last executing test programs:

3m40.782012883s ago: executing program 0 (id=1):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
creat(&(0x7f0000000140)='./bus\x00', 0x182)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68)
prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m39.961078351s ago: executing program 0 (id=16):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000300)=[{&(0x7f0000007900)=""/4095, 0xfff}], 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

3m39.406047074s ago: executing program 0 (id=21):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2804c0e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)

3m38.316526306s ago: executing program 0 (id=25):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f)
r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, 0x0, 0x0)

3m36.964722083s ago: executing program 0 (id=33):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x3, 0x4, 0x1, 0x7fffffff, 0x6, 0x2, 0x80000000, 0x9, 0xfffffffa, 0x4, 0x3, 0x2, 0x8, 0x4, 0x200, 0x6, 0x6, 0x1ff, 0x1000, 0x10001, 0x1ff, 0x1}})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x3}, {0xfff2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r3, 0x0, 0x0}, 0x10)

3m36.048427812s ago: executing program 32 (id=33):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x3, 0x4, 0x1, 0x7fffffff, 0x6, 0x2, 0x80000000, 0x9, 0xfffffffa, 0x4, 0x3, 0x2, 0x8, 0x4, 0x200, 0x6, 0x6, 0x1ff, 0x1000, 0x10001, 0x1ff, 0x1}})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x3}, {0xfff2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r3, 0x0, 0x0}, 0x10)

2m38.047903419s ago: executing program 2 (id=323):
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK    \x00'}, 0x20)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{&(0x7f00000000c0)=[{0xd, 0x1, 0x5, {0xb446, 0xe2}, 0x1000, 0x5, 0x7}], 0x1, 0x40, 0x0, 0x5}, {&(0x7f0000000180)=[{0x200, 0x80000000}, {0x101, 0x1}, {0x6, 0x6}], 0x3, 0x10, 0xa, 0xa}, {&(0x7f00000002c0)=[0x1, 0x1ef, 0x9, 0x6, 0x9, 0xe, 0x9], 0x7, 0x8, 0x400, 0x1}, {&(0x7f0000000440)=[{0xfff, 0x3, 0x8000, 0x2, 0x8}, {0x10000, 0x0, 0x3, 0x5, 0x7}, {0x2, 0x6, 0x8, 0x10000, 0x590e}, {0xf, 0xffffffffffffea8d, 0x3, 0xe35, 0x3ff}, {0x2, 0x9, 0xfffffffffffffffc, 0x5, 0x9}, {0x6429, 0x0, 0x1, 0xf1bc, 0xc2aa}, {0x0, 0xfffffffffffffffa, 0x8000000000000000, 0xc7b, 0x8000}, {0x8000, 0x7, 0x558, 0xfffffffffffffffb, 0x4}, {0x7, 0x8, 0x2, 0x8, 0x8000}, {0x9, 0x6, 0x2, 0x80a6, 0x8000}], 0xa, 0x28, 0x0, 0x8}, {&(0x7f0000000600)=[0x7, 0x2, 0x8001], 0x3, 0x8, 0x1009, 0x5}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x40141, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x3)
ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0)
mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0)

2m37.65991204s ago: executing program 2 (id=326):
epoll_create1(0x0)
epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]})
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4e20, 0x3, 'dh\x00', 0x4, 0x7, 0x2d}, 0x2c)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES8=r3], &(0x7f0000000340)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

2m37.399986799s ago: executing program 3 (id=328):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b940", 0xa, 0x0, 0x0, 0x0)
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88)

2m35.862850653s ago: executing program 3 (id=333):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x2000c06, &(0x7f00000001c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030362c696f636861727365743d6d6163726f6d616e69616e2c6572726f72733d636f6e74696e75652c646973636172642c6572726f72733d72656d6f756e742d726f2c6e6f646973636172642c75737271756f74612c696e746567726974792c646973636172642c696f636861727365743d69736f383835392d362c75737271756f74612c0068067f9f944b8278884def0e057790dd79a985633a3f082972c5f43e390c14c8a267bd"], 0x24, 0x6303, &(0x7f0000001bc0)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4GfffXaeTMQ8nfyN7BxTBKSTXZtJ36hTTHhteGtBEKhL9iud22WOrbx2iXQSDYNlEgYFVW0DRdtAaE2NxW+4IJWgHKBWiFRQXtBe4FAqFxEVUABqRJUwFZzzvM8O3N2dmbXHu/OnPP5SPbPe+bMnGfOPOfs/Hb9nQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLNbXzP38aEsyxp/8r+2Ztm1jX9vntyaL3vlRo8QAAAAuFK/zP9+/oa04OAq7tS0zr+89FtfWlxcXMzePfIXY59eXEw3TGbZ2KYsy2+LLv3gPUPN6wRPZBNDw01fD3fZ/EiX20e73D7W5fbxLrdv6nL7RJfbl+2AZTYXP4/JH2xn/s+txS7NbszG8tt2trnXE0Obhofjz3JyQ/l9FseOZfPZiWwum2lZv1h3KF//K7c2tvXGLG5ruGlb2xsz5CePH41jGAr7eGfLtpYeM/rRq7PJn/7k8aN/d/a5m9vVrruh5fGKcd65ozHOj4YlxViHsk1pn8RxDjeNc3ub12SkZZxD+f0a/y6P8/lVjnNkaZjrqvyaT2TD+b+/ne+n0eYf66X9tD0s+9ltWZZdWBp2eZ1l28qGsy0tS4aXXp+JYkY2HqMxlV6Yja5pnt66innaqLM7W+dp+ZiIr/+t4X6jK4yh+WX60UfGm173XyxezjyNGs96pWOlPAd7faz0yxyM8+Lb+ZN+su0c3Bme/+O3rzwH286dNnMwPe+mObij2xwcHh/Jx5xehKH8PktzcFfL+iP5loby+uztnefg9NlHT08vfOjD98w/euT43PG5k3t27ZrZs3fv/v37p4/Nn5ibKf6+zL3d/7Zkw+kY2BH2XTwG7iit2zxVFz83vuz8e7nH4USH43Brad1eH4ej5Sc3tD4H5PI5XRwb72zs9ImLw9kKx1j++tx15cdhet5Nx+Fo03HY9ntKm+NwdBXHYWOd03et7j3LaNOfdmNY+XvBlc3BrU1zsPx+pDwHe/1+pF/m4ESYF9+9a+XvBdvDeJ+cWuv7kZFlczA93XDuaSxJ7/cn9uel3by8pXHDNePZuYW5M/c+duTs2TO7slDWxYua5kp5vm5pek7Zsvk6vOb5enD+pU/e0mb51rCvJu5p/DWx4mvVWOe+ezu/Vvl3t/b7s2Xp7iyUHlvv/dnuu3ljf45n2We+/pGHv/r4Z16z4v5s9Jsfnb7y9+KpL206/46tcP6Nff+viu2lh3piZGy0OH5H0t4Zazkft75Uo/m5ayjf9vPTqzsfj4U/630+vrHD+Xhbad1en4/Hyk8uno+Huv2048qUX8+JME9OzHQ+HzfW2bZ7rXNytOP5+LZQh8L+f0XoFFJf1DR3Vpq3aVujo2PheY3GLbTO0z0t64+F3qyxrad3hzeFaZSrm6d33lasP9J0v2i95ulkad1ez9P0s6+V5ulQt5++XZ7y6zkR5sWNezrP08Y6z9x35efOzfGfTefO8W5zcGxkvDHmsTQJ8/N9trg5zsF7s6PZqexENpvfOp7Pp6F8W1P3r+5cOR7+rPe5cluHOXhnad1ez8H0fWyluTc0uvzJ90D59ZwI8+Kp+zvPwcY6r93X2/eud4YlaZ2m967ln6+t9DOvW0q76WrNldEwzq/v6/yz2cY6J/avtc/svJ/uDkuuabOfysfvSsfUbLY++2lbGOdz+1feT43xNNb59IFVzqeDWZad/8CD+c97w+9Xzp/7zpdafu/S7nc65z/w4I+vO/bPaxk/AIPvV0XZUnyva/rN1Gp+/w8AAAAMhNj3D4ea6P8BAACgMmLfH/9XeKL/BwAAgMqIff9oqEkV+v8/6b7Kttc+N/+r81lK5i8G8fa0Gx4q1osZ15nw9eTiksbyB78w9z//dH51wxvOsuwXD/1x2/W3PRTHVZgM47z0utbly3zpnlVt+/Aj59N2m/Prnw2PH5/PaqdBuwjuTJZlX7nhk/l2Jt9zMa/PPHQ4rw9fePKJxjrPHyi+jvd/9kXF+n8dwr8Hjx1puf+zYT/8MNSZN7XfH/F+X7z4iu373rW0vXi/oR3X50/7qfcWjxs/J+dTTxTrx/280vi/+omnv9hY/7GXtx//+eH24386PO4XQv35S4r1m1+Dxtfxfh8L44/bi/e79/Nfazv+Sx8v1j/9+mK9w6HG7d8Zvt75+ufmm/fXY0NHWp5X9oZivbj9me/8WX57fLz4+OXxTxy62LI/yvPjmX8vHme6tH5cHrcT/WNp+43HaZ6fcftP/+nhlv3cbfuXHn72JY3HLW//7tJ6pz9wV779pcdr/cSmv/nYJ9tuL47n4D+cbnk+B98ejuOw/afeG+ZjuP1/LxWPV/50hcNvbz3/xPU/u/V8y/OJ3vjTYvuXXnU8r5smNm+55trrrr/wssa+y7Jvbyoer9v2j//tqZbxf+6mYn/E22NGv7z9lcTtn/ng1MlTC+fmZ9NeffyG/LNz3lyMJ473hnBuLX996NTZ982dmZyZnMmyyep+hN5l+3yoPy7Khc5rLy47g971SHg9b/mrr2y5/d8+EZf/xzuL5RffVHzfuiOs96mwfGt4/bps/+fdxv/UrTflx/fQM2GEi8s/L/hKbN/53/u7fb5vLjz/8vuCON9Pv/h9+X5o3JZ/34jH9RWO/3uzxeN8OezXxfDJzDtuWtpe8/rxsxEuvqM43q94/4XTXHxd/z683m/5YfH4cVzx+X4vvI/52rbW812cH18+P1x+/PxTPC6E80l2obg9rhX398Xnb2o7vPg5JNmFm/Ov/zw9zs1reporWfjQwvSJ+ZPnHps+O7dwdnrhQx8+9OipcyfPHso/y/PQ+7vdf+n8tCU/P83O7b0vy89Wp4pylW30+E8/cnR238zts3PHjpw7dvaR03Nnjh9dWDg6N7tw+5Fjx+Y+2O3+87MP7Np9YM++3VPH52cf2H/gwJ4DU/MnTzWGUQyqi70zfzh18syh/C4LD9x3YNf99983M/Xoqdm5B/bNzEyd63b//HvTVOPefzR1Zu7EkbPzj85NLcx/eO6BXQf27t3d9dMAHz19bGFy+sy5k9PnFubOTBfPZfJsvrjxva/b/ammhe8X72fLhooP4svedvfe9PmsDV/4yIoPVaxS+gDR58Jn0XzjBaf3r+br2PePhZpUof8HAAAAcrHvHw810f8DAABAZcS+f1Ooif4fAAAAKiP2/ROhpv8SUJP+v3L5/23nV7V9+X/5/+b9Jf9fs/z/O/ot/1+cL+T/e2Nt+f/lrnL+v6v1yP+vakX5f/l/+X/5f/l/eqDf8v+x79+cZX7/DwAAABUV+/4toSb6fwAAAKiM2PdfE2qi/wcAAIDKiH3/taEmNen/5f/l/+X/5f/l/9tvX/5/MMn/d9Zn+f+J8gL5/43P/2f1yv9f6OX4NyD/v7n5C/l/+lG/5f9j339dqElN+n8AAACog9j3Xx9qov8HAACAyoh9/w2hJvp/AAAAqIzY928NNalJ/y//f0X5/5S5Gtz8f7Fl+X/5f/l/+f+qkP/vrM/y/8vI/298/t/1/wcq/99C/p9+1G/5/9j3vyDUpCb9PwAAANRB7PtfGGqi/wcAAID+M3p5d4t9/4tCTZb1/5e5AQAAAGDDxb7/xqwUBK/J7//l/13/v2+v/z8m/y//X+j//P9IJv/fP+T/O5P/76IX+f8L8v/y//L/8v9E/Zb/z/v+bCJ7cahJTfp/AAAAqIPY998UaqL/BwAAgMqIff//CzXR/wMAAEBlxL5/W6hJTfp/+f/K5P9/1vzSVSL/7/r/8v9B/+f/Xf+/n8j/dyb/34Xr/8v/y//L/9NTC207pY3L/8e+/+ZQk5r0/wAAAFAHse+/JdRE/w8AAACVEfv+/x9qov8HAACAyoh9//ZQk5r0//L/fZ7/j8nROl7/X/5f/j/o5/z/hPx/35H/70z+vwv5f/l/+X/5f3pq4fvF+9myjcr/x77/JaEmNen/AQAAoA5i3//SUBP9PwAAAFRG7PtfFmqi/wcAAIDKiH3/ZKhJTfr/teT/hy7I/6/kKl//f3wV1/9vIf+/Ifn/Ufn/Qp3y/5n8f9+R/+9M/r8L+X/5f/l/+X96qt/y/7HvvzXUpCb9PwAAANRB7Pt3hJro/wEAAKAyYt9/W6iJ/h8AAAAqI/b9O0NNatL/u/7/QOT/M/n/Hub/S3M8c/1/+f8Vti//P5jk/zuT/+9C/l/+X/5f/p+e6rf8f+z7Xx5qUpP+HwAAAOog9v23h5ro/wEAAKAyYt9/R6iJ/h8AAAAqI/b9d+b14Tu+GXJmden/5f/l/2uX/7961/+X/w/k/9vrmv+/IP/fC/L/ncn/dyH/L/8v/y//T0/1W/6/6PsnsleEmtSk/wcAAIA6iH3/XaEm+n8AAACojNj33x1qov8HAACAyoh9/1SoSU36f/l/+f9q5v//U/6/w/bl//s0/+/6/z0h/9+Z/H8X8v/y/73I/4+FBfL/8v9seP4/vl+LX8e+/55Qk5r0/wAAAFAHse+/N9RE/w8AAACVEfv+6VAT/T8AAABURuz7Z0JNatL/y//L/1cz/+/6/522f0X5/5ctPa78f0H+v7/I/3cm/99FL/P/m+T/a5v/v6Lr/4/J/1MpG53/L38d+/5doSY16f8BAACgDmLfvzvURP8PAAAAlRH7/j2hJvp/AAAAqIzY998XalKT/l/+X/5f/r8m+f/GIe76//L/NSD/31nv8//xKcr/u/6//H9v8v+u/0+19Fv+P/b994ea1KT/BwAAgDqIff/eUBP9PwAAAFRG7Pv3hZro/wEAAKAyYt+/P9SkJv2//L/8v/x/TfL/vbr+fxP5/4L8f3+R/+/M9f+7kP+X/x/g/H9jbsn/02/6Lf8f+/4DoSatjd/HP7+2pwkAAAD0kdj3vzLUpCa//wcAAIA6iH3/r4Wa6P8BAACgMmLf/+uhJjXp/+X/5f/l/+X/Nzj/P9Yt/z8u/y//vwby/53J/3ch/y//P8D5/xWu/39duFn+nw3Rb/n/2Pc/EGpSk/4fAAAA6iD2/b8RaqL/BwAAgMqIff+rQk30/wAAAFAZse8/GGpSk/5f/n+d8v9xofy//L/8v+v/y/9fVfL/ncn/dyH/L/9fvfx/r6//X/42ncj/006/5f9j3//qUJOa9P8AAABQB7HvfzDURP8PAAAAlRH7/teEmuj/AQAAoDJi3//aUJOa9P/y/67/v/H5/7GWscv/L91P/r8g/y//vxby/53J/3ch/y//L//v+v/0VL/l/2Pf/7pQk5r0/wAAAFAHse9/faiJ/h8AAAAqI/b9bwg10f8DAABAZcS+/42hJjXp/+X/5f83Pv/v+v8bnv9/ofx/u+3L/w8m+f/O5P+7kP+X/5f/l/+np/ot/x/7/t8MNalJ/w8AAAB1EPv+h0JN9P8AAABQGbHvf1Ooif4fAAAAKiP2/W8ONalJ/y//L/8v/y//7/r/7bcv/z+Y5P87G7D8/y+vD8vl/wvy//09/rXm/0dLX1+V/P8PVsr/L24q31/+n6uh3/L/se9/S6hJTfp/AAAAqIPY97811ET/DwAAAJUR+/63hZro/wEAAKAyYt//W6EmNen/5f8b41hKL8v/y//nC+T/5f/l/weW/H9nA5b/d/3/Evn//h6/6//L/7NcKf8/Fv+xUfn/2Pe/PdSkJv0/AAAA1EHs+x8ONdH/AwAAQGXEvv8doSb6fwAAAKiM2Pe/M9SkJv2//L/r/8v/y//L/7ffvvz/YJL/70z+vwv5f/n/fsv//5f8P4OtlP9PNir/H/v+R0JNatL/AwAAQB3Evv9doSb6fwAAAKiM2Pf/dqiJ/h8AAAAqI/b97w41qUn/L/8/KPn/Sfn/Neb/x8My+X/5f/n/epH/70z+vwv5f/n/fsv/u/4/A67f8v+x739PqMnq+/+JVa8JAAAAXE3lXyclse//nVCTmvz+HwAAAOog9v2/G2qi/wcAAIDKiH3/74Wa1KT/l/8flPy/6/9nrv8v/196PvL/8v/trF/+P5551pT/39Rt+/L/8v/y/4M7fvl/+X+W67f8f+z7fz+vp69ND1ST/h8AAADqoOj7J7L3hpro/wEAAGAgtPs/2WWx7z8UaqL/BwAAgMqIff/hUJOa9P/y//L/8v99mv//yx3f/O633np4l/y//L/8/5qs6/X/Gwe/6//L/8v/J/L/8v/y/5T1W/4/9v1HQk2WGr83u8A/AAAADLbY9/9BqElNfv8PAAAAdRD7/qOhJvp/AAAAqIzY98+GmtSk/5f/38D8/2iWZfL/8v8VvP5/3B+DlP+f2jRA+f940pX/b2td8//vWsqJy/+vNf8/3nZpOf8/JP/fQv5/zeP/RpZl6zb+8/8q/y//T1m/5f9j3z8XalKT/h8AAADqIPT9w8eKunSD/h8AAAAqI/b9x0NN9P8AAABQGbHvf1+oSU36f/l/1/+X/5f/Xyn/P5K5/n9f5v9d/78j+f/O+if/357r/8v/D/L4Xf9f/p/l+i3/H/v++VCTmvT/AAAAUAex739/qIn+n/9j706+NC3LO44/1VSf7j6cnJNdFlkk+6yyZhFWWSR/QBZsWCTnZBJUnKdunEec5wE9KuKAAygiKs4TOKGIIyrOIk44ISrtoeu6rq7qeut5u7reqvd57/vzWXhJ2U0VhAC/br7cAAAANCN3///FLfY/AAAANCN3///HLZ3sf/2//r/J/v+I/n/s8+/3+//6/9n0/wdD/z9O/z+H/l//r//X/7NQU+v/c/c/KG7pZP8DAABAD3L3XxK32P8AAADQjNz9l8Yt9j8AAAA0I3f/g+OWTva//l//32T//693/8/9/6L/3+nz6//1/y3T/4/T/8+h/9f/6//1/yzU1Pr/3P0PiVs62f8AAADQg9z9D41b7H8AAABoRu7+y+IW+x8AAACakbv/YXFLJ/v/jP5/beiz/8+MV//fUv/v/f8dP7/+X//fsoPt/y9/4M98+n/9v/4/6P/1//p/zjS1/j93/8Pjlk72PwAAAPQgd/8j4hb7HwAAAJqRu/+RcYv9DwAAAM3I3f+ouKWT/e/9f+//6//1//r/2Z9f/7+avP8/rqf+/7Lbzr/knuv//obdfH79v/5f/6//Z7Gm1v/n7n903NLJ/gcAAIAe5O5/TNxi/wMAAEAzcvc/Nm6x/wEAAGAFHZv50dz9j4tbOtn/+n/9v/4/+v+j+n/9v/6/Bfr/cT31/+fy+fX/+n/9v/6fxZpa/5+7//FxSyf7HwAAAHqQu/8JcYv9DwAAANM16x/EHpG7/3jcYv8DAABAM3L3n4hbOtn/C+z/81vq/0P2/3/R/69G/+/9f/2//r8J+v9x+v859P/6f/2//p+Fmlr/n7v/8rilk/0PAAAAPcjd/8S4xf4HAACAZuTuf1LcYv8DAABAM3L3Pzlu6WT/e//f+//6f/3/wff/G3+y1f+f/r2q/18c/f84/f8c+v+99vOH9f/6f/0/m+2y/79v5E/bC+n/c/c/JW7pZP8DAABAD3L3PzVusf8BAACgGbn7nxa32P8AAADQjNz9T49bOtn/+n/9v/5f/3/O/f/2P/RO8f7/bPr/g6H/HzeZ/n9tfeaH9f8r3/97/1//r/9ni6m9/5+7/xlxSyf7HwAAAHqQu/+ZccvI/t/1D+YDAAAAS5W7/1lxi5//BwAAgJWX1Vnu/mfHLZ3sf/2//l//r/8/+Pf/V7//v2HT16f/nxb9/7jJ9P870P/r/1f569f/6//Zbmr9f+7+58Qtnex/AAAA6EHu/iviFvsfAAAAmpG7/7lxi/0PAAAAzcjd/7y4pZP9P7v/P/2/T7r/PzMSHvT/Sf/fdv+fv0b9/2j/f6H3//uk/x+n/59D/6//1//v1P8fm/f99f/MMrX+P3f/8+OWTvY/AAAA9CB3/wviFvsfAAAAmpG7/4Vxi/0PAAAAzcjd/6K4pZP97/1//b/+fzf9/6FJ9P/e/9+wzPf/hwPv/9f1/2dpuf3/2v35V1D9/7l9/fp//f8qf/1N9v+Hh63v/4/8WwD0/8wytf4/d/+L45ZO9j8AAAD0IHf/S+IW+x8AAABWw+Z/dmDWW3HDULv/pXGL/Q8AAADNyN3/srilnf0/+lan/l//r/9fvff/9f8b9r//Xx+m0/97//9sef9/nP5/Dv3/fvTz6431/1fu9P2n0P8f37/3//953vfX/zPLlv7/ptMfX1b/n7v/5XFLO/sfAAAAupe7/xVxi/0PAAAAzcjd/8q4xf4HAACAZuTuf1Xc0sn+3/f+f+TfPqD/1//r//X/0+7/p/T+v/7/bOn/x+n/59D/e//f+//6f/Zu098ybun/N1lW/5+7/9VxSyf7HwAAAHqQu/81cYv9DwAAAM3I3X9l3GL/AwAAQDNy9782bulk/6/U+/+H9f/6f/2//l//r/8ft6f+/pD+v+j/9f/6f/2//p8FmFr/v3X397f/AQAAoAevO/WfR+PH6+1/AAAAaFHu/tfHLfY/AAAANCN3/xvilk72/0r1/yv4/n9+XP+v/x/0//p//f+B6Pb9/7VZfyXabof+/5b/PvHvWz+i/9f/6//Pqf8/pP/X/3fob0f+t0n0/ydP/91l7v43xi2d7H8AAADoQe7+q+IW+x8AAACakbv/TXGL/Q8AAADNyN1/ddyyy/0/1jxMmf7f+//6f/2//n/259f/r6Zu+/+z5P3/OfT/+n/v/+v/WahJ9P+bfjl3/5vjFj//DwAAAM3I3f+WuMX+BwAAgGbk7n9r3GL/AwAAQDNy978tbulk/+v/9f/6f/2//n/259f/ryb9/zj9/xyr1P9fvYf+f332h5fdz+/Vsr9+/b/+n+2m1v/n7r8mbulk/wMAAEAPcve/PW6x/wEAAKAZufvfEbfY/wAAANCM3P3vjFs62f/6f/2//l//r/+f/fn1/6tJ/z9O/z8Mw7UjX8Cs/v/kkWn2/97/n9zXr//X/7Pd1Pr/3P3vils62f8AAADQg9z918Yt9j8AAAA0I3f/dXGL/Q8AAADNyN3/7rilk/2v/9f/6//1//r/2Z9f/7+a9P/j9P9zrNL7//r/yX39+n/9P9tNrf/P3f+euKWT/Q8AAAA9yN1/fdxi/wMAAEAzcve/N26x/wEAAKAZuftviFs62f/6f/1/z/1//t93z/1//A5oqP8/9f/q+n/9/yrav/5/0P/r//X/c+j/9f/6f840tf4/d//74pZO9j8AAAD0IHf/jXGL/Q8AAADNyN3//rjF/gcAAIBm5O7/QNzSyf7X/+v/e+7/k/f/vf8/6/Pr/1eT9//H6f/n0P/r//X/+n8Wanb/f3xp/X/u/g/GLZ3sfwAAAOhB7v6b4hb7HwAAAJqRu/9DcYv9DwAAAM3I3f/huKWT/a//1/9v7f+HQf+v/9f/b5jR/99+71V/U7+8gP7/6KD/Xzj9/zj9/xz6/zb7/0NDQ/3/sR2/v/6fKZra+/+5+z8St3Sy/wEAAKAHufs/GrfY/wAAANCM3P0fi1vsfwAAAGhG7v6Pxy2d7H/9v/5/we//33XxjK9D/79B/7/y/b/3/1eA/n+c/n8O/X+b/b/3//X/LM3U+v/c/Z+IWzrZ/wAAANCD3P2fjFvsfwAAAGhG7v5PxS32PwAAADQjd/+n45ZO9r/+X/+/4P7f+//6f/3/DvT/B0P/P07/P4f+v7n+P//uXv+v/2c5ptb/5+7/TNzSyf4HAACAHuTuvzlusf8BAACgGbn7b4lb7H8AAABoRu7+z8Ytnex//b/+X/+/mv3/0S39/3mD/v/0t9f/920q/f8FF/zbrfp//b/+f/n9v/f/9f8s19T6/9z9n4tbOtn/AAAA0IPc/Z+PW+x/AAAAaEbu/i/ELfY/AAAANCN3/xfjlk72//b+//CwUahumNX/R6Om/99E/7/169f/z/7jw/v/+n/9//6bSv/v/f9z+/r1//r/Vf76d9X//+P276//p0VT6/9z998at3Sy/wEAAKAHufu/FLfY/wAAANCM3P1fjlvsfwAAAGhG7v7b4pZO9r/3//X/+n/9v/5/9ufX/68m/f84/f8c+n/9v/f/L/3P8/T/LM7U+v/c/V+JWzrZ/wAAANCD3P23xy32PwAAADQjd/9X4xb7HwAAAJqRu/9rcUsn+1//r/+/8fiwpv/X/+v/9f+t0P+P0/+XM3/TNvTT/x+d9cFl9/N7teyvv5n+3/v/LNDU+v/c/V+PWzrZ/wAAANCD3P3fiFvsfwAAAGhG7v5vxi32PwAAADQjd/+34pZO9r/+X//f/vv/F+v/z/j8+n/9f8v0//lX9Nn0/3P00//PtOx+ftW/fv2//p/tptb/5+6/I27pZP8DAABAD3L3fztusf8BAACgGbn7vxO32P8AAADQjNz9341bOtn/+v+++v+1ocf+3/v/+n/9f0/0/+P0/3Po//X/+n/9Pws1tf4/d/+da+td7n8AAABYVf/xT/97x9l+2ztP/efR4Xtxy4XDyePDMBzbh68PAAAAOFgP7P619WH4/qlf8vP/AAAA0KLc/T+IWzrZ//r/vvr/Pt//X/X+//CWX4/+X/+v/x+n/x+n/59D/6//1//r/1moqfX/uft/GLdsGn7ru/6tBAAAAKYkd/+P4pZOfv4fAAAAepC7/8dxy7b9f/Is/6l2AAAAYGpy9/8kbunk5//1/xPv/4d96v/j2+n/N0y7//f+v/5f/78b+v9xe+z/T67p//X/I/T/+n/9P2eaWv+fu/+ncUsn+x8AAAAateVHFHL33xW32P8AAADQjNz9P4tb7H8AAABoRu7+u+OWTva//v/A+/9M1ffx/f9j9d+8/995/3/F0ZmfX/+v/2+Z/n+c9//n0P+30v8f0f/r/5mGqfX/uft/Hrd0sv8BAACgB7n7fxG32P8AAADQjNz9v4xb7H8AAABoRu7+X8Utnex//f/E3/8/p/7/LN7/1//30f/v8Pnb6f//7vwTN1/0X9ddo//ntIPs//OPhQPu/4/s9te5mf5/Dv1/K/2/9//1/0zE4vv/9S0f3G3/n7v/13FLJ/sfAAAAepC7/564xf4HAACAZuTu/03cYv8DAABAM3L3/zZu6WT/6//1/1Pp//P39RL6/xPn3P8fG4ZhKf1/NsW99//e/9f/b+f9/3H6/zn0//p//b/+n4VafP+/9YO77f9z9/8ubulk/wMAAEAPcvf/Pm7J/b+26x+6BwAAACYmd/8f4hY//w8AAADNyN1/b9zSyf7X/+v/p9L/J+//n/5+bb3/f1HFqX32//9Q/03/v7/0/+P0/3Po//X/+n/9Pws1tf4/d/8f45ZO9j8AAAD0IHf/fXGL/Q8AAADNyN3/p7jF/gcAAIBm5O7/c9zSyf7X/7fa/2cRr//X/0+l//f+v/f/D4b+f5z+fw79v/5f/6//Z6Gm1v/n7v9rAAAA///CLFw4")
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x880000, 0x0, 0x40, 0x0, &(0x7f0000000040))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x329ca00, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101041, 0xfa)

2m35.758952108s ago: executing program 2 (id=334):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x300})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})

2m35.37010417s ago: executing program 2 (id=337):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000100)={[{@nobarrier}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x60042, 0x15)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

2m33.504879206s ago: executing program 3 (id=345):
r0 = syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, 0x0, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0x1d57, 0xc000, 0x1000007, 0x20002f9, 0x0, r0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r2 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m33.301961024s ago: executing program 2 (id=346):
epoll_create1(0x0)
epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r3 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]})
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4e20, 0x3, 'dh\x00', 0x4, 0x7, 0x2d}, 0x2c)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES8=r3], &(0x7f0000000340)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

2m31.029024579s ago: executing program 3 (id=353):
r0 = shmget(0x1, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000300)={[{@fat=@fmask={'fmask', 0x3d, 0x7f}}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@uni_xlate}, {@utf8}, {@utf8}, {@uni_xlateno}, {@rodir}, {@fat=@sys_immutable}, {@numtail}, {@shortname_lower}, {@numtail}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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")
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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")
openat(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020)

2m30.128493632s ago: executing program 3 (id=359):
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x20000000000000ff)
fcntl$setsig(r1, 0xa, 0x12)
poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8)
r3 = dup2(r1, r2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r3)
fcntl$setown(r1, 0x8, r0)
r4 = getpid()
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3)
tkill(r4, 0x13)

2m29.004229923s ago: executing program 3 (id=363):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f000001a540)=[{&(0x7f0000000100)="67108e1744", 0x5}, {&(0x7f000001a240)="00689775", 0xfeb7}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x24044080)

2m27.398327587s ago: executing program 33 (id=363):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="e64f2be8d3e7a2aa", 0x8)
r1 = accept4$alg(r0, 0x0, 0x0, 0x800)
mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f000001a540)=[{&(0x7f0000000100)="67108e1744", 0x5}, {&(0x7f000001a240)="00689775", 0xfeb7}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x24044080)

2m26.824306623s ago: executing program 2 (id=371):
epoll_create1(0x0)
epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]})
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4e20, 0x3, 'dh\x00', 0x4, 0x7, 0x2d}, 0x2c)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES8=r2], &(0x7f0000000340)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

2m24.784029679s ago: executing program 34 (id=371):
epoll_create1(0x0)
epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0xdf)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0)
symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]})
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x4e20, 0x3, 'dh\x00', 0x4, 0x7, 0x2d}, 0x2c)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x0, 0x32525942, 0xc, [{0x6, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {0x80}, {}, {0xffffc33a}, {0x200}], 0x3, 0xfe, 0x0, 0x0, 0x5}})
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES8=r2], &(0x7f0000000340)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

57.456657865s ago: executing program 8 (id=650):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

57.085090682s ago: executing program 8 (id=655):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
eventfd2(0x7, 0x1)
socket(0x2, 0x80805, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={<r2=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfd94, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

56.6942635s ago: executing program 8 (id=656):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
epoll_create1(0x80000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$netlink(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x81000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES16=r0], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x8086}, 0x0)

56.077109583s ago: executing program 8 (id=660):
r0 = io_uring_setup(0x178e, &(0x7f0000000300)={0x0, 0x1443, 0x8, 0xfffffffe, 0xc})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
socket(0x400000000010, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
socket(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x7d, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0xff2e)
close_range(r0, 0xffffffffffffffff, 0x0)

53.246709784s ago: executing program 8 (id=663):
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)

53.01847196s ago: executing program 8 (id=664):
r0 = socket$inet6(0xa, 0x3, 0x3)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

37.465756862s ago: executing program 35 (id=664):
r0 = socket$inet6(0xa, 0x3, 0x3)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

29.553338759s ago: executing program 7 (id=707):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000040))
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_CAPBSET_DROP(0x18, 0x23)
setresuid(0xee00, 0xee00, 0x0)
ptrace$setsig(0x4203, 0x0, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd})
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r2 = io_uring_setup(0x36c2, &(0x7f0000000100)={0x0, 0xb2d1, 0x1, 0x1, 0x383})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20)

23.009028497s ago: executing program 6 (id=712):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4)
recvmmsg(r4, &(0x7f0000000080), 0x21e, 0x40010002, 0x0)

20.409071577s ago: executing program 6 (id=715):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20)
socket$inet6_udp(0xa, 0x2, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101042, 0x85)
r2 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

19.50931318s ago: executing program 7 (id=716):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8000000000000000)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @loopback={0xffff0000}, 0x3}, 0x1c)
ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000140)={0x28, 0x6, r3, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)})
syz_open_procfs(0x0, 0x0)
set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x0)
fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0)
write(r5, &(0x7f0000000200)='dummy_hcd.0', 0xb)

18.353604643s ago: executing program 6 (id=719):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16.062336051s ago: executing program 6 (id=721):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0)
write(r3, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCGPTPEER(r2, 0x5441, 0x12)

12.980768246s ago: executing program 4 (id=729):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

11.524476604s ago: executing program 1 (id=731):
syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
socket(0x1f, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
io_setup(0x9, &(0x7f0000000180))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0)

10.032095088s ago: executing program 4 (id=732):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x108902, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000001240)={'bridge0\x00'})
r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000140)={&(0x7f0000000040)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

9.930332462s ago: executing program 1 (id=733):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mkdir(&(0x7f0000000000)='./config\x00', 0x1ff)
mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
mount(&(0x7f0000000500)=@filename='devtmpfs\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x112, 0x1, 0x0, 0x0)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0)
write(r1, &(0x7f0000000c00)='0x40', 0x4)
mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x2)
mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r2, &(0x7f0000001400)='dummy_udc.0', 0xb)

9.279827096s ago: executing program 6 (id=734):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TIOCCONS(r0, 0x541d)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000280), 0x2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x2, 0x66e03de5, 0x50, @private0, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x80, 0x5, 0x4}})

8.939812367s ago: executing program 7 (id=736):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x5f, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1fe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c8}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000001, 0x10000000, 0x6, 0x401}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004)
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="2c548f2664234aea5882c40b008c", 0xe}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045)

8.907017688s ago: executing program 5 (id=737):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0', [{0x20, '\t\t\xf2`:y\xd4H\xfa\xee=d\xd7T\x0f7\x93`\xc6\xd84\xa3\xacQT\x8cj\x83\xa8\xb1\x88H\xe3\x16\xeb\x16\xaa\x91Pn\xcd\xde}$\xad`\xd6(\xa8\xaa\xc67?anM_\xa0\xcf\x82\x84\xf8\xb0\x8amlKL!\xd7\xaaKS\xffn*\xcf\t\\\xces\x04\x1e*p\x9e\xf2\x16\x01`\x00\x00\x00B\x1d\xc7\xd8\xb5\x81\x15\x0f[D8\x88@A$\x88\xa5O&\xae\xe3\b\xa8\xd4\x9b\xab\x81\xf4\xd1\f\"e\xcdzA\xf49\xc1\xc8\f\x8c\xb1)*O\xe3\xc3L\xd6J\ta\xf5\xc6\xee\xa2\xd4\xde\xe5\x1b\x1e\x00\xb4\xc2\xac\xacT\xedq\x10\xb1HW\xben\xbc\x9b\x03\xb6#\xd6z\xe5\xf5\xb4\xcdBA(\xd1\xf3Sx\xad\xa37\xda7\xc6\xc3\xcc\xf6w\x19m_O\xc9C\xb4\xea\xd5U\xb3\x82\xab1\x8e\xfc\xe3\xa8\x89\xb1?\xbf\x84\xdb\x01\x00\xc1\r\x16\x15\x8a\x1d\xa1\x98\x0fS\xd1c\x01O\xd7oi\x96\ts\a \x90Y\xe4\xc2\xcbcC\xdb\xa9\x85'}]}, 0x10a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uac1.usb0/p_chmask\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='0\n', 0x2)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r2, &(0x7f0000000040)="20c879ebbdc50bcd6d000000", 0xc)
symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000600)='dummy_udc.0\n\x00', 0xc)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0)
close(r1)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}, {&(0x7f000000bec0)=""/27, 0x1b}], 0x2}, 0x20)

8.399183408s ago: executing program 5 (id=738):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

8.173983024s ago: executing program 7 (id=739):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000380)='100000', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='0', 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0)

6.977488915s ago: executing program 5 (id=740):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$dsp(0xffffffffffffff9c, 0x0, 0x62f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
mkdir(0x0, 0x1ff)
mkdir(0x0, 0x1ff)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000)
r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5})
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

6.743782414s ago: executing program 5 (id=741):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), 0x0)
setreuid(0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
epoll_create(0x567)
socketpair(0x1a, 0x6, 0x80000001, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0)

6.620041473s ago: executing program 4 (id=742):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x10000001, 0x6}, 0x1, 0xfb, [{0x9, 0x5, 0x0, 0x3, 0x6, 0xfffffffa}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x29000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x100002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3fd, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x5, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x242}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x7ff, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x9, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x8, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="dab050", 0x14}], 0x1}, 0x4000880)

6.353430061s ago: executing program 5 (id=743):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

6.189944854s ago: executing program 7 (id=744):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8001}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xeff, 0x0, &(0x7f0000000100), &(0x7f0000000440), 0x0)
timer_create(0x0, 0x0, 0x0)

4.2486118s ago: executing program 7 (id=745):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$key(0xf, 0x3, 0x2)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r1, 0x0, 0x0, 0x200)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbtest/new_id\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='0547 2', 0x6)

2.338288128s ago: executing program 4 (id=746):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

2.092223395s ago: executing program 1 (id=747):
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_sock_diag(0x10, 0x3, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

2.091199519s ago: executing program 5 (id=748):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1.799204369s ago: executing program 1 (id=749):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain)
sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1)
syz_emit_ethernet(0x7a, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}}}}}}}, 0x0)

1.493628493s ago: executing program 4 (id=750):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
splice(r0, 0x0, r2, 0x0, 0x6, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r4, 0x0, 0x6, 0xc)
vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6)

1.490164045s ago: executing program 1 (id=761):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000340)={0x2b}, 0x8)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x804)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x2, {{0xa, 0x4e21, 0x80, @mcast1, 0x7}}, {{0xa, 0x4e22, 0x3, @remote, 0xe}}}, 0x108)

363.66935ms ago: executing program 1 (id=751):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r0, 0x0)
syz_clone(0x8b00000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x80002, 0x0)
write(r2, &(0x7f0000000180)='acpi_pm', 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a40)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
writev(r4, &(0x7f0000000400)=[{&(0x7f0000000280)="80ef", 0x2}], 0x1)

162.538235ms ago: executing program 6 (id=752):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x49084}, 0x4)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0)

0s ago: executing program 4 (id=753):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
write(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000580), 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0)
write(r0, &(0x7f0000000940)='naa.600140', 0xa)

kernel console output (not intermixed with test programs):

 Setting the MTU to 1532 would solve the problem.
[   86.252099][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.288339][ T5623] team0: Port device team_slave_1 added
[   86.311957][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.319715][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.347063][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.359983][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.367402][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.394174][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.452316][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.459399][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.485960][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.511097][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.518396][ T5637] Bluetooth: hci1: command tx timeout
[   86.518430][ T5637] Bluetooth: hci3: command tx timeout
[   86.523878][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.524049][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.529849][ T5637] Bluetooth: hci2: command tx timeout
[   86.555701][ T5629] Bluetooth: hci4: command tx timeout
[   86.555732][ T5629] Bluetooth: hci5: command tx timeout
[   86.555771][ T5629] Bluetooth: hci0: command tx timeout
[   86.672264][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.679652][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.706162][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.718089][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.725595][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.751541][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.770490][ T5622] hsr_slave_0: entered promiscuous mode
[   86.777894][ T5622] hsr_slave_1: entered promiscuous mode
[   86.802689][ T5626] hsr_slave_0: entered promiscuous mode
[   86.809137][ T5626] hsr_slave_1: entered promiscuous mode
[   86.815974][ T5626] debugfs: 'hsr0' already exists in 'hsr'
[   86.821750][ T5626] Cannot create hsr debugfs directory
[   86.835876][ T5625] hsr_slave_0: entered promiscuous mode
[   86.842542][ T5625] hsr_slave_1: entered promiscuous mode
[   86.849004][ T5625] debugfs: 'hsr0' already exists in 'hsr'
[   86.854905][ T5625] Cannot create hsr debugfs directory
[   86.861121][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.868446][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   86.894855][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.946594][ T5624] hsr_slave_0: entered promiscuous mode
[   86.953022][ T5624] hsr_slave_1: entered promiscuous mode
[   86.959355][ T5624] debugfs: 'hsr0' already exists in 'hsr'
[   86.965752][ T5624] Cannot create hsr debugfs directory
[   87.158055][ T5623] hsr_slave_0: entered promiscuous mode
[   87.164498][ T5623] hsr_slave_1: entered promiscuous mode
[   87.170843][ T5623] debugfs: 'hsr0' already exists in 'hsr'
[   87.176749][ T5623] Cannot create hsr debugfs directory
[   87.189699][ T5621] hsr_slave_0: entered promiscuous mode
[   87.196169][ T5621] hsr_slave_1: entered promiscuous mode
[   87.202294][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[   87.208163][ T5621] Cannot create hsr debugfs directory
[   87.845657][ T5622] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.859605][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   87.867769][ T5622] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.878394][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   87.892123][ T5622] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.902238][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   87.921601][ T5622] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.931900][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.006220][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   88.018921][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.027024][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.037961][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.046996][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.057209][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.065418][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.075457][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.177524][ T5624] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   88.188833][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.197643][ T5624] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   88.208638][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.217177][ T5624] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   88.227383][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.235428][ T5624] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   88.245168][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.351301][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   88.363397][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.371675][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   88.381493][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.403521][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   88.415380][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.423248][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   88.434520][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.445110][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.536890][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   88.594318][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.595300][ T5637] Bluetooth: hci2: command tx timeout
[   88.601541][ T5648] Bluetooth: hci0: command tx timeout
[   88.606977][ T5637] Bluetooth: hci5: command tx timeout
[   88.612797][ T5629] Bluetooth: hci4: command tx timeout
[   88.618332][ T5645] Bluetooth: hci3: command tx timeout
[   88.623358][ T5629] Bluetooth: hci1: command tx timeout
[   88.640764][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.648158][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.658794][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   88.669818][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.682097][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   88.693257][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.701835][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   88.711603][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.731077][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   88.742008][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   88.753107][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.760229][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.776846][ T5625] 8021q: adding VLAN 0 to HW filter on device team0
[   88.822619][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.829764][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.879464][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.886602][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.917139][ T5626] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   88.928926][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   88.952768][ T5626] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   88.963692][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   88.972326][ T5626] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   88.983504][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   88.994011][ T5626] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.003445][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   89.084186][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.180482][ T5624] 8021q: adding VLAN 0 to HW filter on device team0
[   89.222647][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.229850][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.264075][ T5625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   89.308107][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.315355][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.361669][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.450259][ T5623] 8021q: adding VLAN 0 to HW filter on device team0
[   89.483559][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.511606][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.518803][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.572181][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.579372][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.635408][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.644310][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   89.688747][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.695924][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.780526][ T5626] 8021q: adding VLAN 0 to HW filter on device team0
[   89.799528][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.806685][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.900291][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.907521][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.003748][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.010953][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.157278][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.429955][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.496653][ T5622] veth0_vlan: entered promiscuous mode
[   90.619508][ T5622] veth1_vlan: entered promiscuous mode
[   90.675610][ T5629] Bluetooth: hci3: command tx timeout
[   90.681864][ T5648] Bluetooth: hci5: command tx timeout
[   90.687647][ T4938] Bluetooth: hci4: command tx timeout
[   90.688187][ T5645] Bluetooth: hci2: command tx timeout
[   90.693964][ T4938] Bluetooth: hci1: command tx timeout
[   90.701466][ T5637] Bluetooth: hci0: command tx timeout
[   90.930024][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.950760][ T5622] veth0_macvtap: entered promiscuous mode
[   91.010137][ T5622] veth1_macvtap: entered promiscuous mode
[   91.112796][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.173414][    T9] cfg80211: failed to load regulatory.db
[   91.180239][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.336773][   T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.375515][ T1152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.455074][ T1152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.643864][ T5625] veth0_vlan: entered promiscuous mode
[   91.702129][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.733327][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.752800][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.777588][ T5625] veth1_vlan: entered promiscuous mode
[   91.801862][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.835003][   T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.860341][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.880785][  T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.900510][  T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.984134][ T5622] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   91.994017][ T5621] veth0_vlan: entered promiscuous mode
[   92.018278][ T5624] veth0_vlan: entered promiscuous mode
[   92.065935][ T5623] veth0_vlan: entered promiscuous mode
[   92.093149][ T5621] veth1_vlan: entered promiscuous mode
[   92.122007][ T5625] veth0_macvtap: entered promiscuous mode
[   92.130356][ T5624] veth1_vlan: entered promiscuous mode
[   92.176037][ T5625] veth1_macvtap: entered promiscuous mode
[   92.190145][ T5623] veth1_vlan: entered promiscuous mode
[   92.223279][ T5626] veth0_vlan: entered promiscuous mode
[   92.267935][ T5626] veth1_vlan: entered promiscuous mode
[   92.293778][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.328930][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.363475][ T5624] veth0_macvtap: entered promiscuous mode
[   92.391751][ T5621] veth0_macvtap: entered promiscuous mode
[   92.419094][ T5624] veth1_macvtap: entered promiscuous mode
[   92.426789][ T5865] loop3: detected capacity change from 0 to 512
[   92.464135][ T5621] veth1_macvtap: entered promiscuous mode
[   92.521674][ T5623] veth0_macvtap: entered promiscuous mode
[   92.529886][ T5865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.545182][ T5865] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.550314][ T5626] veth0_macvtap: entered promiscuous mode
[   92.571637][ T5865] EXT4-fs error (device loop3): __ext4_new_inode:1287: comm syz.3.8: failed to insert inode 16: doubly allocated?
[   92.572915][ T5623] veth1_macvtap: entered promiscuous mode
[   92.597223][ T1152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.620202][ T5626] veth1_macvtap: entered promiscuous mode
[   92.657086][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.664797][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.677406][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.689858][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.719231][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.763931][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.810141][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.842180][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.855058][   T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.880783][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.937308][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.956319][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.976478][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.995415][   T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.135829][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.175010][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.175047][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.200318][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.266379][ T1152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.370071][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.382999][  T112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.392053][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.419213][  T112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.511613][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.520504][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.546038][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.558260][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.572003][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.664534][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.674377][   T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.690380][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.835937][   T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.863764][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.865072][ T1173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.895514][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.911910][ T1173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.967992][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.025907][ T5875] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   94.027421][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.062260][ T1152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.085770][  T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.103697][  T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.137284][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.163422][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.205348][ T5875] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   94.215979][ T1173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.231723][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.266745][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   94.266928][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.286794][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.310949][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.328695][ T5875] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   94.341172][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   94.381174][ T5875] usb 5-1: Product: syz
[   94.393952][ T5875] usb 5-1: Manufacturer: syz
[   94.426259][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.469773][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.484996][ T5875] cdc_wdm 5-1:1.0: skipping garbage
[   94.519326][ T5875] cdc_wdm 5-1:1.0: skipping garbage
[   94.540927][ T5875] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   94.564258][ T5875] cdc_wdm 5-1:1.0: Unknown control protocol
[   94.781106][ T5893] loop0: detected capacity change from 0 to 512
[   94.809032][ T5875] usb 5-1: USB disconnect, device number 2
[   94.910207][ T5893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.998299][ T5899] loop2: detected capacity change from 0 to 4096
[   95.006392][ T5899] EXT4-fs: inline encryption not supported
[   95.014554][ T5899] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   95.027719][ T5899] EXT4-fs (loop2): Test dummy encryption mode enabled
[   95.029489][ T5893] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.082260][ T5899] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   95.131549][ T5899] System zones: 0-5
[   95.160997][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.377006][ T5875] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   95.406139][ T5899] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[   95.451959][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.522335][ T5909] loop3: detected capacity change from 0 to 2048
[   95.539791][ T5910] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2"
[   95.567694][ T5875] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   95.587865][ T5909]  loop3: p2 < > p3 < p5 > p4
[   95.607482][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.607750][ T5909] loop3: partition table partially beyond EOD, 
[   95.647777][ T5875] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   95.658099][ T5909] truncated
[   95.694581][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.710022][ T5909] loop3: p2 start 4278190080 is beyond EOD, truncated
[   95.739219][ T5875] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   95.763432][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   95.780690][ T5875] usb 5-1: Product: syz
[   95.785096][ T5875] usb 5-1: Manufacturer: syz
[   95.794098][ T5909] loop3: p4 size 8192 extends beyond EOD, truncated
[   95.851557][ T5875] cdc_wdm 5-1:1.0: skipping garbage
[   95.872760][ T5875] cdc_wdm 5-1:1.0: skipping garbage
[   95.895931][ T5909] loop3: p5 size 8192 extends beyond EOD, truncated
[   95.921309][ T5875] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   95.950588][ T5875] cdc_wdm 5-1:1.0: Unknown control protocol
[   96.012031][ T5919] loop5: detected capacity change from 0 to 512
[   96.075387][ T5919] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.19: inode has both inline data and extents flags
[   96.133450][ T5875] usb 5-1: USB disconnect, device number 3
[   96.183606][ T5919] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   96.184756][    C1] EXT4-fs (loop5): error count since last fsck: 1
[   96.201013][    C1] EXT4-fs (loop5): initial error at time 1785982169: ext4_orphan_get:1399: inode 15
[   96.210478][    C1] EXT4-fs (loop5): last error at time 1785982169: ext4_orphan_get:1399: inode 15
[   96.212580][ T5922] loop0: detected capacity change from 0 to 4096
[   96.232556][ T5626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.253092][ T5919] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.19: couldn't read orphan inode 15 (err -117)
[   96.277510][ T5919] loop5: lost filesystem error report for type 5 error -117
[   96.283152][ T5922] EXT4-fs: inline encryption not supported
[   96.307439][ T5919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.328593][ T5917] loop1: detected capacity change from 0 to 4096
[   96.409455][ T5922] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   96.482029][ T5922] EXT4-fs (loop0): Test dummy encryption mode enabled
[   96.538522][ T5922] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[   96.570026][ T5922] System zones: 0-5
[   96.607621][ T5922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.658083][ T5922] =======================================================
[   96.658083][ T5922] WARNING: The mand mount option has been deprecated and
[   96.658083][ T5922]          and is ignored by this kernel. Remove the mand
[   96.658083][ T5922]          option from the mount to silence this warning.
[   96.658083][ T5922] =======================================================
[   96.790156][ T5905] udevd[5905]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   96.800451][ T5904] udevd[5904]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[   96.831268][ T5752] udevd[5752]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   97.154227][ T5624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.222650][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24'.
[   97.408242][ T5937] team0: Port device team_slave_0 removed
[   97.818946][ T5942] Zero length message leads to an empty skb
[   98.028628][ T5949] loop4: detected capacity change from 0 to 32768
[   98.236155][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.248770][ T5949] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   98.576224][   T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.607551][ T5765] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   98.794661][ T5765] usb 3-1: config index 0 descriptor too short (expected 28277, got 36)
[   98.808954][ T5625] ocfs2: Unmounting device (7,4) on (node local)
[   98.816549][ T5765] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.882101][ T5765] usb 3-1: config 0 has no interfaces?
[   98.918756][ T5765] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[   98.925678][   T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.976663][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.041505][ T5765] usb 3-1: config 0 descriptor??
[   99.129194][   T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.306307][   T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.457998][ T5968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.36'.
[   99.572123][ T5966] loop1: detected capacity change from 0 to 4096
[   99.714809][  T188] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   99.731117][ T5972] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.750139][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   99.761305][ T5637] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   99.770113][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   99.783115][ T5637] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   99.792239][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   99.927141][  T188] usb 6-1: Using ep0 maxpacket: 32
[   99.983067][  T188] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  100.000734][ T5978] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 1882 already freed
[  100.008936][   T58] bridge_slave_1: left allmulticast mode
[  100.014418][  T188] usb 6-1: config 0 has no interface number 0
[  100.057327][   T58] bridge_slave_1: left promiscuous mode
[  100.062808][  T188] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  100.081359][ T5978] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[  100.098245][  T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.104810][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.156139][  T188] usb 6-1: Product: syz
[  100.164224][  T188] usb 6-1: Manufacturer: syz
[  100.181111][  T188] usb 6-1: SerialNumber: syz
[  100.203635][   T58] bridge_slave_0: left allmulticast mode
[  100.223733][  T188] usb 6-1: config 0 descriptor??
[  100.242891][   T58] bridge_slave_0: left promiscuous mode
[  100.269954][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.774068][ T5970] loop4: detected capacity change from 0 to 32768
[  100.873874][ T5970] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  101.027930][ T5970] XFS (loop4): Ending clean mount
[  101.245405][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.293193][   T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.345351][   T58] bond0 (unregistering): Released all slaves
[  101.448323][ T5627] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  101.472459][ T5625] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  101.490330][  T188] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  101.521333][  T188] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  101.548019][  T188] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  101.598047][  T188] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  101.657404][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.687445][  T188] usb 6-1: USB disconnect, device number 2
[  101.708379][ T5627] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.768020][ T5627] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  101.812822][ T5627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.876518][ T5637] Bluetooth: hci0: command tx timeout
[  101.902072][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1
[  101.921219][ T5627] usb 4-1: config 0 descriptor??
[  102.239259][ T5765] usb 3-1: USB disconnect, device number 2
[  102.295328][   T58] hsr_slave_0: left promiscuous mode
[  102.342158][   T58] hsr_slave_1: left promiscuous mode
[  102.377017][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.397818][ T6024] netlink: 'syz.5.44': attribute type 11 has an invalid length.
[  102.410502][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.446519][ T6027] loop2: detected capacity change from 0 to 128
[  102.476808][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.484530][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.532017][   T58] veth1_macvtap: left promiscuous mode
[  102.549928][   T58] veth0_macvtap: left promiscuous mode
[  102.562654][   T58] veth1_vlan: left promiscuous mode
[  102.581872][   T58] veth0_vlan: left promiscuous mode
[  103.242732][ T5627] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0001/input/input5
[  103.361452][   T58] team0 (unregistering): Port device team_slave_1 removed
[  103.456926][ T5627] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[  103.474405][   T58] team0 (unregistering): Port device team_slave_0 removed
[  103.490309][ T5627] usb 4-1: USB disconnect, device number 2
[  103.708944][ T6055] fido_id[6055]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  103.822047][ T6061] fuse: Bad value for 'fd'
[  103.960637][ T5637] Bluetooth: hci0: command tx timeout
[  104.058964][ T6030] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  104.083820][ T6030] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  104.100508][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2
[  104.178645][ T6057] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  104.204611][ T6057] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  104.333880][ T6057] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  104.392041][ T6057] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  104.414502][ T6057] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  104.458318][ T6057] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  104.496856][ T6057] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  104.519636][ T6057] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  104.558169][ T6057] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  104.581690][ T6057] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  104.626067][ T6057] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  104.658378][ T6057] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  104.707039][ T6057] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  104.720964][ T6057] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  104.766379][ T6057] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  104.803369][ T6057] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  104.825684][ T6057] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  104.847790][ T6057] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  105.096839][ T6082] netlink: 'syz.4.56': attribute type 1 has an invalid length.
[  105.698376][  T188] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  105.884857][  T188] usb 6-1: Using ep0 maxpacket: 8
[  105.896078][  T188] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  105.928357][  T188] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  105.972508][  T188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  105.996810][ T5875] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  106.021049][  T188] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  106.043131][  T188] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  106.057821][  T188] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  106.074713][  T188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.127000][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3
[  106.195312][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout
[  106.218344][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  106.260713][ T5875] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  106.285488][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  106.297443][ T5875] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  106.310305][ T5875] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  106.338853][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.376766][ T5875] usb 2-1: Product: syz
[  106.391662][ T5875] usb 2-1: Manufacturer: syz
[  106.406052][ T5875] usb 2-1: SerialNumber: syz
[  106.443208][ T5645] Bluetooth: hci2: command 0x0c1a tx timeout
[  106.458903][ T5875] usb 2-1: config 0 descriptor??
[  106.475783][ T5875] ums-isd200 2-1:0.0: USB Mass Storage device detected
[  106.481709][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.496529][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.503838][ T5971] bridge_slave_0: entered allmulticast mode
[  106.517339][ T5645] Bluetooth: hci3: command 0x0c1a tx timeout
[  106.528042][ T5646] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  106.552882][ T5971] bridge_slave_0: entered promiscuous mode
[  106.576699][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.597640][ T5645] Bluetooth: hci5: command 0x0c1a tx timeout
[  106.634848][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.678344][ T5971] bridge_slave_1: entered allmulticast mode
[  106.695210][ T5875] scsi host1: usb-storage 2-1:0.0
[  106.705119][ T5646] usb 5-1: Using ep0 maxpacket: 8
[  106.719328][ T5971] bridge_slave_1: entered promiscuous mode
[  106.737727][ T5646] usb 5-1: config 0 has no interfaces?
[  106.755988][ T5645] Bluetooth: hci4: command 0x0c1a tx timeout
[  106.766279][ T5646] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  106.784786][ T5646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.792860][ T5646] usb 5-1: Product: syz
[  106.797343][ T5646] usb 5-1: Manufacturer: syz
[  106.801937][ T5646] usb 5-1: SerialNumber: syz
[  106.818458][ T5646] usb 5-1: config 0 descriptor??
[  106.834974][ T5645] Bluetooth: hci0: command 0x0419 tx timeout
[  106.957748][ T5646] usb 2-1: USB disconnect, device number 2
[  107.021318][ T6121] usbtmc 6-1:16.0: simple usb_control_msg failed -32
[  107.032952][ T5765] usb 5-1: USB disconnect, device number 4
[  107.058703][ T5633] usb 6-1: USB disconnect, device number 3
[  107.084541][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.238582][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.394606][ T5971] team0: Port device team_slave_0 added
[  107.415692][ T5971] team0: Port device team_slave_1 added
[  107.481051][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.488242][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.515015][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.528871][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.536443][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.583866][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.084826][  T990] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  108.132531][ T5971] hsr_slave_0: entered promiscuous mode
[  108.150687][ T5971] hsr_slave_1: entered promiscuous mode
[  108.165395][ T5971] debugfs: 'hsr0' already exists in 'hsr'
[  108.172306][ T5971] Cannot create hsr debugfs directory
[  108.276877][ T5645] Bluetooth: hci1: command 0x0c1a tx timeout
[  108.284978][  T990] usb 5-1: Using ep0 maxpacket: 32
[  108.310709][  T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.384473][  T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.426121][  T990] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  108.466971][  T990] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  108.508189][  T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.509125][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4
[  108.523328][ T5645] Bluetooth: hci2: command 0x0c1a tx timeout
[  108.524268][  T990] usb 5-1: config 0 descriptor??
[  108.594821][ T5645] Bluetooth: hci3: command 0x0c1a tx timeout
[  108.676349][ T5645] Bluetooth: hci5: command 0x0c1a tx timeout
[  108.834808][ T5645] Bluetooth: hci4: command 0x0c1a tx timeout
[  108.859802][ T5971] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  108.882476][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  108.906658][ T5971] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  108.916663][ T5645] Bluetooth: hci0: command 0x0419 tx timeout
[  108.936799][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  108.949264][ T5971] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  108.962837][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  108.972681][ T5971] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  109.011036][ T5971] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  109.129307][  T990] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input6
[  109.278606][  T990] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0002/input/input7
[  109.430274][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.437249][ T6177] jffs2: notice: (6177) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  109.520624][  T990] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0
[  109.571405][ T5971] 8021q: adding VLAN 0 to HW filter on device team0
[  109.669429][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.676690][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.795206][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.802417][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.944344][  T990] usb 5-1: USB disconnect, device number 5
[  110.357076][ T5645] Bluetooth: hci1: command 0x0c1a tx timeout
[  110.595067][ T5645] Bluetooth: hci2: command 0x0c1a tx timeout
[  110.675238][ T5645] Bluetooth: hci3: command 0x0c1a tx timeout
[  110.754793][ T5645] Bluetooth: hci5: command 0x0c1a tx timeout
[  110.914896][ T5645] Bluetooth: hci4: command 0x0c1a tx timeout
[  110.994935][ T5645] Bluetooth: hci0: command 0x0419 tx timeout
[  111.069397][ T6218] loop4: detected capacity change from 0 to 2048
[  111.117022][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.184135][ T6218] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.301989][ T6228] loop3: detected capacity change from 0 to 128
[  111.350218][ T6230] mmap: syz.4.83 (6230) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  111.403927][ T6228] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  111.451786][ T6228] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  111.705120][ T5645] Bluetooth: hci3: unexpected event for opcode 0x1003
[  112.084063][ T5971] veth0_vlan: entered promiscuous mode
[  112.134959][ T5971] veth1_vlan: entered promiscuous mode
[  112.262469][ T5971] veth0_macvtap: entered promiscuous mode
[  112.294284][ T5971] veth1_macvtap: entered promiscuous mode
[  112.342759][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.380726][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.425141][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.457695][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.075080][ T5645] Bluetooth: hci0: command 0x0419 tx timeout
[  113.154998][ T5645] Bluetooth: hci4: command 0x0c1a tx timeout
[  114.414912][ T3289] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.662221][ T5622] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.758159][   T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.912024][ T6259] loop4: detected capacity change from 0 to 7
[  114.969537][ T6259]  loop4:
[  114.984352][ T6259] loop4: partition table partially beyond EOD, truncated
[  115.052855][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.102689][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.226348][ T6262] loop5: detected capacity change from 0 to 2048
[  115.267930][ T6262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.297864][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.332613][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.519833][ T6268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.99'.
[  115.717285][ T5637] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  115.727013][ T5637] Bluetooth: hci3: Injecting HCI hardware error event
[  115.735400][ T5637] Bluetooth: hci3: hardware error 0x00
[  115.739095][ T6275] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  115.877669][ T5627] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  115.920875][ T6281] loop4: detected capacity change from 0 to 128
[  115.940973][ T6281] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  116.060095][ T5627] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  116.081652][ T5627] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  116.102012][ T5627] usb 2-1: Product: syz
[  116.127046][ T5627] usb 2-1: SerialNumber: syz
[  116.145428][ T5627] usb 2-1: config 0 descriptor??
[  116.237694][ T6255] loop2: detected capacity change from 0 to 40427
[  116.280529][ T6255] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  116.304076][ T6290] binder: 6289:6290 ioctl c0306201 200000000640 returned -22
[  116.312728][ T6255] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  116.338428][ T6255] F2FS-fs (loop2): invalid crc value
[  116.384441][ T5627] hso 2-1:0.0: Failed to find BULK eps
[  116.588595][ T5773] usb 2-1: USB disconnect, device number 3
[  116.804469][ T6255] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  116.899546][ T6255] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  116.941820][ T6255] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  117.351478][ T6255] syz.2.95: attempt to access beyond end of device
[  117.351478][ T6255] loop2: rw=8390659, sector=36912, nr_sectors = 8152 limit=40427
[  117.527604][ T6255] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5
[  117.796093][ T5637] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  117.997137][ T5626] syz-executor: attempt to access beyond end of device
[  117.997137][ T5626] loop2: rw=8390659, sector=45096, nr_sectors = 20440 limit=40427
[  118.072383][ T5626] F2FS-fs (loop2): Issue discard(5637, 5637, 2555) failed, ret: -5
[  118.547359][ T6342] loop3: detected capacity change from 0 to 512
[  118.648006][ T6342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.738056][ T6342] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.756033][ T5765] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  118.925138][   T31] audit: type=1800 audit(1785982191.765:2): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.102" name="file1" dev="loop4" ino=94 res=0 errno=0
[  118.949202][ T6349] Illegal XDP return value 1515770660 on prog  (id 18) dev syz_tun, expect packet loss!
[  118.964962][ T5765] usb 2-1: Using ep0 maxpacket: 16
[  118.971857][ T5765] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  118.986259][ T5765] usb 2-1: config 0 has no interface number 0
[  119.007653][   T12] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  119.008500][ T5765] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  119.064820][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.074337][   T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  119.084723][ T5765] usb 2-1: Product: syz
[  119.095810][ T5765] usb 2-1: Manufacturer: syz
[  119.106057][ T5765] usb 2-1: SerialNumber: syz
[  119.136656][ T5765] usb 2-1: config 0 descriptor??
[  119.148245][   T12] EXT4-fs (loop3): This should not happen!! Data will be lost
[  119.148245][   T12] 
[  119.164501][ T5765] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  119.191712][   T12] EXT4-fs (loop3): Total free blocks count 0
[  119.213855][   T12] EXT4-fs (loop3): Free/Dirty block details
[  119.234583][   T12] EXT4-fs (loop3): free_blocks=65280
[  119.256216][   T12] EXT4-fs (loop3): dirty_blocks=8
[  119.272631][   T12] EXT4-fs (loop3): Block reservation details
[  119.291961][   T12] EXT4-fs (loop3): i_reserved_data_blocks=8
[  119.313708][   T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 6 with max blocks 6 with error 28
[  119.365975][ T5622] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  120.102834][   T31] audit: type=1326 audit(1785982192.955:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.5.132" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f350ef9e0d9 code=0x0
[  120.199441][ T6371] configfs-gadget.g1 gadget.0: HOST MAC 6e:62:2f:37:bf:ba
[  120.218075][ T6371] configfs-gadget.g1 gadget.0: MAC b6:15:2a:c2:16:ee
[  120.474937][ T5875] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  120.582078][ T5765] gspca_spca1528: reg_w err -71
[  120.587367][ T5765] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  120.635186][ T5765] usb 2-1: USB disconnect, device number 4
[  120.661322][ T5875] usb 1-1: Dual-Role OTG device on HNP port
[  120.668751][ T5646] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  120.699097][ T5875] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  120.710996][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.775847][ T5875] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  120.776938][ T6377] loop4: detected capacity change from 0 to 32768
[  120.838239][ T5646] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[  120.875455][ T5646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.920097][ T5646] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.957640][ T5875] rndis_host 1-1:1.2 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 6e:62:2f:37:bf:ba
[  120.978610][ T5646] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  121.016652][ T5646] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  121.081539][ T5646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.129161][ T5646] usb 7-1: config 0 descriptor??
[  121.455880][ T6402] bridge0: port 2(bridge_slave_1) entered listening state
[  121.467898][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.607165][ T5646] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[  121.683212][ T5646] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  121.696527][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.141'.
[  121.812233][ T6417] loop1: detected capacity change from 0 to 128
[  121.861339][ T5646] usb 7-1: USB disconnect, device number 2
[  121.909256][ T6417] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  121.918857][ T6416] fido_id[6416]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  122.006960][ T6417] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  122.216918][ T5623] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  122.356610][ T6427] netlink: 'syz.5.146': attribute type 11 has an invalid length.
[  122.401558][ T6429] loop1: detected capacity change from 0 to 256
[  122.443936][ T6400] loop3: detected capacity change from 0 to 32768
[  122.444034][ T6429] exfat: Deprecated parameter 'utf8'
[  122.576747][ T6429] exFAT-fs (loop1): bogus sector size bits : 0
[  122.595613][ T6437] netlink: 20 bytes leftover after parsing attributes in process `syz.6.147'.
[  122.610343][ T6429] exFAT-fs (loop1): failed to read boot sector
[  122.617002][ T6429] exFAT-fs (loop1): failed to recognize exfat type
[  122.643742][ T6400] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  122.871473][ T6400] XFS (loop3): Ending clean mount
[  122.890495][ T6449] capability: warning: `syz.5.149' uses deprecated v2 capabilities in a way that may be insecure
[  123.037497][   T31] audit: type=1800 audit(1785982195.895:4): pid=6400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.137" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  123.117800][   T31] audit: type=1800 audit(1785982195.975:5): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.137" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  123.281408][ T6458] netlink: 'syz.6.151': attribute type 8 has an invalid length.
[  123.418587][ T5622] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  123.597220][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.6.155'.
[  123.630960][ T6467] netlink: 'syz.6.155': attribute type 3 has an invalid length.
[  123.674321][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.6.155'.
[  123.687330][ T6467] netlink: 'syz.6.155': attribute type 3 has an invalid length.
[  124.032959][ T6477] loop1: detected capacity change from 0 to 1024
[  124.769278][ T6477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  124.858739][ T6477] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.195283][ T6445] loop2: detected capacity change from 0 to 32768
[  125.416417][ T6445] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.536939][ T6495] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.157: bg 0: block 112: padding at end of block bitmap is not set
[  125.644939][ T5646] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  125.737549][ T6495] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 8 with error 28
[  125.928570][ T5646] usb 4-1: too many configurations: 53, using maximum allowed: 8
[  126.041186][ T6495] EXT4-fs (loop1): This should not happen!! Data will be lost
[  126.041186][ T6495] 
[  126.374577][ T5646] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  126.450351][ T6495] EXT4-fs (loop1): Total free blocks count 0
[  126.494099][ T6445] XFS (loop2): Ending clean mount
[  126.539334][ T5646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.571286][ T6495] EXT4-fs (loop1): Free/Dirty block details
[  126.607196][ T5646] usb 4-1: Product: syz
[  126.634471][ T6445] XFS (loop2): Quotacheck needed: Please wait.
[  126.644116][ T5646] usb 4-1: Manufacturer: syz
[  126.660854][ T6495] EXT4-fs (loop1): free_blocks=0
[  126.678767][ T5646] usb 4-1: SerialNumber: syz
[  126.728405][ T6495] EXT4-fs (loop1): dirty_blocks=384
[  126.780420][ T6495] EXT4-fs (loop1): Block reservation details
[  126.797133][ T6495] EXT4-fs (loop1): i_reserved_data_blocks=24
[  126.801857][ T6514] loop6: detected capacity change from 0 to 512
[  126.896597][ T6445] XFS (loop2): Quotacheck: Done.
[  126.903302][ T6514] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.164: corrupted in-inode xattr: invalid ea_ino
[  126.937781][ T6514] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  126.941029][ T6514] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.164: couldn't read orphan inode 15 (err -117)
[  126.950246][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  126.950286][    C1] EXT4-fs (loop6): initial error at time 1785982199: ext4_iget_extra_inode:5180: inode 15
[  126.950324][    C1] EXT4-fs (loop6): last error at time 1785982199: ext4_iget_extra_inode:5180: inode 15
[  127.049972][  T148] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 6)
[  127.072629][ T5626] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.119072][  T148] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  127.152789][ T6514] loop6: lost filesystem error report for type 5 error -117
[  127.162441][ T6514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.201606][  T148] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8)
[  127.288096][ T5623] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  127.567530][ T6514] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz.6.164: invalid fast symlink length 39
[  128.161578][ T5971] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.410483][ T6527] loop4: detected capacity change from 0 to 131072
[  128.421456][ T6527] F2FS-fs (loop4): Invalid log sectorsize (67108873)
[  128.428254][ T6527] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  128.437655][ T6527] F2FS-fs (loop4): invalid crc value
[  128.515113][ T5646] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  128.543124][ T6527] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.568685][ T6527] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  128.575839][ T6527] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  128.616487][ T5646] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  128.666428][ T5646] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  128.915867][ T5646] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  129.766639][ T5646] usb 4-1: USB disconnect, device number 3
[  129.822660][ T5745] udevd[5745]: setting mode of /dev/bus/usb/004/003 to 020664 failed: No such file or directory
[  129.904077][ T5745] udevd[5745]: setting owner of /dev/bus/usb/004/003 to uid=0, gid=0 failed: No such file or directory
[  130.148666][ T6558] loop3: detected capacity change from 0 to 512
[  130.225687][ T6558] EXT4-fs (loop3): Test dummy encryption mode enabled
[  130.273799][ T6558] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.175: inode has both inline data and extents flags
[  130.306648][ T6558] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  130.308450][ T6558] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.175: couldn't read orphan inode 15 (err -117)
[  130.317680][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  130.317703][    C0] EXT4-fs (loop3): initial error at time 1785982203: ext4_orphan_get:1399: inode 15
[  130.317742][    C0] EXT4-fs (loop3): last error at time 1785982203: ext4_orphan_get:1399: inode 15
[  130.435635][ T6558] loop3: lost filesystem error report for type 5 error -117
[  130.455449][ T6558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.227661][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.764856][ T5646] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  131.941178][ T5646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.975527][ T5646] usb 4-1: config 0 interface 0 has no altsetting 0
[  132.010221][ T5646] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  132.041065][ T5646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.071545][ T5646] usb 4-1: Product: syz
[  132.106511][ T5646] usb 4-1: Manufacturer: syz
[  132.121057][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  132.130154][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  132.151002][ T5646] usb 4-1: SerialNumber: syz
[  132.169986][ T5646] usb 4-1: config 0 descriptor??
[  132.189711][ T5646] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  132.250127][ T5646] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  132.295588][ T5646] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  132.333166][ T5646] usb 4-1: media controller created
[  132.460993][ T5646] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  132.725771][ T5646] DVB: Unable to find symbol tda10046_attach()
[  132.758954][ T5646] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  132.799472][ T5646] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  132.818887][   T31] audit: type=1800 audit(1785982205.665:6): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.194" name="bus" dev="tmpfs" ino=158 res=0 errno=0
[  133.247754][ T6651] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[  133.270480][ T6599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.298552][ T6599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.466860][ T6654] vivid-002: =================  START STATUS  =================
[  133.475855][ T6654] vivid-002: Radio HW Seek Mode: Bounded
[  133.482262][ T6654] vivid-002: Radio Programmable HW Seek: false
[  133.491352][ T6654] vivid-002: RDS Rx I/O Mode: Block I/O
[  133.497420][ T6654] vivid-002: Generate RBDS Instead of RDS: false
[  133.504038][ T6654] vivid-002: RDS Reception: true
[  133.509821][ T6654] vivid-002: RDS Program Type: 0 inactive
[  133.517136][ T6654] vivid-002: RDS PS Name:  inactive
[  133.522465][ T6654] vivid-002: RDS Radio Text:  inactive
[  133.540171][ T6654] vivid-002: RDS Traffic Announcement: false inactive
[  133.560130][ T6654] vivid-002: RDS Traffic Program: false inactive
[  133.587669][ T6654] vivid-002: RDS Music: false inactive
[  133.607136][ T6654] vivid-002: ==================  END STATUS  ==================
[  133.855126][ T6659] overlayfs: failed to clone upperpath
[  134.136706][ T5646] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  134.164119][ T5646] usb 4-1: USB disconnect, device number 4
[  134.268751][ T6668] fuse: fd is not a fuse device
[  136.107891][ T6709] loop4: detected capacity change from 0 to 512
[  136.221756][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'.
[  136.278401][ T6709] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  136.325599][ T6709] UDF-fs: Scanning with blocksize 512 failed
[  136.413295][ T6709] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  136.468936][ T6709] UDF-fs: Scanning with blocksize 1024 failed
[  136.488422][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[  136.542542][ T6709] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  136.594516][ T6709] UDF-fs: Scanning with blocksize 2048 failed
[  136.641810][ T6709] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  136.696998][ T6709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.937062][ T6693] loop6: detected capacity change from 0 to 32768
[  137.010889][ T6693] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.209 (6693)
[  137.133204][ T6731] loop3: detected capacity change from 0 to 16
[  137.216256][ T6693] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  137.284483][ T6731] erofs (device loop3): mounted with root inode @ nid 36.
[  137.306317][ T6693] BTRFS info (device loop6): using crc32c checksum algorithm
[  137.350881][ T6731] erofs (device loop3): readahead error at folio 2 @ nid 89
[  137.361848][ T6731] syz.3.221: attempt to access beyond end of device
[  137.361848][ T6731] loop3: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  137.387786][ T6731] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  137.399235][ T6731] erofs (device loop3): read error -117 @ 0 of nid 89
[  137.406473][   T31] audit: type=1800 audit(1785982210.265:7): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.221" name="file2" dev="loop3" ino=89 res=0 errno=0
[  137.452059][ T5646] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  137.483421][ T6731] syz.3.221: attempt to access beyond end of device
[  137.483421][ T6731] loop3: rw=0, sector=524296, nr_sectors = 8 limit=16
[  137.488977][ T6737] loop1: detected capacity change from 0 to 4096
[  137.497602][ T6731] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4100
[  137.516282][ T6731] erofs (device loop3): read error -5 @ 1 of nid 89
[  137.523517][ T6731] syz.3.221: attempt to access beyond end of device
[  137.523517][ T6731] loop3: rw=0, sector=524296, nr_sectors = 8 limit=16
[  137.537038][ T6731] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4100
[  137.550248][ T6731] erofs (device loop3): read error -5 @ 1 of nid 89
[  137.718738][ T5646] usb 3-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00
[  137.727891][ T5646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.736151][ T5646] usb 3-1: Product: syz
[  137.739577][ T6737] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  137.740305][ T5646] usb 3-1: Manufacturer: syz
[  137.740326][ T5646] usb 3-1: SerialNumber: syz
[  137.767966][ T5646] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (046d:0821)
[  137.887581][ T6693] BTRFS info (device loop6): enabling ssd optimizations
[  137.934875][ T6693] BTRFS info (device loop6): turning on async discard
[  137.945217][ T6737] ntfs3(loop1): ino=1a, mi_enum_attr
[  137.983554][ T6737] ntfs3(loop1): ino=1a, mi_enum_attr
[  137.985139][ T6693] BTRFS info (device loop6): enabling free space tree
[  138.017939][ T6737] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  138.189380][   T31] audit: type=1800 audit(1785982211.035:8): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.223" name="file1" dev="loop1" ino=30 res=0 errno=0
[  138.427155][ T6767] loop3: detected capacity change from 0 to 16
[  138.495174][ T6767] erofs (device loop3): mounted with root inode @ nid 36.
[  138.534004][ T6737] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex
[  138.565817][ T5633] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  138.592678][ T6767] syz.3.226: attempt to access beyond end of device
[  138.592678][ T6767] loop3: rw=8912896, sector=1342177272, nr_sectors = 32 limit=16
[  138.656638][ T6769] erofs (device loop3): bogus i_mode (4355) @ nid 46
[  138.694470][ T6767] syz.3.226: attempt to access beyond end of device
[  138.694470][ T6767] loop3: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16
[  138.779965][ T6769] erofs (device loop3): bogus dirent @ nid 36
[  138.800220][ T5633] usb 5-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[  138.822663][ T5633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.856728][   T31] audit: type=1800 audit(1785982211.715:9): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.226" name="file1" dev="loop3" ino=86 res=0 errno=0
[  138.940845][ T5633] mos7720 5-1:1.0: Moschip 2 port adapter converter detected
[  138.977344][ T5971] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  139.024103][ T5646] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 1 on unit 3: -71 (exp. 1).
[  139.086674][ T5646] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770.
[  139.140795][ T5633] usb 5-1: mos7720: usb_control_msg() failed: 0
[  139.245818][ T5633] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  139.277003][ T5646] usb 3-1: USB disconnect, device number 3
[  139.379798][ T5633] usb 5-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  139.785818][ T6786] warning: `syz.6.227' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  140.480904][ T6807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  140.720660][ T6797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.147979][ T6823] fuse: Bad value for 'fd'
[  141.268215][ T6826] binder: 6824:6826 ioctl c0306201 200000000080 returned -14
[  141.311216][ T6826] binder: 6824:6826 ioctl c0306201 2000000003c0 returned -14
[  141.335948][  T990] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  141.363456][ T5646] usb 5-1: USB disconnect, device number 6
[  141.369438][    C1] usb 5-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  141.472383][ T5646] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  141.532224][ T5646] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  141.540668][  T990] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00
[  141.589062][ T5646] mos7720 5-1:1.0: device disconnected
[  141.590672][  T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  141.639563][  T990] usb 4-1: Product: syz
[  141.665172][  T990] usb 4-1: Manufacturer: syz
[  141.759813][  T990] input: Samsung SUR40 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input9
[  141.785970][ T6833] (NULL device *): [drm] Primary plane not found
[  142.140999][ T6843] binder: 6841:6843 ioctl c0306201 200000004a40 returned -22
[  142.942361][ T6864] input: syz0 as /devices/virtual/input/input10
[  142.973722][  T990] usb 4-1: USB disconnect, device number 5
[  144.055315][ T6886] loop2: detected capacity change from 0 to 512
[  144.140560][ T6891] binder: 6890:6891 ioctl c0306201 200000000080 returned -14
[  144.202788][ T6891] binder: 6890:6891 ioctl c0306201 2000000003c0 returned -14
[  144.228657][ T6886] EXT4-fs: old and new quota format mixing
[  145.214022][ T6904] netlink: 84 bytes leftover after parsing attributes in process `syz.6.261'.
[  145.282240][ T6904] netlink: 84 bytes leftover after parsing attributes in process `syz.6.261'.
[  145.433747][ T6907] loop6: detected capacity change from 0 to 1024
[  145.622297][ T6907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  145.686138][ T6907] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.773226][ T6915] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.263'.
[  146.005499][ T5971] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  148.893072][ T6947] Bluetooth: MGMT ver 1.23
[  149.815160][ T5766] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  149.995224][ T5766] usb 3-1: Using ep0 maxpacket: 16
[  150.046449][ T5766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  150.108788][ T5766] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  150.145430][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.228391][ T5766] usb 3-1: Product: syz
[  150.271615][ T5766] usb 3-1: Manufacturer: syz
[  150.298677][ T5766] usb 3-1: SerialNumber: syz
[  150.340012][ T5766] usb 3-1: config 0 descriptor??
[  150.411237][ T5766] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  150.452890][ T5766] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  151.011520][ T5766] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  151.232824][ T6978] batman_adv: batadv0: Adding interface: dummy0
[  151.268960][ T6978] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  151.301142][ T6980] loop3: detected capacity change from 0 to 128
[  151.328971][ T6980] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.358310][ T6978] batman_adv: batadv0: Interface activated: dummy0
[  151.454048][ T6980] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  151.528326][ T6958] loop6: detected capacity change from 0 to 32768
[  151.639051][ T6958] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  151.668698][ T5766] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  151.678286][ T6958] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  151.699701][ T5766] em28xx 3-1:0.0: board has no eeprom
[  152.087261][ T6958] XFS (loop6): Ending clean mount
[  152.189353][ T1152] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  152.313500][ T5971] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  152.848176][ T6960] em28xx 3-1:0.0: reading from i2c device at 0xe failed (error=-5)
[  152.898668][ T5766] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  152.954213][ T5766] em28xx 3-1:0.0: dvb set to bulk mode.
[  152.994795][  T990] em28xx 3-1:0.0: Binding DVB extension
[  153.014794][ T5766] usb 3-1: USB disconnect, device number 4
[  153.069086][ T5766] em28xx 3-1:0.0: Disconnecting em28xx
[  153.324293][  T990] em28xx 3-1:0.0: Registering input extension
[  153.355073][ T5766] em28xx 3-1:0.0: Closing input extension
[  153.556655][ T7030] jffs2: notice: (7030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  153.637751][ T5766] em28xx 3-1:0.0: Freeing device
[  153.987516][ T5766] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  154.129553][ T1152] wlan1: Trigger new scan to find an IBSS to join
[  154.208078][ T5766] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  154.246735][ T5766] usb 3-1: config 0 has no interface number 0
[  154.274608][ T5766] usb 3-1: config 0 interface 41 has no altsetting 0
[  154.326800][ T5766] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  154.352595][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.387239][ T5766] usb 3-1: Product: syz
[  154.407430][ T5766] usb 3-1: Manufacturer: syz
[  154.429523][ T5766] usb 3-1: SerialNumber: syz
[  154.462780][ T5766] usb 3-1: config 0 descriptor??
[  154.973490][ T7074] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  155.319631][ T5766] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  155.338418][ T7084] file system registered
[  155.420440][ T7084] read descriptors
[  155.461303][ T5625] ffs_data_put(): freeing
[  156.317046][ T7127] hsr_slave_0: left promiscuous mode
[  156.324425][ T7127] hsr_slave_1: left promiscuous mode
[  156.427928][ T7127] bond0: entered promiscuous mode
[  156.444101][ T7127] bond_slave_0: entered promiscuous mode
[  156.452083][ T7127] bond_slave_1: entered promiscuous mode
[  156.465815][ T7127] gretap0: entered promiscuous mode
[  156.472635][ T7127] dummy0: entered promiscuous mode
[  156.483558][ T7127] debugfs: 'hsr0' already exists in 'hsr'
[  156.493897][ T7127] Cannot create hsr debugfs directory
[  156.496046][ T7137] binder: 7136:7137 ioctl c0306201 0 returned -14
[  156.512967][ T7135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'.
[  156.598848][ T5766] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[  156.626463][ T5766] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[  156.660551][ T5766] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[  156.702995][ T5766] usb 3-1: USB disconnect, device number 5
[  157.042933][ T7146] netlink: 'syz.1.318': attribute type 1 has an invalid length.
[  157.098359][ T7146] netlink: 'syz.1.318': attribute type 1 has an invalid length.
[  157.157827][ T7111] wlan1: Trigger new scan to find an IBSS to join
[  157.285172][ T7153] loop6: detected capacity change from 0 to 128
[  157.342539][ T7153] EXT4-fs (loop6): Test dummy encryption mode enabled
[  157.451212][ T7153] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.581418][ T7153] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.730259][ T7153] 9pnet_fd: Insufficient options for proto=fd
[  158.083970][ T5971] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  159.843000][ T7204] lo: entered allmulticast mode
[  160.186590][   T58] wlan1: Trigger new scan to find an IBSS to join
[  160.462655][ T7215] loop6: detected capacity change from 0 to 128
[  160.558746][ T7209] loop2: detected capacity change from 0 to 512
[  160.577498][ T7215] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  160.620751][ T7209] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  160.622712][ T7215] FAT-fs (loop6): data area starts beyond volume (36 > 6)
[  160.664515][ T7209] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  160.728678][ T7215] FAT-fs (loop6): Can't find a valid FAT filesystem
[  160.740314][ T7209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01cc019, mo2=0002]
[  160.749734][ T7209] System zones: 1-12
[  160.871543][   T31] audit: type=1326 audit(1785982233.715:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.6.338" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12f59e0d9 code=0x7ffc0000
[  160.920653][ T7209] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  160.966470][   T31] audit: type=1326 audit(1785982233.725:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.6.338" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb12f59e0d9 code=0x7ffc0000
[  160.996887][ T7209] EXT4-fs (loop2): 1 truncate cleaned up
[  161.089567][ T7209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.102620][   T31] audit: type=1326 audit(1785982233.725:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.6.338" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12f59e0d9 code=0x7ffc0000
[  161.260606][   T31] audit: type=1326 audit(1785982233.725:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.6.338" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12f59e0d9 code=0x7ffc0000
[  161.334503][ T7196] loop3: detected capacity change from 0 to 32768
[  161.353312][   T31] audit: type=1326 audit(1785982233.725:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.6.338" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12f59e0d9 code=0x7ffc0000
[  161.430506][ T7209] loop2: detected capacity change from 512 to 64
[  161.441314][ T7214] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -12)
[  161.469352][ T7231] loop6: detected capacity change from 0 to 16
[  161.477219][   T31] audit: type=1326 audit(1785982233.755:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.6.338" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb12f59e0d9 code=0x7ffc0000
[  161.495355][ T7232] syz.2.337: attempt to access beyond end of device
[  161.495355][ T7232] loop2: rw=8912896, sector=54, nr_sectors = 18 limit=64
[  161.508319][ T7111] wlan1: Creating new IBSS network, BSSID 42:0f:5e:61:42:91
[  161.539993][ T7231] erofs: Bad value for 'cache_strategy'
[  161.583864][ T7238] fuse: fd is not a fuse device
[  161.638494][ T7232] syz.2.337: attempt to access beyond end of device
[  161.638494][ T7232] loop2: rw=8388608, sector=62, nr_sectors = 8 limit=64
[  161.662089][   T31] audit: type=1326 audit(1785982233.755:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.6.338" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb12f59de42 code=0x7ffc0000
[  161.816165][   T31] audit: type=1326 audit(1785982233.755:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.6.338" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb12f55e90e code=0x7ffc0000
[  161.991590][   T31] audit: type=1326 audit(1785982233.815:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.6.338" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb12f59df07 code=0x7ffc0000
[  162.105277][ T5626] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  162.221362][ T5626] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  162.344628][ T5626] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  162.366568][   T31] audit: type=1326 audit(1785982233.815:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.6.338" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb12f55e90e code=0x7ffc0000
[  162.403613][ T5626] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  162.422743][ T5626] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  162.447997][ T5626] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  163.042579][ T5626] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  163.099094][ T5626] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  163.150157][ T5626] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block
[  164.436169][ T7274] loop3: detected capacity change from 0 to 128
[  164.553766][ T7279] mtrr: base(0x20000000) is not aligned on a size(0x40000000) boundary
[  164.857020][ T5622] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  165.225716][ T5622] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  167.472912][  T148] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.636566][  T148] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.860228][  T148] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.035080][  T148] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.246742][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'.
[  168.269197][ T7333] bridge_slave_1: left allmulticast mode
[  168.332540][ T7333] bridge_slave_1: left promiscuous mode
[  168.360981][ T5626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.457117][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.706474][ T7333] bridge_slave_0: left allmulticast mode
[  168.773188][ T7333] bridge_slave_0: left promiscuous mode
[  168.849112][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.462815][ T5645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  169.504529][ T5645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  169.521904][ T5645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  169.541428][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  169.592557][ T5645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  170.465182][  T148] bridge_slave_1: left allmulticast mode
[  170.472127][  T148] bridge_slave_1: left promiscuous mode
[  170.479662][  T148] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.492305][  T148] bridge_slave_0: left allmulticast mode
[  170.498354][  T148] bridge_slave_0: left promiscuous mode
[  170.505860][  T148] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.770995][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.376'.
[  170.955813][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  170.968129][ T5637] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  170.984554][ T5637] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  170.994543][ T5637] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  171.006735][ T5637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  171.240116][  T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.263027][  T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.306297][  T148] bond0 (unregistering): Released all slaves
[  171.721257][ T5637] Bluetooth: hci1: command tx timeout
[  173.075553][ T5637] Bluetooth: hci5: command tx timeout
[  173.112919][ T7390] syzkaller0: entered promiscuous mode
[  173.118773][ T7390] syzkaller0: entered allmulticast mode
[  173.796827][ T5637] Bluetooth: hci1: command tx timeout
[  175.029975][ T7417] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  175.067780][ T7428] syz_tun: entered allmulticast mode
[  175.084123][ T7428] syz_tun: left allmulticast mode
[  175.166731][ T5637] Bluetooth: hci5: command tx timeout
[  175.375134][  T148] hsr_slave_0: left promiscuous mode
[  175.393479][  T148] hsr_slave_1: left promiscuous mode
[  175.409606][  T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.417454][  T148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.426934][  T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.433271][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'.
[  175.438102][  T148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.472959][  T148] veth1_macvtap: left promiscuous mode
[  175.482396][  T148] veth0_macvtap: left promiscuous mode
[  175.495307][  T148] veth1_vlan: left promiscuous mode
[  175.506255][  T148] veth0_vlan: left promiscuous mode
[  175.874800][ T5637] Bluetooth: hci1: command tx timeout
[  176.028189][  T148] team0 (unregistering): Port device team_slave_1 removed
[  176.126010][  T148] team0 (unregistering): Port device team_slave_0 removed
[  177.115635][ T7468] overlayfs: failed to clone upperpath
[  177.196618][ T7453] veth0: entered allmulticast mode
[  177.236372][ T5637] Bluetooth: hci5: command tx timeout
[  177.964750][ T5637] Bluetooth: hci1: command tx timeout
[  178.860385][ T7521] loop6: detected capacity change from 0 to 8192
[  179.799699][ T5637] Bluetooth: hci5: command tx timeout
[  180.322607][ T5284] 8021q: adding VLAN 0 to HW filter on device eth6
[  180.350272][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.383092][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.413683][ T7339] bridge_slave_0: entered allmulticast mode
[  180.448370][ T7339] bridge_slave_0: entered promiscuous mode
[  180.487755][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.497388][ T7550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.504844][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.534607][ T7339] bridge_slave_1: entered allmulticast mode
[  180.551035][ T7339] bridge_slave_1: entered promiscuous mode
[  180.635348][ T7555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.641148][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'.
[  180.787010][ T7558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.868830][ T7529] loop4: detected capacity change from 0 to 32768
[  180.899987][ T7529] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.408 (7529)
[  181.013872][ T7529] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  181.051469][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.069278][ T7529] BTRFS info (device loop4): using blake2b checksum algorithm
[  181.105461][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.144597][ T7566] fuse: fd is not a fuse device
[  181.178454][ T7364] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.196461][ T7364] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.218394][ T7364] bridge_slave_0: entered allmulticast mode
[  181.274175][ T7364] bridge_slave_0: entered promiscuous mode
[  181.299902][ T7529] BTRFS info (device loop4): enabling ssd optimizations
[  181.325752][ T7529] BTRFS info (device loop4): turning on async discard
[  181.342900][ T7529] BTRFS info (device loop4): enabling free space tree
[  181.424978][ T7364] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.446620][ T7364] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.471188][ T7364] bridge_slave_1: entered allmulticast mode
[  181.505170][ T7364] bridge_slave_1: entered promiscuous mode
[  181.526466][ T5625] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  181.630763][ T7339] team0: Port device team_slave_0 added
[  181.761666][ T7339] team0: Port device team_slave_1 added
[  181.941010][ T7364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.016323][ T7364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.821535][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.069065][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  183.989130][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.171643][ T7364] team0: Port device team_slave_0 added
[  184.207074][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.256230][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.327253][   T31] kauditd_printk_skb: 20 callbacks suppressed
[  184.327275][   T31] audit: type=1800 audit(1785982257.165:40): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.416" name="/" dev="fuse" ino=1 res=0 errno=0
[  184.386119][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.469473][ T7364] team0: Port device team_slave_1 added
[  184.554119][   T31] audit: type=1800 audit(1785982257.405:41): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.422" name="bus" dev="tmpfs" ino=387 res=0 errno=0
[  184.758511][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.796244][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.887991][ T7364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.901048][ T7364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.124674][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  185.860489][ T7364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  186.174686][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  186.254680][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  186.324679][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  186.364674][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  186.464679][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  186.511209][ T7364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.617201][ T5284] 8021q: adding VLAN 0 to HW filter on device eth5
[  186.852876][ T7339] hsr_slave_0: entered promiscuous mode
[  186.860998][ T7339] hsr_slave_1: entered promiscuous mode
[  187.108069][ T7364] hsr_slave_0: entered promiscuous mode
[  187.136437][ T7364] hsr_slave_1: entered promiscuous mode
[  187.160466][ T7364] debugfs: 'hsr0' already exists in 'hsr'
[  187.173889][ T7364] Cannot create hsr debugfs directory
[  187.310185][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.426'.
[  188.742909][ T7660] overlayfs: failed to clone upperpath
[  189.221719][ T7339] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  189.254428][ T7339] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  189.292080][ T7339] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  189.340535][ T7339] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  189.370651][ T7339] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  189.406529][ T7339] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  189.434695][ T5284] 8021q: adding VLAN 0 to HW filter on device eth7
[  189.462725][ T7339] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  189.487156][ T7339] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  189.887740][ T7685] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  189.990146][ T7364] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  190.021050][ T7364] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  190.058578][ T7364] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  190.109494][ T7364] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  190.150599][ T7364] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  190.214353][ T7364] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  190.282864][ T7364] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  190.333824][ T7364] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  190.352834][ T7699] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  190.687616][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.831064][ T7339] 8021q: adding VLAN 0 to HW filter on device team0
[  190.904728][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.911899][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.000263][ T7364] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.024086][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.031363][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.234318][ T7364] 8021q: adding VLAN 0 to HW filter on device team0
[  191.310167][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.317529][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.356345][ T7727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.442'.
[  191.365537][ T7727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.442'.
[  191.374385][ T7727] netlink: 28 bytes leftover after parsing attributes in process `syz.5.442'.
[  191.449814][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.457103][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.614458][ T5284] 8021q: adding VLAN 0 to HW filter on device eth8
[  192.181069][ T7754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.291277][ T7754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.107502][ T7769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.559252][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  193.567057][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  193.930292][ T7797] fuse: fd is not a fuse device
[  194.752309][ T7364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.844478][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.019242][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'.
[  197.115130][ T7855] batman_adv: batadv0: Adding interface: veth0
[  197.131580][ T7855] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  197.218282][ T7855] batman_adv: batadv0: Interface activated: veth0
[  197.301680][ T7858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.315238][ T7858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.342818][ T7858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.351931][ T7858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.369113][ T7858] batman_adv: batadv0: Interface deactivated: veth0
[  197.387952][ T7858] batman_adv: batadv0: Removing interface: veth0
[  197.585553][ T7842] loop6: detected capacity change from 0 to 32768
[  197.601913][ T7364] veth0_vlan: entered promiscuous mode
[  197.655394][ T7842] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  197.681942][ T7339] veth0_vlan: entered promiscuous mode
[  197.707046][ T7364] veth1_vlan: entered promiscuous mode
[  197.714693][ T7868] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  197.800958][ T7339] veth1_vlan: entered promiscuous mode
[  197.871261][ T5971] ocfs2: Unmounting device (7,6) on (node local)
[  197.958234][ T7339] veth0_macvtap: entered promiscuous mode
[  198.056849][ T7339] veth1_macvtap: entered promiscuous mode
[  198.090238][ T7364] veth0_macvtap: entered promiscuous mode
[  198.121384][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.470'.
[  198.160996][ T7364] veth1_macvtap: entered promiscuous mode
[  198.212634][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.240074][ T7875] loop4: detected capacity change from 0 to 2048
[  198.297514][ T7875] EXT4-fs: Ignoring removed i_version option
[  198.305738][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.464870][   T58] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.484222][ T7875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.566574][ T7875] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.994936][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  199.265105][ T1152] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  200.124700][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  201.625786][ T7364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.725127][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.925601][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.040789][  T157] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.190710][ T7121] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.315023][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.359732][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.542496][  T148] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.560069][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.669430][ T3289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.694494][ T3289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.746046][ T7924] loop6: detected capacity change from 0 to 128
[  203.757410][  T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.768112][ T3289] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.777498][  T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.788198][ T7924] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  203.818827][ T7924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  204.001004][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.029081][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.554673][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  208.795035][   T30] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  209.008748][   T30] usb 9-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  209.039334][   T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.099450][   T30] usb 9-1: Product: syz
[  209.133269][   T30] usb 9-1: Manufacturer: syz
[  209.174712][   T30] usb 9-1: SerialNumber: syz
[  209.227665][   T30] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  209.325065][   T31] audit: type=1804 audit(1785982282.175:42): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.499" name="bus" dev="ramfs" ino=16595 res=1 errno=0
[  209.449348][   T31] audit: type=1804 audit(1785982282.235:43): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.499" name="bus" dev="ramfs" ino=16595 res=1 errno=0
[  210.257897][ T8007] loop7: detected capacity change from 0 to 1024
[  210.325367][ T8005] syzkaller0: entered promiscuous mode
[  210.331292][ T8007] EXT4-fs: inline encryption not supported
[  210.364107][ T8005] syzkaller0: entered allmulticast mode
[  210.370956][ T8007] EXT4-fs: Ignoring removed bh option
[  210.494895][ T8007] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  210.648381][ T8007] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.101027][ T7339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.540380][   T30] gspca_mr97310a: reg write [19] error -110
[  211.576760][   T30] mr97310a 9-1:1.0: probe with driver mr97310a failed with error -110
[  212.024672][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  212.300586][ T5875] usb 9-1: USB disconnect, device number 2
[  213.050407][ T8047] geneve1: entered promiscuous mode
[  213.148795][ T8047] macsec1: entered allmulticast mode
[  213.202112][ T8047] geneve1: entered allmulticast mode
[  213.339248][ T8047] geneve1: left allmulticast mode
[  213.381727][ T8047] geneve1: left promiscuous mode
[  214.392535][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.514'.
[  215.032704][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.519'.
[  215.109863][ T8056] loop4: detected capacity change from 0 to 32768
[  215.148943][ T8056] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.511 (8056)
[  215.252984][ T8080] hsr_slave_1 (unregistering): left promiscuous mode
[  215.274155][ T8056] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  215.315963][ T8056] BTRFS info (device loop4): using crc32c checksum algorithm
[  215.355916][ T8091] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  215.397963][ T8091] CIFS: Attempting to mount //127.0.0.1/share
[  215.457419][ T8091] CIFS: VFS: Error connecting to socket. Aborting operation.
[  215.465677][ T8091] CIFS: VFS: cifs_mount failed w/return code = -101
[  215.523058][ T8056] BTRFS info (device loop4): enabling ssd optimizations
[  215.541143][ T8056] BTRFS info (device loop4): turning on async discard
[  215.552757][ T8056] BTRFS info (device loop4): enabling free space tree
[  215.653632][ T8108] netlink: 14 bytes leftover after parsing attributes in process `syz.7.523'.
[  215.812808][ T8108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.896089][ T8108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.965775][ T8108] bond0 (unregistering): Released all slaves
[  216.142692][   T31] audit: type=1800 audit(1785982288.995:44): pid=8056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.511" name="file1" dev="loop4" ino=270 res=0 errno=0
[  218.330754][ T5625] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  222.764541][ T8186] syzkaller0: entered promiscuous mode
[  222.790200][ T8186] syzkaller0: entered allmulticast mode
[  223.386445][ T8195] loop7: detected capacity change from 0 to 16
[  223.434902][ T8195] erofs (device loop7): invalid ishare xattr prefix id 0
[  224.111386][ T8216] syzkaller0: entered promiscuous mode
[  224.141389][ T8216] syzkaller0: entered allmulticast mode
[  228.352849][ T8236] trusted_key: encrypted_key: key user:syz not found
[  231.037590][ T8260] binder_alloc: 8259: pid 8259 spamming oneway? 1 buffers allocated for a total size of 4096
[  231.239371][ T8267] binder_alloc: 8259: pid 8259 spamming oneway? 2 buffers allocated for a total size of 5120
[  232.699941][ T8290] sch_fq: defrate 9 ignored.
[  232.774673][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  233.028083][ T8295] process 'syz.7.573' launched './file0' with NULL argv: empty string added
[  234.018436][ T8298] fuse: fd is not a fuse device
[  234.104710][ T5875] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  235.298694][ T5875] usb 5-1: config index 0 descriptor too short (expected 25183, got 144)
[  235.372435][ T5875] usb 5-1: config 116 has too many interfaces: 121, using maximum allowed: 32
[  235.429717][ T5875] usb 5-1: config 116 has an invalid descriptor of length 0, skipping remainder of the config
[  235.478453][ T5875] usb 5-1: config 116 has 0 interfaces, different from the descriptor's value: 121
[  235.526743][ T5875] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  235.569986][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.613948][ T5875] usb 5-1: Product: syz
[  235.644190][ T5875] usb 5-1: Manufacturer: syz
[  235.670129][ T5875] usb 5-1: SerialNumber: syz
[  235.706735][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.8.577'.
[  235.733843][ T8314] bridge_slave_1: left allmulticast mode
[  235.767671][ T8314] bridge_slave_1: left promiscuous mode
[  235.780295][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.821426][ T5875] usb 5-1: can't set config #116, error -71
[  235.884192][ T5875] usb 5-1: USB disconnect, device number 7
[  235.984072][ T8314] bridge_slave_0: left allmulticast mode
[  236.027425][ T8314] bridge_slave_0: left promiscuous mode
[  236.064493][ T8314] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.247617][ T8343] fuse: fd is not a fuse device
[  240.647716][ T8347] loop4: detected capacity change from 0 to 512
[  240.701822][ T8347] EXT4-fs: inline encryption not supported
[  240.757768][ T8347] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  240.846552][ T8347] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 1
[  240.869541][ T5875] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  240.920211][ T8347] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota
[  240.993987][ T8347] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.586: Failed to acquire dquot type 1
[  241.064248][ T8347] loop4: lost filesystem error report for type 5 error -5
[  241.064838][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  241.078505][    C1] EXT4-fs (loop4): initial error at time 1785982313: ext4_acquire_dquot:7041
[  241.087324][    C1] EXT4-fs (loop4): last error at time 1785982313: ext4_acquire_dquot:7041
[  241.099127][ T8347] EXT4-fs (loop4): Remounting filesystem read-only
[  241.130897][ T8347] EXT4-fs (loop4): 1 truncate cleaned up
[  241.136953][ T5875] usb 7-1: Using ep0 maxpacket: 32
[  241.161304][ T5875] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  241.179264][ T8347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.212823][ T5875] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  241.254205][ T5875] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  241.304598][ T5875] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  241.320807][ T5637] Bluetooth: hci4: unexpected event for opcode 0x0c5a
[  241.363897][ T5875] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  241.383533][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.402242][ T5875] usb 7-1: Product: syz
[  241.406712][ T5875] usb 7-1: Manufacturer: syz
[  241.411499][ T5875] usb 7-1: SerialNumber: syz
[  241.475067][    C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  241.511910][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.615707][ T5875] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input12
[  241.787487][ T5875] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  241.830805][ T5875]  (id 0x00)
[  242.085041][ T5875] rc_core: IR keymap rc-imon-pad not found
[  242.109551][ T5875] Registered IR keymap rc-empty
[  242.125374][ T5875] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  242.164247][ T5875] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  242.245776][ T5875] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0
[  242.322394][ T5875] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input13
[  242.372849][ T5875] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:3> initialized
[  242.861751][ T8386] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  242.929827][ T8388] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  242.939478][ T8389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.021690][ T8391] iommufd_mock iommufd_mock2: Adding to iommu group 2
[  243.042942][ T8389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.167530][ T8389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  243.509511][ T8402] syz.5.602 uses obsolete (PF_INET,SOCK_PACKET)
[  243.586237][ T8403] imon:send_packet: task interrupted
[  243.603500][ T8403] imon:send_packet: packet tx failed (-512)
[  243.613796][ T8403] imon:vfd_write: send packet #3 failed
[  243.758028][ T5875] usb 7-1: USB disconnect, device number 3
[  243.933115][ T8394] loop7: detected capacity change from 0 to 40427
[  243.958476][ T8394] F2FS-fs (loop7): build fault injection rate: 19
[  243.988011][ T8394] F2FS-fs (loop7): build fault injection type: 0x3bfe8c
[  244.019792][ T8394] F2FS-fs (loop7): invalid crc value
[  244.092824][ T8394] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  244.390053][ T8394] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  244.525015][ T8394] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  244.597909][ T8394] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  244.701307][ T8394] F2FS-fs (loop7): Stopped filesystem due to reason: 0
[  252.031755][ T8491] syzkaller0: entered promiscuous mode
[  252.069864][ T8491] syzkaller0: entered allmulticast mode
[  253.871380][ T8514] netlink: 16 bytes leftover after parsing attributes in process `syz.8.634'.
[  253.906557][ T8514] bridge0: entered allmulticast mode
[  254.192528][ T8516] loop4: detected capacity change from 0 to 8192
[  255.087001][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  255.342838][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  255.375113][ T8519] xt_CT: No such helper "snmp"
[  255.522563][ T8525] loop6: detected capacity change from 0 to 128
[  255.590042][ T8525] vfat: Bad value for 'time_offset'
[  256.729142][ T8545] loop4: detected capacity change from 0 to 256
[  256.873199][ T8545] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  257.038451][ T8550] evm: overlay not supported
[  257.103571][ T8545] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff)
[  258.047756][ T5766] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  258.149641][ T8571] binder_alloc: 8566: binder_alloc_buf, no vma
[  258.177335][ T8567] binder: 8566:8567 ioctl c0306201 2000000003c0 returned -14
[  258.242170][ T5766] usb 5-1: not running at top speed; connect to a high speed hub
[  258.269678][ T5766] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  258.290170][ T5766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.437905][ T8580] netlink: 'syz.1.654': attribute type 1 has an invalid length.
[  258.664142][ T8580] 8021q: adding VLAN 0 to HW filter on device bond1
[  258.776766][ T5766] cxacru 5-1:1.0: invalid response length to cm 0x90: 8
[  258.790473][ T8584] bond1: (slave geneve2): making interface the new active one
[  258.826803][ T8584] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  258.882670][ T8586] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2
[  258.916973][ T8586] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin
[  259.051523][ T8587] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  259.115146][ T7111] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  259.147692][ T7121] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  259.176898][ T7121] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  259.223448][ T7121] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  259.506076][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.6.657'.
[  260.418606][ T8593] bridge_slave_1: left allmulticast mode
[  260.429123][ T8593] bridge_slave_1: left promiscuous mode
[  260.442795][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.645351][ T8593] bridge_slave_0: left allmulticast mode
[  260.821997][ T8593] bridge_slave_0: left promiscuous mode
[  260.980993][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.425280][ T5627] usb 5-1: USB disconnect, device number 8
[  262.969829][ T8637] loop4: detected capacity change from 0 to 32768
[  262.996816][ T8637] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.665 (8637)
[  263.046463][ T8637] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.056625][ T8637] BTRFS info (device loop4): using sha256 checksum algorithm
[  263.152815][ T8637] BTRFS info (device loop4): enabling ssd optimizations
[  263.160120][ T8637] BTRFS info (device loop4): turning on sync discard
[  263.166843][ T8637] BTRFS info (device loop4): enabling free space tree
[  263.173611][ T8637] BTRFS info (device loop4): use zlib compression, level 3
[  263.753577][   T31] audit: type=1800 audit(1785982336.295:45): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.665" name="file1" dev="loop4" ino=260 res=0 errno=0
[  264.206554][ T5625] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  272.792489][ T8693] MTD: Couldn't look up './dev/mtdblock0': -2
[  273.766681][ T8702] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  277.168617][ T8711] syzkaller0: entered promiscuous mode
[  277.252422][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.682'.
[  277.267897][ T8715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.327690][ T8711] syzkaller0: entered allmulticast mode
[  277.389151][ T8713] netlink: 'syz.4.683': attribute type 1 has an invalid length.
[  277.431280][ T8720] bridge_slave_1: left allmulticast mode
[  277.456048][ T8722] loop6: detected capacity change from 0 to 256
[  277.464300][ T8720] bridge_slave_1: left promiscuous mode
[  277.470931][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.536207][ T8722] exfat: Deprecated parameter 'namecase'
[  277.541963][ T8720] bridge_slave_0: left allmulticast mode
[  277.541997][ T8720] bridge_slave_0: left promiscuous mode
[  277.544854][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.593473][ T8722] exfat: Deprecated parameter 'namecase'
[  277.680234][ T8722] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  277.806168][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.849457][   T31] audit: type=1800 audit(1785982350.695:46): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.685" name="file1" dev="loop6" ino=1048662 res=0 errno=0
[  279.783769][ T5645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  279.811972][ T5645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  280.040212][ T5645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  280.064251][ T5645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  280.074345][ T5645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  280.607922][ T5646] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  281.398950][ T5646] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00
[  281.457591][ T5646] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.575424][ T5646] usbtest 7-1:1.0: Linux gadget zero
[  281.611123][ T5646] usbtest 7-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt)
[  282.675813][ T5645] Bluetooth: hci6: command tx timeout
[  282.965656][ T5646] usb 7-1: USB disconnect, device number 4
[  283.804368][ T8769] fuse: fd is not a fuse device
[  283.846983][ T8768] tipc: Failed to remove unknown binding: 66,0,0/0:3376578757/3376578758
[  283.948217][ T8768] tipc: Failed to remove unknown binding: 66,0,0/0:3376578757/3376578758
[  284.757451][ T5645] Bluetooth: hci6: command tx timeout
[  285.128731][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.703'.
[  285.137816][ T8785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.703'.
[  285.148260][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.1.703'.
[  286.986504][ T5645] Bluetooth: hci6: command tx timeout
[  287.821587][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.709'.
[  290.494711][ T5645] Bluetooth: hci6: command tx timeout
[  294.945424][ T5637] Bluetooth: hci1: command 0x0406 tx timeout
[  296.814446][ T8840] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  296.832943][ T8841] loop4: detected capacity change from 0 to 4096
[  296.845155][ T8841] EXT4-fs: Ignoring removed orlov option
[  296.861356][ T8841] EXT4-fs (loop4): Test dummy encryption mode enabled
[  296.902472][ T8841] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.982985][ T8841] capability: warning: `syz.4.717' uses 32-bit capabilities (legacy support in use)
[  299.488674][ T8859] dummy_hcd dummy_hcd.0: remove, state 1
[  299.547508][ T8859] usb usb1: USB disconnect, device number 1
[  299.560757][ T5625] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.693320][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.704286][ T8859] usb 1-1: USB disconnect, device number 2
[  300.950460][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.957869][ T8730] bridge_slave_0: entered allmulticast mode
[  300.998382][ T8730] bridge_slave_0: entered promiscuous mode
[  301.031946][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.069023][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.105238][ T8730] bridge_slave_1: entered allmulticast mode
[  301.155448][ T8730] bridge_slave_1: entered promiscuous mode
[  301.178443][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.723'.
[  301.371464][ T8873] fuse: fd is not a fuse device
[  301.391686][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  301.456846][ T8859] rndis_host 1-1:1.2 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device
[  301.594960][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.482358][ T8730] team0: Port device team_slave_0 added
[  302.737366][ T8730] team0: Port device team_slave_1 added
[  303.928211][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.935319][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.963324][ T8730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.977020][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.984170][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.050474][ T8859] dummy_hcd dummy_hcd.0: stopped
[  304.075916][ T8859] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  304.087448][ T8730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.101286][ T8730] hsr_slave_0: entered promiscuous mode
[  306.109840][ T8730] hsr_slave_1: entered promiscuous mode
[  306.118406][ T8730] debugfs: 'hsr0' already exists in 'hsr'
[  306.142605][ T8730] Cannot create hsr debugfs directory
[  306.725911][ T8932] syzkaller0: entered promiscuous mode
[  306.746733][ T8932] syzkaller0: entered allmulticast mode
[  308.464919][ T8951] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality.
[  308.920802][ T8730] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  308.971182][ T8730] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  308.975086][ T8951] syz.7.739 (8951) used greatest stack depth: 16496 bytes left
[  309.030880][ T8730] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  309.103572][ T8730] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  309.191364][ T8730] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  309.297522][ T8730] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  309.342249][ T8730] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  311.690976][ T8730] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  313.256002][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.324243][ T8730] 8021q: adding VLAN 0 to HW filter on device team0
[  313.357444][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.364712][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.465459][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.472680][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.496627][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  316.505142][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  316.516107][ T1313] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI
[  316.528298][ T1313] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067]
[  316.536749][ T1313] CPU: 1 UID: 0 PID: 1313 Comm: aoe_tx0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  316.547326][ T1313] Tainted: [L]=SOFTLOCKUP
[  316.551632][ T1313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  316.561682][ T1313] RIP: 0010:dummy_queue+0x1ae/0x900
[  316.566883][ T1313] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 0b ba 7d fa 4d 8b 24 24 49 83 c4 60 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f0 05 00 00 45 8b 24 24 44 89 e6 83 e6 02
[  316.586511][ T1313] RSP: 0018:ffffc90005def6e0 EFLAGS: 00010216
[  316.592569][ T1313] RAX: 000000000000000c RBX: ffff888055354610 RCX: dffffc0000000000
[  316.600558][ T1313] RDX: ffff888029e35d00 RSI: 0000000000000003 RDI: 0000000000000005
[  316.608514][ T1313] RBP: ffff888055354600 R08: ffffffff90579e37 R09: 1ffffffff20af3c6
[  316.616508][ T1313] R10: dffffc0000000000 R11: ffffffff87b6f020 R12: 0000000000000060
[  316.624468][ T1313] R13: 1ffff1100aa6a8c0 R14: ffff88802a8dc248 R15: ffff88802a8dcc00
[  316.632458][ T1313] FS:  0000000000000000(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000
[  316.641380][ T1313] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  316.647949][ T1313] CR2: 00007f89300af3a0 CR3: 00000000550f4000 CR4: 0000000000350ef0
[  316.655910][ T1313] Call Trace:
[  316.659174][ T1313]  <TASK>
[  316.662090][ T1313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.667756][ T1313]  usb_ep_queue+0xf1/0x3c0
[  316.672170][ T1313]  eth_start_xmit+0x9a7/0x1080
[  316.676931][ T1313]  dev_hard_start_xmit+0x2cd/0x830
[  316.682048][ T1313]  sch_direct_xmit+0x257/0x4c0
[  316.686806][ T1313]  ? __pfx_sch_direct_xmit+0x10/0x10
[  316.692085][ T1313]  __dev_queue_xmit+0x177f/0x3820
[  316.697113][ T1313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.702753][ T1313]  ? __lock_acquire+0x683/0x2cf0
[  316.707687][ T1313]  ? __dev_queue_xmit+0x29b/0x3820
[  316.712796][ T1313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.718596][ T1313]  ? __lock_acquire+0x683/0x2cf0
[  316.723537][ T1313]  ? __pfx___dev_queue_xmit+0x10/0x10
[  316.728924][ T1313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.734556][ T1313]  ? _raw_spin_unlock_irq+0x23/0x50
[  316.739780][ T1313]  tx+0x6b/0x190
[  316.743315][ T1313]  ? __pfx_tx+0x10/0x10
[  316.747456][ T1313]  kthread+0x1ed/0x420
[  316.751527][ T1313]  ? __pfx_kthread+0x10/0x10
[  316.756138][ T1313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.761767][ T1313]  ? __pfx_default_wake_function+0x10/0x10
[  316.767575][ T1313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.773204][ T1313]  ? __kthread_parkme+0x71/0x1f0
[  316.778141][ T1313]  ? __kthread_parkme+0x196/0x1f0
[  316.783167][ T1313]  kthread+0x388/0x470
[  316.787242][ T1313]  ? __pfx_kthread+0x10/0x10
[  316.791830][ T1313]  ? __pfx_kthread+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  316.796425][ T1313]  ret_from_fork+0x514/0xb70
[  316.801017][ T1313]  ? __pfx_ret_from_fork+0x10/0x10
[  316.806129][ T1313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  316.811752][ T1313]  ? __switch_to+0xc89/0x1420
[  316.816429][ T1313]  ? __pfx_kthread+0x10/0x10
[  316.821020][ T1313]  ret_from_fork_asm+0x1a/0x30
[  316.825782][ T1313]  </TASK>
[  316.828785][ T1313] Modules linked in:
[  316.832773][ T1313] ---[ end trace 0000000000000000 ]---
[  316.838299][ T1313] RIP: 0010:dummy_queue+0x1ae/0x900
[  316.843509][ T1313] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 0b ba 7d fa 4d 8b 24 24 49 83 c4 60 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f0 05 00 00 45 8b 24 24 44 89 e6 83 e6 02
[  316.863184][ T1313] RSP: 0018:ffffc90005def6e0 EFLAGS: 00010216
[  316.869297][ T1313] RAX: 000000000000000c RBX: ffff888055354610 RCX: dffffc0000000000
[  316.877299][ T1313] RDX: ffff888029e35d00 RSI: 0000000000000003 RDI: 0000000000000005
[  316.885320][ T1313] RBP: ffff888055354600 R08: ffffffff90579e37 R09: 1ffffffff20af3c6
[  316.893321][ T1313] R10: dffffc0000000000 R11: ffffffff87b6f020 R12: 0000000000000060
[  316.901375][ T1313] R13: 1ffff1100aa6a8c0 R14: ffff88802a8dc248 R15: ffff88802a8dcc00
[  316.909389][ T1313] FS:  0000000000000000(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000
[  316.918378][ T1313] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  316.925008][ T1313] CR2: 00007f89300af3a0 CR3: 00000000550f4000 CR4: 0000000000350ef0
[  316.932995][ T1313] Kernel panic - not syncing: Fatal exception in interrupt
[  316.940502][ T1313] Kernel Offset: disabled
[  316.944809][ T1313] Rebooting in 86400 seconds..