKv/93BsLxTVpl32irzPjYib3NrvDEAAADggy/r/wvtyFSUCmtW9MNZ/z+qr8/yTu7Ly7fGanfSQRVXkwQAAAAcXCm6+v9SO1yJUqHS7tdX2+9v6ISaP51n60f9bp+tP7UvL1s/6vf8S1qj3+kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4INjsT49X5uZncsnEcmQnMYA2Vy+mKbVMepuemLyHxftv21Dd6xUGGMjAAAAYKSsD++03uUoFSZjIo5s9v3rL7jn4S89/Oh0RCy3+cVi3Lhlx47rNi19xqYs76zn9k98/5nXvr0i76zlz0N2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D2zWJ+er83Mzh2RRCRDchoDZHP5YppWx6j78ue/+Jf7X3js1e5YZYx9AAAAgNGyPrzT+5ejEsUoxvHNb929/pJc3/ph7wwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAD4/rv3nTN7YsLGy9zsWhuWjkIw6D2/gfL7J/TofL/XzwL8qH+jYO7f9LAADAe+/kSKLxXzrh0kN91wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOFgsT49X5uZnSsnEcmQnMYA2Vy+mKbVMeqmjz9fWvP2E091xypj7AMAAACMlvXhnd6/HJWYiIk4rvlt0DuBZv8/9T7eJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBYWaxPz9dmZufWJBHJkJzGANlcvpim1THq3rdr7+fuPfp7F3bHSoUxNgIAAABGyvrwYjtSjlLh41GKk1rfF3oXJPnWOPi9QGfd9p5lk6teV+9Zlz/YuqQQ0V53R9/JCq3TLK8rZ/tNLY/tetXOulxrXbVrXSXa5avtdc2Htbun2poR51v55AEAAOD9k/X/pXZkKkqFUlf//9PWeERr1OcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIMt1qfnazOzc0kSkQzJaQyQzeWLaVodo+5Nv/3oUV/92Z07u2OVMfYBAAAARsv68E7vX45KrIuPxLpm3x9TvflZ3j9r79x797/+enrEmccfWF/o3/ZH2cWvXz7/yf6PiFxvdi7i6Fa9ZEi93/z+7hs2Nt65P+LM4/InragXB6/Xu2XaeKS29ZIdzxzYPuLhAAAAwIdE1v9PtCNTUSpcO7T/zzrvEf1/W7MBP/qGXb84tvXZ6sj7VuSmWvVyQ+p9YeODfz71nL+/ttT/r6z3yfbVp/dec++xPQWXI32StDFzzc7NB87el8tOvVw/31c/ey5f/tar/77qxrveWa5fjnIrvrbvVparrfzsKx9pYyG3Z+7id/fUe+sXhpz/tt899cKv1t751lL9N0+ebNc/LQbVXz55YWj9OCJtTF52++5z9+7f3Fs/IqqD6r/+1oVxwh+vvrX//JN9G3c/+e7P/geQNp7b8Ma+c+6pnNdbP+mrnz3/n79w3+6f3PXdR7P62d+KnH7Kauvn+uo/e8cxu56+5dK1vfVzQ87/5OUvrt9W/c4f+s9/Zc+uhaF30VLs1H/gjIeueGlLenP/owEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhwWaxPz9dmZudySUQyJKcxQDaXL6ZpdYy6r1z0/OuX3/njH3bHKmPsAwAAAIyW9eGd3r8clShGMSabff8jta2X7HjmwPaYWp5NWmNhYdv1Oz5x1bad1155iO4cAAAAWK1XLkqa/X+hHZmKUmFjTLT6/5lrdm4+cPa+XNb/55bGJCKuunph65nRznv2jmN2PX3LpWvb7wkimn8WUF7K+0wn74Lzn596409fP3Vg3qZO3nMb3th3zj2V87K86M47K9rvJx4446ErXtqS3ty+v+68T31t20Lr9US27+Rlt+8+d+/+zbnsPUZrnGztm+Ut5PbMXfzunnpuKkpL8/lWXrl1bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgpcX69HxtZnYu8hHJkJxGt1Ygm8sX07Q6Rt2LN/7y1qPefmxdd6xUGGMjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYX9+gmNo4rjAP7ebmI22aRNWsGomKZVUeqhRUFELyoq0ooUPFWKVFt7EAVBRKkHU2nFUhUvgtVLERXUKIUKNhZLq6Tiv+LFgwoK1YNQigHNUjyoZPNms5nuuO2mCtrPB5aX92bmO7+Zefs2AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH9KT9dwvT2y45HanRfd+tlT908/efsHD2274om3fhrddPOne/tePzm5efmWb29ZuunAA2smdr9y+LeB9/441jb48dlmZepWQognYgiVD6defHry8wtmxmIIoRwHx0IYiksOD8VcwurfQwibG3XO37hv+potM+22XT3zxhfnQvLXFarlrJ5Zg/Pr5f+lkubZ1tpjV4Xvb1q//ctl777TPX58bG6XOLNPOc2nEBZtbD6+O4TQmz4zstk2nB2c2nUhhL6m465rU9elp1n/qhBquX7dxak9L7XVNjnZ9hW5fim3X76f6c61fW3Ot1BFdXS6Xzv9uX5+MVqoRp2rWo8Ppfb91K48w/xy9omhFENXo/wH49wcCU3PLYZYf5aVRr/UeLYhXX+uH3P9Uq5f7s5dV/28aaKVY5w/nu2XG8+W4640vrx5rW7hroLxC1NbSV/Uk1k/5P+YVT3lj8Z11WV1Tf1NLf+GUtMa1Gq88eDTw6imsWpccsoxf7aQbZtc/+zl5Q0fHRksqCPujSk/dpS/9Yuh/nve3vnocFH+xlLKL3WU/8Pao7/cvfPVlwvzX8jyyx3lX32w78Taj3esKLw/U3MryOnkx9TPtt177JPnlp1/33irZ13P3JPd/0pH9d84cbRnoHbwUGH9q7P709tR/nc33Pbjm1/vP16YH7L8vo7yN0w8/HzPSO3KwvxDs1+Fan2GdjB/fh2/9puRkZ9Hi/K/yu7/QIv82Db/jbHd17+2eNeawvm5Lrs/gym/94zqv+OyA9v7a/svKVo7456z9csJcG5amv7Heib1271n7psutXzPXKim94WXRrtmf4H602fgbJ4oZ+Y8i/7BfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+IsdOCABAAAAEPT/dTsCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4KAAD//yURHCc=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)

4m39.450988373s ago: executing program 3 (id=312):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000480)=[@acquire_done], 0x0, 0x0, 0x0}) (fail_nth: 5)

4m38.624276091s ago: executing program 3 (id=314):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x2, 0x556, &(0x7f0000000580)="$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")
r1 = syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x480)
ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x3, 0x0, 0x98, &(0x7f0000000000)={0x400, 0x80000000, 0x3}})
r2 = syz_open_dev$audion(&(0x7f0000000400), 0xfff, 0x400000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000c80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x221}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xe8, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x1b}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x58, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x13}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "fcd6d18e6b72ebb1"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xd}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "2b73cf25d9aa1516"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "af66b515c95e29e4"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "37a45e8e51ff7cab"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xc}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x4}, @NL80211_ATTR_HE_OBSS_PD={0x58, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x10}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x9}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x12}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8844}, 0x8c0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = gettid()
ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000003c0)=r6)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8001, 0x2, 0x7ff, 0x100, 0x0, 0x5a65, 0x10}, &(0x7f0000000000)=0x9c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0xb}, {0x1c}, {0x6, 0x4, 0x80, 0x7ffffeb9}]})
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3000000, 0x0, 0x0, 0x0)
socket$isdn_base(0x22, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r0}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = accept$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{}, [@netrom, @rose, @null, @bcast, @netrom, @default, @bcast, @bcast]}, &(0x7f0000000280)=0x48)
getpeername$ax25(r7, &(0x7f0000000300)={{0x3, @bcast}, [@rose, @null, @remote, @rose, @rose, @remote, @netrom, @null]}, &(0x7f0000000380)=0x48)

4m37.566869173s ago: executing program 3 (id=317):
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8800, 0x0)
pipe(0x0)
close(0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
socket$kcm(0x10, 0x2, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
write$sequencer(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="810100000000000081", @ANYRES8=r1], 0x10)

4m21.677776307s ago: executing program 32 (id=317):
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$eJzslb9v00AUx793dpy0gkoMMLCkQyWKRB3bBdSFoexISC0Cxoheq4DbVGmGthJSKxYWZsQfwMbM0ImBDSZmBkBCYqAjC0gcuvM5Ptd22igIhr6PlMv33t27H8/PzyAI4tTy5fOPT89uLixfAXAGM6gb+zcnm8Ot+R9fODUj325MPT6whhqqYQCkzIzuMft7AN4sOsBesqyUmfcr86/WXAbHjOnfAcdlo++CwU/PKjNvAYb7xvxwUw5u050wIhbsQTdeWe3EIlBNqJpotfOyljufOv/hPsOKuaDagVnjWzu7j9ox0EtELFJRk+k+haFUJDcDSoZyYlj89PkWOW5YIVDP697TJ/uq7xt7YMUvBEdo9DwYloxeQB2+7zdNV4TW/S+62fpO8tgS9qrPXRSNUSaPL87N5SzTUEJl+HD3iVio2/61Y/yWQ+bUR16Qmazycin476JansrA6F68WfTyius0zEW1RRzzkpxgd3bUwuyUuHB48K7o9fW/hnc8ARNAe+i5CtSHyTi+Vep1PmeZrnhlPJzVJaEyJZL6wVzgklWfXOur0Oqvb7a2dnbnOuvtNbEmNqJo/npwNQiuRS1dm5PWLndH6l9D16dJa/1aRa30mIftdr/fC7eBfi8c9KOktZJp6XX3u/bhuv5xzP6SMv286Bcv/VCy/B7M/Lj+V2rWqTgOQRAEQRAEQRAEQRAEQRDECfhp6SYY3k8NurIcN7qth/8EAAD//7LLT5w=")
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8800, 0x0)
pipe(0x0)
close(0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
socket$kcm(0x10, 0x2, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
write$sequencer(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="810100000000000081", @ANYRES8=r1], 0x10)

3m19.600285901s ago: executing program 0 (id=479):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x10)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
r2 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x1)
r3 = dup(r2)
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x1, 0xf, 0xfff, 0x0, 0x0, 0x0, 0x0})
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000005ac0)=@o_path={&(0x7f0000005a80)='./file2\x00', 0x0, 0x4000, r0}, 0x18)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000005d00)={0xe, 0x7, &(0x7f00000002c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x10000000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}], &(0x7f0000000300)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @fallback=0x2d, r3, 0x8, &(0x7f0000005880)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x6, &(0x7f0000005c40)=[0xffffffffffffffff, r5], &(0x7f0000005c80)=[{0x1, 0x3, 0xe, 0x8}, {0x5, 0x2, 0x4, 0x8}, {0x5, 0x4, 0xb, 0x8}, {0x2, 0x3, 0x0, 0x2}, {0x4, 0x5, 0x6, 0x9}, {0x0, 0x5, 0xb}]}, 0x94)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000058c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

3m13.674716562s ago: executing program 0 (id=486):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x447}, 0x18)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000200)={0x29, 0x20, 0x13, 0x1b, 0x8, 0x63, 0x4, 0xb5, 0x1})

3m8.589121823s ago: executing program 0 (id=497):
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r1 = dup(r0)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000000000003f207e5a86aa3c5c00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
socket(0x10, 0x803, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000624a56dd33ece40300000000000000dcfddbdf2500000000000017d993fbd8c7cd026714aa413d2941bfaa0043c56aeda09c28735ad71a5cafb13d645b63c6ae7d261de822132569e3d381a800d7df0ad0ee320e13251e5c7eed33826973f438d7648346f0c04aa6797a81017af5c1ab15961fbc19782af27240e4cec0d45cadd6322ccbcac73ce2dad7c4f7b2eaf6eedfb0"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x32)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904"], 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
open$dir(&(0x7f0000000200)='./bus\x00', 0x80000, 0x180)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)

3m4.036064916s ago: executing program 4 (id=502):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x13c}}, 0x24010000)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000040)=0x7)
getpgid(r7)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e000000234000380060002004e230000060002004e240000060001004e200000060002004e200000060002004e230000060001004e200000140004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000000008000100e000000284000e801400018008000100ac141409080002000a0101010600034000000000060003400001000006000340000300000c000280050001009f0000000c00028005000100000000002c00018014000300fe80000000000000000000000000002d14000400fc02000000000000000000000000000106000340000300000600034000040000080008"], 0x1e8}}, 0x0)

3m3.260425891s ago: executing program 0 (id=503):
connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)

3m0.876208943s ago: executing program 0 (id=506):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0)
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f00000001c0)={[0x9, 0x9, 0x8000, 0x9, 0x61, 0x6, 0x5, 0x0, 0x5, 0x4, 0xf, 0x4, 0x1ff, 0x101, 0xf, 0xc, 0x401, 0x2c, 0x7, 0x6, 0x2, 0x800, 0x4, 0x3, 0x0, 0xd39, 0x7, 0x7fffffff, 0xfffffff9, 0xec3, 0x4, 0x6, 0xfffffff9, 0x0, 0x81, 0x3, 0x5, 0x2, 0x6, 0x80000000, 0x10000, 0x8, 0x5, 0x6, 0x7, 0x3c, 0x3, 0x14, 0xffff, 0x5, 0x2, 0x0, 0x7, 0xfffffffb, 0x1c00000, 0x10, 0x1, 0x0, 0x46, 0x8, 0x4, 0x0, 0x8, 0x101, 0xfffffe87, 0x40, 0x7, 0x4, 0xb, 0x71d, 0x0, 0x7, 0x3, 0xe9, 0x1, 0x4, 0xfffffffe, 0x100, 0x4, 0x8000, 0x5, 0x9, 0x4, 0xffffffc0, 0x7, 0x7, 0xb111, 0x1ff, 0xbc9, 0x6138, 0x6, 0x7, 0x7, 0x9, 0x1, 0x1000, 0x8, 0x6, 0x7, 0x4, 0x9, 0x5, 0x0, 0x0, 0x71e, 0x9, 0x1, 0x80, 0x0, 0x0, 0x2, 0x7, 0x4, 0x8, 0x4, 0x2, 0x28, 0x4, 0x1a8, 0xf71, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0x2, 0x10, 0x81, 0x0, 0x5f, 0x80, 0x1, 0xc0, 0x6, 0xc496, 0x8, 0xffffffff, 0xe8, 0x435, 0xda, 0x8, 0x4, 0xee8, 0x7ff, 0x10001, 0x4, 0x18000, 0xf3, 0x5, 0x80000001, 0x1, 0x0, 0xffff233b, 0x0, 0x2, 0x800, 0x0, 0x7, 0x8000, 0x3, 0xfff, 0xdac, 0x10, 0x4, 0x4, 0x7, 0xfff, 0x4, 0xc4, 0xfffffff8, 0x7, 0x3, 0x200, 0x7, 0x9, 0xcb, 0x0, 0x186, 0x9, 0x1000, 0x5, 0x2, 0x6, 0x5, 0x10, 0x1, 0xe, 0x90, 0x3, 0xa0bb, 0x0, 0x0, 0x8, 0x4, 0x4, 0x10000, 0x200, 0x0, 0x6, 0x200, 0x101, 0xffff7cc4, 0x4, 0x401, 0x5, 0x39745347, 0x2dbb, 0x7ff, 0x9, 0x5, 0xfffffff1, 0x8, 0x2b, 0x6, 0x80, 0x3, 0x4, 0x6, 0x9, 0x101, 0x4, 0x8, 0x9, 0xa98d, 0x1, 0x9, 0xb, 0x6, 0x3f1e, 0x6, 0x100, 0x2, 0x7, 0x8, 0x400, 0x6, 0x6, 0x10, 0x9, 0x900000, 0x2, 0x4, 0x7fff, 0x80, 0x5, 0xa, 0x4, 0x5, 0x48000, 0x8, 0x9, 0x4, 0x10df, 0x8, 0x2, 0x2, 0x9, 0xdb, 0x2, 0x9, 0xb3, 0x401, 0xffffffc0, 0x4, 0x4, 0x9, 0x0, 0x10000, 0x40, 0x8001, 0x10001, 0x3, 0xff, 0x1, 0x10000, 0x5, 0xe5a, 0x2, 0x6ac, 0x10001, 0x9, 0xcd, 0x4, 0x3, 0xb8, 0x7ff, 0x5, 0xfffffff9, 0xcd, 0x5, 0xfff, 0x6, 0x1, 0x2, 0x8, 0x5, 0x3, 0xf0, 0x10, 0x0, 0x2, 0x1, 0x1, 0x7, 0x7fff, 0x30000, 0x3c9, 0x0, 0x0, 0x8, 0x338417f7, 0x6d, 0x2, 0x2, 0x80000001, 0x8, 0xc3, 0x1ff, 0x7, 0x0, 0x1, 0x0, 0xfffffe00, 0xba84, 0x0, 0xf8, 0x9, 0x9, 0x7, 0x54, 0xaaf6d9a, 0x5, 0x5c, 0x2, 0x2, 0x7, 0x3887, 0x7fffffff, 0x8, 0x6, 0x5, 0xe, 0x1000, 0x4, 0x1, 0xe, 0x101, 0xe16a, 0x6, 0x1, 0x4, 0x7f, 0x0, 0x0, 0x8001, 0x3, 0x9, 0xfffff800, 0x9, 0x1, 0x9, 0x1, 0x4, 0x6, 0x6, 0x8, 0xcdb, 0xde, 0x8337, 0x9, 0x66, 0x8, 0x25, 0x7, 0x5f75, 0x6, 0xe3, 0x9, 0x9, 0x2, 0x1, 0x2, 0xea, 0x68, 0x4, 0xffff, 0x202, 0x10001, 0x6, 0xb5be, 0x7c99a0be, 0x4, 0xcd7b, 0x6fe8, 0xafd, 0x80000000, 0xfffff000, 0x2ba, 0x3e61, 0x6, 0x1, 0x8, 0x4, 0xc, 0x400, 0x18c3, 0xffffffff, 0x6, 0x2000000, 0x1000, 0x3, 0xc, 0x4, 0x0, 0x643dcde2, 0x9, 0x1, 0x0, 0x2, 0xfffffff7, 0x4, 0x6, 0x4, 0xa682, 0x8, 0xfffffff7, 0x0, 0x5, 0x100, 0x9, 0x80000000, 0x1, 0x4, 0x7ff, 0xaf, 0x80000000, 0x0, 0x800, 0x66e7, 0x6, 0x101, 0x5, 0x9, 0xffffffff, 0x7, 0x9, 0x1ff, 0x5, 0x0, 0x9, 0x4, 0x1, 0x4, 0x9, 0x1, 0x2d, 0x5, 0x3, 0xc, 0x401, 0x80, 0x6, 0xe4, 0x5, 0xfffffffe, 0x9, 0x22, 0x40, 0xfffffffa, 0x9, 0x1, 0x5, 0x7fffffff, 0x40, 0xa8c, 0x8, 0xfffffeed, 0x7a26, 0x8, 0xfffffffe, 0x3, 0x1, 0x5, 0x1, 0xfffffffa, 0x8, 0x6, 0x5, 0x3, 0x10, 0x5, 0x7, 0x101, 0x3, 0x2, 0x0, 0x3, 0x8, 0x2, 0x100, 0x7, 0xe3, 0x1, 0x7fffffff, 0xf, 0x9, 0x0, 0x10001, 0x10, 0x3, 0x8, 0xfc, 0x9, 0x6, 0x7b, 0x7fffffff, 0x5, 0x9, 0x4, 0x9, 0x5, 0x2, 0x4, 0x1ff, 0x101, 0x9, 0xfffffff7, 0xfffffff8, 0x6, 0x4, 0x401, 0x9, 0x0, 0x8001, 0x7, 0x7f, 0x8, 0x40, 0x7, 0x7, 0x4, 0xc5, 0x1, 0x1ff, 0x1ff, 0x7, 0x0, 0x40, 0x1, 0xfffffffb, 0x1, 0x80000000, 0x2, 0xfffffffb, 0x8000, 0xd, 0xffffffff, 0xfffffff8, 0x3904, 0xe, 0x5, 0x7f, 0x1ff, 0x8, 0x0, 0x9, 0x4, 0xfffffffd, 0x6, 0x9, 0x8, 0x8, 0x7, 0xfffffff8, 0x53bd, 0x5, 0x0, 0x1c00, 0x1000, 0x5, 0x200, 0x2ef, 0x8, 0x1, 0x1, 0x8, 0x2, 0x5, 0x800, 0x0, 0x6, 0x0, 0x101, 0x827c, 0xffffffff, 0x2, 0x0, 0x0, 0x1, 0x8, 0x6, 0x3e, 0x9, 0x8, 0x1, 0x8, 0xc6, 0x0, 0x8, 0xfffffffc, 0xb, 0xfffffffb, 0xe29, 0x7f0d, 0xc708, 0x3, 0x0, 0x2, 0x0, 0x8474, 0xee8, 0x9, 0xd974, 0x80, 0x8, 0x5, 0x2, 0x0, 0x9, 0x3, 0x100, 0x101, 0x80000001, 0x2, 0x3, 0x7, 0x4f4a, 0x100, 0x2, 0x5, 0x3, 0x3, 0x7, 0x6, 0x5, 0x8, 0x4, 0x9, 0x8473, 0xb4a9bd9, 0x4, 0x8, 0x7, 0x696, 0x4, 0x7, 0x1, 0x3, 0x1ff, 0x1, 0x2d0a, 0xfff, 0xef3, 0x8b, 0x4, 0x9a, 0x7, 0x5, 0x3, 0x1000, 0x0, 0x9, 0x7, 0xf3, 0x8000, 0x8, 0x5, 0xdf0, 0xd93d, 0x9, 0x6, 0x7, 0x3, 0x5, 0x3e0, 0x1, 0x8, 0x0, 0x0, 0x2, 0x8001, 0x7, 0xf, 0x6, 0x8000, 0x6, 0x101, 0x1bd, 0x9, 0x1, 0x0, 0x0, 0x8, 0xa, 0xf, 0x4, 0x6, 0x7, 0x4, 0x5, 0xff, 0x0, 0x6, 0x8, 0x4, 0x8e05, 0x4, 0xf, 0x4, 0x1, 0x4, 0x6, 0x606, 0x6, 0xcb, 0xdd, 0x6, 0xed, 0x8, 0x0, 0x6, 0x5, 0xa, 0x3ff, 0x0, 0xffffff67, 0x7, 0x21d, 0xfff, 0x5, 0x7fffffff, 0x7c, 0x8001, 0x200, 0xff, 0x8, 0x9, 0x7fffffff, 0x1, 0x1, 0x7, 0x8, 0x5, 0xfffffffa, 0x80000001, 0x3, 0x7, 0x1, 0x6a, 0x9, 0x3, 0x8, 0x3, 0x5, 0x0, 0x1, 0x2, 0x2, 0x4, 0x0, 0x8, 0x0, 0x3ff, 0x208a0000, 0x9, 0x1, 0x4, 0x7, 0x54, 0x8, 0x80000001, 0x4, 0x6, 0x31c, 0x0, 0x9, 0x101, 0x5b0, 0xffff, 0x401, 0x7, 0x2, 0x8, 0x9, 0xfffffffc, 0x10, 0x1000, 0xc, 0x0, 0x6, 0xc1, 0x10, 0x6, 0x101, 0x855, 0x5, 0x4, 0x4, 0x4, 0x3, 0x6, 0x1ff, 0x1cc0000, 0x8, 0x1, 0xffc0, 0x4, 0x80000000, 0x0, 0x2, 0x86cb, 0x2, 0x4, 0x9, 0x2, 0xa24, 0x3, 0x36f6, 0x6, 0x1000, 0x4, 0x1, 0x7, 0x50, 0xfffffff9, 0x8, 0x9, 0x2, 0x5, 0x3, 0x9, 0xfffffffa, 0x4, 0xe0e3, 0x1, 0x3a17251a, 0x7, 0xd75e, 0x5, 0x9, 0x2, 0x50f5, 0x3ff, 0x3, 0x7ff, 0x9, 0x8001, 0x0, 0x7, 0x800, 0x4, 0x10001, 0xffff, 0x0, 0x1, 0x1, 0x6, 0xfffffff8, 0x3, 0x401, 0x7, 0x1, 0x6, 0xf, 0xfff, 0x42d, 0x7fffffff, 0x3, 0x0, 0x7de9777f, 0xbe0b, 0x4, 0x1fad, 0xfff, 0x2, 0x45, 0xfef, 0x3, 0x0, 0x4, 0xffffffff, 0x10, 0x7, 0x7, 0x1, 0x829e, 0x9, 0x6, 0x5, 0x8, 0x800, 0x9ab0, 0x80000000, 0x1, 0x9, 0x10000, 0x401, 0xfffffff5, 0x1, 0x7, 0x48000, 0xe7c2, 0x9, 0x1, 0x5, 0xec0, 0x100, 0x2, 0x9, 0x100000, 0x9, 0x7ff, 0x2, 0x7ff, 0x6, 0x9, 0x8, 0xf, 0x3, 0x811c, 0x1000, 0x2, 0x4, 0x5, 0x3, 0x8, 0x4337, 0xb, 0x7ff, 0x200, 0xa3fd, 0x0, 0x400, 0x0, 0x9, 0x6, 0x5, 0x100, 0x8, 0x7, 0x4, 0x6, 0x0, 0x6, 0x499, 0xffff, 0x4, 0x9f3, 0x4, 0xf, 0x10000000, 0x1, 0x8, 0x4, 0x9, 0x3, 0x7, 0x8fb, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x7d1c5100, 0x7cd3, 0xbc4, 0x10000, 0x5, 0x400, 0x9004, 0x10, 0x1, 0x4, 0x4, 0x9, 0xff, 0x9, 0xffff, 0x6, 0x725, 0x6, 0x1, 0xca0a, 0x80000000, 0x6, 0x0, 0x3e, 0x8f32, 0x1622, 0x4, 0xffffffff, 0x7, 0x672, 0x37e03e4d, 0x2, 0x7, 0x6, 0x8001, 0x1, 0x4, 0xfffffffa, 0x10001, 0x6, 0x3, 0xe, 0xce0d, 0xc40, 0x3, 0x6, 0x37d, 0x0, 0x0, 0xfffffff2, 0xa]})

3m0.095778607s ago: executing program 4 (id=509):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x3, 0xff)
r3 = dup2(r2, r2)
r4 = eventfd(0x0)
r5 = dup3(r4, r2, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getgroups(0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
read$FUSE(r3, &(0x7f0000000bc0)={0x2020, 0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
exit(0x0)
write$FUSE_CREATE_OPEN(r5, &(0x7f00000004c0)={0xa0, 0x0, r7, {{0x4, 0x3, 0x3, 0x7, 0x7, 0x6, {0x2, 0x4, 0xbace, 0x81, 0x4e, 0x0, 0xfffffffd, 0x2, 0x8, 0x1000, 0xb, r8, 0x0, 0x3, 0x8}}, {0x0, 0x18}}}, 0xa0)
timer_getoverrun(0x0)

2m59.585068337s ago: executing program 0 (id=511):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000400)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[], 0xfd, 0x2b9, &(0x7f0000000980)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="37a36085f1038f31abae6012e5200b3190b08f996d8f16f0e9bbe05109e5b8911b0b71ff521000888a5441325e31723c24e674845163d1a1aa0e6b458b"], 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x21, 0x0, 0x0, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300)

2m58.522194256s ago: executing program 4 (id=514):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"})
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r1 = syz_open_pts(r0, 0x8182)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)

2m57.203443492s ago: executing program 4 (id=516):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10)
request_key(0x0, 0x0, 0x0, 0x0)

2m56.582157154s ago: executing program 4 (id=517):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}]}, 0x24}}, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000480)={r0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0xc, 0x96, 0x458, 0x6, 0x1, 0x1, 0x7, 'syz0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18)
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x86}, 0x28)

2m55.415724655s ago: executing program 4 (id=520):
r0 = socket$inet6(0xa, 0x3, 0xff)
setuid(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18)

2m43.992478191s ago: executing program 33 (id=511):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000400)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[], 0xfd, 0x2b9, &(0x7f0000000980)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="37a36085f1038f31abae6012e5200b3190b08f996d8f16f0e9bbe05109e5b8911b0b71ff521000888a5441325e31723c24e674845163d1a1aa0e6b458b"], 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x21, 0x0, 0x0, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0})
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300)

2m39.679026015s ago: executing program 34 (id=520):
r0 = socket$inet6(0xa, 0x3, 0xff)
setuid(0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, 0x0)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18)

27.406830053s ago: executing program 1 (id=662):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000006c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x6, 0x550c, &(0x7f000000f140)="$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")
creat(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0)
write(r1, &(0x7f0000004200)='t', 0x1)
sendfile(r1, r0, 0x0, 0x3ffff)
sendfile(r1, r0, 0x0, 0x7ffff000)

20.701899928s ago: executing program 1 (id=670):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="40100a"], 0x0, 0x0, 0x0, 0x0}, 0x0)

17.630965167s ago: executing program 1 (id=675):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xfffe, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x8000000009, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x4, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x3, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x7, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0xc, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0x39ac, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x4, 0x8, 0x8001, 0x0, 0x9, 0x8, 0x1ff, 0x2, 0x6b, 0x334]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140))

16.670390272s ago: executing program 1 (id=677):
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x2e, &(0x7f00000005c0)={@broadcast, @local, @val={@void, {0x8100, 0x7, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @remote, @local}}}}, 0x0)

14.84329487s ago: executing program 1 (id=679):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000100000000000000000000000000000000000141e5ebcc54f30dbcf9c9e1d8258e54d96aceba50007d210ff9e5d5789b8cbc94f013d965bb8c724a9636b8b4893ef9cfbdfff4ebe5b7441b01000000000000006d86cf01014f530d105c11445f99c9a5371a09bfd86a4d873560d2eb8cd523447baaef8363dfb2a070"], 0x24, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000)

12.887283422s ago: executing program 5 (id=680):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4)
capset(0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x20, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)

10.286581677s ago: executing program 2 (id=682):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000110000018160000", @ANYRES32=0x1, @ANYBLOB="000000000000000085100000fd"], 0x0, 0x40, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x7c, 0x1e, 0x109, 0x102, 0x0, {}, [{0x68, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "ab24"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x30, 0xa, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x7c}, 0x1, 0x2b1e}, 0x2000c000)
r7 = socket(0x10, 0x3, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000240), 0x8, 0x10000)
ioctl$EVIOCSABS2F(r8, 0x401845ef, &(0x7f0000000480)={0x8, 0x80000001, 0xc5, 0x9, 0x4, 0x2})
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x5)
sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)={0x5, 0xffffffff, 0x4, 0x3, 0x2, 0x9, 0x7b, 0x0, 0x6})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x26e1, 0x0)

7.498010457s ago: executing program 5 (id=683):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x1, 0x0)
fcntl$setpipe(r1, 0x408, 0x7)

7.024939754s ago: executing program 2 (id=684):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xb}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c064}, 0x0)

6.04912904s ago: executing program 2 (id=685):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xfffe, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x8000000009, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x4, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x3, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x7, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0xc, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0x39ac, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x4, 0x8, 0x8001, 0x0, 0x9, 0x8, 0x1ff, 0x2, 0x6b, 0x334]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140))

6.00644138s ago: executing program 5 (id=686):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94)

5.46527639s ago: executing program 5 (id=687):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)

5.044384614s ago: executing program 5 (id=688):
creat(0x0, 0xd931d3864d39dcca)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', <r4=>0x0})
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x3000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

4.837234279s ago: executing program 2 (id=689):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000100)={'wg1\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000d0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x80)

3.681172439s ago: executing program 5 (id=690):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x101880a, &(0x7f0000000400)=ANY=[], 0x1, 0x5520, &(0x7f0000000540)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x43451)

3.390364925s ago: executing program 2 (id=691):
r0 = syz_open_procfs(0x0, &(0x7f0000000580)='fdinfo\x00')
fchdir(r0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, 0x0, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/174, 0xae}, 0x7}], 0x1, 0x60010100, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
mount$9p_tcp(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x800002, 0x0)

1.472196935s ago: executing program 1 (id=692):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc)

0s ago: executing program 2 (id=693):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, &(0x7f0000000180)={0x20, 0x31, 0x7, {0x7, 0x23, "d17d93f0fd"}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

E2, changing to 0x82
[  389.017634][ T1674] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  389.033043][ T1674] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  389.089570][ T1674] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  389.099622][ T1674] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.108132][ T1674] usb 3-1: Product: syz
[  389.112674][ T1674] usb 3-1: Manufacturer: syz
[  389.117629][ T1674] usb 3-1: SerialNumber: syz
[  389.240781][ T1674] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input34
[  389.888491][ T7106] loop0: detected capacity change from 0 to 32768
[  389.897712][ T7106] btrfs: Deprecated parameter 'usebackuproot'
[  389.904487][ T7106] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  389.919593][ T7106] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.332 (7106)
[  390.003757][ T7106] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  390.014653][ T7106] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm
[  390.024221][ T7106] BTRFS info (device loop0): using free-space-tree
[  390.081056][ T1674] imon:send_packet: packet tx failed (-71)
[  390.111846][ T1674] imon 3-1:155.0: panel buttons/knobs setup failed
[  390.120832][ T1674] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  390.131791][ T1674]  (id 0x00)
[  390.215024][ T3857] BTRFS warning (device loop0): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0xcc0b9558 level 0
[  390.229277][ T7106] BTRFS warning (device loop0): failed to read root (objectid=4): -5
[  390.237909][ T7106] BTRFS warning (device loop0): try to load backup roots slot 1
[  390.357854][ T3857] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x1be609ab level 0
[  390.371884][ T7106] BTRFS warning (device loop0): couldn't read tree root
[  390.379110][ T7106] BTRFS warning (device loop0): try to load backup roots slot 2
[  390.476650][ T3857] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  390.487856][ T7106] BTRFS warning (device loop0): couldn't read tree root
[  390.495499][ T7106] BTRFS warning (device loop0): try to load backup roots slot 3
[  390.536020][ T7106] BTRFS warning (device loop0): global root 2 0 already exists
[  390.544150][ T7106] BTRFS error (device loop0): failed to load root extent
[  390.562350][ T1674] rc_core: IR keymap rc-imon-pad not found
[  390.569451][ T1674] Registered IR keymap rc-empty
[  390.583433][ T1674] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  390.594743][ T1674] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  390.645478][ T7106] BTRFS error (device loop0): open_ctree failed: -17
[  391.218629][ T1674] imon:send_packet: packet tx failed (-71)
[  391.285434][ T1674] imon 3-1:155.0: remote input dev register failed
[  391.295855][ T1674] imon 3-1:155.0: imon_init_intf0: rc device setup failed
[  391.531439][ T1674] imon 3-1:155.0: unable to initialize intf0, err 0
[  391.538297][ T1674] imon:imon_probe: failed to initialize context!
[  391.545038][ T1674] imon 3-1:155.0: unable to register, err -19
[  391.565939][ T7125] loop4: detected capacity change from 0 to 64
[  391.568051][ T1674] usb 3-1: USB disconnect, device number 8
[  391.721314][ T7128] loop0: detected capacity change from 0 to 256
[  391.829236][ T7128] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  391.840699][ T7128] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  392.119683][ T7128] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  392.675925][ T7130] netlink: set zone limit has 8 unknown bytes
[  392.751823][ T7132] netlink: 'syz.4.336': attribute type 8 has an invalid length.
[  394.520761][ T1674] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  394.704835][ T1674] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  394.713573][ T1674] usb 5-1: config 0 has no interface number 0
[  394.758794][ T1674] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  394.768234][ T1674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.777879][ T1674] usb 5-1: Product: syz
[  394.782582][ T1674] usb 5-1: Manufacturer: syz
[  394.787440][ T1674] usb 5-1: SerialNumber: syz
[  394.852831][ T1674] usb 5-1: config 0 descriptor??
[  395.145400][   T42] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  395.147119][ T1674] usb 5-1: Found UVC 0.08 device syz (046d:0823)
[  395.159987][ T1674] usb 5-1: Failed to create links for entity 32
[  395.172884][ T1674] usb 5-1: Failed to register entities (-22).
[  395.238805][ T1674] usb 5-1: USB disconnect, device number 17
[  395.346200][   T42] usb 3-1: Using ep0 maxpacket: 32
[  395.393148][   T42] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  395.404017][   T42] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  395.416169][   T42] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  395.427899][   T42] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  395.540431][   T42] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  395.549795][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.558195][   T42] usb 3-1: Product: syz
[  395.562806][   T42] usb 3-1: Manufacturer: syz
[  395.567625][   T42] usb 3-1: SerialNumber: syz
[  395.670907][   T42] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input36
[  395.890047][   T42] imon:send_packet: packet tx failed (-71)
[  395.911051][   T42] imon 3-1:155.0: panel buttons/knobs setup failed
[  395.918879][   T42] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  395.929846][   T42]  (id 0x00)
[  397.408445][ T7154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.346'.
[  397.424468][ T7154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.346'.
[  397.565585][   T42] rc_core: IR keymap rc-imon-pad not found
[  397.573628][   T42] Registered IR keymap rc-empty
[  397.581504][   T42] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  397.593648][   T42] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  397.893441][   T42] imon:send_packet: packet tx failed (-71)
[  397.921874][   T42] imon 3-1:155.0: remote input dev register failed
[  397.935740][   T42] imon 3-1:155.0: imon_init_intf0: rc device setup failed
[  398.083790][   T42] imon 3-1:155.0: unable to initialize intf0, err 0
[  398.091090][   T42] imon:imon_probe: failed to initialize context!
[  398.097718][   T42] imon 3-1:155.0: unable to register, err -19
[  398.191556][   T42] usb 3-1: USB disconnect, device number 9
[  398.207029][   T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  398.257019][   T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  398.270000][   T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  398.309013][   T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  398.331481][   T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  398.625694][ T7158] loop4: detected capacity change from 0 to 512
[  399.446099][ T7163] loop1: detected capacity change from 0 to 32768
[  400.575043][   T49] Bluetooth: hci5: command tx timeout
[  400.625611][ T7155] chnl_net:caif_netlink_parms(): no params data found
[  402.283482][ T5803] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  402.376572][ T3680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.524138][ T5803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.644461][   T49] Bluetooth: hci5: command tx timeout
[  402.712582][ T7183] loop0: detected capacity change from 0 to 16
[  402.726218][ T3680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  402.804443][ T7183] erofs (device loop0): mounted with root inode @ nid 36.
[  402.923671][ T3680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.099299][ T3680] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.198747][ T7186] FAULT_INJECTION: forcing a failure.
[  403.198747][ T7186] name failslab, interval 1, probability 0, space 0, times 0
[  403.212632][ T7186] CPU: 0 UID: 0 PID: 7186 Comm: syz.4.356 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  403.212773][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  403.212850][ T7186] Call Trace:
[  403.212897][ T7186]  <TASK>
[  403.212948][ T7186]  __dump_stack+0x26/0x30
[  403.213109][ T7186]  dump_stack_lvl+0x1df/0x270
[  403.213273][ T7186]  dump_stack+0x1e/0x25
[  403.213417][ T7186]  should_fail_ex+0x7dc/0x8a0
[  403.213579][ T7186]  should_failslab+0x15b/0x200
[  403.213764][ T7186]  __kmalloc_noprof+0x182/0x1310
[  403.213898][ T7186]  ? tomoyo_encode+0x626/0xa10
[  403.214044][ T7186]  ? prepend_path+0xff2/0x10c0
[  403.214177][ T7186]  ? kmsan_get_metadata+0xfb/0x160
[  403.214360][ T7186]  ? kmsan_get_metadata+0xfb/0x160
[  403.214547][ T7186]  tomoyo_encode+0x626/0xa10
[  403.214727][ T7186]  tomoyo_realpath_from_path+0x92e/0x9f0
[  403.214922][ T7186]  tomoyo_path_number_perm+0x1d0/0x7d0
[  403.215083][ T7186]  ? stack_depot_save_flags+0x35/0x7b0
[  403.215265][ T7186]  ? kmsan_get_metadata+0xfb/0x160
[  403.215436][ T7186]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  403.215659][ T7186]  tomoyo_file_ioctl+0x3d/0x50
[  403.215836][ T7186]  security_file_ioctl+0x141/0x590
[  403.216032][ T7186]  __se_sys_ioctl+0xbb/0x400
[  403.216204][ T7186]  __x64_sys_ioctl+0x97/0xe0
[  403.216374][ T7186]  x64_sys_call+0x1ebe/0x3db0
[  403.216540][ T7186]  do_syscall_64+0xd9/0x210
[  403.216669][ T7186]  ? irqentry_exit+0x16/0x60
[  403.216841][ T7186]  ? clear_bhb_loop+0x40/0x90
[  403.216983][ T7186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.217120][ T7186] RIP: 0033:0x7f4db538e929
[  403.217225][ T7186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.217339][ T7186] RSP: 002b:00007f4db615a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  403.217464][ T7186] RAX: ffffffffffffffda RBX: 00007f4db55b5fa0 RCX: 00007f4db538e929
[  403.217560][ T7186] RDX: 0000200000000400 RSI: 00000000c02c563a RDI: 0000000000000004
[  403.217646][ T7186] RBP: 00007f4db615a090 R08: 0000000000000000 R09: 0000000000000000
[  403.217730][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.217809][ T7186] R13: 0000000000000000 R14: 00007f4db55b5fa0 R15: 00007ffde96e5ef8
[  403.217930][ T7186]  </TASK>
[  403.218028][ T7186] ERROR: Out of memory at tomoyo_realpath_from_path.
[  403.482183][ T1674] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  403.535198][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.542946][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.550972][ T7155] bridge_slave_0: entered allmulticast mode
[  403.568188][ T7155] bridge_slave_0: entered promiscuous mode
[  403.666071][ T1674] usb 1-1: Using ep0 maxpacket: 32
[  403.707640][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  403.712618][ T1674] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  403.724854][ T1674] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  403.737054][ T1674] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  403.748787][ T1674] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  403.781485][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.789066][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.797184][ T7155] bridge_slave_1: entered allmulticast mode
[  403.806776][ T7155] bridge_slave_1: entered promiscuous mode
[  403.861466][ T3680] bridge_slave_0: left allmulticast mode
[  403.875988][ T3680] bridge_slave_0: left promiscuous mode
[  403.882868][ T3680] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.996388][ T1674] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  404.006253][ T1674] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.014845][ T1674] usb 1-1: Product: syz
[  404.019240][ T1674] usb 1-1: Manufacturer: syz
[  404.024245][ T1674] usb 1-1: SerialNumber: syz
[  404.113037][ T1674] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input38
[  404.299552][ T1674] imon:send_packet: packet tx failed (-71)
[  404.321731][ T1674] imon 1-1:155.0: panel buttons/knobs setup failed
[  404.329614][ T1674] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  404.341807][ T1674]  (id 0x00)
[  404.723266][   T49] Bluetooth: hci5: command tx timeout
[  404.911008][ T1674] rc_core: IR keymap rc-imon-pad not found
[  404.918104][ T1674] Registered IR keymap rc-empty
[  404.925315][ T1674] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  404.937085][ T1674] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  405.359602][ T1674] imon:send_packet: packet tx failed (-71)
[  405.391328][ T1674] imon 1-1:155.0: remote input dev register failed
[  405.399436][ T1674] imon 1-1:155.0: imon_init_intf0: rc device setup failed
[  405.522268][ T1674] imon 1-1:155.0: unable to initialize intf0, err 0
[  405.529133][ T1674] imon:imon_probe: failed to initialize context!
[  405.537231][ T1674] imon 1-1:155.0: unable to register, err -19
[  405.557323][ T3680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.591082][ T1674] usb 1-1: USB disconnect, device number 4
[  405.602789][ T3680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.681781][ T3680] bond0 (unregistering): Released all slaves
[  405.989174][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  406.190786][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.811270][   T49] Bluetooth: hci5: command tx timeout
[  406.920797][ T3680] hsr_slave_0: left promiscuous mode
[  406.975407][ T3680] hsr_slave_1: left promiscuous mode
[  406.984230][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.992277][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.014837][ T7213] loop1: detected capacity change from 0 to 512
[  407.111472][ T3680] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.119497][ T3680] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.305845][ T3680] veth1_macvtap: left promiscuous mode
[  407.311965][ T3680] veth0_macvtap: left promiscuous mode
[  407.317981][ T3680] veth1_vlan: left promiscuous mode
[  407.323981][ T3680] veth0_vlan: left promiscuous mode
[  407.940987][ T7218] FAULT_INJECTION: forcing a failure.
[  407.940987][ T7218] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  407.954643][ T7218] CPU: 0 UID: 0 PID: 7218 Comm: syz.2.367 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  407.954778][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  407.954851][ T7218] Call Trace:
[  407.954894][ T7218]  <TASK>
[  407.954942][ T7218]  __dump_stack+0x26/0x30
[  407.955094][ T7218]  dump_stack_lvl+0x1df/0x270
[  407.955252][ T7218]  dump_stack+0x1e/0x25
[  407.955385][ T7218]  should_fail_ex+0x7dc/0x8a0
[  407.955552][ T7218]  should_fail+0x2a/0x40
[  407.955679][ T7218]  should_fail_usercopy+0x2e/0x40
[  407.955835][ T7218]  _copy_to_user+0x35/0x120
[  407.955980][ T7218]  simple_read_from_buffer+0x1b2/0x340
[  407.956170][ T7218]  proc_fail_nth_read+0x1d2/0x2c0
[  407.956325][ T7218]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  407.956471][ T7218]  vfs_read+0x279/0xf00
[  407.956638][ T7218]  ? stack_depot_save_flags+0x35/0x7b0
[  407.956780][ T7218]  ? kmsan_get_metadata+0xfb/0x160
[  407.956954][ T7218]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  407.957146][ T7218]  __x64_sys_read+0x1fb/0x4d0
[  407.957332][ T7218]  x64_sys_call+0x39db/0x3db0
[  407.957504][ T7218]  do_syscall_64+0xd9/0x210
[  407.957633][ T7218]  ? irqentry_exit+0x16/0x60
[  407.957799][ T7218]  ? clear_bhb_loop+0x40/0x90
[  407.957938][ T7218]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.958067][ T7218] RIP: 0033:0x7f0ca398d33c
[  407.958166][ T7218] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  407.958274][ T7218] RSP: 002b:00007f0ca47b2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  407.958400][ T7218] RAX: ffffffffffffffda RBX: 00007f0ca3bb5fa0 RCX: 00007f0ca398d33c
[  407.958502][ T7218] RDX: 000000000000000f RSI: 00007f0ca47b20a0 RDI: 0000000000000003
[  407.958585][ T7218] RBP: 00007f0ca47b2090 R08: 0000000000000000 R09: 0000000000000000
[  407.958667][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.958745][ T7218] R13: 0000000000000000 R14: 00007f0ca3bb5fa0 R15: 00007ffdc121f558
[  407.958864][ T7218]  </TASK>
[  408.130758][ T5853] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  408.531070][ T5853] usb 5-1: Using ep0 maxpacket: 32
[  408.564501][ T5853] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  408.574602][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.620203][ T3680] team0 (unregistering): Port device team_slave_1 removed
[  408.690591][ T5853] usb 5-1: config 0 descriptor??
[  408.711890][ T3680] team0 (unregistering): Port device team_slave_0 removed
[  408.719263][ T5853] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  409.018986][ T7155] team0: Port device team_slave_0 added
[  409.077957][ T7155] team0: Port device team_slave_1 added
[  409.384596][ T7224] FAULT_INJECTION: forcing a failure.
[  409.384596][ T7224] name failslab, interval 1, probability 0, space 0, times 0
[  409.402648][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.2.370 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  409.402802][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  409.402881][ T7224] Call Trace:
[  409.402927][ T7224]  <TASK>
[  409.402974][ T7224]  __dump_stack+0x26/0x30
[  409.403132][ T7224]  dump_stack_lvl+0x1df/0x270
[  409.403288][ T7224]  dump_stack+0x1e/0x25
[  409.403423][ T7224]  should_fail_ex+0x7dc/0x8a0
[  409.403590][ T7224]  should_failslab+0x15b/0x200
[  409.403777][ T7224]  kmem_cache_alloc_noprof+0xf0/0xec0
[  409.403913][ T7224]  ? security_file_alloc+0x7a/0x6e0
[  409.404097][ T7224]  ? kmsan_get_metadata+0xfb/0x160
[  409.404268][ T7224]  ? kmsan_get_metadata+0xfb/0x160
[  409.404455][ T7224]  security_file_alloc+0x7a/0x6e0
[  409.404636][ T7224]  init_file+0x91/0x330
[  409.404790][ T7224]  alloc_empty_file+0x165/0x5b0
[  409.404935][ T7224]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  409.405119][ T7224]  path_openat+0xa1/0x6760
[  409.405293][ T7224]  ? kmsan_get_metadata+0xfb/0x160
[  409.405466][ T7224]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  409.405651][ T7224]  ? do_filp_open+0x31/0x660
[  409.405797][ T7224]  ? filter_irq_stacks+0x49/0x190
[  409.405925][ T7224]  ? getname_flags+0x179/0xac0
[  409.406058][ T7224]  ? stack_depot_save_flags+0x35/0x7b0
[  409.406205][ T7224]  ? kmsan_get_metadata+0xfb/0x160
[  409.406377][ T7224]  ? kmsan_get_metadata+0xfb/0x160
[  409.406555][ T7224]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  409.406724][ T7224]  ? kmsan_get_metadata+0xfb/0x160
[  409.406893][ T7224]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  409.407078][ T7224]  do_filp_open+0x280/0x660
[  409.407287][ T7224]  do_sys_openat2+0x1bb/0x2f0
[  409.407446][ T7224]  __x64_sys_creat+0xe1/0x150
[  409.407607][ T7224]  x64_sys_call+0x14a0/0x3db0
[  409.407779][ T7224]  do_syscall_64+0xd9/0x210
[  409.407909][ T7224]  ? irqentry_exit+0x16/0x60
[  409.408079][ T7224]  ? clear_bhb_loop+0x40/0x90
[  409.408218][ T7224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.408356][ T7224] RIP: 0033:0x7f0ca398e929
[  409.408453][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.408565][ T7224] RSP: 002b:00007f0ca47b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  409.408692][ T7224] RAX: ffffffffffffffda RBX: 00007f0ca3bb5fa0 RCX: 00007f0ca398e929
[  409.408793][ T7224] RDX: 0000000000000000 RSI: 0000000000000158 RDI: 00002000000001c0
[  409.408878][ T7224] RBP: 00007f0ca47b2090 R08: 0000000000000000 R09: 0000000000000000
[  409.408961][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.409039][ T7224] R13: 0000000000000000 R14: 00007f0ca3bb5fa0 R15: 00007ffdc121f558
[  409.409160][ T7224]  </TASK>
[  409.723458][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  409.731008][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  409.756691][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  409.757689][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.767058][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  409.782111][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.791802][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  409.822932][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.941808][ T7220] GUP no longer grows the stack in syz.4.368 (7220): 200000004000-20000000a000 (200000002000)
[  409.952559][ T7220] CPU: 0 UID: 0 PID: 7220 Comm: syz.4.368 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  409.952707][ T7220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  409.952784][ T7220] Call Trace:
[  409.952832][ T7220]  <TASK>
[  409.952882][ T7220]  __dump_stack+0x26/0x30
[  409.953047][ T7220]  dump_stack_lvl+0x1df/0x270
[  409.953213][ T7220]  dump_stack+0x1e/0x25
[  409.953365][ T7220]  __get_user_pages+0x586f/0x6b20
[  409.953534][ T7220]  ? kmsan_save_stack_with_flags+0x2f/0x60
[  409.953713][ T7220]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  409.953902][ T7220]  ? get_dump_page+0x541/0x590
[  409.954059][ T7220]  ? filter_irq_stacks+0x49/0x190
[  409.954213][ T7220]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  409.954424][ T7220]  get_user_pages_remote+0x4a1/0x16a0
[  409.954598][ T7220]  ? stack_depot_save_flags+0x35/0x7b0
[  409.954755][ T7220]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  409.954931][ T7220]  ? kmsan_get_metadata+0xfb/0x160
[  409.955099][ T7220]  ? __access_remote_vm+0x2a6/0xf80
[  409.955279][ T7220]  __access_remote_vm+0x2f7/0xf80
[  409.955499][ T7220]  access_remote_vm+0x4e/0x70
[  409.955672][ T7220]  proc_pid_cmdline_read+0xa3d/0x19d0
[  409.955869][ T7220]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  409.956007][ T7220]  vfs_readv+0x931/0xf30
[  409.956193][ T7220]  ? kmsan_get_metadata+0xfb/0x160
[  409.956372][ T7220]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  409.956558][ T7220]  __x64_sys_preadv+0x2a3/0x510
[  409.956706][ T7220]  x64_sys_call+0x1927/0x3db0
[  409.956871][ T7220]  do_syscall_64+0xd9/0x210
[  409.957003][ T7220]  ? irqentry_exit+0x16/0x60
[  409.957168][ T7220]  ? clear_bhb_loop+0x40/0x90
[  409.957312][ T7220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.957457][ T7220] RIP: 0033:0x7f4db538e929
[  409.957554][ T7220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  409.957671][ T7220] RSP: 002b:00007f4db615a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  409.957800][ T7220] RAX: ffffffffffffffda RBX: 00007f4db55b5fa0 RCX: 00007f4db538e929
[  409.957896][ T7220] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005
[  409.957979][ T7220] RBP: 00007f4db5410b39 R08: 0000000000000000 R09: 0000000000000000
[  409.958061][ T7220] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  409.958142][ T7220] R13: 0000000000000000 R14: 00007f4db55b5fa0 R15: 00007ffde96e5ef8
[  409.958259][ T7220]  </TASK>
[  410.047076][ T5853] gspca_vc032x: reg_w err -110
[  410.224667][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.230157][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.235855][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.241530][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.247033][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.252907][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.258397][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.264116][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.269615][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.275341][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.281087][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.286590][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.292221][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.297764][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.303485][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.308988][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.314600][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.323483][ T5853] gspca_vc032x: I2c Bus Busy Wait 00
[  410.328991][ T5853] gspca_vc032x: Unknown sensor...
[  410.336379][ T5853] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[  410.398533][ T7155] hsr_slave_0: entered promiscuous mode
[  410.408438][ T7155] hsr_slave_1: entered promiscuous mode
[  410.417057][ T7155] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  410.429246][ T7155] Cannot create hsr debugfs directory
[  410.719946][ T7230] loop0: detected capacity change from 0 to 256
[  410.722654][ T7230] vfat: Unknown parameter 'shÑýÝKꎱÀo—jortname'
[  411.151944][ T7240] Bluetooth: MGMT ver 1.23
[  411.152595][ T7230] Bluetooth: hci0: Opcode 0x0401 failed: -112
[  411.441239][ T7230] loop0: detected capacity change from 0 to 256
[  411.458488][ T7230] exfat: Unknown parameter 'xœìÝOˆÕ'
[  411.587102][ T7242] loop4: detected capacity change from 0 to 1024
[  411.648520][ T7244] netlink: 52 bytes leftover after parsing attributes in process `syz.1.375'.
[  411.849770][ T7155] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  411.921990][ T7245] bridge_slave_0: left allmulticast mode
[  411.928991][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.119737][ T7155] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  412.294722][ T7155] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  412.407916][ T7155] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  413.074897][ T7254] loop0: detected capacity change from 0 to 256
[  413.101929][ T7254] exfat: Deprecated parameter 'namecase'
[  413.122685][ T5797] Bluetooth: hci0: command 0x0c20 tx timeout
[  413.129306][   T49] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  413.160904][ T5856] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  413.218830][ T5853] usb 5-1: USB disconnect, device number 18
[  413.344253][ T7254] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  413.408831][ T5856] usb 2-1: config 0 has an invalid descriptor of length 11, skipping remainder of the config
[  413.419728][ T5856] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  413.429935][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.544410][ T5856] usb 2-1: config 0 descriptor??
[  413.569157][ T5856] usb 2-1: bad CDC descriptors
[  413.684077][ T7155] 8021q: adding VLAN 0 to HW filter on device bond0
[  413.709439][ T7258] loop4: detected capacity change from 0 to 64
[  413.765940][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  413.775970][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  413.811572][ T7155] 8021q: adding VLAN 0 to HW filter on device team0
[  413.835897][ T5853] usb 2-1: USB disconnect, device number 17
[  413.849786][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state
[  413.857408][ T3737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  413.976523][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state
[  413.984362][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.575521][ T7271] loop0: detected capacity change from 0 to 256
[  414.615395][ T7271] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  414.631555][ T7271] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  414.746452][ T7271] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  414.971938][   T30] audit: type=1326 audit(1751384191.001:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  414.995134][   T30] audit: type=1326 audit(1751384191.021:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  415.018695][   T30] audit: type=1326 audit(1751384191.041:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  415.045835][   T30] audit: type=1326 audit(1751384191.041:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  415.069964][   T30] audit: type=1326 audit(1751384191.051:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  415.093529][   T30] audit: type=1326 audit(1751384191.051:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  415.116175][   T30] audit: type=1326 audit(1751384191.051:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  415.142535][   T30] audit: type=1326 audit(1751384191.051:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  415.166549][   T30] audit: type=1326 audit(1751384191.061:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  415.189268][   T30] audit: type=1326 audit(1751384191.071:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.4.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  415.221373][   T49] Bluetooth: hci0: command 0x0c20 tx timeout
[  416.035850][ T7155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.362520][ T7286] loop4: detected capacity change from 0 to 32768
[  416.446082][ T7290] loop0: detected capacity change from 0 to 16
[  416.530995][ T7286] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,compression=zstd,background_compression=gzip,journal_flush_disabled,recovery_pass_last=set_may_go_rw
[  416.531126][ T7286]   allowing incompatible features above 0.0: (unknown version)
[  416.531211][ T7286]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  416.576378][ T7286] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  416.585804][ T7286] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  416.591959][ T7290] erofs (device loop0): mounted with root inode @ nid 36.
[  416.595505][ T7286] bcachefs (loop4): Version upgrade required:
[  416.595505][ T7286] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  416.595505][ T7286] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  416.595505][ T7286]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  416.853435][ T7286] bcachefs (loop4): accounting_read... done
[  416.876912][ T7286] bcachefs (loop4): alloc_read... done
[  416.895134][ T7286] bcachefs (loop4): snapshots_read...
[  417.619201][ T7307] loop0: detected capacity change from 0 to 512
[  417.671589][ T7301] loop1: detected capacity change from 0 to 32768
[  417.680841][ T7301] XFS: ikeep mount option is deprecated.
[  417.885007][ T7307] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  417.898849][ T7307] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  418.141985][ T7286]  done
[  418.144981][ T7286] bcachefs (loop4): check_allocations...
[  418.165294][ T7286] bcachefs (loop4): bucket 0:26 data type btree ptr gen 0 missing in alloc btree
[  418.165412][ T7286]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  418.298653][ T7286] bcachefs (loop4): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[  418.298764][ T7286]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  418.363850][ T7286] bcachefs (loop4): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[  418.363950][ T7286]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  418.426980][ T7286] bcachefs (loop4): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[  418.427095][ T7286]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  418.474406][ T7286] bcachefs (loop4): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[  418.474508][ T7286]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  418.506382][ T7286] bcachefs (loop4): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing
[  418.520590][ T7286] bcachefs (loop4): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  418.535613][ T7286] bcachefs (loop4): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing
[  418.546380][ T7286] bcachefs (loop4): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  418.561361][ T7286] bcachefs (loop4): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing
[  418.572336][ T7286] bcachefs (loop4): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  418.585388][ T7286] bcachefs (loop4): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing
[  418.596217][ T7286] bcachefs (loop4): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  418.609152][ T7286] bcachefs (loop4): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing
[  418.622397][ T7286] bcachefs (loop4): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  418.636096][ T7286] bcachefs (loop4): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[  418.647350][ T7286] bcachefs (loop4): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  418.660159][ T7286] bcachefs (loop4): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing
[  418.671008][ T7286] bcachefs (loop4): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  418.683762][ T7286] bcachefs (loop4): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing
[  418.694588][ T7286] bcachefs (loop4): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing
[  418.707065][ T7286] bcachefs (loop4): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing
[  418.721366][ T7286] bcachefs (loop4): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[  418.734520][ T7286] bcachefs (loop4): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing
[  418.745794][ T7286] bcachefs (loop4): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[  418.759206][ T7286] bcachefs (loop4): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing
[  418.759300][ T7286]   Ratelimiting new instances of previous error
[  418.777433][ T7286] bcachefs (loop4): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing
[  418.777532][ T7286]   Ratelimiting new instances of previous error
[  418.853896][ T7286]  done
[  418.860044][ T7286] bcachefs (loop4): going read-write
[  418.883412][ T7286] bcachefs (loop4): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR
[  418.894255][ T7286] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  418.904032][ T7286] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  418.912554][ T5856] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  418.928106][ T7286] bcachefs (loop4): unclean shutdown complete, journal seq 11
[  418.937838][ T7286] bcachefs (loop4): error in recovery: EINTR
[  418.937912][ T7286]   emergency read only at seq 11
[  418.949687][ T7286] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR
[  418.958757][ T7286] bcachefs (loop4): shutting down
[  418.983226][ T7286] bcachefs (loop4): shutdown complete
[  419.177412][ T5856] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  419.186944][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.195375][ T5856] usb 1-1: Product: syz
[  419.199788][ T5856] usb 1-1: Manufacturer: syz
[  419.205405][ T5856] usb 1-1: SerialNumber: syz
[  419.295939][ T5856] usb 1-1: config 0 descriptor??
[  420.341915][ T5856] usb 1-1: Firmware version (0.0) predates our first public release.
[  420.350436][ T5856] usb 1-1: Please update to version 0.2 or newer
[  420.641089][ T7328] loop1: detected capacity change from 0 to 40427
[  421.389788][    T9] usb 1-1: USB disconnect, device number 5
[  421.781429][ T7337] loop1: detected capacity change from 0 to 512
[  422.002714][ T7155] veth0_vlan: entered promiscuous mode
[  422.014213][ T7286] bcachefs: bch2_fs_get_tree() error: EINTR
[  422.135110][ T7155] veth1_vlan: entered promiscuous mode
[  422.155905][ T7341] loop0: detected capacity change from 0 to 512
[  422.225726][ T7341] EXT4-fs: Ignoring removed orlov option
[  422.258904][ T7341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  422.342926][ T7155] veth0_macvtap: entered promiscuous mode
[  422.395995][ T7155] veth1_macvtap: entered promiscuous mode
[  422.439725][ T7341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.453283][ T7341] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.491578][ T5856] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  422.516136][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_0
[  422.618755][ T7155] batman_adv: batadv0: Interface activated: batadv_slave_1
[  422.659024][ T7155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.668982][ T7155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.678275][ T7155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.680721][ T5856] usb 3-1: Using ep0 maxpacket: 16
[  422.687368][ T7155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.773402][ T7346] FAULT_INJECTION: forcing a failure.
[  422.773402][ T7346] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  422.787244][ T7346] CPU: 0 UID: 0 PID: 7346 Comm: syz.0.404 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  422.787389][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  422.787462][ T7346] Call Trace:
[  422.787508][ T7346]  <TASK>
[  422.787556][ T7346]  __dump_stack+0x26/0x30
[  422.787711][ T7346]  dump_stack_lvl+0x1df/0x270
[  422.787873][ T7346]  dump_stack+0x1e/0x25
[  422.788005][ T7346]  should_fail_ex+0x7dc/0x8a0
[  422.788174][ T7346]  should_fail_alloc_page+0x222/0x240
[  422.788361][ T7346]  __alloc_frozen_pages_noprof+0x30f/0xf00
[  422.788562][ T7346]  alloc_pages_mpol+0x328/0x860
[  422.788758][ T7346]  folio_alloc_mpol_noprof+0x56/0x1d0
[  422.788926][ T7346]  ? get_task_policy+0xf6/0x140
[  422.789085][ T7346]  shmem_alloc_and_add_folio+0xcd7/0x1ca0
[  422.789225][ T7346]  ? shmem_huge_global_enabled+0x27f/0x590
[  422.789410][ T7346]  shmem_get_folio_gfp+0xad3/0x1fb0
[  422.789579][ T7346]  shmem_write_begin+0x151/0x430
[  422.789737][ T7346]  ? __pfx_shmem_write_begin+0x10/0x10
[  422.789871][ T7346]  generic_perform_write+0x3f7/0x10c0
[  422.790076][ T7346]  shmem_file_write_iter+0x2b7/0x2f0
[  422.790252][ T7346]  vfs_write+0xb4b/0x1580
[  422.790441][ T7346]  ? __pfx_shmem_file_write_iter+0x10/0x10
[  422.790612][ T7346]  __x64_sys_write+0x1fb/0x4d0
[  422.790810][ T7346]  x64_sys_call+0x38c3/0x3db0
[  422.790976][ T7346]  do_syscall_64+0xd9/0x210
[  422.791106][ T7346]  ? irqentry_exit+0x16/0x60
[  422.791275][ T7346]  ? clear_bhb_loop+0x40/0x90
[  422.791419][ T7346]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.791557][ T7346] RIP: 0033:0x7fdf44d8d3df
[  422.791653][ T7346] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  422.791770][ T7346] RSP: 002b:00007fdf45b14df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  422.791892][ T7346] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007fdf44d8d3df
[  422.791985][ T7346] RDX: 0000000000010000 RSI: 00007fdf3a600000 RDI: 0000000000000001
[  422.792070][ T7346] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000028b
[  422.792151][ T7346] R10: 00000000000001d2 R11: 0000000000000293 R12: 0000000000000001
[  422.792233][ T7346] R13: 00007fdf45b14ef0 R14: 00007fdf45b14eb0 R15: 00007fdf3a600000
[  422.792355][ T7346]  </TASK>
[  423.348079][ T5856] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  423.357994][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  423.366597][ T5856] usb 3-1: Product: syz
[  423.371167][ T5856] usb 3-1: Manufacturer: syz
[  423.376018][ T5856] usb 3-1: SerialNumber: syz
[  423.455650][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.476311][ T5856] usb 3-1: config 0 descriptor??
[  423.737464][ T5856] usb 3-1: USB disconnect, device number 10
[  423.787540][ T7352] loop4: detected capacity change from 0 to 64
[  424.020567][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  424.020637][   T30] audit: type=1800 audit(1751384200.051:43): pid=7352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.405" name="file1" dev="loop4" ino=21 res=0 errno=0
[  424.028257][   T49] Bluetooth: hci1: unexpected event for opcode 0x2016
[  424.528425][ T7361] FAULT_INJECTION: forcing a failure.
[  424.528425][ T7361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  424.542619][ T7361] CPU: 1 UID: 0 PID: 7361 Comm: syz.0.407 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  424.542768][ T7361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  424.542847][ T7361] Call Trace:
[  424.542894][ T7361]  <TASK>
[  424.542940][ T7361]  __dump_stack+0x26/0x30
[  424.543100][ T7361]  dump_stack_lvl+0x1df/0x270
[  424.543263][ T7361]  dump_stack+0x1e/0x25
[  424.543405][ T7361]  should_fail_ex+0x7dc/0x8a0
[  424.543579][ T7361]  should_fail+0x2a/0x40
[  424.543712][ T7361]  should_fail_usercopy+0x2e/0x40
[  424.543868][ T7361]  _copy_from_user+0x33/0x100
[  424.544014][ T7361]  ___sys_sendmsg+0x11b/0x3b0
[  424.544177][ T7361]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  424.544370][ T7361]  ? __rcu_read_unlock+0x6d/0xd0
[  424.544507][ T7361]  ? __fget_files+0x3b4/0x4a0
[  424.544638][ T7361]  ? __fget_files+0x3b9/0x4a0
[  424.544769][ T7361]  ? kmsan_get_metadata+0xfb/0x160
[  424.544941][ T7361]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  424.545127][ T7361]  __x64_sys_sendmsg+0x211/0x3e0
[  424.545262][ T7361]  ? fput+0x113/0x160
[  424.545393][ T7361]  ? kmsan_get_metadata+0xfb/0x160
[  424.545572][ T7361]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  424.545744][ T7361]  ? kmsan_get_metadata+0xfb/0x160
[  424.545935][ T7361]  x64_sys_call+0x32fb/0x3db0
[  424.546098][ T7361]  do_syscall_64+0xd9/0x210
[  424.546230][ T7361]  ? irqentry_exit+0x16/0x60
[  424.546394][ T7361]  ? clear_bhb_loop+0x40/0x90
[  424.546545][ T7361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.546681][ T7361] RIP: 0033:0x7fdf44d8e929
[  424.546780][ T7361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  424.546895][ T7361] RSP: 002b:00007fdf45b36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  424.547022][ T7361] RAX: ffffffffffffffda RBX: 00007fdf44fb5fa0 RCX: 00007fdf44d8e929
[  424.547117][ T7361] RDX: 0000000020008080 RSI: 0000200000000100 RDI: 0000000000000003
[  424.547203][ T7361] RBP: 00007fdf45b36090 R08: 0000000000000000 R09: 0000000000000000
[  424.547285][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.547364][ T7361] R13: 0000000000000000 R14: 00007fdf44fb5fa0 R15: 00007ffcb7ff8f38
[  424.547484][ T7361]  </TASK>
[  425.552656][ T7371] loop0: detected capacity change from 0 to 1024
[  426.139859][ T4867] hfsplus: b-tree write err: -5, ino 4
[  427.164059][ T7399] usb usb8: usbfs: process 7399 (syz.0.416) did not claim interface 0 before use
[  427.812654][ T7388] loop1: detected capacity change from 0 to 4096
[  427.900154][ T7405] FAULT_INJECTION: forcing a failure.
[  427.900154][ T7405] name failslab, interval 1, probability 0, space 0, times 0
[  427.915177][ T7405] CPU: 0 UID: 0 PID: 7405 Comm: syz.0.417 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  427.915323][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  427.915401][ T7405] Call Trace:
[  427.915448][ T7405]  <TASK>
[  427.915497][ T7405]  __dump_stack+0x26/0x30
[  427.915658][ T7405]  dump_stack_lvl+0x1df/0x270
[  427.915905][ T7405]  dump_stack+0x1e/0x25
[  427.916089][ T7405]  should_fail_ex+0x7dc/0x8a0
[  427.916259][ T7405]  should_failslab+0x15b/0x200
[  427.916445][ T7405]  kmem_cache_alloc_noprof+0xf0/0xec0
[  427.916579][ T7405]  ? alloc_file_pseudo_noaccount+0x208/0x640
[  427.916750][ T7405]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  427.916914][ T7405]  ? kmsan_get_metadata+0xfb/0x160
[  427.917109][ T7405]  alloc_file_pseudo_noaccount+0x208/0x640
[  427.917306][ T7405]  bdev_file_open_by_dev+0x2cf/0x590
[  427.917501][ T7405]  setup_bdev_super+0x72/0xad0
[  427.917670][ T7405]  ? kmsan_get_metadata+0xfb/0x160
[  427.917843][ T7405]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  427.918037][ T7405]  get_tree_bdev_flags+0x564/0x920
[  427.918215][ T7405]  ? __pfx_cramfs_blkdev_fill_super+0x10/0x10
[  427.918390][ T7405]  ? __pfx_cramfs_blkdev_fill_super+0x10/0x10
[  427.918557][ T7405]  ? __pfx_cramfs_get_tree+0x10/0x10
[  427.918716][ T7405]  get_tree_bdev+0x38/0x50
[  427.918887][ T7405]  cramfs_get_tree+0x35/0x40
[  427.919044][ T7405]  vfs_get_tree+0xb3/0x5c0
[  427.919224][ T7405]  vfs_cmd_create+0x122/0x360
[  427.919365][ T7405]  vfs_fsconfig_locked+0xe6/0x520
[  427.919511][ T7405]  __se_sys_fsconfig+0xdc8/0x10b0
[  427.919676][ T7405]  __x64_sys_fsconfig+0xe4/0x150
[  427.919824][ T7405]  x64_sys_call+0x46f/0x3db0
[  427.919987][ T7405]  do_syscall_64+0xd9/0x210
[  427.920125][ T7405]  ? irqentry_exit+0x16/0x60
[  427.920293][ T7405]  ? clear_bhb_loop+0x40/0x90
[  427.920423][ T7405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  427.920553][ T7405] RIP: 0033:0x7fdf44d8e929
[  427.920648][ T7405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  427.920753][ T7405] RSP: 002b:00007fdf45b36038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  427.920878][ T7405] RAX: ffffffffffffffda RBX: 00007fdf44fb5fa0 RCX: 00007fdf44d8e929
[  427.920972][ T7405] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  427.921081][ T7405] RBP: 00007fdf45b36090 R08: 0000000000000000 R09: 0000000000000000
[  427.921164][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  427.921244][ T7405] R13: 0000000000000000 R14: 00007fdf44fb5fa0 R15: 00007ffcb7ff8f38
[  427.921363][ T7405]  </TASK>
[  428.086834][   T49] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  428.199444][   T49] Bluetooth: hci1: Injecting HCI hardware error event
[  428.207516][   T49] Bluetooth: hci1: hardware error 0x00
[  428.704323][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.712513][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.883594][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.891996][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  429.269222][ T7410] loop1: detected capacity change from 0 to 512
[  429.307983][ T7410] EXT4-fs: Ignoring removed orlov option
[  429.374636][ T7408] loop0: detected capacity change from 0 to 4096
[  429.418242][ T7410] overlay: ./file1 is not a directory
[  429.459894][ T7410] overlayfs: overlapping lowerdir path
[  429.848032][ T7408] ntfs3(loop0): ino=9, attr_set_size
[  429.888473][ T7414] ntfs3(loop0): ino=9, attr_set_size
[  429.992794][ T7416] netlink: 'syz.4.420': attribute type 10 has an invalid length.
[  430.066101][ T7416] bond0: (slave veth1_to_bond): Enslaving as an active interface with an up link
[  430.403305][   T49] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  430.407106][ T7420] loop1: detected capacity change from 0 to 256
[  430.770643][ T7422] loop4: detected capacity change from 0 to 1024
[  430.942593][ T7424] loop0: detected capacity change from 0 to 512
[  430.970046][ T7422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  431.040684][ T7429] loop1: detected capacity change from 0 to 16
[  431.141509][ T7422] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  431.206989][   T30] audit: type=1800 audit(1751384207.241:44): pid=7431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.423" name="bus" dev="loop4" ino=19 res=0 errno=0
[  432.458369][   T30] audit: type=1800 audit(1751384208.491:45): pid=7422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.423" name="file2" dev="loop4" ino=20 res=0 errno=0
[  432.604427][ T7434] loop1: detected capacity change from 0 to 4096
[  432.804467][ T5790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  433.151144][ T7441] netlink: 'syz.4.428': attribute type 13 has an invalid length.
[  433.625670][ T7449] loop4: detected capacity change from 0 to 256
[  433.658848][ T7449] exfat: Bad value for 'gid'
[  433.663916][ T7449] exfat: Bad value for 'gid'
[  433.788524][ T7451] binder: 7450:7451 ioctl c0306201 200000000640 returned -22
[  434.143078][ T7454] loop5: detected capacity change from 0 to 2048
[  434.601216][ T7464] loop1: detected capacity change from 0 to 16
[  434.760643][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  434.947654][    T9] usb 6-1: device descriptor read/64, error -71
[  435.190803][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  435.360978][    T9] usb 6-1: device descriptor read/64, error -71
[  435.481322][    T9] usb usb6-port1: attempt power cycle
[  435.521420][   T42] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  435.690741][   T42] usb 3-1: Using ep0 maxpacket: 8
[  435.709320][   T42] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  435.722868][   T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.742934][   T42] usb 3-1: config 0 descriptor??
[  435.853486][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  435.880912][ T5853] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  435.883123][    T9] usb 6-1: device descriptor read/8, error -71
[  436.040774][ T5853] usb 1-1: device descriptor read/64, error -71
[  436.145061][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  436.154870][ T7462] loop4: detected capacity change from 0 to 32768
[  436.166185][ T7462] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.435 (7462)
[  436.190187][    T9] usb 6-1: device descriptor read/8, error -71
[  436.206055][ T7462] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  436.217248][ T7462] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  436.232909][ T7462] workqueue: max_active 16777219 requested for btrfs-worker is out of range, clamping between 1 and 2048
[  436.248792][ T7462] workqueue: max_active 16777219 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[  436.269983][ T7462] workqueue: max_active 16777219 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  436.286139][ T7462] workqueue: max_active 16777219 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  436.302130][ T5853] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  436.307799][    T9] usb usb6-port1: unable to enumerate USB device
[  436.332248][ T7462] workqueue: max_active 16777219 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[  436.356713][ T7462] workqueue: max_active 16777219 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[  436.394391][ T7462] workqueue: max_active 16777219 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[  436.450894][ T5853] usb 1-1: device descriptor read/64, error -71
[  436.565293][ T5853] usb usb1-port1: attempt power cycle
[  436.573161][ T7462] BTRFS info (device loop4): rebuilding free space tree
[  436.648282][ T7462] BTRFS info (device loop4): disabling free space tree
[  436.656391][ T7462] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  436.666583][ T7462] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  436.950883][ T5853] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  436.993294][ T5853] usb 1-1: device descriptor read/8, error -71
[  437.188136][ T5790] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  437.229946][   T30] audit: type=1326 audit(1751384213.251:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.5.444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9425f8e929 code=0x0
[  437.231046][ T5853] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  437.395908][ T5853] usb 1-1: device descriptor read/8, error -71
[  437.420560][ T7500] loop5: detected capacity change from 0 to 4096
[  437.431441][ T7500] ntfs3: Unknown parameter ''
[  437.517706][ T5853] usb usb1-port1: unable to enumerate USB device
[  438.035072][   T42] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  438.046547][   T42] asix 3-1:0.0: probe with driver asix failed with error -71
[  438.065950][   T42] usb 3-1: USB disconnect, device number 11
[  438.448989][   T30] audit: type=1326 audit(1751384214.481:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.5.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  438.472064][   T30] audit: type=1326 audit(1751384214.481:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.5.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  438.476713][ T7504] macvlan2: entered promiscuous mode
[  438.507013][ T7504] macvlan2: entered allmulticast mode
[  438.517805][   T30] audit: type=1326 audit(1751384214.561:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.5.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  438.541448][   T30] audit: type=1326 audit(1751384214.561:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.5.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  438.564191][   T30] audit: type=1326 audit(1751384214.561:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.5.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  438.591221][   T30] audit: type=1326 audit(1751384214.561:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.5.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  438.615586][   T30] audit: type=1326 audit(1751384214.581:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.5.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  438.638426][   T30] audit: type=1326 audit(1751384214.581:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.5.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  438.661881][   T30] audit: type=1326 audit(1751384214.611:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7501 comm="syz.5.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  439.012147][ T7494] loop1: detected capacity change from 0 to 32768
[  439.023361][ T7494] bcachefs (/dev/loop1): error reading superblock: error opening /dev/loop1: EACCES
[  439.033709][ T7494] bcachefs: bch2_fs_get_tree() error: EACCES
[  440.452336][ T7522] loop5: detected capacity change from 0 to 128
[  446.142450][ T7558] binder: Bad value for 'stats'
[  446.707276][ T7562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'.
[  446.732621][ T7562] ip6gre1: entered allmulticast mode
[  449.449178][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  449.449256][   T30] audit: type=1326 audit(2000000007.609:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca398e929 code=0x7ffc0000
[  449.479121][   T30] audit: type=1326 audit(2000000007.609:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f0ca398e929 code=0x7ffc0000
[  449.502754][   T30] audit: type=1326 audit(2000000007.609:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca398e929 code=0x7ffc0000
[  449.732075][   T30] audit: type=1326 audit(2000000007.899:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7570 comm="syz.2.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca398e929 code=0x7ffc0000
[  450.895315][ T7580] loop4: detected capacity change from 0 to 2048
[  451.039187][   T30] audit: type=1326 audit(2000000009.119:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca398e929 code=0x7ffc0000
[  451.062969][   T30] audit: type=1326 audit(2000000009.119:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ca398e929 code=0x7ffc0000
[  451.089927][   T30] audit: type=1326 audit(2000000009.119:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca398e929 code=0x7ffc0000
[  451.114125][   T30] audit: type=1326 audit(2000000009.129:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f0ca398e929 code=0x7ffc0000
[  451.137068][   T30] audit: type=1326 audit(2000000009.129:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca398e929 code=0x7ffc0000
[  451.160336][   T30] audit: type=1326 audit(2000000009.139:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ca398e929 code=0x7ffc0000
[  451.413563][ T7584] input: syz1 as /devices/virtual/input/input40
[  451.561190][ T7580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  451.574287][ T7580] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.812478][ T5790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  453.362361][ T7600] fuse: Bad value for 'fd'
[  455.253711][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  455.253816][   T30] audit: type=1326 audit(2000000012.519:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf44d8e929 code=0x7ffc0000
[  455.289443][   T30] audit: type=1326 audit(2000000012.519:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf44d8e929 code=0x7ffc0000
[  455.312973][   T30] audit: type=1326 audit(2000000012.529:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdf44d8e929 code=0x7ffc0000
[  455.335796][   T30] audit: type=1326 audit(2000000012.529:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf44d8e929 code=0x7ffc0000
[  455.358640][   T30] audit: type=1326 audit(2000000012.529:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf44d8e929 code=0x7ffc0000
[  455.387417][   T30] audit: type=1326 audit(2000000012.529:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdf44d8e929 code=0x7ffc0000
[  455.410470][   T30] audit: type=1326 audit(2000000012.539:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf44d8e929 code=0x7ffc0000
[  455.433388][   T30] audit: type=1326 audit(2000000012.539:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf44d8e929 code=0x7ffc0000
[  455.456488][   T30] audit: type=1326 audit(2000000012.539:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7599 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fdf44d8e929 code=0x7ffc0000
[  456.256361][ T7607] ip6gre1: entered allmulticast mode
[  457.708574][ T7613] loop1: detected capacity change from 0 to 2048
[  463.432725][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  463.690721][    T9] usb 6-1: Using ep0 maxpacket: 8
[  463.961222][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  463.971620][    T9] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  463.985349][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.263476][    T9] usb 6-1: config 0 descriptor??
[  465.225300][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  465.888486][    T9] usb 6-1: can't set config #0, error -71
[  465.975852][    T9] usb 6-1: USB disconnect, device number 6
[  466.552256][ T7650] process 'syz.2.488' launched './file0' with NULL argv: empty string added
[  466.748813][   T30] audit: type=1326 audit(2000000253.904:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  466.772093][   T30] audit: type=1326 audit(2000000253.904:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  466.794929][   T30] audit: type=1326 audit(2000000253.904:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  467.010576][   T30] audit: type=1326 audit(2000000254.044:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  467.033823][   T30] audit: type=1326 audit(2000000254.054:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  467.061288][   T30] audit: type=1326 audit(2000000254.064:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4db538e52b code=0x7ffc0000
[  467.085708][   T30] audit: type=1326 audit(2000000254.064:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  467.110712][   T30] audit: type=1326 audit(2000000254.064:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  467.133677][   T30] audit: type=1326 audit(2000000254.064:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.4.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4db538e929 code=0x7ffc0000
[  467.161513][   T30] audit: type=1326 audit(2000000254.144:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7653 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  469.913726][ T7676] loop4: detected capacity change from 0 to 256
[  473.109714][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  475.430893][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'.
[  478.077331][ T7712] loop1: detected capacity change from 0 to 512
[  479.434658][ T7723] loop4: detected capacity change from 0 to 512
[  479.586420][ T7723] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.514: casefold flag without casefold feature
[  479.691162][ T7723] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.514: couldn't read orphan inode 15 (err -117)
[  479.752896][ T7723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.511711][ T5790] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.635508][ T7738] loop1: detected capacity change from 0 to 2048
[  482.809847][ T7738]  loop1: p1 < > p3
[  482.891826][ T7738] loop1: p3 size 134217728 extends beyond EOD, truncated
[  485.120953][ T5853] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  485.460780][ T5853] usb 6-1: Using ep0 maxpacket: 32
[  485.509454][ T5853] usb 6-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac
[  485.519087][ T5853] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.932542][ T5853] usb 6-1: config 0 descriptor??
[  485.954406][ T5853] gl620a 6-1:0.0: probe with driver gl620a failed with error -22
[  491.253437][ T7760] tipc: Started in network mode
[  491.258664][ T7760] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  491.266767][ T7760] tipc: Enabled bearer <eth:team0>, priority 0
[  492.197964][    T9] usb 6-1: USB disconnect, device number 7
[  492.404914][ T7764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.525'.
[  493.231993][ T5856] tipc: Node number set to 11578026
[  493.900716][ T1561] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  494.138509][ T1561] usb 3-1: unable to get BOS descriptor or descriptor too short
[  494.237515][ T1561] usb 3-1: not running at top speed; connect to a high speed hub
[  494.336984][ T1561] usb 3-1: config 0 has no interfaces?
[  494.382482][ T1561] usb 3-1: language id specifier not provided by device, defaulting to English
[  494.563305][ T1561] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  494.573136][ T1561] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.581614][ T1561] usb 3-1: Product: syz
[  494.586162][ T1561] usb 3-1: Manufacturer: ꙱鿎䋼�䒦嚢�Ⅵෲ剩樾��䧕䌽ࡺﲂ砣ᓨ貣鶲৽㳈砶焰ᥑ�喝娿衚疇䄡㤎퀾磉픱푎矺㚽膥氦㊦
[  494.607017][ T1561] usb 3-1: SerialNumber: syz
[  494.780615][ T1561] usb 3-1: config 0 descriptor??
[  495.067573][    T9] usb 3-1: USB disconnect, device number 12
[  495.198485][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  495.231499][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  495.245390][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  495.275424][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  495.293818][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  495.959047][ T7777] pim6reg1: entered promiscuous mode
[  495.964995][ T7777] pim6reg1: entered allmulticast mode
[  496.193425][ T7774] chnl_net:caif_netlink_parms(): no params data found
[  497.366197][   T49] Bluetooth: hci4: command tx timeout
[  497.886430][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.894421][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state
[  497.902679][ T7774] bridge_slave_0: entered allmulticast mode
[  497.914343][ T7774] bridge_slave_0: entered promiscuous mode
[  498.055659][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.063539][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.071602][ T7774] bridge_slave_1: entered allmulticast mode
[  498.087593][ T7774] bridge_slave_1: entered promiscuous mode
[  498.611770][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  498.711187][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.060101][ T7791] loop1: detected capacity change from 0 to 1024
[  499.067645][ T7774] team0: Port device team_slave_0 added
[  499.132453][ T7774] team0: Port device team_slave_1 added
[  499.291681][ T5797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  499.320194][ T5797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  499.333999][ T5797] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  499.417772][ T5797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  499.439338][ T5797] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  499.441836][ T5791] Bluetooth: hci4: command tx timeout
[  499.472954][    T9] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  499.528028][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.536022][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.563018][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.582227][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.589419][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.621491][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.893189][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  499.904537][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  499.923785][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  499.934495][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.075302][    T9] usb 2-1: config 0 descriptor??
[  500.083329][ T7791] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  500.578645][    T9] logitech-djreceiver 0003:046D:C71B.0003: unbalanced collection at end of report description
[  500.671441][    T9] logitech-djreceiver 0003:046D:C71B.0003: logi_dj_probe: parse failed
[  500.680777][    T9] logitech-djreceiver 0003:046D:C71B.0003: probe with driver logitech-djreceiver failed with error -22
[  500.784212][    T9] usb 2-1: USB disconnect, device number 18
[  501.452787][ T7774] hsr_slave_0: entered promiscuous mode
[  501.478459][ T7774] hsr_slave_1: entered promiscuous mode
[  501.487668][ T7774] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  501.495795][ T7774] Cannot create hsr debugfs directory
[  501.551580][   T49] Bluetooth: hci4: command tx timeout
[  501.566152][ T5791] Bluetooth: hci6: command tx timeout
[  502.437207][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'.
[  502.520990][ T7806] loop1: detected capacity change from 0 to 128
[  503.669151][ T5791] Bluetooth: hci4: command tx timeout
[  503.674933][ T5791] Bluetooth: hci6: command tx timeout
[  503.681653][ T5853] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  506.144090][   T49] Bluetooth: hci6: command tx timeout
[  506.991642][ T7792] chnl_net:caif_netlink_parms(): no params data found
[  507.752947][ T7774] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  507.911335][ T7774] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  508.013456][ T7774] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  508.126714][ T7774] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  508.162343][   T49] Bluetooth: hci6: command tx timeout
[  510.246493][ T7818] loop5: detected capacity change from 0 to 2048
[  512.851353][ T7818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  515.114101][ T7835] loop1: detected capacity change from 0 to 512
[  515.239944][ T7792] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.253678][ T7792] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.261983][ T7792] bridge_slave_0: entered allmulticast mode
[  515.271526][ T7792] bridge_slave_0: entered promiscuous mode
[  515.494054][ T7633] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.626899][ T7792] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.635083][ T7792] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.643039][ T7792] bridge_slave_1: entered allmulticast mode
[  515.652452][ T7792] bridge_slave_1: entered promiscuous mode
[  515.685080][ T7835] loop1: detected capacity change from 0 to 512
[  515.896847][ T7633] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.852033][ T7633] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.703022][ T7792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.734834][ T7792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.598861][ T7633] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.676459][ T7155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.987925][ T7792] team0: Port device team_slave_0 added
[  521.027789][ T7774] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.181847][ T7792] team0: Port device team_slave_1 added
[  524.105167][ T5791] Bluetooth: hci5: command 0x0406 tx timeout
[  524.409696][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  524.417326][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.445407][ T7792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  524.503097][ T7633] bridge_slave_1: left allmulticast mode
[  524.509378][ T7633] bridge_slave_1: left promiscuous mode
[  524.518375][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state
[  524.641490][ T7633] bridge_slave_0: left allmulticast mode
[  524.647411][ T7633] bridge_slave_0: left promiscuous mode
[  524.654553][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.806272][   T30] kauditd_printk_skb: 52 callbacks suppressed
[  525.806346][   T30] audit: type=1326 audit(2000000312.964:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  525.978364][   T30] audit: type=1326 audit(2000000313.044:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  526.301200][   T30] audit: type=1326 audit(2000000313.404:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7b52dc11e5 code=0x7ffc0000
[  526.324263][   T30] audit: type=1326 audit(2000000313.404:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  526.351119][   T30] audit: type=1326 audit(2000000313.404:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  526.377615][ T7633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.552040][ T7633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.636178][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  526.789359][ T7633] bond0 (unregistering): (slave veth1_to_bond): Releasing backup interface
[  526.891095][ T7633] bond0 (unregistering): Released all slaves
[  527.105304][ T7792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  527.112700][ T7792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  527.139572][ T7792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  527.236077][   T30] audit: type=1326 audit(2000000313.554:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7865 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  527.263024][   T30] audit: type=1326 audit(2000000313.554:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  527.287444][   T30] audit: type=1326 audit(2000000313.564:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  527.310429][   T30] audit: type=1326 audit(2000000313.564:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  527.333582][   T30] audit: type=1326 audit(2000000313.564:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.1.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  527.705319][ T7774] 8021q: adding VLAN 0 to HW filter on device team0
[  527.912506][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.920104][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.311430][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.319063][ T3680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  529.384571][ T7792] hsr_slave_0: entered promiscuous mode
[  529.395237][ T7792] hsr_slave_1: entered promiscuous mode
[  529.404069][ T7792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  529.416903][ T7792] Cannot create hsr debugfs directory
[  529.931696][ T7633] hsr_slave_0: left promiscuous mode
[  529.957411][ T7633] hsr_slave_1: left promiscuous mode
[  529.967466][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  529.975577][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.067805][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.078736][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.194058][ T7633] veth1_macvtap: left promiscuous mode
[  530.199851][ T7633] veth0_macvtap: left promiscuous mode
[  530.208668][ T7633] veth1_vlan: left promiscuous mode
[  530.214376][ T7633] veth0_vlan: left promiscuous mode
[  531.569324][ T7633] team0 (unregistering): Port device team_slave_1 removed
[  531.616974][ T7633] team0 (unregistering): Port device team_slave_0 removed
[  533.004036][ T1141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.061559][ T7881] binder: 7880:7881 ioctl 4020ae46 7f7b53b9bf90 returned -22
[  533.070607][ T7881] binder: 7880:7881 ioctl 4020ae46 7f7b53b9bf90 returned -22
[  533.113293][ T7881] binder: 7880:7881 ioctl 4020ae46 7f7b53b9bf90 returned -22
[  533.131119][ T7881] binder: 7880:7881 ioctl 4020ae46 7f7b53b9bf90 returned -22
[  533.162879][ T7881] binder: 7880:7881 ioctl 4020ae46 7f7b53b9bf90 returned -22
[  533.188617][ T1141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.191322][ T7881] binder: 7880:7881 ioctl 4020ae46 7f7b53b9bf90 returned -22
[  533.231266][ T7881] binder: 7880:7881 ioctl 4020ae46 7f7b53b9bf90 returned -22
[  533.280818][ T7881] binder: 7880:7881 ioctl 4020ae46 7f7b53b9bf90 returned -22
[  533.326050][ T1141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.496681][ T1141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.900816][ T7792] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  533.931084][ T7883] loop5: detected capacity change from 0 to 8192
[  533.962640][ T7792] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  534.027075][ T1141] bridge_slave_0: left allmulticast mode
[  534.033262][ T1141] bridge_slave_0: left promiscuous mode
[  534.040038][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.582229][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  534.622840][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  534.671770][ T1141] bond0 (unregistering): Released all slaves
[  534.692923][ T7892] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  534.702596][ T7892] FAT-fs (loop5): Filesystem has been set read-only
[  534.766879][ T7792] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  534.832326][ T7792] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  534.956333][ T7774] 8021q: adding VLAN 0 to HW filter on device batadv0
[  535.502846][ T1141] hsr_slave_0: left promiscuous mode
[  535.533108][ T1141] hsr_slave_1: left promiscuous mode
[  535.541540][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  535.549350][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0
[  535.624157][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  535.632822][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1
[  535.740951][ T1141] veth1_macvtap: left promiscuous mode
[  535.746742][ T1141] veth0_macvtap: left promiscuous mode
[  535.755428][ T1141] veth1_vlan: left promiscuous mode
[  535.764186][ T1141] veth0_vlan: left promiscuous mode
[  536.528896][ T1141] team0 (unregistering): Port device team_slave_1 removed
[  536.565548][ T1141] team0 (unregistering): Port device team_slave_0 removed
[  537.581265][ T7792] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.754117][ T7792] 8021q: adding VLAN 0 to HW filter on device team0
[  537.824720][ T3680] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.833532][ T3680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.976523][ T3680] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.984205][ T3680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  538.244517][ T7792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  538.929770][ T7774] veth0_vlan: entered promiscuous mode
[  539.008560][ T7774] veth1_vlan: entered promiscuous mode
[  539.272654][ T7774] veth0_macvtap: entered promiscuous mode
[  539.332370][ T7774] veth1_macvtap: entered promiscuous mode
[  539.478300][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_0
[  539.582488][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_1
[  539.670689][ T7774] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  539.680946][ T7774] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  539.690387][ T7774] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  539.699582][ T7774] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  540.927853][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  541.223704][   T24] usb 2-1: Using ep0 maxpacket: 32
[  541.272265][   T24] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=b2.ac
[  541.283392][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.532903][ T7792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.572761][   T24] usb 2-1: config 0 descriptor??
[  541.614691][   T24] gl620a 2-1:0.0: probe with driver gl620a failed with error -22
[  549.137281][   T42] usb 2-1: USB disconnect, device number 19
[  550.398360][ T7956] tipc: Started in network mode
[  550.406617][ T7956] tipc: Node identity 6e2d1ab113ef, cluster identity 4711
[  550.415876][ T7956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  550.439473][ T7956] tipc: Disabling bearer <eth:syzkaller0>
[  551.283632][ T7960] loop5: detected capacity change from 0 to 512
[  551.380967][ T7792] veth0_vlan: entered promiscuous mode
[  551.502337][ T7792] veth1_vlan: entered promiscuous mode
[  552.240085][ T7792] veth0_macvtap: entered promiscuous mode
[  552.423443][ T7792] veth1_macvtap: entered promiscuous mode
[  552.745824][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  552.903112][ T7792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.070113][ T7792] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.080195][ T7792] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.089538][ T7792] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.098784][ T7792] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.484769][ T7960] EXT4-fs: Ignoring removed nomblk_io_submit option
[  553.491970][ T7960] ext4: Unknown parameter 'subj_user'
[  559.087438][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  559.101261][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  559.133099][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  559.182432][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  559.206718][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  559.755945][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  559.767806][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  559.783654][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  559.840498][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  559.901129][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  560.508421][ T8012] loop1: detected capacity change from 0 to 512
[  560.643493][ T8012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  561.291792][ T5791] Bluetooth: hci0: command tx timeout
[  562.558714][ T5791] Bluetooth: hci1: command tx timeout
[  563.558500][ T5791] Bluetooth: hci0: command tx timeout
[  564.914986][ T5791] Bluetooth: hci1: command tx timeout
[  564.963852][ T7994] chnl_net:caif_netlink_parms(): no params data found
[  565.623271][ T5791] Bluetooth: hci0: command tx timeout
[  565.981466][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  565.981547][   T30] audit: type=1107 audit(2000000353.134:227): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  567.072220][ T5791] Bluetooth: hci1: command tx timeout
[  567.895952][ T5791] Bluetooth: hci0: command tx timeout
[  569.139216][ T5791] Bluetooth: hci1: command tx timeout
[  569.235756][ T7633] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  569.757693][ T7633] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.143682][ T7633] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.246273][ T8033] kernel profiling enabled (shift: 16)
[  570.275300][ T8001] chnl_net:caif_netlink_parms(): no params data found
[  570.511685][ T7633] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  570.568059][ T7994] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.579486][ T7994] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.588081][ T7994] bridge_slave_0: entered allmulticast mode
[  570.598292][ T7994] bridge_slave_0: entered promiscuous mode
[  571.051182][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.059117][ T7994] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.067225][ T7994] bridge_slave_1: entered allmulticast mode
[  571.076787][ T7994] bridge_slave_1: entered promiscuous mode
[  573.214301][ T8049] loop5: detected capacity change from 0 to 512
[  574.403448][ T8049] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  574.436517][ T7633] bridge_slave_1: left allmulticast mode
[  574.443272][ T7633] bridge_slave_1: left promiscuous mode
[  574.450030][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.521899][ T8049] EXT4-fs (loop5): invalid journal inode
[  575.441779][ T7633] bridge_slave_0: left allmulticast mode
[  575.447805][ T7633] bridge_slave_0: left promiscuous mode
[  575.455114][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.944640][ T7633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  576.977933][ T7633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  577.004065][ T7633] bond0 (unregistering): Released all slaves
[  577.055154][ T7994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.143543][ T7994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  577.467312][ T7633] hsr_slave_0: left promiscuous mode
[  577.473742][ T7633] hsr_slave_1: left promiscuous mode
[  577.476544][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  577.476718][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0
[  577.479948][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  577.480094][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_1
[  577.528777][ T7633] veth1_macvtap: left promiscuous mode
[  577.529068][ T7633] veth0_macvtap: left promiscuous mode
[  577.529489][ T7633] veth1_vlan: left promiscuous mode
[  577.529725][ T7633] veth0_vlan: left promiscuous mode
[  578.572553][ T7633] team0 (unregistering): Port device team_slave_1 removed
[  578.649265][ T7633] team0 (unregistering): Port device team_slave_0 removed
[  579.076123][ T7994] team0: Port device team_slave_0 added
[  579.199578][ T7994] team0: Port device team_slave_1 added
[  579.490185][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  579.498640][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.528830][    C0] vkms_vblank_simulate: vblank timer overrun
[  579.537951][ T7994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  579.552820][ T1674] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  579.608735][ T7994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  579.616559][ T7994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  579.645588][ T7994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  579.674930][ T8001] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.684429][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state
[  579.697520][ T8001] bridge_slave_0: entered allmulticast mode
[  579.707702][ T8001] bridge_slave_0: entered promiscuous mode
[  579.746084][ T8001] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.754390][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.762873][ T8001] bridge_slave_1: entered allmulticast mode
[  579.773345][ T8001] bridge_slave_1: entered promiscuous mode
[  579.795600][ T1674] usb 2-1: Using ep0 maxpacket: 32
[  579.838778][ T1674] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  579.849091][ T1674] usb 2-1: config 0 has no interface number 0
[  579.856382][ T1674] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  579.868775][ T1674] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  579.879456][ T1674] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  579.889552][ T1674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.919628][ T7633] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.956733][ T1674] usb 2-1: config 0 descriptor??
[  580.135408][ T7633] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.247493][ T8001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  580.379098][ T7633] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.463149][ T8001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  580.591360][ T7633] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.718195][ T7994] hsr_slave_0: entered promiscuous mode
[  580.735261][ T7994] hsr_slave_1: entered promiscuous mode
[  580.751131][ T1674] uclogic 0003:28BD:0094.0004: pen parameters not found
[  580.758866][ T1674] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring
[  580.888281][ T8001] team0: Port device team_slave_0 added
[  580.920095][ T8001] team0: Port device team_slave_1 added
[  580.931845][   T42] usb 2-1: USB disconnect, device number 20
[  581.109774][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  581.117470][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.148523][ T8001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  581.241248][ T8001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  581.248768][ T8001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  581.277325][    C0] vkms_vblank_simulate: vblank timer overrun
[  581.284481][ T8001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  581.474022][ T7633] bridge_slave_1: left allmulticast mode
[  581.480011][ T7633] bridge_slave_1: left promiscuous mode
[  581.487258][ T7633] bridge0: port 2(bridge_slave_1) entered disabled state
[  581.563997][ T7633] bridge_slave_0: left allmulticast mode
[  581.569915][ T7633] bridge_slave_0: left promiscuous mode
[  581.577709][ T7633] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.185163][ T7633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  582.221902][ T7633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  582.289904][ T7633] bond0 (unregistering): Released all slaves
[  582.448854][ T8001] hsr_slave_0: entered promiscuous mode
[  582.463037][ T8001] hsr_slave_1: entered promiscuous mode
[  582.474088][ T8001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  582.482056][ T8001] Cannot create hsr debugfs directory
[  582.715610][ T7633] hsr_slave_0: left promiscuous mode
[  582.738220][ T7633] hsr_slave_1: left promiscuous mode
[  582.746751][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.754687][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0
[  582.808648][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  582.817023][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_1
[  582.905581][ T7633] veth1_macvtap: left promiscuous mode
[  582.911746][ T7633] veth0_macvtap: left promiscuous mode
[  582.917720][ T7633] veth1_vlan: left promiscuous mode
[  582.923489][ T7633] veth0_vlan: left promiscuous mode
[  583.470467][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'.
[  583.537454][ T8095] netlink: 36 bytes leftover after parsing attributes in process `syz.1.602'.
[  584.438870][ T8098] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  584.839499][ T8101] loop5: detected capacity change from 0 to 512
[  585.083873][ T8101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  585.097268][ T8101] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  585.127921][ T7633] team0 (unregistering): Port device team_slave_1 removed
[  585.176118][ T8101] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.606: corrupted inode contents
[  585.202450][ T7633] team0 (unregistering): Port device team_slave_0 removed
[  585.317939][ T8101] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.606: mark_inode_dirty error
[  585.344061][ T8101] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.606: corrupted inode contents
[  585.368422][ T8101] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.606: mark_inode_dirty error
[  585.981280][ T7155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.749621][ T7994] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  586.835490][ T7994] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  586.916680][ T7994] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  586.998515][ T7994] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  587.394493][ T8001] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  587.492807][ T8001] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  587.579437][ T8001] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  587.645306][ T8001] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  588.290925][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  588.404632][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  588.802792][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  589.110357][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  589.621999][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  590.031879][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  590.125584][ T7994] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.304412][ T7994] 8021q: adding VLAN 0 to HW filter on device team0
[  590.386414][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.394584][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.488680][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.496807][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.001031][ T8001] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.114498][ T8001] 8021q: adding VLAN 0 to HW filter on device team0
[  591.207260][ T3857] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.215299][ T3857] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.445868][ T3857] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.454037][ T3857] bridge0: port 2(bridge_slave_1) entered forwarding state
[  596.973202][   T30] audit: type=1326 audit(2000000383.604:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  596.999644][   T30] audit: type=1326 audit(2000000383.604:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8155 comm="syz.5.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9425f8e929 code=0x7ffc0000
[  598.800158][ T7994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  598.818358][ T8172] 9pnet_fd: Insufficient options for proto=fd
[  601.178526][ T8001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  601.184711][ T8187] loop5: detected capacity change from 0 to 16
[  601.265315][ T8187] erofs (device loop5): mounted with root inode @ nid 36.
[  601.984891][ T7994] veth0_vlan: entered promiscuous mode
[  602.040663][ T1674] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  602.088318][ T7994] veth1_vlan: entered promiscuous mode
[  602.240130][ T1674] usb 2-1: unable to get BOS descriptor or descriptor too short
[  602.291109][ T1674] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  602.345280][ T7994] veth0_macvtap: entered promiscuous mode
[  602.372921][ T1674] usb 2-1: string descriptor 0 read error: -22
[  602.379822][ T1674] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  602.387809][ T7994] veth1_macvtap: entered promiscuous mode
[  602.389829][ T1674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.502589][ T1674] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  602.577110][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  602.684193][ T7994] batman_adv: batadv0: Interface activated: batadv_slave_1
[  602.740549][ T1674] usb 2-1: USB disconnect, device number 21
[  602.758456][ T7994] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  602.767985][ T7994] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  602.778626][ T7994] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  602.787811][ T7994] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.392095][ T8001] veth0_vlan: entered promiscuous mode
[  603.467866][ T8001] veth1_vlan: entered promiscuous mode
[  603.732441][ T8001] veth0_macvtap: entered promiscuous mode
[  603.803967][ T8001] veth1_macvtap: entered promiscuous mode
[  603.969440][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  604.072803][ T8001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  604.170942][ T8001] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  604.180098][ T8001] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  604.189373][ T8001] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  604.198772][ T8001] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  611.950496][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  612.074095][ T8252] 9pnet_fd: Insufficient options for proto=fd
[  618.360941][ T3680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.369128][ T3680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.442790][ T3680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.451817][ T3680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.006614][ T8273] loop5: detected capacity change from 0 to 512
[  619.221194][ T8273] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.645: bad orphan inode 15
[  619.279581][ T8273] ext4_test_bit(bit=14, block=5) = 0
[  619.287529][ T8273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.458906][ T8273] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.645: reserved inode found cleared - inode=1
[  619.923673][ T7155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.511777][   T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  620.521138][   T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  620.548548][   T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  620.572077][   T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  620.585290][   T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  621.061406][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.646'.
[  622.658396][   T49] Bluetooth: hci4: command tx timeout
[  623.206752][ T8278] chnl_net:caif_netlink_parms(): no params data found
[  623.648438][ T5791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  623.660133][ T5791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  623.684484][   T30] audit: type=1326 audit(2000000410.844:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  623.707436][   T30] audit: type=1326 audit(2000000410.844:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  623.732770][   T30] audit: type=1326 audit(2000000410.874:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  623.756717][   T30] audit: type=1326 audit(2000000410.874:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  623.780767][   T30] audit: type=1326 audit(2000000410.874:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  623.805051][   T30] audit: type=1326 audit(2000000410.894:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  623.851309][ T5791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  623.921102][   T30] audit: type=1326 audit(2000000411.034:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  623.946366][   T30] audit: type=1326 audit(2000000411.054:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  623.971513][   T30] audit: type=1326 audit(2000000411.054:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  623.996153][   T30] audit: type=1326 audit(2000000411.074:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7b52d8e929 code=0x7ffc0000
[  624.084752][ T5791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  624.134419][ T5791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  624.731651][   T49] Bluetooth: hci4: command tx timeout
[  625.376544][ T3857] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.549046][ T3857] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.571654][ T8291] chnl_net:caif_netlink_parms(): no params data found
[  625.785681][ T3857] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  625.959843][ T8278] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.968460][ T8278] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.980711][ T8278] bridge_slave_0: entered allmulticast mode
[  625.990138][ T8278] bridge_slave_0: entered promiscuous mode
[  626.164668][ T8278] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.172677][ T8278] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.184140][ T8278] bridge_slave_1: entered allmulticast mode
[  626.193840][ T8278] bridge_slave_1: entered promiscuous mode
[  626.342962][   T49] Bluetooth: hci6: command tx timeout
[  626.800975][   T49] Bluetooth: hci4: command tx timeout
[  628.422810][   T49] Bluetooth: hci6: command tx timeout
[  628.873641][ T3857] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.911573][ T5791] Bluetooth: hci4: command tx timeout
[  628.957335][ T8278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  629.979002][ T8278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  630.962078][ T5791] Bluetooth: hci6: command tx timeout
[  632.188759][ T3857] bridge_slave_1: left allmulticast mode
[  632.196173][ T3857] bridge_slave_1: left promiscuous mode
[  632.203035][ T3857] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.336771][ T3857] bridge_slave_0: left allmulticast mode
[  632.343734][ T3857] bridge_slave_0: left promiscuous mode
[  632.350811][ T3857] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.260606][ T5791] Bluetooth: hci6: command tx timeout
[  633.454585][ T3857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  633.526429][ T3857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  633.553195][ T3857] bond0 (unregistering): Released all slaves
[  633.592590][ T8278] team0: Port device team_slave_0 added
[  633.763233][ T8278] team0: Port device team_slave_1 added
[  634.017992][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state
[  634.025858][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.034214][ T8291] bridge_slave_0: entered allmulticast mode
[  634.043641][ T8291] bridge_slave_0: entered promiscuous mode
[  634.179970][ T3857] hsr_slave_0: left promiscuous mode
[  634.200554][ T3857] hsr_slave_1: left promiscuous mode
[  634.211627][ T3857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  634.219339][ T3857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  634.232751][ T3857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  634.241217][ T3857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  634.923308][ T3857] veth1_macvtap: left promiscuous mode
[  634.929272][ T3857] veth0_macvtap: left promiscuous mode
[  634.935406][ T3857] veth1_vlan: left promiscuous mode
[  634.941536][ T3857] veth0_vlan: left promiscuous mode
[  634.979600][ T8358] loop5: detected capacity change from 0 to 512
[  635.037461][ T8358] ext4: Unknown parameter 'noacl'
[  637.628876][ T3857] team0 (unregistering): Port device team_slave_1 removed
[  637.716640][ T1561] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  637.785867][ T3857] team0 (unregistering): Port device team_slave_0 removed
[  638.331636][ T1561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  638.343166][ T1561] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  638.353565][ T1561] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  638.365688][ T1561] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.381228][ T1561] usb 2-1: config 0 descriptor??
[  638.407540][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.415509][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.423703][ T8291] bridge_slave_1: entered allmulticast mode
[  638.435495][ T8291] bridge_slave_1: entered promiscuous mode
[  638.508539][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_0
[  638.516298][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  638.543093][ T8278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  638.925223][ T8278] batman_adv: batadv0: Adding interface: batadv_slave_1
[  638.932798][ T8278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  638.959641][ T8278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  639.075357][ T1561] belkin 0003:1020:0006.0005: unknown main item tag 0x0
[  639.086832][ T1561] belkin 0003:1020:0006.0005: unknown main item tag 0x0
[  639.095231][ T1561] belkin 0003:1020:0006.0005: unknown main item tag 0x0
[  639.102786][ T1561] belkin 0003:1020:0006.0005: unknown main item tag 0x0
[  639.110447][ T1561] belkin 0003:1020:0006.0005: unknown main item tag 0x0
[  639.121075][ T1561] belkin 0003:1020:0006.0005: unknown main item tag 0x0
[  639.128396][ T1561] belkin 0003:1020:0006.0005: unknown main item tag 0x0
[  639.203570][ T8291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  639.309488][ T8291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  639.452192][ T1561] belkin 0003:1020:0006.0005: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0
[  639.507856][ T1561] usb 2-1: USB disconnect, device number 22
[  639.997684][ T8278] hsr_slave_0: entered promiscuous mode
[  640.012455][ T8278] hsr_slave_1: entered promiscuous mode
[  640.118848][ T8291] team0: Port device team_slave_0 added
[  640.183329][ T3857] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.295812][ T8291] team0: Port device team_slave_1 added
[  640.401362][ T3857] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.746809][ T3857] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.116682][ T3857] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.225331][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_0
[  641.235389][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  641.263233][ T8291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  641.289802][ T8381] loop5: detected capacity change from 0 to 4096
[  641.605649][ T8381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  641.889298][ T3857] bridge_slave_1: left allmulticast mode
[  641.895481][ T3857] bridge_slave_1: left promiscuous mode
[  641.902084][ T3857] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.991922][ T3857] bridge_slave_0: left allmulticast mode
[  641.997832][ T3857] bridge_slave_0: left promiscuous mode
[  642.005591][ T3857] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.913137][ T3857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  642.962625][ T3857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  643.006726][ T3857] bond0 (unregistering): Released all slaves
[  643.067222][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.077125][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  643.104971][ T8291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.601825][ T8291] hsr_slave_0: entered promiscuous mode
[  643.618967][ T8291] hsr_slave_1: entered promiscuous mode
[  643.631649][ T8291] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  643.639441][ T8291] Cannot create hsr debugfs directory
[  643.740000][ T3857] hsr_slave_0: left promiscuous mode
[  643.754932][ T3857] hsr_slave_1: left promiscuous mode
[  643.763182][ T3857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  643.771415][ T3857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  643.798315][ T3857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  643.806363][ T3857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  643.842784][ T3857] veth1_macvtap: left promiscuous mode
[  643.848577][ T3857] veth0_macvtap: left promiscuous mode
[  643.854667][ T3857] veth1_vlan: left promiscuous mode
[  643.860414][ T3857] veth0_vlan: left promiscuous mode
[  644.786701][ T3857] team0 (unregistering): Port device team_slave_1 removed
[  644.822307][ T7155] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  644.825936][ T3857] team0 (unregistering): Port device team_slave_0 removed
[  646.537459][ T8278] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  646.636104][ T8278] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  646.720152][ T8278] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  646.774989][ T8278] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  647.123962][ T8291] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  647.214952][ T8291] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  647.274910][ T8291] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  647.363417][ T8291] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  647.733294][ T8278] 8021q: adding VLAN 0 to HW filter on device bond0
[  647.967223][ T8278] 8021q: adding VLAN 0 to HW filter on device team0
[  648.139459][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.147739][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state
[  648.349159][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.356917][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state
[  648.549286][ T8408] netlink: 'syz.2.682': attribute type 9 has an invalid length.
[  648.557989][ T8408] netlink: 'syz.2.682': attribute type 7 has an invalid length.
[  648.566286][ T8408] netlink: 'syz.2.682': attribute type 8 has an invalid length.
[  649.483708][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  649.667453][ T8278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  649.679242][ T8278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  650.794116][ T8291] 8021q: adding VLAN 0 to HW filter on device bond0
[  650.902825][ T8291] 8021q: adding VLAN 0 to HW filter on device team0
[  651.019009][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.026726][ T3737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  651.257859][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state
[  651.265535][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  651.728154][ T8278] 8021q: adding VLAN 0 to HW filter on device batadv0
[  652.994015][ T8291] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.112664][ T8278] veth0_vlan: entered promiscuous mode
[  654.210079][ T8278] veth1_vlan: entered promiscuous mode
[  654.475612][ T8278] veth0_macvtap: entered promiscuous mode
[  654.522770][ T8278] veth1_macvtap: entered promiscuous mode
[  654.682298][ T8278] batman_adv: batadv0: Interface activated: batadv_slave_0
[  655.380379][ T8278] batman_adv: batadv0: Interface activated: batadv_slave_1
[  655.421633][ T8278] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  655.432616][ T8278] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  655.444226][ T8278] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  655.454593][ T8278] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  656.861091][ T5853] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  657.092339][ T5853] usb 2-1: Using ep0 maxpacket: 16
[  657.149734][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  657.162226][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  657.172906][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  657.186321][ T5853] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  657.195859][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.269589][ T8291] veth0_vlan: entered promiscuous mode
[  657.407973][ T8291] veth1_vlan: entered promiscuous mode
[  657.536336][ T5853] usb 2-1: config 0 descriptor??
[  657.883279][ T8291] veth0_macvtap: entered promiscuous mode
[  657.965956][ T8291] veth1_macvtap: entered promiscuous mode
[  657.998650][ T5853] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0
[  658.007485][ T5853] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max
[  658.123719][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_0
[  658.157175][ T5853] =====================================================
[  658.165076][ T5853] BUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x5a1/0x2630
[  658.173534][ T5853]  usb_submit_urb+0x5a1/0x2630
[  658.178710][ T5853]  usb_start_wait_urb+0xc2/0x320
[  658.184299][ T5853]  usb_control_msg+0x27c/0x5b0
[  658.189296][ T5853]  usbhid_raw_request+0x4ab/0x690
[  658.194899][ T5853]  __hid_request+0x2bd/0x500
[  658.199960][ T5853]  hidinput_connect+0x3bf5/0x5cc0
[  658.205471][ T5853]  hid_connect+0x6b4/0x3440
[  658.210771][ T5853]  hid_hw_start+0xfc/0x1e0
[  658.215589][ T5853]  ms_probe+0x2e5/0x890
[  658.219979][ T5853]  hid_device_probe+0x536/0xab0
[  658.225174][ T5853]  really_probe+0x4d1/0xd90
[  658.233691][ T5853]  __driver_probe_device+0x268/0x380
[  658.239236][ T5853]  driver_probe_device+0x70/0x8b0
[  658.245695][ T5853]  __device_attach_driver+0x4ee/0x950
[  658.251410][ T5853]  bus_for_each_drv+0x3e3/0x680
[  658.256473][ T5853]  __device_attach+0x3c8/0x5c0
[  658.262117][ T5853]  device_initial_probe+0x33/0x40
[  658.267373][ T5853]  bus_probe_device+0x3ba/0x5e0
[  658.272666][ T5853]  device_add+0x12a9/0x1c10
[  658.277382][ T5853]  hid_add_device+0x5ed/0x7b0
[  658.282458][ T5853]  usbhid_probe+0x1fec/0x2660
[  658.287354][ T5853]  usb_probe_interface+0xd01/0x1310
[  658.293096][ T5853]  really_probe+0x4d1/0xd90
[  658.297926][ T5853]  __driver_probe_device+0x268/0x380
[  658.303861][ T5853]  driver_probe_device+0x70/0x8b0
[  658.309121][ T5853]  __device_attach_driver+0x4ee/0x950
[  658.314946][ T5853]  bus_for_each_drv+0x3e3/0x680
[  658.321902][ T5853]  __device_attach+0x3c8/0x5c0
[  658.327011][ T5853]  device_initial_probe+0x33/0x40
[  658.336297][ T5853]  bus_probe_device+0x3ba/0x5e0
[  658.342492][ T5853]  device_add+0x12a9/0x1c10
[  658.347325][ T5853]  usb_set_configuration+0x3493/0x3b70
[  658.353216][ T5853]  usb_generic_driver_probe+0xfc/0x290
[  658.355468][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_1
[  658.358855][ T5853]  usb_probe_device+0x38d/0x690
[  658.371357][ T5853]  really_probe+0x4d1/0xd90
[  658.376081][ T5853]  __driver_probe_device+0x268/0x380
[  658.381744][ T5853]  driver_probe_device+0x70/0x8b0
[  658.387029][ T5853]  __device_attach_driver+0x4ee/0x950
[  658.392851][ T5853]  bus_for_each_drv+0x3e3/0x680
[  658.397947][ T5853]  __device_attach+0x3c8/0x5c0
[  658.403224][ T5853]  device_initial_probe+0x33/0x40
[  658.408490][ T5853]  bus_probe_device+0x3ba/0x5e0
[  658.413889][ T5853]  device_add+0x12a9/0x1c10
[  658.418671][ T5853]  usb_new_device+0x104b/0x20c0
[  658.424121][ T5853]  hub_event+0x5588/0x7580
[  658.428769][ T5853]  process_scheduled_works+0xb8e/0x1d80
[  658.438202][ T5853]  worker_thread+0xedf/0x1590
[  658.444363][ T5853]  kthread+0xd5c/0xf00
[  658.448731][ T5853]  ret_from_fork+0x1e0/0x310
[  658.453730][ T5853]  ret_from_fork_asm+0x1a/0x30
[  658.458730][ T5853] 
[  658.461283][ T5853] Uninit was created at:
[  658.465885][ T5853]  __kmalloc_node_track_caller_noprof+0x96d/0x12f0
[  658.472772][ T5853]  kstrdup+0x8a/0x2a0
[  658.477223][ T8291] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  658.477369][ T5853]  kstrdup_const+0x5e/0x90
[  658.487825][ T8291] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.491858][ T5853]  __kernfs_new_node+0x6e/0xa70
[  658.491984][ T5853]  kernfs_new_node+0x1f0/0x370
[  658.501090][ T8291] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.501277][ T8291] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  658.529626][ T5853]  kernfs_create_dir_ns+0x9a/0x2b0
[  658.538784][ T5853]  sysfs_create_dir_ns+0x19c/0x540
[  658.545346][ T5853]  kobject_add_internal+0xeed/0x1840
[  658.551093][ T5853]  kobject_add+0x2c1/0x410
[  658.556242][ T5853]  device_add+0xa70/0x1c10
[  658.561076][ T5853]  hci_register_dev+0x682/0xd50
[  658.566320][ T5853]  vhci_create_device+0x49d/0xc80
[  658.571958][ T5853]  vhci_write+0x630/0x960
[  658.576491][ T5853]  vfs_write+0xb4b/0x1580
[  658.581722][ T5853]  __x64_sys_write+0x1fb/0x4d0
[  658.586741][ T5853]  x64_sys_call+0x38c3/0x3db0
[  658.591964][ T5853]  do_syscall_64+0xd9/0x210
[  658.596669][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  658.603483][ T5853] 
[  658.605921][ T5853] Bytes 12-14 of 65535 are uninitialized
[  658.611836][ T5853] Memory access of size 65535 starts at ffff88804f43f2c1
[  658.619185][ T5853] 
[  658.621728][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/1:4 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  658.634326][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  658.648257][ T5853] Workqueue: usb_hub_wq hub_event
[  658.655009][ T5853] =====================================================
[  658.662213][ T5853] Disabling lock debugging due to kernel taint
[  658.668506][ T5853] Kernel panic - not syncing: kmsan.panic set ...
[  658.675088][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/1:4 Tainted: G    B               6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(undef) 
[  658.689093][ T5853] Tainted: [B]=BAD_PAGE
[  658.693381][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  658.703799][ T5853] Workqueue: usb_hub_wq hub_event
[  658.709134][ T5853] Call Trace:
[  658.712552][ T5853]  <TASK>
[  658.715611][ T5853]  __dump_stack+0x26/0x30
[  658.720178][ T5853]  dump_stack_lvl+0x53/0x270
[  658.725006][ T5853]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  658.731087][ T5853]  dump_stack+0x1e/0x25
[  658.735463][ T5853]  panic+0x4bd/0xd50
[  658.739637][ T5853]  kmsan_report+0x31c/0x320
[  658.744381][ T5853]  ? kmsan_internal_check_memory+0x16c/0x230
[  658.750583][ T5853]  ? kmsan_handle_urb+0x2c/0x40
[  658.755677][ T5853]  ? usb_submit_urb+0x5a1/0x2630
[  658.760830][ T5853]  ? usb_start_wait_urb+0xc2/0x320
[  658.766175][ T5853]  ? usb_control_msg+0x27c/0x5b0
[  658.771343][ T5853]  ? usbhid_raw_request+0x4ab/0x690
[  658.776784][ T5853]  ? __hid_request+0x2bd/0x500
[  658.781764][ T5853]  ? hidinput_connect+0x3bf5/0x5cc0
[  658.787231][ T5853]  ? hid_connect+0x6b4/0x3440
[  658.792291][ T5853]  ? hid_hw_start+0xfc/0x1e0
[  658.797126][ T5853]  ? ms_probe+0x2e5/0x890
[  658.801780][ T5853]  ? hid_device_probe+0x536/0xab0
[  658.807135][ T5853]  ? really_probe+0x4d1/0xd90
[  658.812174][ T5853]  ? __driver_probe_device+0x268/0x380
[  658.818066][ T5853]  ? driver_probe_device+0x70/0x8b0
[  658.823702][ T5853]  ? __device_attach_driver+0x4ee/0x950
[  658.829517][ T5853]  ? bus_for_each_drv+0x3e3/0x680
[  658.834762][ T5853]  ? __device_attach+0x3c8/0x5c0
[  658.839934][ T5853]  ? device_initial_probe+0x33/0x40
[  658.845390][ T5853]  ? bus_probe_device+0x3ba/0x5e0
[  658.850648][ T5853]  ? device_add+0x12a9/0x1c10
[  658.855649][ T5853]  ? hid_add_device+0x5ed/0x7b0
[  658.860906][ T5853]  ? usbhid_probe+0x1fec/0x2660
[  658.866048][ T5853]  ? usb_probe_interface+0xd01/0x1310
[  658.871723][ T5853]  ? really_probe+0x4d1/0xd90
[  658.876645][ T5853]  ? __driver_probe_device+0x268/0x380
[  658.882356][ T5853]  ? driver_probe_device+0x70/0x8b0
[  658.887793][ T5853]  ? __device_attach_driver+0x4ee/0x950
[  658.893585][ T5853]  ? bus_for_each_drv+0x3e3/0x680
[  658.898802][ T5853]  ? __device_attach+0x3c8/0x5c0
[  658.903966][ T5853]  ? device_initial_probe+0x33/0x40
[  658.909395][ T5853]  ? bus_probe_device+0x3ba/0x5e0
[  658.914623][ T5853]  ? device_add+0x12a9/0x1c10
[  658.919783][ T5853]  ? usb_set_configuration+0x3493/0x3b70
[  658.925653][ T5853]  ? usb_generic_driver_probe+0xfc/0x290
[  658.931500][ T5853]  ? usb_probe_device+0x38d/0x690
[  658.936683][ T5853]  ? really_probe+0x4d1/0xd90
[  658.941743][ T5853]  ? __driver_probe_device+0x268/0x380
[  658.947527][ T5853]  ? driver_probe_device+0x70/0x8b0
[  658.952966][ T5853]  ? __device_attach_driver+0x4ee/0x950
[  658.958736][ T5853]  ? bus_for_each_drv+0x3e3/0x680
[  658.963950][ T5853]  ? __device_attach+0x3c8/0x5c0
[  658.969085][ T5853]  ? device_initial_probe+0x33/0x40
[  658.974488][ T5853]  ? bus_probe_device+0x3ba/0x5e0
[  658.979694][ T5853]  ? device_add+0x12a9/0x1c10
[  658.984621][ T5853]  ? usb_new_device+0x104b/0x20c0
[  658.989876][ T5853]  ? hub_event+0x5588/0x7580
[  658.994783][ T5853]  ? process_scheduled_works+0xb8e/0x1d80
[  659.000929][ T5853]  ? worker_thread+0xedf/0x1590
[  659.005988][ T5853]  ? kthread+0xd5c/0xf00
[  659.010391][ T5853]  ? ret_from_fork+0x1e0/0x310
[  659.015315][ T5853]  ? ret_from_fork_asm+0x1a/0x30
[  659.020458][ T5853]  ? bus_for_each_drv+0x3e3/0x680
[  659.025659][ T5853]  ? __device_attach+0x3c8/0x5c0
[  659.030782][ T5853]  ? device_initial_probe+0x33/0x40
[  659.036186][ T5853]  ? kmsan_get_metadata+0xfb/0x160
[  659.041505][ T5853]  ? kmsan_metadata_is_contiguous+0xdf/0x1e0
[  659.047895][ T5853]  kmsan_internal_check_memory+0x16c/0x230
[  659.053965][ T5853]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  659.060011][ T5853]  kmsan_handle_urb+0x2c/0x40
[  659.064905][ T5853]  usb_submit_urb+0x5a1/0x2630
[  659.069882][ T5853]  ? stack_depot_save_flags+0x35/0x7b0
[  659.075532][ T5853]  ? kmsan_get_metadata+0xfb/0x160
[  659.080989][ T5853]  ? kmsan_get_metadata+0x30/0x160
[  659.086425][ T5853]  usb_start_wait_urb+0xc2/0x320
[  659.091587][ T5853]  usb_control_msg+0x27c/0x5b0
[  659.096563][ T5853]  usbhid_raw_request+0x4ab/0x690
[  659.101850][ T5853]  __hid_request+0x2bd/0x500
[  659.106686][ T5853]  ? __pfx_usbhid_raw_request+0x10/0x10
[  659.112496][ T5853]  hidinput_connect+0x3bf5/0x5cc0
[  659.117852][ T5853]  ? driver_probe_device+0x70/0x8b0
[  659.123397][ T5853]  ? __device_attach_driver+0x4ee/0x950
[  659.129314][ T5853]  ? bus_for_each_drv+0x3e3/0x680
[  659.134716][ T5853]  ? __device_attach+0x3c8/0x5c0
[  659.139951][ T5853]  ? bus_probe_device+0x3ba/0x5e0
[  659.145252][ T5853]  ? device_add+0x12a9/0x1c10
[  659.150207][ T5853]  ? usb_new_device+0x104b/0x20c0
[  659.155444][ T5853]  ? hub_event+0x5588/0x7580
[  659.160231][ T5853]  ? process_scheduled_works+0xb8e/0x1d80
[  659.166270][ T5853]  ? worker_thread+0xedf/0x1590
[  659.171455][ T5853]  ? kthread+0xd5c/0xf00
[  659.175876][ T5853]  ? ret_from_fork+0x1e0/0x310
[  659.181033][ T5853]  ? ret_from_fork_asm+0x1a/0x30
[  659.186222][ T5853]  ? kmsan_get_metadata+0xfb/0x160
[  659.191568][ T5853]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  659.197659][ T5853]  hid_connect+0x6b4/0x3440
[  659.202427][ T5853]  hid_hw_start+0xfc/0x1e0
[  659.207057][ T5853]  ms_probe+0x2e5/0x890
[  659.211520][ T5853]  ? kmsan_get_metadata+0xfb/0x160
[  659.216883][ T5853]  ? __pfx_ms_probe+0x10/0x10
[  659.221874][ T5853]  hid_device_probe+0x536/0xab0
[  659.226951][ T5853]  ? __pfx_hid_device_probe+0x10/0x10
[  659.232511][ T5853]  really_probe+0x4d1/0xd90
[  659.237241][ T5853]  __driver_probe_device+0x268/0x380
[  659.242736][ T5853]  driver_probe_device+0x70/0x8b0
[  659.247977][ T5853]  ? kmsan_get_metadata+0xfb/0x160
[  659.253305][ T5853]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  659.259342][ T5853]  __device_attach_driver+0x4ee/0x950
[  659.264976][ T5853]  bus_for_each_drv+0x3e3/0x680
[  659.270133][ T5853]  ? __pfx___device_attach_driver+0x10/0x10
[  659.276260][ T5853]  __device_attach+0x3c8/0x5c0
[  659.281324][ T5853]  device_initial_probe+0x33/0x40
[  659.286644][ T5853]  bus_probe_device+0x3ba/0x5e0
[  659.291789][ T5853]  device_add+0x12a9/0x1c10
[  659.296611][ T5853]  hid_add_device+0x5ed/0x7b0
[  659.301588][ T5853]  usbhid_probe+0x1fec/0x2660
[  659.306459][ T5853]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  659.312784][ T5853]  ? __pfx_usbhid_probe+0x10/0x10
[  659.318037][ T5853]  usb_probe_interface+0xd01/0x1310
[  659.323536][ T5853]  ? __pfx_usb_probe_interface+0x10/0x10
[  659.329355][ T5853]  really_probe+0x4d1/0xd90
[  659.334091][ T5853]  __driver_probe_device+0x268/0x380
[  659.339686][ T5853]  driver_probe_device+0x70/0x8b0
[  659.344947][ T5853]  ? kmsan_get_metadata+0xfb/0x160
[  659.350303][ T5853]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  659.356340][ T5853]  __device_attach_driver+0x4ee/0x950
[  659.362057][ T5853]  bus_for_each_drv+0x3e3/0x680
[  659.367089][ T5853]  ? __pfx___device_attach_driver+0x10/0x10
[  659.373330][ T5853]  __device_attach+0x3c8/0x5c0
[  659.378328][ T5853]  device_initial_probe+0x33/0x40
[  659.383570][ T5853]  bus_probe_device+0x3ba/0x5e0
[  659.388632][ T5853]  device_add+0x12a9/0x1c10
[  659.393353][ T5853]  usb_set_configuration+0x3493/0x3b70
[  659.399121][ T5853]  usb_generic_driver_probe+0xfc/0x290
[  659.404849][ T5853]  ? __pfx_usb_generic_driver_probe+0x10/0x10
[  659.411262][ T5853]  usb_probe_device+0x38d/0x690
[  659.416402][ T5853]  ? __pfx_usb_probe_device+0x10/0x10
[  659.421967][ T5853]  really_probe+0x4d1/0xd90
[  659.426750][ T5853]  __driver_probe_device+0x268/0x380
[  659.432662][ T5853]  driver_probe_device+0x70/0x8b0
[  659.437946][ T5853]  ? kmsan_get_metadata+0xfb/0x160
[  659.443304][ T5853]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  659.449347][ T5853]  __device_attach_driver+0x4ee/0x950
[  659.454958][ T5853]  bus_for_each_drv+0x3e3/0x680
[  659.460165][ T5853]  ? __pfx___device_attach_driver+0x10/0x10
[  659.466331][ T5853]  __device_attach+0x3c8/0x5c0
[  659.471601][ T5853]  device_initial_probe+0x33/0x40
[  659.476972][ T5853]  bus_probe_device+0x3ba/0x5e0
[  659.482056][ T5853]  device_add+0x12a9/0x1c10
[  659.486782][ T5853]  usb_new_device+0x104b/0x20c0
[  659.491863][ T5853]  hub_event+0x5588/0x7580
[  659.496594][ T5853]  ? pwq_dec_nr_in_flight+0x1678/0x1d80
[  659.502584][ T5853]  ? __pfx_hub_event+0x10/0x10
[  659.507561][ T5853]  process_scheduled_works+0xb8e/0x1d80
[  659.513380][ T5853]  worker_thread+0xedf/0x1590
[  659.518292][ T5853]  kthread+0xd5c/0xf00
[  659.522556][ T5853]  ? __pfx_worker_thread+0x10/0x10
[  659.527896][ T5853]  ? __pfx_kthread+0x10/0x10
[  659.532657][ T5853]  ret_from_fork+0x1e0/0x310
[  659.537405][ T5853]  ? __pfx_kthread+0x10/0x10
[  659.542158][ T5853]  ret_from_fork_asm+0x1a/0x30
[  659.547235][ T5853]  </TASK>
[  659.550741][ T5853] Kernel Offset: disabled
[  659.555171][ T5853] Rebooting in 86400 seconds..