last executing test programs:

44.873965637s ago: executing program 2 (id=2862):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x3}, 0x18)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r1, 0x3}, 0x18)
sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}], 0x2, 0x0)

44.771580058s ago: executing program 2 (id=2863):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000340)=&(0x7f00000002c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r6 = mq_open(0x0, 0x80, 0x40, &(0x7f0000000040)={0x4, 0x5, 0x100000000, 0x20})
mq_getsetattr(r6, &(0x7f0000000100)={0x0, 0x7fff}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000003c0001802cc7d57eba000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000"], 0x8c}}, 0x40)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000200)=0xa0000)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)

44.501401453s ago: executing program 2 (id=2866):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x300048c1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
getdents64(0xffffffffffffffff, &(0x7f000001c0c0)=""/56, 0x38)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0xc0585604, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/102383, 0x18fef}, {0x0}], 0x2, 0x0, 0x0)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0x8b, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa3110018c12ef000400aab8c9065c884c6840df0ce7c5b1c2a88521e1e7bf1b6862bc9d3f2f59f7d69bcdb0015f7ee495090c676657bd2273e346b1e7531df39d9131fae3737a5775ed14b0f929dfbd3e562dbfdd6bf12e586b394ccd2da72158555213490f28766560dff0d58b8e2c5773f70a23ea7a0281a49e5bf9c05181e83642725a2e"], &(0x7f00000000c0)={0x1, 0x4, [0x200, 0xad9, 0x37b, 0xe21]})
pidfd_send_signal(r5, 0x12, 0x0, 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"/305], 0x21c}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x34, 0x27, 0x6d, 0x20, 0x2040, 0xc602, 0x18e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x72}}]}}]}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000020001280080001006772650014000280060010000000000006000e0000400000"], 0x40}}, 0x0)
mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x2032, 0xffffffffffffffff, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netpci0\x00'})

41.608682082s ago: executing program 2 (id=2871):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000002600)=""/4111, 0x100f}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10008094)

35.675720412s ago: executing program 1 (id=2887):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r5 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000005c0)={0x1, r5})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000340)=&(0x7f00000002c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r6 = mq_open(&(0x7f0000000000)='^\x00', 0x0, 0x40, &(0x7f0000000040)={0x4, 0x5, 0x100000000, 0x20})
mq_getsetattr(r6, &(0x7f0000000100)={0x0, 0x7fff}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c0000000001010400000000000000000a0000003c0001802cc7d57eba000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000"], 0x8c}}, 0x40)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000200)=0xa0000)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)

35.364634811s ago: executing program 1 (id=2889):
io_uring_setup(0x497c, &(0x7f00000001c0))
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x1de)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000280)={0x0, <r1=>0x0})
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x400000000010001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0xc6, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x90, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x90, 0x0, @wg=@data={0x4, 0x4, 0x0, "163c56e8b1b95f7de64410bf657e7c42cb17477bc166299d744e1bcf31cd800c4c5ae44d1ddeac482b64447d25183025882768d910acb071473b2eabfac9b4af855f1e96530277dc095f683cea574dafc209df3882fd0f6faed28dabc26c7c5f40444bce50f54e946301f9a9f877e0b96f6f45aa439d92c8"}}}}}}}, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
writev(r6, &(0x7f0000000580)=[{&(0x7f0000000180)='2', 0x1}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)

34.096518147s ago: executing program 1 (id=2891):
r0 = socket(0x40000000015, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c)
sendmsg$inet(r4, &(0x7f0000003300)={&(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)="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", 0x3e5}], 0x1}, 0x0)
fallocate(0xffffffffffffffff, 0x28, 0x4, 0x2)
r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001d40), 0x2, 0x0)
ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000001d80)={0x0, "f3de5af7dd11d2c7c8aca6488a8f0006439065833ad65a82f95c892039cb311f"})
finit_module(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4)
bind$inet6(r0, 0x0, 0x0)
socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r6, 0x0, 0x0)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000200)='westwood\x00', 0x9)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'lo\x00'})

31.354998909s ago: executing program 0 (id=2899):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1)
mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000500)='./file0/file0/../file0\x00', 0x0, 0x800020, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x3f7, 0x8, 0x70bd25, 0x25dfdbfc, {0x7, 0x10, './file0', './file0/../file0'}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4014}, 0x50)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r4, @ANYBLOB="1c002c8004"], 0x38}}, 0x0)
memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x31, 0x0, [{0x0, 0x5, "34a6ca"}, {0x0, 0xf, "e39335900f115624170e15dad0"}, {0x0, 0x11, "4f1347dfaaca82c253d084b7a02d70"}, {0x0, 0x6, "533dbecc"}]}, @noop, @timestamp={0x44, 0x4}]}}}}})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x101}, &(0x7f00000002c0)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012"], 0x0)
syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

28.558912632s ago: executing program 0 (id=2903):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x300048c1)
getdents64(0xffffffffffffffff, &(0x7f000001c0c0)=""/56, 0x38)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0xc0585604, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/102383, 0x18fef}, {0x0}], 0x2, 0x0, 0x0)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0x8b, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa3110018c12ef000400aab8c9065c884c6840df0ce7c5b1c2a88521e1e7bf1b6862bc9d3f2f59f7d69bcdb0015f7ee495090c676657bd2273e346b1e7531df39d9131fae3737a5775ed14b0f929dfbd3e562dbfdd6bf12e586b394ccd2da72158555213490f28766560dff0d58b8e2c5773f70a23ea7a0281a49e5bf9c05181e83642725a2e"], &(0x7f00000000c0)={0x1, 0x4, [0x200, 0xad9, 0x37b, 0xe21]})
pidfd_send_signal(r3, 0x12, 0x0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100), 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a0600000024000100"/305], 0x21c}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x34, 0x27, 0x6d, 0x20, 0x2040, 0xc602, 0x18e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x72}}]}}]}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r5, @ANYBLOB="000000000000000020001280080001006772650014000280060010000000000006000e0000400000"], 0x40}}, 0x0)
mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x2032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netpci0\x00'})

26.352455624s ago: executing program 0 (id=2907):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x300048c1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
getdents64(0xffffffffffffffff, &(0x7f000001c0c0)=""/56, 0x38)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0xc0585604, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/102383, 0x18fef}, {0x0}], 0x2, 0x0, 0x0)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0x8b, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa3110018c12ef000400aab8c9065c884c6840df0ce7c5b1c2a88521e1e7bf1b6862bc9d3f2f59f7d69bcdb0015f7ee495090c676657bd2273e346b1e7531df39d9131fae3737a5775ed14b0f929dfbd3e562dbfdd6bf12e586b394ccd2da72158555213490f28766560dff0d58b8e2c5773f70a23ea7a0281a49e5bf9c05181e83642725a2e"], &(0x7f00000000c0)={0x1, 0x4, [0x200, 0xad9, 0x37b, 0xe21]})
pidfd_send_signal(r5, 0x12, 0x0, 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"/305], 0x21c}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x34, 0x27, 0x6d, 0x20, 0x2040, 0xc602, 0x18e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x72}}]}}]}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r7, @ANYBLOB="000000000000000020001280080001006772650014000280060010000000000006000e0000400000"], 0x40}}, 0x0)
mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x2032, 0xffffffffffffffff, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netpci0\x00'})

7.459696939s ago: executing program 3 (id=2935):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r0, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
memfd_create(0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
dup3(r1, r1, 0x0)
r4 = gettid()
sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x10001)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_USERDATA={0x8e, 0xc, "29957fe258303a5fa60ed1cd29434b98d859d6eddaf883f3fc6105559daca2dce6da58e75748423a979e702bbafdf0ff64157cd3f7f1ece09d57b4825457af01a02b9c23616b02d96ae1bae5e34b445d5572f3239ef3fcc77501bf02742bb48fe0f6e7f96ef3444191fcff7841cd21a5ed3b0d2db75648d9210291770cf6cff3e58352e18d2897d49e36"}, @NFTA_CHAIN_USERDATA={0x4}]}], {0x14}}, 0xd0}}, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0xe4)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x260, 0x150, 0x150, 0x0, 0xf8010000, 0x328, 0x238, 0x238, 0x328, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x1f8, 0x260, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xffffff00, 0x1, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458)

6.400672337s ago: executing program 3 (id=2936):
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0))
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0)
pipe2(0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8, 0x2}, [@l2cap_conf_req={{0x4, 0x0, 0x4}}]}}, 0x11)
dup(0xffffffffffffffff)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xfffff000}], 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r2)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x74, 0x93, 0x1d, 0x40, 0xc45, 0x614a, 0xe6af, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x80, 0xf4}}]}}]}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000d, 0x80010, r0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3})
syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000300)={0x14, &(0x7f0000000380)={0x0, 0xb, 0x58, {0x58, 0x30, "da2c26b034eb01477ff43ec5c9c331eba9a4224d0b884dfb278595c0e4b117f7e2f0c854cdb0fefdaffbaf3e4acc60dcc88aa2c84006a042e71dbc985f479a5d9e375c40f2a016e8adf28539be1e9482a4445d6a4e75"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000500)={0x20, 0xe, 0xed, "77104f62a1c9ab3fc6ac42c576cd3a28437ed4b94ec5973939b5b1abc7f3c1e08123bd74401486ccbbe32628e4d0eb803355a95aa492759ed76ddc46a0e6709f464a27ca5981d4b65e89414f405a6a0fc5e11fee1214a33c8b94e4c82954490d963931bf4bc9d81299fdc93494f2c84266c54c4a0e070394b0240b223edbec6a7a488feb81f41689a19a852a15fff1993a40bb3981513a4ea1cbb70298cdf832aa0e0fb9bb47cd51516bb6424de84e4fae59423582a188bc4dc679addfa04f4b5bc5fa383b025700c00f53e66717fc13117cc5dd22c1730eef5e7da0c58793dbd6a2fea6d8ef584318df6d8a9a"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}})
r6 = eventfd2(0x8001, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGNPMODE(r7, 0xc008744c, &(0x7f0000000140)={0x281})
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x0, r6})
waitid$P_PIDFD(0x3, r4, &(0x7f0000000000), 0x80000000, &(0x7f0000000080))
syz_usb_connect(0x0, 0x2d, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6, 0x4a, 0xd9, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4c081)

4.878914446s ago: executing program 1 (id=2894):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x184}, {&(0x7f0000000f00)="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", 0x17e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}, {&(0x7f0000000440)="03d54d8499", 0x5}, {&(0x7f0000000b80)="2a3ed204bd855fb67f6b94cfb2680c7352d91e366b2c80b512fcee9c7a398e630176e8b7f4d3bc19723cd52fbf9fb301e52334b5f8833cb7a1a94d63db20644e546b7511fb8fdf55754accdc7185c2b2cb384737f100d3aeaf5529ad", 0x5c}], 0x3}}], 0x2, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000400)={@local, @random="de9ea3f675c1", @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "bebf7bd93cb23a1c"}}}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={<r2=>0x0, 0x8, 0x20, 0x0, 0x4}, &(0x7f0000000040)=0x18)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x5f57, 0x20}, 0xc)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000005a"], 0x0, 0x76}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000000000018200000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000000000000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0}, 0x90)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x100000000000000, 0x100000000000000}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffff, 0x10000000, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x0, 0x33, 0xa0, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x80}}, 0x4800)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)

3.957369524s ago: executing program 1 (id=2938):
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6(0xa, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
flistxattr(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000140)={[{@acl}, {@noload}, {@auto_da_alloc}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {}, {@bsdgroups}]}, 0x6, 0x652, &(0x7f0000002580)="$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")
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500005800000000000400000000000000000001248081000000000010000800000086"], 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000"], 0x0)
syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x9d})

3.881311769s ago: executing program 3 (id=2939):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0)

3.667440962s ago: executing program 3 (id=2940):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x300048c1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
getdents64(0xffffffffffffffff, &(0x7f000001c0c0)=""/56, 0x38)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0xc0585604, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/102383, 0x18fef}, {0x0}], 0x2, 0x0, 0x0)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0x8b, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa3110018c12ef000400aab8c9065c884c6840df0ce7c5b1c2a88521e1e7bf1b6862bc9d3f2f59f7d69bcdb0015f7ee495090c676657bd2273e346b1e7531df39d9131fae3737a5775ed14b0f929dfbd3e562dbfdd6bf12e586b394ccd2da72158555213490f28766560dff0d58b8e2c5773f70a23ea7a0281a49e5bf9c05181e83642725a2e"], &(0x7f00000000c0)={0x1, 0x4, [0x200, 0xad9, 0x37b, 0xe21]})
pidfd_send_signal(r4, 0x12, 0x0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a0600000024000100"/305], 0x21c}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x34, 0x27, 0x6d, 0x20, 0x2040, 0xc602, 0x18e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x72}}]}}]}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gre0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000020001280080001006772650014000280060010000000000006000e0000400000"], 0x40}}, 0x0)
mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x2032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netpci0\x00'})

3.463197575s ago: executing program 4 (id=2941):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
socket$inet6_sctp(0xa, 0x0, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x64, 0x0, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x1}, {0x6}, {0x5}, {0x3}, {0x8}}]}, 0x64}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='rseq_update\x00'}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {@in=@empty, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @etimer_thresh={0x8}, @replay_thresh={0x8}]}, 0x148}}, 0x0)

3.177476854s ago: executing program 0 (id=2908):
mount$fuse(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',default_permissions,blksize=0x0000000000000400'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_emit_vhci(0x0, 0x6)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="03c8001e794e4cee84d39856f4752833767be125637ee49dc79a52f2f9465718460cd05feda51bbf4206b5e7325945e5f819bbace34f7d33b43908e14fa05a0f06d9dccb7f0580fe9d42d7bf6530f1a2d22cfd5396c3c67afcdc34613911e96affd46ebd4aa6c60ca02f7648783a10deccc27340c4f24ed37dd6563758d14f732e63a853a4c71c356a6309a485ed"], 0x22)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x804}, 0x0)
ppoll(&(0x7f0000000100)=[{r4}], 0x1, &(0x7f0000000140), 0x0, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = io_uring_setup(0x15ae, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)

2.990674036s ago: executing program 4 (id=2942):
io_uring_setup(0x497c, &(0x7f00000001c0))
creat(&(0x7f0000000040)='./file0\x00', 0x1de)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0, <r0=>0x0})
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x400000000010001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_emit_ethernet(0xd7, &(0x7f0000000300)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0xa1, 0x2c, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0xa1, 0x0, @wg=@data={0x4, 0x4, 0x0, "163c56e8b1b95f7de64410bf657e7c42cb17477bc166299d744e1bcf31cd800c4c5ae44d1ddeac482b64447d25183025882768d910acb071473b2eabfac9b4af855f1e96530277dc095f683cea574dafc209df3882fd0f6faed28dabc26c7c5f40444bce50f54e946301f9a9f877e0b96f6f45aa439d92c87d85d267471eb740603b1b652c33eb75b0"}}}}}}}, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
chmod(&(0x7f0000000140)='./file0\x00', 0x0)
r5 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
writev(r5, &(0x7f0000000580)=[{&(0x7f0000000180)='2', 0x1}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)

2.573227286s ago: executing program 2 (id=2900):
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x816, &(0x7f0000000300), 0x1, 0x50ed, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=")
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
epoll_create1(0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff}, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[], 0x7)
write$cgroup_int(r8, &(0x7f0000000200), 0x43400)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='devfreq_frequency\x00', r3}, 0x10)

1.857302242s ago: executing program 4 (id=2943):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'veth1_to_hsr\x00', @random="b98367f00ded"})
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601"], 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.610220584s ago: executing program 0 (id=2944):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000003900)={0x2, 0x0, @multicast1}, 0x10)
r1 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x40}, &(0x7f0000000100), &(0x7f0000000240))
io_uring_enter(r1, 0x9f7, 0x41a0, 0x9, 0x0, 0x0)
io_uring_enter(r1, 0x3a9, 0x7f60, 0x0, &(0x7f0000000040)={[0x2000000000000082]}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500020000000800124000100000050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x0)
bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000280)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r6, &(0x7f00000000c0)=' ', 0x1}])
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x80086601, 0x0)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000200)=0x1, 0x4)
recvmmsg$unix(r8, &(0x7f0000005500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003580)}}], 0x1, 0x0, 0x0)

1.608296538s ago: executing program 3 (id=2945):
r0 = socket$inet(0x2, 0x2, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000580)='./file1\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="935d66646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',\x00'])
connect$vsock_stream(r4, &(0x7f0000000000), 0x10)
connect$vsock_stream(r4, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r10=>0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c004100", @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x0)
sendmsg(r7, &(0x7f0000000800)={&(0x7f00000002c0)=@nfc_llcp={0x27, r10, 0x0, 0x7, 0x5, 0x6, "d9c6f6ad36fab20b4b2d5dec43cbc946e26bc74af761f59f6be7cfeacdeb92cb82bf7f310fa72d9aeedf43d9b355e4273a8d3b5cf04df4428faa3496fd72cd", 0x5}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)="d030bfb79e104efb3cac2e363f6cf1d540cf4e580b6943fe6607056e67acaacd66bde7b7cb7949777233c2058d006a9c60e136833f1e904a707746aa8bb6281fea4e35b22a9d8df07e502647d343bef8335ddfcf6df35f8740b2598d128472612e1182ca2bd3fe3fc889d1eae8ebd0822813539eba6203aa14be83a61996515916a013cdf4f077f16374dce91735d9755f566f019475b2ef24", 0x99}, {&(0x7f0000000440)="bba059a93265df44a8176f3a6a945e0ba595e8cdf4be80291f22f2f24bb569200523f776662220a88717fef405c12615f1ffad67fcbf85ca01a214c6e296fe10eb13048c1c5afc34f75e1ed3dd", 0x4d}, {&(0x7f00000004c0)="e3e2373f0ebd45330cba63d08c2e72af3458617a6ab0033902ca35a2719b318c4753bc0bcea585b03b8616e17a01703a030adeb0db938985ae75637013f70634a1d382c283a8d61fcb23a2e6f335b44aa6a90c6bd5c450e0b2ac9d6af3174837025a1068f4cb496a2a7f3af6cb90ac24af4795856cb69e5e620db28b92527f42c81181acc75d4072f0ed78eb2152b866d7258a3c868046cd338a8cbedcde6bf6714c51e8632dc4bcd602599d4d706c0cb0b86830307d33", 0xb7}, {&(0x7f0000000200)="f4573fc8132aeaeaaaae4d7948f0b21de580147ab8e42e7cb38a0ac0aef11f7a154c2b03bb83878d6edd7b7f10e243215dc345", 0x33}, {&(0x7f0000000580)="2e81f23e30743521fd53138444dda5c20791f5d08b0e00e6d9b084e5bb6b269bbfb8da88952904e7b3b650ba6c5a89829b6c50337f214b2eb6dc902b4fa795e39792801af711714ff61ef2dd2c726366da6ef2ae9ba97f1c503134e3a1229e34ce8fb2c59b36fdbb4705b0de42e382a98c35", 0x72}, {&(0x7f0000000640)="d236", 0x2}, {&(0x7f0000000680)="8da36b7dcdf9f3e6f3e199b482e87b787a76a3fac7eb90a11cd654ba0f", 0x1d}, {&(0x7f00000006c0)="0b189397c0e6ee73dfe76aaf150bec3964ea1ee357466642c1ea1dbc0485ecc3d5fd352389f7ad9a6b3c3798dfee5963f2d7ee74b83f4f6eb19c8e0f4da0b4eeba3409995525af5d4bd8c0cf4374c4b05cae09e564a0d0feffdb9e5e5e68542325290aaea9d419d9e7847d8f4d04d2bb13c13822bb2fa708f752949f75ca97b043382fd72a6063603b27366b52a9fd49eaef791976cc30a886cf4615522409a5a99b6fd67b", 0xa5}], 0x8}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r14, &(0x7f0000000240), 0x3af4701e)
sendfile(r13, r7, 0x0, 0x10000a007)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080))
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000840)="00041fee000000000000000000f4", 0xe}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}], 0x18}, 0x4)

1.525717569s ago: executing program 4 (id=2946):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x184}, {&(0x7f0000000f00)="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", 0x17e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}, {&(0x7f0000000440)="03d54d8499", 0x5}, {&(0x7f0000000b80)="2a3ed204bd855fb67f6b94cfb2680c7352d91e366b2c80b512fcee9c7a398e630176e8b7f4d3bc19723cd52fbf9fb301e52334b5f8833cb7a1a94d63db20644e546b7511fb8fdf55754accdc7185c2b2cb384737f100d3aeaf5529ad", 0x5c}], 0x3}}], 0x2, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000400)={@local, @random="de9ea3f675c1", @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "bebf7bd93cb23a1c"}}}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={<r2=>0x0, 0x8, 0x20, 0x0, 0x4}, &(0x7f0000000040)=0x18)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x5f57, 0x20}, 0xc)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r4}, 0x38)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000005a"], 0x0, 0x76}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000003c06000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000000000018200000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702", @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000000000000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0}, 0x90)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x2, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x100000000000000, 0x100000000000000}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xffff, 0x10000000, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x0, 0x33, 0xa0, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x80}}, 0x4800)
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0)

1.285158388s ago: executing program 1 (id=2947):
syz_mount_image$nilfs2(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x1010800, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRES8=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64], 0x1, 0xda6, &(0x7f0000004a40)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000ffffffffffffffff77a259d7b349f4e9173bf18bfafb000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0x0, 0x96}, "ebc2c66584601f003d5eceea86c5b4e4c22e7d73f8c4023570f400684f05afa738be36eec766c4520117c4509c8aa8113e9030f33d953fabfa1f8be7a4dcf4eacafd3b2610329733906bb2051dfe326329d8fa7e4921add887812104e226bf9cf3fab770fbf828fc7a98b8ef6fc9997c8fad36af4a47805227c0b05145b51fadabcd55be1fd272b82f6dd32f35208d7aac762d4e6de9"}, 0x9a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x0, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil)
unshare(0x24020400)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x401)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6)
syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41)
recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40012002)
socket$kcm(0x10, 0x2, 0x4)

465.779848ms ago: executing program 4 (id=2948):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0)

424.408438ms ago: executing program 0 (id=2949):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x200c041, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4, 0x6284, &(0x7f00000063c0)="$eJzs3c1vHGcdB/Df7JtfStuoh6pUCLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAKceXGH0CkBAnUUweN/TzOeLubteN6Z53n85Gcmd8+M7vP5Lvj3fXM7BMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPzwBz8+W0XE5V+lG05EfC76Eb2IlaZei4iVtRN5+UFEPBfbzfFsRAyXIpr1t/95OuK1iPjoqYh792+vNzef22c/vv/nf/7hJ0/86B9/Gp7+319u9l+fttytW7/971/vHG6bAQAAoDR1XddV+pj/fPp83+u6UwDAXOTX/zrJt6sXrt5csP6o1Wp1ufXfF6w/B6jb6snutIuI2Gyv07xncDgeAI6Zzfi46y7QIfkXbRART3TdCWChVV13gCNx7/7t9SrlW7VfD9Z22vO5IHvy36x2r++YNp1l/ByT/T6/lve53DRb0Y9npvRn5ZD3fRzl/Hvj+V/eaR+l5Y46/3mZlv9o59Kn4uT8++P5j3l88u9NzL9UOf/BgfLvyx8AAAAAABZY/vv/iY6P/y4dflP25WHHf9fm1AcAAAAAAAAA+Kwddvy/Xcb/AwAAgIXVfFZv/O6pB7dN+y625vZLVcSTefnDfhkbcDyli2VWu+4HAAAAAAAAAAAAAJRksHMO76UqYhgRT66u1nXd/LSN1wd12PWPu9K3H0rW9S95AADY8dFTe6/9j2rnsv5L6bv+hqurq3W9vLJar9YrS/n97GhpuV5pfa7N0+a2pdE+3hAPRnVzZ8ut9dpmfV6e1T5+f81jjer+Pjo2Hx0GDgARsfNqdM8r0mOmrp+Ort/lcDzY/x8/9n/2o+vnKQAAAHD06rquq/R13s+nY/69rjsFAMxFfv0fPy6gVqvVarX6san7MUE92Z12ERGb7XWa9wyG4weAY2YzPu66C3RI/kUbRMRzXXcCWGhV1x3gSNy7f3u9SvlW7deDNL57PhdkT/6b1fZ6ef1J01nGzzGZ1/NrK/rxzJT+PDunPiySnH9vPP/LO+2jtNyj5j8t167OMZqWf7OdJzroT9dy/v3x/Mcc9f4/L1vRm5h/qXL+gwPl35c/AAAAAAAssPz3/xMLdfx39KibM9PDjv+uHdmjAgAAAAAAAMDRunf/9nq+7jUf///ChOVc//l4yvlX8i9Szr83lv9Xx5Zrf2Ho3bce5P+f+7fX/3jz35/P0/3mv5RnqvTMqtIzokqPVA3S9DBb92lbw/6oeaRh1es3j7C2e//XYiPO7Fm2l/4/6uE7cXW7/eye9qanw+32ur/Tfm5P+2C3Pa9/fk/7MJ3pVK/k9lOxHj+Pa/H2dnvTtjRj+5dntNcz2nP+fft/kXL+g9ZPk/9qaq/Gpo27H/Y+td+3p5Me582rX/zNmaPfnJm2or+7bW3N9r3YQX+2/0+eGMUvb2xcP3Xrys2b189Gmuy59VykyWcs5z9MP7u//1/aac+/99v7690PRwfOf1FsxWBq/i+15pvtfXnOfetCzn+UfnL+b6f2yfv/cc5/+v7/Sgf9AQAAAAAAAAAAAAAAgIep63r7EtE3I+JCuv6nq2szAYD5yq//dZJvn1fdn/PjqdXHvK4WrD9zrT+pF6s/avVxrNvqyd5oFxHxt/Y6zXuGX0+6MwBgkX0SEf/quhN0Rv4Fy9/310xPdt0ZYK5uvP/BT69cu7Zx/UbXPQEAAAAAAAAAHlUe/3OtNf7zybqu74wtt2f817di7bDjfw7yzO4Ao1MGqu4ffJseZqs36vdaw42/EO3xudsjFA935x42/vdgxuMNZ7SPZrQvzWhfntE+8UKPlpz/C63xzk9GxPNjw6+XMP7r+Jj3Jcj5v9h6Pjf5f2VsuXb+9e+Pc/69PfmfvvneL07feP+DV6++d+XdjXc3fnb+7Nkz5y9cuHjx4ul3rl7bOLPzb4c9Plo5/zz2tfNAy5Lzz5nLvyw5/y+lWv5lyfl/OdXyL0vOP7/fk39Zcv75s4/8y5LzfznV8i9Lzv9rqZZ/WXL+r6Ra/mXJ+X891fIvS87/1VTLvyw5/1Opln9Zcv6nU73P/FeOul/MR84/H+Gy/5cl55/PbJB/WXL+51It/7Lk/M+nWv5lyfm/lmr5lyXn/41Uy78sOf8LqZZ/WXL+30y1/MuS87+YavmXJef/rVTLvyw5/2+nWv5lyfm/nmr5lyXn/51Uy78sOf/vplr+Zcn5fy/V8i9Lzv+NVMu/LA++/9+MGTNm8kzXv5kAAAAAAAAAAAAAgHHzOJ24620EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg/O3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrC3r3GyHXW9wM/szevHUgMhPyd/A1ZO8YYZ5NdX+ILrYsJ14ZbCSQlvcR2vWtnwbd47ZKkkewoUCJhVIRoG160BRS1kaoKq8oLWgWUF6hVpaqkfUFfFFGh8iKqAgpIldoKstWceZ5nZ2ZnZ2a94/XsOZ+PZP+8M2fmPOfMc87Ob9ffOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD1Nr1r+nOVLMuqf/K/1mfZa6r/Xju2Pr/t7dd6hAAAAMBy/SL/+5Ub0g0Hu3hQ3TJ//+bvPjc3NzeXfWLwD4e/PDeX7hjLsuE1WZbfF13+4QOV+mWCJ7PRykDd1wMdVj/Y4f6hDvcPd7h/pMP9azrcP9rh/gU7YIG1tZ/H5E+2Jf/n+touzW7MhvP7trR41JOVNQMD8Wc5uUr+mLnhY9lMdiKbziYblq8tW8mXf35TdV3vz+K6BurWtbE6Q376+NE4hkrYx1sa1jX/nNGP35mN/eynjx/983Mv39yqdtwNDc9XG+e2zdVxfibcUhtrJVuT9kkc50DdODe2eE0GG8ZZyR9X/XfzOF/pcpyD88NcUc2v+Wg2kP/7xXw/DdX/WC/tp43htv++Lcuyi/PDbl5mwbqygWxdwy0D86/PaG1GVp+jOpVenw0taZ5u6mKeVuvUlsZ52nxMxNd/U3jc0CJjqH+ZfvzESN3r/vO5K5mnUXWrFztWmudgr4+VfpmDcV68mG/0Uy3n4Jaw/Y9vXXwOtpw7LeZg2u66Obi50xwcGBnMx5xehEr+mPk5uKNh+cF8TZW8vrS1/RycOHfyzMTso4/dMXPyyPHp49Ondu3YMblrz559+/ZNHJs5MT1Z+/sK93b/W5cNpGNgc9h38Rh4a9Oy9VN17msjC86/V3ocjrY5Dtc3Ldvr43CoeeMqK3NALpzTtWPj49WdPnppIFvkGMtfn+3LPw7Tdtcdh0N1x2HL7yktjsOhLo7D6jJntnf3nmWo7k+rMSz+vWB5c3B93Rxsfj/SPAd7/X6kX+bgaJgX39+++PeCjWG8T40v9f3I4II5mDY3nHuqt6T3+6P78tJqXt5SveO6kez87PTZOx85cu7c2R1ZKCviDXVzpXm+rqvbpmzBfB1Y8nw9OPPmp25pcfv6sK9G76j+Nbroa1VdZved7V+r/Ltb6/3ZcOvOLJQeW+n92eq7eXV/jmTZV77zxL3fevwr71p0f1b7zc9MLP+9eOpL686/w4ucf2Pf/2ptfempnhwcHqodv4Np7ww3nI8bX6qh/NxVydf9ykR35+Ph8Gelz8c3tjkfb2hattfn4+HmjYvn40qnn3YsT/PrORrmyYnJ9ufj6jIbdi51Tg61PR/fFmol7P+3hU4h9UV1c2exeZvWNTQ0HLZrKK6hcZ7ualh+OPRm1XU9u/PK5um222rPNZi2bt5KzdOxpmV7PU/Tz74Wm6eVTj99uzLNr+domBc37mo/T6vLvLB7+efOtfGfdefOkU5zcHhwpDrm4TQJ8/N9Nrc2zsE7s6PZ6exENpXfO5LPp0q+rvG7upuDI+HPSp8rN7SZg9ualu31HEzfxxabe5WhhRvfA82v52iYF0/f1X4OVpd5997evnfdFm5Jy9S9d23++dpiP/O6pWk3Xa25MhTG+Z297X82W13mxL6l9pnt99Pt4ZbrWuyn5uN3sWNqKluZ/bQhjPPlfYvvp+p4qst8eX+X8+lglmUXHr47/3lv+P3KX5//3nMNv3dp9TudCw/f/ZPXHvu7pYwfgNXv1VpZV/teV/ebqW5+/w8AAACsCrHvHwg10f8DAABAYcS+P/6v8ET/DwAAAIUR+/6hUJOS9P8b3v3yzKsXspTMnwvi/Wk33FNbLmZcJ8PXY3Pzqrff/cz0f/3the7WPZBl2c/v+b2Wy2+4J46rZiyM8/J7Gm9f4Lk7ulr34fsupPXW59e/Gp4/bk+306BVBHcyy7Lnb/hCvp6xBy7l9YV7Duf13otPPVld5pX9ta/j4196Q235Pwnh34PHjjQ8/qWwH34U6uQHWu+P+LhvXHrbxr33z68vPq6y+fp8s59+sPa88XNyvvhkbfm4nxcb/7c+/+w3qss/8pbW478w0Hr8z4bnfSbU/3lTbfn616D6dXzcZ8P4q+urztD4uDu//u2W47/8udryZ95bW+5wqHH928LXW9778kz9/nqkcqRhu7L31ZaL65/83h/k98fni8/fPP7RQ5ca9kfz/HjhX2rPM9G0fLw9rif6m6b1V5+nfn7G9T/7+4cb9nOn9V++96U3VZ+3ef23Ny135uHt+frnn6/xE5v+9LNfaLm+OJ6Df3WmYXsOfjQcx2H9Tz8Y5mO4/38v156v+dMVDn+08fwTl//q+gsN2xO9/2e19V9+x/G8rhldu+6617z2+ou3Vvddlr24pvZ8ndZ//M9ON4z/azfV9ke8P2b0m9e/mLj+s58eP3V69vzMVNqrj9+Qf3bOB2vjieO9IZxbm78+dPrcQ9NnxybHJrNsrLgfoXfFvh7qT2rlYvul5xacQbffF17PW/74+XVb//nz8fZ//Xjt9ksfqH3femtY7ovh9vXh9Vva+hd6etNN+fFdeSGMcG7h5wUvx8Yt/7mvqwXD9je/L4jz/cwbH8r3Q/W+/PtGPK6XOf4fTNWe55thv86FT2befNP8+uqXj5+NcOljteN92fsvnObi6/oX4fX+0I9qzx/HFbf3B+F9zLc3NJ7v4vz45oWB5ufPP8XjYjifZBdr98el4v6+9MpNLYcXP4cku3hz/vWX0vPcvKTNXMzso7MTJ2ZOnX9k4tz07LmJ2UcfO3Ty9PlT5w7ln+V56JOdHj9/flqXn5+mpvfszvKz1elaucqu9fjP3Hd0au/k1qnpY0fOHzt335nps8ePzs4enZ6a3Xrk2LHpT3d6/MzUgR079+/au3P8+MzUgX379+/aPz5z6nR1GLVBdbBn8lPjp84eyh8ye2D3/h133bV7cvzk6anpA3snJ8fPd3p8/r1pvPro3x0/O33iyLmZk9PjszOPTR/YsX/Pnp0dPw3w5Jljs2MTZ8+fmjg/O312orYtY+fym6vf+zo9nmKa/ffa+9lmldoH8WUfuX1P+nzWqmeeWPSpaos0fYDoy+GzaP7hdWf2dfN17PuHQ01K0v8DAABAGcS+fyTURP8PAAAAhRH7/jWhJvp/AAAAKIzY94+GmpSk/y9c/n/Dha7WL/+/+vL/mfy//H/T9lxx/v9j/Zb/r50v5P97Y7n5e/n/QP5f/l/+X/5f/p8e6Lf8f+z712ZZKft/AAAAKIPY968LNdH/AwAAQGHEvv+6UBP9PwAAABRG7PtfE2pSkv5f/l/+X/5f/l/+v/X6l5D/X5N1Qf5/Zcj/t1fy/P9AxwHI/09k5cr/X+zl+OX/5f9ZqN/y/7Hvf22oSUn6fwAAACiD2PdfH2qi/wcAAIDCiH3/DaEm+n8AAAAojNj3rw81KUn/L/8v/y//L/8v/996/a7/vzrJ/7dX8vx/Z/L/rv8v/y//T0/1W/4/9v2vCzUpSf8PAAAAZRD7/teHmuj/AQAAoP8MXdnDYt//hlCTBf3/Fa4AAAAAuOZi339j1hQEL8nv/+X/5f/l/+X/5f9br7/7/P9gJv/fP+T/25P/70D+X/5f/l/+n57qt/x/3vdno9kbQ01K0v8DAABAGcS+/6ZQE/0/AAAAFEbs+/9fqIn+HwAAAAoj9v0bQk1K0v/L/xcy/199mZab//+3rM345f/l/zP5/5W6/v90CGzK/3dJ/r89+f8O5P/l/+X/5f/pqX7L/8e+/+ZQk5L0/wAAAFAGse+/JdRE/w8AAACFEfv+/x9qov8HAACAwoh9/8ZQk5L0//L/fZ7/j8lR1/+X/5f/L2v+P17/P65W/r8D+f/25P87kP+X/5f/l/+np/ot/x/7/jeFmpSk/wcAAIAyiH3/m0NN9P8AAABQGLHvvzXUZEn9/1CPRwUAAAD0Uuz7x0JNSvL7f/n/Ps//X9n1/+X/5f+TW1db/n9A/n+R/L/r/3dJ/r89+f8O5P/l/+X/5f/pqX7L/8e+f1OoSUn6fwAAACiD2PdvDjXR/wMAAEBhxL7/tlAT/T8AAAAURuz7t4SalKT/l/+X/5f/L3b+v9X6+zr/7/r/8v/LJP/fnvx/B/L/8v/y//L/9FS/5f9j3/+WUJOS9P8AAABQBrHv3xpqov8HAACAwoh9/1tDTfT/AAAAUBix798WalKS/l/+X/5f/l/+v+T5/wvy/8Ui/9+e/H8H8v+9yM9/SP5f/l/+n6jf8v+x739bqElJ+n8AAAAog9j3bw810f8DAABAYcS+//ZQE/0/AAAAFEbs+8dDTUrS/8v/y//L/8v/lzz/7/r/BbNC+f+xbPH8/+hy1i//L/9fgPy/6//L/8v/k/Rb/j/2/XeEmpSk/wcAAIAyiH3/naEm+n8AAABYhda2vDX2/ROhJvp/AAAAKIzY90+GmpSk/5f/l/+X/y91/v/ikvP/t84/r/x/jfx/f7lq+f+BzPX/5f/l/ztYbfn/5t8O9kf+f1j+n0Lpt/x/7Pt3hJqUpP8HAACAMoh9/85QE/0/AAAAFEbs+3eFmuj/AQAAoDBi37871KQk/b/8v/y//H+p8//lvv5/VpH/L6AVuv6//H/K/8dNlP+X/199+f9ej9/1/+X/Wajf8v+x778r1KQk/T8AAACUQez794Sa6P8BAACgMGLfvzfURP8PAAAAhRH7/n2hJiXp/+X/5f/l/+X/S5v/d/3/Qlpy/v6fGr+U/w9c/1/+X/5f/l/+nx7ot/x/7Pv3h5qUpP8HAACAMoh9/9tDTfT/AAAAUBix7/+lUBP9PwAAABRG7Pt/OdSkJP2//L/8v/y//L/8f+v1y/+vTq7/3578fwfy//L/8v/y//RUv+X/Y99/INSkJP0/AAAAlEHs+38l1ET/DwAAAIUR+/53hJro/wEAAKAwYt9/MNSkJP2//H+X+f+17Z9P/r9x/PL/reeH/L/8v/z/1Sf/3578fwfy//L/Bcz/PyH/zzXUb/n/2Pe/M9SkJP0/AAAAlEHs++8ONdH/AwAAQGHEvv9doSb6fwAAACiM2Pe/O9SkJP2//L/r/8v/y//L/7de/zLy/2uyFuT/V4b8f3vy/x3I/8v/FzD/7/r/XEv9lv+Pff97Qk1K0v8DAABAGcS+/72hJvp/AAAAKIzY978v1ET/DwAAAIUR+/73h5qUpP+X/5f/l/+X/5f/b71+1/9fneT/2yt3/n+48wDk/+X/5f/l/+mpfsv/x77/V0NNStL/AwAAQBnEvv+eUBP9PwAAABRG7Ps/EGqi/wcAAIDCiH3/B0NNStL/9y7/PyL/30T+X/6/eX7I/8v/y/9fffL/dZoPptWX///F9eF21/+vkf+/SuMf+1Jtxxcx///DxfL/c2uaHy//z9XQb/n/2Pd/KNSkJP0/AAAAlEHs+z8caqL/BwAAgMKIff9HQk30/wAAAFAYse//tVCTkvT/rv9fHcd8evkq5///Uv5f/l/+X/5f/v/qkv9vb5Xl/3t8/f8uyP+XM//fo/H3Zf7f9f+5xvot/x/7/o+GmpSk/wcAAIAyiH3/vaEm+n8AAAAojNj3fyzURP8PAAAAhRH7/o+HmpSk/5f/d/1/+X/5f/n/1uuX/1+d5P/bk//vQP5f/r/f8v//If/P6tZv+f/Y998XalKS/h8AAADKIPb994ea6P8BAACgMGLf/+uhJvp/AAAAKIzY938i1KQk/b/8/2rJ/4/J/8v/y/83bY/8v/x/K/L/7a18/n9pb6jk/+X/V/P4Xf9f/p+F+i3/H/v+B0JNuv92Ndr1kgAAAMA1Efv+3wg1Kcnv/wEAAKAMYt//m6EmXfT/a6/aqAAAAIBein3/b4WalOT3/6XO/9eNI+rf/L/r/2fy//L/Tdsj/y//38rK5f/jmUf+3/X/5f8j+X/5f/l/mvVb/j/2/b8dalKS/h8AAADKIPb9D4aa6P8BAABgVWj1f7Kbxb7/UKiJ/h8AAAAKI/b9h0NNStL/lzr/v6qu/y//n5Ut//9Hm//x+9/98OEd8v/y//L/S7Ki1/+vHvyu/y//L/+fyP/L/7fM/6+R/y+zfsv/x77/SKhJSfp/AAAAKIPY9/9OqMmi/f/oCowKAAAA6KXY9x8NNfH7fwAAACiM2PdPhZqUpP+X/5f/l//v0/z/Eq//Xwnr6Yf8f9wf8v+Nepb/jydd+f+WVjT/f/98Tlz+f6n5/5GWt8r/d53/z9+4yf/31/jl/13/n4X6Lf8f+/7pUJOS9P8AAABQBqHvHzhWq/N36P8BAACgMGLffzzURP8PAAAAhRH7/odCTUrS/8v/y//L/xcj/+/6//PLFz7/7/r/bcn/t9c/+f/WrmL+v9LVi7F68v/51/L//TV++X/5fxbqt/x/7PtnQk1K0v8DAABAGcS+/5OhJvp/AAAAKIzY938q1ET/DwAAAIUR+/4ToSYl6f/l/+X/5f/l/+X/W69f/n91kv//P/bu48nS8rrj+G2YgZli4XKVq7zwwuz9J7DAa7u89sIbb1zlcpVxwDkxOEecsySUMwogIZRQTqCEhLJQllAOKCNRo2LmnDPd07ff2z19u/u9z/l8NkcaaXyvMZ7RT/CtZ1rj/n9/Ztn/n65/pP+f9/fX/+v/2W1u/X/u/l+PW5rsfwAAAOggd/9NcYv9DwAAAMPI3f8bcYv9DwAAAMPI3f+bcUuT/a//1/8fqv8/f+2Oz51V/3+j/n+vz9f/6/9Hpv+ftin9/0L/v/Trbe//f+KM/n9u31//r/9nt7n1/7n7fytuabL/AQAAoIPc/b8dt9j/AAAAMIzc/TfHLfY/AAAADCN3/+/ELU32/2X9/9aiZ/9fEbv+3/v/F36gff//C2f0//r/TXW8/f+tj//Kp//3/v+J9P8L7//P7vvr//X/7Da3/j93/+/GLU32PwAAAHSQu//34hb7HwAAAIaRu//34xb7HwAAAIaRu/8P4pYm+/9w7/+fGqX/L/p//f+FH2jf/3v/f6H/31je/5/Wqf+/+cHrbnrk7p+65yCfr//X/+v/9f+s19z6/9z9fxi3NNn/AAAA0EHu/j+KW+x/AAAAGEbu/j+OW+x/AAAAGEbu/j+JW5rs/8P1/8O8/1/0//r/Cz+g/9f/6/83lv5/Wqf+/0o+X/+v/7+C71+/Der/9f/sNrf+P3f/n8YtTfY/AAAAdJC7/8/iFvsfAAAAhpG7/5a4xf4HAACAYeTuPxe3NNn/+v+j7/8f0//r/+Pq//X/+v+jp/+fpv9fQf+v//f+v/6ftZpb/5+7/9a4pcn+BwAAgA5y9/953GL/AwAAwDBy9/9F3GL/AwAAwDBy9/9l3NJk/+v/T/79/4f1//p//f8F+n/9/zro/6fp/1fQ/x+2nz+t/9f/6//Z7oD9/6MTv2yvpf/P3f9XcUuT/Q8AAAAd5O7/67jF/gcAAIBh5O7/m7jF/gcAAIBh5O7/27jh6i77X/9/8v2/9//1//r/i/T/+v910P9Pm03/v3Vq6Q/r/ze+//f+v/5f/88Oc3v/P3f/38UtTfY/AAAAdJC7/+/jFvsfAAAANsY1K/713P3/ELfY/wAAADCM3P3/GLc02f/6f/2//l//r/9f/vlT/f89276f/n9e9P/TZtP/70H/r//f5O+v/9f/s9vc+v/c/f8UtzTZ/wAAANBB7v7b4hb7HwAAAIaRu/+f4xb7HwAAAIaRu/9f4pYm+395/3/pX9f/788x9f+n9P/6/4v/9774P1H/P9n//6z3/3vS/09b3f/nr6j6/03o/x//T676//l8/6X9/2JrlP7/7Kqfr/9nmbn1/7n7/zVuabL/AQAAoIPc/f8Wt9j/AAAAMIzc/f8et9j/AAAAMIzc/f8RtzTZ/97/36j+3/v/+v8h3v/PP2Cb/P7/4tj7/1P6/33S/0/z/v8KG9b/e/9/Xt/f+//6f3abW/+fu/8/45Ym+x8AAAA6yN3/X3GL/Q8AAACbYfvfO3D531Aacvf/d9xi/wMAAMAwcvf/T9zSZP8P3v/fuNe/Tf+v/9/+x0v/P+T7/4P1/97/3y/9/zT9/wr6/6Po508N1v/fvtfPn0P/f4v+n5nZ0f/fe+nHT6r/z93/v3FLk/0PAAAAHeTu/7+4xf4HAACAYeTu//+4xf4HAACAYeTuf0Lc0mT/H3n/f3bvz/b+v/5f/6//1//r/9dN/z9N/7+C/t/7/97/1/+zVjv6/21Oqv/P3f/EuKXJ/gcAAIAOcvc/KW6x/wEAAGAYuftvj1vsfwAAABhG7v4nxy1N9v/g7//vSf+v/9/+x6tn/791arHQ/+v/x6P/n6b/X0H/r/8/if4//gTQ/zOiufX/ufufErc02f8AAADQQe7+p8Yt9j8AAAAMI3f/0+IW+x8AAACGkbv/6XFLk/2v/z/a/j9/XP+v/1/Mrv/3/r/+f0xt+/+tZb8T7bZH/3//r577+Z0/ov/X/+v/vf+v/2cNZtH/n7/0ny5z9z8jbmmy/wEAAKCD3P3PjFvsfwAAABhG7v5nxS32PwAAAAwjd/+z45Ym+1//7/1//b/+X/+//PP1/5upbf+/T97/X0H/r//X/+v/WatZ9P/b/nnu/ufELU32PwAAAHSQu/+5cYv9DwAAAMPI3f+8uMX+BwAAgGHk7n9+3NJk/+v/9f/6f/2//n/55+v/N5P+f5r+fwX9v/7/2Pr/07t+vv6fEc2t/8/df0fc0mT/AwAAQAe5+18Qt9j/AAAAMIzc/S+MW+x/AAAAGEbu/hfFLU32v/5/j/5/of/X/+v/9f/6/02k/5920v3/st8vtzuW/v/OiS+wrP8/f63+X//v/X/9P1dobv1/7v4Xxy1N9j8AAAB0kLv/zrjF/gcAAIBh5O6/K26x/wEAAGAYuftfErc02f/6f+//6//1//r/5Z+v/99M+v9py/v/q3b/kPf/vf+v/9f/6/9Zg7n1/7n7Xxq3NNn/AAAA0EHu/rvjFvsfAAAAhpG7/2Vxi/0PAAAAw8jdf0/c0mT/6//1//p//b/+f/nn6/8309H1/4uB+/8l9P/6f/3/9u9/+f8rLKX/1/+z29z6/9z9L49bmux/AAAA6CB3/yviFvsfAAAAhpG7/5Vxi/0PAAAAw8jd/6q4pcn+1//r//X/+n/9//LP1/9vJu//T9P/r6D/1/97/1//z1rNrf/P3f/quKXJ/gcAAIAOcvffG7fY/wAAADCM3P2viVvsfwAAABhG7v7Xxi1N9r/+X/+/s/9fLPT/+n/9/0XH0P+fWej/107/P03/v4L+f8z+/6rFQP3/2T1/vv6fOZpb/5+7/3VxS5P9DwAAAB3k7n993GL/AwAAwDBy978hbrH/AQAAYBi5+98YtzTZ//p//b/3//X/+v/ln7///v/6xX54//946P+n6f9X0P+P2f97/1//z4mZW/+fu/9NcUuT/Q8AAAAd5O5/c9xi/wMAAMAwcve/JW6x/wEAAGAYufvfGrc02f/6f/2//l//r/9f/vnH8P5//VHV/6+P/n+a/n8F/b/+X/+v/2et5tb/5+5/W9zSZP8DAABAB7n774tb7H8AAAAYRu7+++MW+x8AAACGkbv/7XFLk/2v/9f/6/83s/8/o/8fvv/Pb6b/P5i59P833PBzD+j/9f/6f/3/3Pv/a7b9Kar/54qs2F5z6/9z978jbmmy/wEAAKCD3P3vjFvsfwAAABhG7v53xS32PwAAAAwjd/+745Ym+393/396cbFQvWhZ/x+ZkP5/G/3/zu+v/1/+54f3//X/3v8/enPp/73/f2XfX/+v/9/k73+g/v/63T/f+/+MaG79f+7+B+KWJvsfAAAAOsjd/564xf4HAACAYeTuf2/cYv8DAADAMHL3Pxi3NNn/3v/X/+v/9f/6/+Wff5j+f1m6pv8/Hvr/afr/FfT/+v9G7//H73/161T1/1fr/1mfufX/ufvfF7c02f8AAADQQe7+98ct9j8AAAAMI3f/B+IW+x8AAACGkbv/g3FLk/2v/9f/6//1//r/5Z/v/f/NpP+fpv9fQf+v/2/U/1/O+/8chbn1/7n7PxS3NNn/AAAA0EHu/g/HLfY/AAAADCN3/0fiFvsfAAAAhpG7/6NxS5P9P9f+/xb9/wX6/3X0/7+s/7/s84+y/3/svP5/L/r/46H/z9/Rl9P/r6D/1//r//X/rNXc+v/c/Q/FLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk/8+1//f+/8V/vu7+f2vRsf/3/r/3//X/nej/p+n/V9D/6//1//p/1mpu/X/u/k/GLU32PwAAAGyqX/yZX3tov//e3P2filvsfwAAABhG7v5Pxy32PwAAAAwjd/9n4pYm+1//36v/7/n+v/5f/6//70T/P03/v4L+X/+v/9f/s1Zz6/9z9382btk2/E4d+H9LAAAAYE5y938ubmny1/8BAACgg9z9D8ctu/b/+X3+Xe0AAADA3OTu/3zc0uSv/x+6/19s6f+Psv9f6P/1//p//b/+/yD0/9MO2f+f32rT/1+70P/r//X/+n8O5+wM+//c/V+IW5rsfwAAABjUjv9GIXf/F+OWVfv/zBF8MwAAAOBI5O7/Utzir/8DAADAMHL3fzluabL/vf8/8/7/it7/P1v/SP/fvP+/7czSz9f/6/9Hpv/f04/H7fT+//kf8/7/gZx0P7/p31//r/9nt7n1/7n7vxK3NNn/AAAA0EHu/q/GLfY/AAAADCN3/9fiFvsfAAAAhpG7/+txS5P9r/8fsf/3/r/+f/rzx+n/f/K6c/f90q/cdYf+n0uOs//PPxc2pP+/4JDv/29a/3+I9//1//p//b/+n3WYW/+fu/8bcUuT/Q8AAAAd5O5/JG6x/wEAAGAYufu/GbfY/wAAADCM3P3filua7P+N6v9/+gr6/2Vhvv5/lv1//rE+gf7/3Ob1/9kUd+//vf+v/9/N+//T9P8r6P/1//p//T9rNbf+P3f/t+OWJvsfAAAAOsjd/524xf4HAACAYeTu/27cYv8DAADAMHL3fy9uabL/N6r/9/7/0P1/8v7/pZ/X+/3/S8mu/l//fxD6/2n6/xX0//p//b/+n7WaW/+fu//7cUuT/Q8AAAAd5O5/NG6x/wEAAGAYuft/ELfY/wAAADCM3P0/jFua7H/9v/5f/39C/f/jv9zo/73/r/9fO/3/NP3/Cvp//b/+X//PWs2t/8/d/6MAAAD//5VkYF0=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0)

386.923999ms ago: executing program 4 (id=2950):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x300048c1)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0xc0585604, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/102383, 0x18fef}, {0x0}], 0x2, 0x0, 0x0)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0x8b, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa3110018c12ef000400aab8c9065c884c6840df0ce7c5b1c2a88521e1e7bf1b6862bc9d3f2f59f7d69bcdb0015f7ee495090c676657bd2273e346b1e7531df39d9131fae3737a5775ed14b0f929dfbd3e562dbfdd6bf12e586b394ccd2da72158555213490f28766560dff0d58b8e2c5773f70a23ea7a0281a49e5bf9c05181e83642725a2e"], &(0x7f00000000c0)={0x1, 0x4, [0x200, 0xad9, 0x37b, 0xe21]})
pidfd_send_signal(r3, 0x12, 0x0, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100), 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"/305], 0x21c}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x34, 0x27, 0x6d, 0x20, 0x2040, 0xc602, 0x18e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x72}}]}}]}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r5, @ANYBLOB="000000000000000020001280080001006772650014000280060010000000000006000e0000400000"], 0x40}}, 0x0)
mmap$snddsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x2032, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netpci0\x00'})

258.543021ms ago: executing program 2 (id=2951):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
dup2(r1, r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000f6690200008000000003"])
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000002000)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_usb_control_io$cdc_ncm(r5, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0xa, 0x56, {0x56, 0xc, "3c94f7fe0e7d506ad17c175505d06718d3e5a9394fa58a3d8abf12b0d09ef7c7502b0581ec56d549e781f1489af7310b1399865efda367b64a434b9ffc375f248a2c23317aa7e98f6a93aa891ce10d23ce4fbb81"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x20, 0x7, 0x2b, "390ca58e9b5d8124242ee128dbbc1bc237fc21919ca0369a0de4844aab66c5d4f38528eb55209325ff4d82"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x99}, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x3ff, 0x1, 0x7, 0x6, 0x1, 0x2, 0x7fff, 0x2, 0x0, 0xb608, 0x1, 0x40}}, &(0x7f0000000200)={0x20, 0x85, 0x4, 0x400}, &(0x7f0000000280)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000002c0)={0x20, 0x87, 0x2, 0xa3}, &(0x7f0000000300)={0x20, 0x89, 0x2}})
syz_usb_control_io(r5, 0x0, 0x0)

0s ago: executing program 3 (id=2952):
syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_set_ext_adv_params}}, 0x8)
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140), 0x4)
r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0)

kernel console output (not intermixed with test programs):

ber 102 using dummy_hcd
[ 1075.483827][   T25] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1075.555049][T15046] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1075.564531][T15046] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1075.585739][T15046] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1075.600508][T15046] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1075.615109][T15046] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping
[ 1075.628984][T15046] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1075.654286][T15046] usb 5-1: string descriptor 0 read error: -22
[ 1075.663126][T15046] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1075.690659][   T25] usb 4-1: Using ep0 maxpacket: 8
[ 1075.696111][T15046] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.717707][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5B has invalid wMaxPacketSize 0
[ 1075.746450][T15046] usb 5-1: 0:2 : does not exist
[ 1075.753982][   T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5B has invalid maxpacket 0
[ 1075.789798][   T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1075.816696][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.846969][   T25] usb 4-1: config 0 descriptor??
[ 1075.860674][   T25] iowarrior 4-1:0.0: no interrupt-in endpoint found
[ 1075.991897][T18809] loop0: detected capacity change from 0 to 1764
[ 1076.068172][ T1148] usb 4-1: USB disconnect, device number 104
[ 1076.329774][T18809] loop0: detected capacity change from 0 to 128
[ 1076.558836][T18809] VFS: Found a Xenix FS (block size = 512) on device loop0
[ 1076.752998][T18817] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1077.286730][T18809] sysv_free_block: trying to free block not in datazone
[ 1077.384142][   T29] audit: type=1804 audit(2000000273.120:914): pid=18809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2783" name="/root/syzkaller.KszstQ/135/file0" dev="loop0" ino=2 res=1 errno=0
[ 1077.428574][T18820] macvlan2: entered allmulticast mode
[ 1077.441549][T18820] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode
[ 1077.465784][T18820] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode
[ 1077.507306][T18820] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[ 1077.670980][T14868] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1077.676266][T18824] bond0: entered promiscuous mode
[ 1077.699137][T18824] bond_slave_0: entered promiscuous mode
[ 1077.724137][T18824] bond_slave_1: entered promiscuous mode
[ 1077.749682][T18824] macvlan2: entered promiscuous mode
[ 1077.807943][ T1148] usb 5-1: USB disconnect, device number 102
[ 1078.161798][   T25] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1078.371881][   T25] usb 1-1: Using ep0 maxpacket: 32
[ 1078.393287][   T25] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1078.427019][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1078.432164][T18821] loop1: detected capacity change from 0 to 32768
[ 1078.465845][T18823] loop3: detected capacity change from 0 to 32768
[ 1078.486435][   T25] usb 1-1: config 0 descriptor??
[ 1078.500272][T18821] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2782 (18821)
[ 1078.502811][   T25] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1078.540935][   T25] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1078.565181][   T25] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1078.575823][T18823] BTRFS: device /dev/loop3 (7:3) using temp-fsid 832fa828-8592-4f6a-9ad5-b45fd2935bb7
[ 1078.592268][T18823] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2786 (18823)
[ 1078.597043][   T25] usb 1-1: media controller created
[ 1078.612293][T18821] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1078.633366][T18821] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[ 1078.665074][T18821] BTRFS info (device loop1): using free-space-tree
[ 1078.712700][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1078.721325][T18823] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1078.770338][T18823] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1078.789566][T18823] BTRFS info (device loop3): using free-space-tree
[ 1078.806809][   T25] usb 1-1: selecting invalid altsetting 1
[ 1078.822273][   T25] set interface failed
[ 1078.823453][   T25] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1078.844740][   T25] error writing reg: 0xff, val: 0x00
[ 1078.916025][   T25] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1078.947921][   T25] usb 1-1: USB disconnect, device number 116
[ 1079.429275][T18831] loop2: detected capacity change from 0 to 40427
[ 1079.481298][T18831] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1079.483338][T13941] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1079.527187][T18831] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1079.611315][T18831] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1079.837685][T18831] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1079.858046][T18831] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1080.083055][T18831] syz.2.2789: attempt to access beyond end of device
[ 1080.083055][T18831] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[ 1080.148588][   T29] audit: type=1804 audit(2000000275.870:915): pid=18877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2789" name="/root/syzkaller.nPRcsA/401/bus/bus" dev="loop2" ino=10 res=1 errno=0
[ 1080.448128][T18883] loop0: detected capacity change from 0 to 1024
[ 1080.477393][T18883] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1080.481914][T15046] usb 2-1: new full-speed USB device number 118 using dummy_hcd
[ 1080.542469][T18883] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2793: Invalid block bitmap block 0 in block_group 0
[ 1080.562975][T18883] Quota error (device loop0): write_blk: dquota write failed
[ 1080.602030][T18883] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[ 1080.635780][T18883] EXT4-fs error (device loop0): ext4_acquire_dquot:6858: comm syz.0.2793: Failed to acquire dquot type 0
[ 1080.666955][T17722] BTRFS info (device loop3): last unmount of filesystem 832fa828-8592-4f6a-9ad5-b45fd2935bb7
[ 1080.691552][T18883] EXT4-fs error (device loop0): ext4_free_blocks:6590: comm syz.0.2793: Freeing blocks not in datazone - block = 0, count = 4096
[ 1080.737210][T15046] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1080.744575][T18883] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.2793: Invalid inode bitmap blk 0 in block_group 0
[ 1080.769390][T15046] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.794623][T15046] usb 2-1: config 0 descriptor??
[ 1080.799712][ T2409] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8
[ 1080.832494][T18883] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem
[ 1080.841741][ T2409] EXT4-fs error (device loop0): ext4_release_dquot:6881: comm kworker/u8:8: Failed to release dquot type 0
[ 1080.869453][T18875] loop4: detected capacity change from 0 to 32768
[ 1080.891976][T18883] EXT4-fs (loop0): 1 orphan inode deleted
[ 1080.903220][T18883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1080.924345][T18875] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2792 (18875)
[ 1080.969306][T18875] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1080.999717][T18875] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[ 1081.030142][T18875] BTRFS info (device loop4): using free-space-tree
[ 1081.231990][ T1148] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 1081.411800][   T25] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1081.411829][ T1148] usb 1-1: Using ep0 maxpacket: 16
[ 1081.437983][ T1148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1081.476031][ T1148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1081.487204][ T1148] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1081.499130][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.529928][ T1148] usb 1-1: config 0 descriptor??
[ 1081.623208][   T25] usb 4-1: Using ep0 maxpacket: 32
[ 1081.641574][   T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1081.660844][   T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1081.672320][   T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1081.682287][   T25] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1081.692279][   T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1081.702284][   T25] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 1081.740730][   T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1081.750330][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.777690][   T25] usb 4-1: Product: syz
[ 1081.787731][   T25] usb 4-1: Manufacturer: syz
[ 1081.806051][   T25] usb 4-1: SerialNumber: syz
[ 1081.916544][T18919] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[ 1081.922614][T16792] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1081.923114][T18919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1081.924236][T18919] vhci_hcd vhci_hcd.0: Device attached
[ 1081.950251][T18881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1081.962736][T18881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1081.978353][ T1148] hid (null): report_id 0 is invalid
[ 1082.013373][ T1148] hid-generic 0003:0158:0100.003E: unknown main item tag 0x0
[ 1082.021070][ T1148] hid-generic 0003:0158:0100.003E: collection stack underflow
[ 1082.031145][ T1148] hid-generic 0003:0158:0100.003E: item 0 2 0 12 parsing failed
[ 1082.045315][T18894] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2795'.
[ 1082.051791][ T1148] hid-generic 0003:0158:0100.003E: probe with driver hid-generic failed with error -22
[ 1082.082954][   T25] cdc_ncm 4-1:1.0: bind() failure
[ 1082.108846][   T25] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[ 1082.116137][   T25] cdc_ncm 4-1:1.1: bind() failure
[ 1082.128383][   T25] usb 4-1: USB disconnect, device number 105
[ 1082.151970][T18920] vhci_hcd: connection closed
[ 1082.155648][   T11] vhci_hcd: stop threads
[ 1082.168469][   T11] vhci_hcd: release socket
[ 1082.196825][   T11] vhci_hcd: disconnect device
[ 1082.244506][T12836] usb 13-1: new low-speed USB device number 33 using vhci_hcd
[ 1082.262073][T12836] usb 13-1: enqueue for inactive port 0
[ 1082.280316][ T1148] usb 1-1: USB disconnect, device number 117
[ 1082.363927][T12836] vhci_hcd: vhci_device speed not set
[ 1082.454967][T15046] pegasus 2-1:0.0: can't reset MAC
[ 1082.460496][T15046] pegasus 2-1:0.0: probe with driver pegasus failed with error -5
[ 1082.472459][T15046] usb 2-1: USB disconnect, device number 118
[ 1082.657099][T18906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1082.869430][T10780] EXT4-fs error (device loop0): __ext4_get_inode_loc:4357: comm kworker/u8:11: Invalid inode table block 12884901889 in block_group 0
[ 1082.929675][T14868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1083.691482][T18934] bond0: entered promiscuous mode
[ 1083.730747][T18934] bond_slave_0: entered promiscuous mode
[ 1083.751255][T18934] bond_slave_1: entered promiscuous mode
[ 1084.159815][T18929] loop3: detected capacity change from 0 to 32768
[ 1084.172658][T18929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2797 (18929)
[ 1084.241312][T18929] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1084.282252][T18929] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1084.291032][T18929] BTRFS info (device loop3): using free-space-tree
[ 1084.810253][T18938] loop1: detected capacity change from 0 to 32768
[ 1084.819429][T18938] BTRFS: device /dev/loop1 (7:1) using temp-fsid 32bcbe14-a559-4552-b132-0bd0af2841af
[ 1085.451936][T18938] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2801 (18938)
[ 1085.577190][T18940] loop0: detected capacity change from 0 to 32768
[ 1085.610035][T18940] BTRFS: device /dev/loop0 (7:0) using temp-fsid dc731476-40d8-472f-976e-99bb6110cf55
[ 1085.621419][T18938] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1085.659740][T18973] macvlan3: entered allmulticast mode
[ 1085.660392][T18940] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2799 (18940)
[ 1085.666086][T18973] bond0: (slave macvlan3): Error -98 calling set_mac_address
[ 1085.701733][T18938] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[ 1085.730251][T18938] BTRFS info (device loop1): using free-space-tree
[ 1085.747705][T18940] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1085.775112][T18940] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 1085.801297][T18940] BTRFS info (device loop0): using free-space-tree
[ 1086.224226][T17722] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1086.242280][T15046] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1086.461767][T15046] usb 3-1: Using ep0 maxpacket: 32
[ 1086.516276][T15046] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1086.568850][T15046] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1086.606793][T15046] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1086.623926][T15046] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 1086.643487][T15046] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1086.670125][T15046] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[ 1086.705271][T13941] BTRFS info (device loop1): last unmount of filesystem 32bcbe14-a559-4552-b132-0bd0af2841af
[ 1086.725109][T15046] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1086.739535][T15046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.809802][T15046] usb 3-1: Product: syz
[ 1086.816230][T15046] usb 3-1: Manufacturer: syz
[ 1086.820875][T15046] usb 3-1: SerialNumber: syz
[ 1087.029894][T14868] BTRFS info (device loop0): last unmount of filesystem dc731476-40d8-472f-976e-99bb6110cf55
[ 1087.064970][T18998] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2807'.
[ 1087.076399][T15046] cdc_ncm 3-1:1.0: bind() failure
[ 1087.089023][T15046] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 1087.096189][T15046] cdc_ncm 3-1:1.1: bind() failure
[ 1087.109681][T15046] usb 3-1: USB disconnect, device number 120
[ 1087.350609][T19031] loop4: detected capacity change from 0 to 1024
[ 1087.386107][T19031] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1087.411961][T19032] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[ 1087.418554][T19032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1087.457219][T19031] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2811: Invalid block bitmap block 0 in block_group 0
[ 1087.479954][T19032] vhci_hcd vhci_hcd.0: Device attached
[ 1087.522675][T19031] Quota error (device loop4): write_blk: dquota write failed
[ 1087.530347][T19031] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[ 1087.581321][T19031] EXT4-fs error (device loop4): ext4_acquire_dquot:6858: comm syz.4.2811: Failed to acquire dquot type 0
[ 1087.593914][T19031] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.2811: Freeing blocks not in datazone - block = 0, count = 4096
[ 1087.649287][T19031] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2811: Invalid inode bitmap blk 0 in block_group 0
[ 1087.681879][ T1106] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8
[ 1087.690927][ T1106] EXT4-fs error (device loop4): ext4_release_dquot:6881: comm kworker/u8:7: Failed to release dquot type 0
[ 1087.706210][T19031] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[ 1087.711991][   T25] usb 15-1: new low-speed USB device number 23 using vhci_hcd
[ 1087.746437][T19031] EXT4-fs (loop4): 1 orphan inode deleted
[ 1087.758893][T19033] vhci_hcd: connection reset by peer
[ 1087.764780][T19031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1087.780231][ T1106] vhci_hcd: stop threads
[ 1087.813421][ T1106] vhci_hcd: release socket
[ 1087.820182][ T1106] vhci_hcd: disconnect device
[ 1088.081716][T12836] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1088.338093][T12836] usb 5-1: Using ep0 maxpacket: 16
[ 1088.453675][T12836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1088.698199][T12836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1088.782354][T12836] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1088.826557][T12836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1088.880325][T12836] usb 5-1: config 0 descriptor??
[ 1089.360452][T19027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1089.380072][T19027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1089.409744][T12836] hid (null): report_id 0 is invalid
[ 1089.438172][T12836] hid-generic 0003:0158:0100.003F: unknown main item tag 0x0
[ 1089.457994][T12836] hid-generic 0003:0158:0100.003F: collection stack underflow
[ 1089.470676][T12836] hid-generic 0003:0158:0100.003F: item 0 2 0 12 parsing failed
[ 1089.510632][T12836] hid-generic 0003:0158:0100.003F: probe with driver hid-generic failed with error -22
[ 1089.721060][ T5240] usb 5-1: USB disconnect, device number 103
[ 1090.161007][T19058] loop2: detected capacity change from 0 to 32768
[ 1090.192675][T19058] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2816 (19058)
[ 1090.242132][T19058] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1090.291547][T19058] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1090.308900][T19058] BTRFS info (device loop2): using free-space-tree
[ 1090.316847][ T2409] EXT4-fs error (device loop4): __ext4_get_inode_loc:4357: comm kworker/u8:8: Invalid inode table block 12884901889 in block_group 0
[ 1090.348145][T16792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1090.488654][T19066] loop0: detected capacity change from 0 to 32768
[ 1090.574323][T19066] BTRFS: device /dev/loop0 (7:0) using temp-fsid 548e52b2-770a-467e-9de8-68d326a8a56a
[ 1090.584886][T19066] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2817 (19066)
[ 1090.627114][T19066] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1090.642668][T19066] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 1090.663464][T19066] BTRFS info (device loop0): using free-space-tree
[ 1090.791890][T19095] loop3: detected capacity change from 0 to 1764
[ 1091.074425][T19095] loop3: detected capacity change from 0 to 128
[ 1091.103940][T19095] VFS: Found a Xenix FS (block size = 512) on device loop3
[ 1091.174022][T19095] sysv_free_block: trying to free block not in datazone
[ 1091.271695][   T29] audit: type=1804 audit(2000000286.990:916): pid=19095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2819" name="/root/syzkaller.XZ4C3x/34/file0" dev="loop3" ino=2 res=1 errno=0
[ 1091.339988][T10004] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1091.422006][T14868] BTRFS info (device loop0): last unmount of filesystem 548e52b2-770a-467e-9de8-68d326a8a56a
[ 1091.598130][T17722] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 1091.890360][T19112] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1092.832486][   T25] vhci_hcd: vhci_device speed not set
[ 1092.990432][T19086] loop4: detected capacity change from 0 to 32768
[ 1093.013155][T19121] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[ 1093.019740][T19121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1093.048702][T19121] vhci_hcd vhci_hcd.0: Device attached
[ 1093.057323][T19086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2818 (19086)
[ 1093.115815][T19126] netlink: 'syz.3.2823': attribute type 10 has an invalid length.
[ 1093.127762][T19086] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1093.150794][T19086] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[ 1093.187709][T19086] BTRFS info (device loop4): using free-space-tree
[ 1093.264369][T19126] batman_adv: batadv0: Adding interface: team0
[ 1093.307589][T19126] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1093.307829][T19122] vhci_hcd: connection closed
[ 1093.322149][T11378] Bluetooth: hci5: ACL packet for unknown connection handle 201
[ 1093.334248][ T5240] usb 13-1: new low-speed USB device number 34 using vhci_hcd
[ 1093.383975][T19126] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 1093.403977][T19123] vhci_hcd: sendmsg failed!, ret=-32 for 48
[ 1093.430050][T19127] netlink: 'syz.3.2823': attribute type 10 has an invalid length.
[ 1093.464352][T10780] vhci_hcd: stop threads
[ 1093.468672][T10780] vhci_hcd: release socket
[ 1093.473604][T10780] vhci_hcd: disconnect device
[ 1093.479149][T19127] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2823'.
[ 1093.499664][T19127] team0: entered promiscuous mode
[ 1093.555232][T19127] team_slave_0: entered promiscuous mode
[ 1093.616388][T19127] team_slave_1: entered promiscuous mode
[ 1093.664902][T19127] 8021q: adding VLAN 0 to HW filter on device team0
[ 1093.702496][T19127] batman_adv: batadv0: Interface activated: team0
[ 1093.752674][T19086] BTRFS error (device loop4): open_ctree failed
[ 1093.765836][T19127] batman_adv: batadv0: Interface deactivated: team0
[ 1093.861796][T19127] batman_adv: batadv0: Removing interface: team0
[ 1093.907192][T19127] bridge0: port 3(team0) entered blocking state
[ 1093.984802][T19127] bridge0: port 3(team0) entered disabled state
[ 1093.991431][T19127] team0: entered allmulticast mode
[ 1094.069347][T19127] team_slave_0: entered allmulticast mode
[ 1094.099837][T19127] team_slave_1: entered allmulticast mode
[ 1094.135694][T19127] bridge0: port 3(team0) entered blocking state
[ 1094.142187][T19127] bridge0: port 3(team0) entered forwarding state
[ 1094.723067][T19160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'.
[ 1094.769838][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2825'.
[ 1094.803427][T19148] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535)
[ 1095.417638][T19173] macvlan2: entered allmulticast mode
[ 1095.446023][T19173] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode
[ 1095.478823][T19173] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode
[ 1095.519033][T19173] macvlan2: entered promiscuous mode
[ 1095.546344][T19173] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[ 1095.621880][T15046] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 1095.811828][T12836] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1095.831930][T15046] usb 1-1: Using ep0 maxpacket: 32
[ 1095.841050][T15046] usb 1-1: config 7 has an invalid interface number: 48 but max is 2
[ 1095.855975][T15046] usb 1-1: config 7 has an invalid interface number: 19 but max is 2
[ 1095.870350][T15046] usb 1-1: config 7 has an invalid interface number: 148 but max is 2
[ 1095.900037][T15046] usb 1-1: config 7 has no interface number 0
[ 1095.910659][T15046] usb 1-1: config 7 has no interface number 1
[ 1095.924202][T15046] usb 1-1: config 7 has no interface number 2
[ 1095.932164][T15046] usb 1-1: config 7 interface 48 altsetting 14 endpoint 0x3 has an invalid bInterval 240, changing to 11
[ 1095.943942][T15046] usb 1-1: config 7 interface 48 altsetting 14 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 1095.956080][T15046] usb 1-1: config 7 interface 48 altsetting 14 endpoint 0xF has invalid maxpacket 512, setting to 64
[ 1095.968591][T15046] usb 1-1: config 7 interface 48 altsetting 14 has an invalid descriptor for endpoint zero, skipping
[ 1095.982759][T15046] usb 1-1: config 7 interface 48 altsetting 14 endpoint 0xB has invalid wMaxPacketSize 0
[ 1096.004430][T15046] usb 1-1: config 7 interface 148 altsetting 16 has a duplicate endpoint with address 0x5, skipping
[ 1096.015945][T12836] usb 3-1: Using ep0 maxpacket: 32
[ 1096.021851][T15046] usb 1-1: config 7 interface 148 altsetting 16 has a duplicate endpoint with address 0x3, skipping
[ 1096.037171][T15046] usb 1-1: config 7 interface 48 has no altsetting 0
[ 1096.044863][T12836] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1096.054237][ T5229] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1096.062748][T12836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1096.084164][T15046] usb 1-1: config 7 interface 19 has no altsetting 0
[ 1096.091147][T15046] usb 1-1: config 7 interface 148 has no altsetting 0
[ 1096.100824][T12836] usb 3-1: config 0 descriptor??
[ 1096.132322][T12836] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1096.155823][T12836] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1096.173013][T12836] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1096.180905][T12836] usb 3-1: media controller created
[ 1096.251708][ T5229] usb 5-1: Using ep0 maxpacket: 16
[ 1096.262970][ T5229] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1096.281734][ T5229] usb 5-1: config 1 has no interface number 1
[ 1096.296155][T12836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1096.308424][ T5229] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1096.381781][ T5229] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1096.408440][T12836] usb 3-1: selecting invalid altsetting 1
[ 1096.414577][T12836] set interface failed
[ 1096.414842][T12836] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1096.427765][ T5229] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1096.445133][T12836] error writing reg: 0xff, val: 0x00
[ 1096.474400][ T5229] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1096.520050][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.545511][ T5229] usb 5-1: Product: syz
[ 1096.560418][ T5229] usb 5-1: Manufacturer: syz
[ 1096.569210][ T5229] usb 5-1: SerialNumber: syz
[ 1096.600676][T12836] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1096.640837][T12836] usb 3-1: USB disconnect, device number 121
[ 1096.834343][ T5229] usb 5-1: found format II with max.bitrate = 0, frame size=0
[ 1096.852682][ T5229] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1096.892139][ T5229] usb 5-1: USB disconnect, device number 104
[ 1097.607998][T19188] netlink: 'syz.4.2835': attribute type 10 has an invalid length.
[ 1097.743326][T19188] bridge0: port 3(team0) entered disabled state
[ 1097.792766][T19188] team0: left allmulticast mode
[ 1097.797696][T19188] team_slave_0: left allmulticast mode
[ 1097.835074][T19188] team_slave_1: left allmulticast mode
[ 1097.866577][T19188] team0: left promiscuous mode
[ 1097.871402][T19188] team_slave_0: left promiscuous mode
[ 1097.881435][T19188] team_slave_1: left promiscuous mode
[ 1097.887331][T11378] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 1097.901770][T19188] bridge0: port 3(team0) entered disabled state
[ 1097.920147][T19188] batman_adv: batadv0: Adding interface: team0
[ 1097.926802][T19188] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1097.991929][T19188] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 1098.043867][T11378] Bluetooth: hci1: SCO packet for unknown connection handle 201
[ 1098.111450][T19190] netlink: 'syz.4.2835': attribute type 10 has an invalid length.
[ 1098.187557][T19184] loop2: detected capacity change from 0 to 32768
[ 1098.194783][T19190] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2835'.
[ 1098.248269][T19190] team0: entered promiscuous mode
[ 1098.253846][T19184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2834 (19184)
[ 1098.272895][T19190] team_slave_0: entered promiscuous mode
[ 1098.279114][T19190] team_slave_1: entered promiscuous mode
[ 1098.295752][T19184] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1098.319496][T19184] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1098.331044][T19190] 8021q: adding VLAN 0 to HW filter on device team0
[ 1098.338395][T15046] usb 1-1: string descriptor 0 read error: -71
[ 1098.341675][T19184] BTRFS info (device loop2): using free-space-tree
[ 1098.377058][T15046] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01c8, bcdDevice=d8.e2
[ 1098.398104][T19190] batman_adv: batadv0: Interface activated: team0
[ 1098.417428][T15046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1098.437651][T15046] usb 1-1: can't set config #7, error -71
[ 1098.445589][T15046] usb 1-1: USB disconnect, device number 118
[ 1098.511823][ T5240] vhci_hcd: vhci_device speed not set
[ 1098.575037][T19190] batman_adv: batadv0: Interface deactivated: team0
[ 1098.696547][T19190] batman_adv: batadv0: Removing interface: team0
[ 1098.898995][T19190] bridge0: port 3(team0) entered blocking state
[ 1099.013385][T19190] bridge0: port 3(team0) entered disabled state
[ 1099.173013][T19190] team0: entered allmulticast mode
[ 1099.178424][T19190] team_slave_0: entered allmulticast mode
[ 1099.194526][T19190] team_slave_1: entered allmulticast mode
[ 1099.203250][T19190] bridge0: port 3(team0) entered blocking state
[ 1099.209660][T19190] bridge0: port 3(team0) entered forwarding state
[ 1099.280758][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1099.295850][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1099.305442][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1099.314751][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1099.438279][   T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1099.450703][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1099.507675][T19218] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1100.101332][T10004] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1100.224889][T19233] 9pnet_fd: Insufficient options for proto=fd
[ 1100.231874][    T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1100.421864][    T9] usb 5-1: device descriptor read/64, error -71
[ 1100.728950][T19219] chnl_net:caif_netlink_parms(): no params data found
[ 1100.736344][    T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1100.945315][    T9] usb 5-1: device descriptor read/64, error -71
[ 1100.946804][T19248] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[ 1100.958509][T19248] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1101.019989][T19248] vhci_hcd vhci_hcd.0: Device attached
[ 1101.082496][    T9] usb usb5-port1: attempt power cycle
[ 1101.289045][T19219] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1101.291950][ T5240] usb 13-1: new low-speed USB device number 35 using vhci_hcd
[ 1101.323857][T19219] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1101.353161][T19219] bridge_slave_0: entered allmulticast mode
[ 1101.376856][T19219] bridge_slave_0: entered promiscuous mode
[ 1101.458188][T19219] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1101.480292][T19219] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1101.527945][T19219] bridge_slave_1: entered allmulticast mode
[ 1101.541783][    T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1101.558027][   T54] Bluetooth: hci6: command tx timeout
[ 1101.589477][T19219] bridge_slave_1: entered promiscuous mode
[ 1101.635402][T19256] netlink: 'syz.0.2844': attribute type 10 has an invalid length.
[ 1101.645547][    T9] usb 5-1: device descriptor read/8, error -71
[ 1101.703500][T19256] bridge0: port 3(team0) entered disabled state
[ 1101.739422][T19250] vhci_hcd: connection reset by peer
[ 1101.749234][   T11] vhci_hcd: stop threads
[ 1101.755996][   T11] vhci_hcd: release socket
[ 1101.766970][T19256] team0: left allmulticast mode
[ 1101.775644][   T11] vhci_hcd: disconnect device
[ 1101.795561][T19256] team_slave_1: left allmulticast mode
[ 1101.811000][T19256] team0: left promiscuous mode
[ 1101.818609][T19256] team_slave_1: left promiscuous mode
[ 1101.829755][T19256] bridge0: port 3(team0) entered disabled state
[ 1101.871177][T19256] batman_adv: batadv0: Adding interface: team0
[ 1101.918905][T19256] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1101.952127][    T9] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1101.959128][T19256] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 1102.013859][    T9] usb 5-1: device descriptor read/8, error -71
[ 1102.120854][T19257] netlink: 'syz.0.2844': attribute type 10 has an invalid length.
[ 1102.131937][T19257] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2844'.
[ 1102.157855][    T9] usb usb5-port1: unable to enumerate USB device
[ 1102.160582][T19257] team0: entered promiscuous mode
[ 1102.180756][T19257] team_slave_1: entered promiscuous mode
[ 1102.206911][T19257] 8021q: adding VLAN 0 to HW filter on device team0
[ 1102.208405][T19245] loop3: detected capacity change from 0 to 32768
[ 1102.246074][T19257] batman_adv: batadv0: Interface activated: team0
[ 1102.248816][T19245] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2843 (19245)
[ 1102.287543][T19257] batman_adv: batadv0: Interface deactivated: team0
[ 1102.310253][T19257] batman_adv: batadv0: Removing interface: team0
[ 1102.320429][T19245] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1102.331086][T19245] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1102.336926][T19257] bridge0: port 3(team0) entered blocking state
[ 1102.356351][T19245] BTRFS info (device loop3): using free-space-tree
[ 1102.358165][T19257] bridge0: port 3(team0) entered disabled state
[ 1102.375940][T19257] team0: entered allmulticast mode
[ 1102.381173][T19257] team_slave_1: entered allmulticast mode
[ 1102.389198][T19257] bridge0: port 3(team0) entered blocking state
[ 1102.395629][T19257] bridge0: port 3(team0) entered forwarding state
[ 1102.523629][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.548719][T19219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1102.565878][T19219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1102.661798][    T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 1102.683053][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.775080][T19219] team0: Port device team_slave_0 added
[ 1102.782099][ T1148] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1102.811005][T19219] team0: Port device team_slave_1 added
[ 1102.861402][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1102.885193][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 1102.908100][    T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1102.933100][    T9] usb 3-1: config 1 has no interface number 1
[ 1102.941233][    T9] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1102.974497][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1102.992805][T17722] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1103.027954][ T1148] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1103.050937][    T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1103.081070][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1103.091797][ T1148] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1103.122801][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.130874][    T9] usb 3-1: Product: syz
[ 1103.136465][ T1148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.147036][T19219] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1103.154180][ T1148] usb 1-1: Product: syz
[ 1103.158406][    T9] usb 3-1: Manufacturer: syz
[ 1103.164511][T19219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1103.190769][ T1148] usb 1-1: Manufacturer: syz
[ 1103.195752][    T9] usb 3-1: SerialNumber: syz
[ 1103.200631][ T1148] usb 1-1: SerialNumber: syz
[ 1103.214646][T19219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1103.344348][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1103.448480][T19219] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1103.487485][T19219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1103.604490][T19219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1103.632105][   T54] Bluetooth: hci6: command tx timeout
[ 1103.822323][    T9] usb 3-1: found format II with max.bitrate = 0, frame size=0
[ 1103.849426][    T9] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1103.898785][    T9] usb 3-1: USB disconnect, device number 122
[ 1104.020054][T19219] hsr_slave_0: entered promiscuous mode
[ 1104.073034][T19219] hsr_slave_1: entered promiscuous mode
[ 1104.099814][T19219] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1104.110771][T19219] Cannot create hsr debugfs directory
[ 1104.264455][   T35] team0: left allmulticast mode
[ 1104.269509][   T35] team_slave_1: left allmulticast mode
[ 1104.277536][   T35] bridge0: port 3(team0) entered disabled state
[ 1104.292140][   T35] bridge_slave_1: left allmulticast mode
[ 1104.297864][   T35] bridge_slave_1: left promiscuous mode
[ 1104.304201][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1104.318271][   T35] bridge_slave_0: left allmulticast mode
[ 1104.325882][   T35] bridge_slave_0: left promiscuous mode
[ 1104.326139][ T1148] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1104.336983][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1104.348825][ T1148] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 1104.358456][ T1148] cdc_ncm 1-1:1.0: setting rx_max = 2048
[ 1104.423141][ T4870] usb 5-1: new full-speed USB device number 109 using dummy_hcd
[ 1104.552332][ T1148] cdc_ncm 1-1:1.0: setting tx_max = 16384
[ 1104.640024][ T4870] usb 5-1: not running at top speed; connect to a high speed hub
[ 1104.655788][ T4870] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1104.676312][ T4870] usb 5-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1104.720682][ T4870] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1104.772979][ T4870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1104.791663][ T4870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.801137][ T4870] usb 5-1: Product: ࠬ
[ 1104.815167][ T4870] usb 5-1: Manufacturer: 倊
[ 1104.819830][ T4870] usb 5-1: SerialNumber: п
[ 1104.842173][T19292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1104.962030][    T9] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1105.053146][T19294] loop2: detected capacity change from 0 to 32768
[ 1105.062634][T19294] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2851 (19294)
[ 1105.091159][T19292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1105.100061][T19292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1105.100241][T19294] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1105.114528][T19292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1105.127720][T19292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1105.143616][T19292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1105.151334][T19294] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[ 1105.155472][T19292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1105.186057][ T4870] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 1105.187900][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1105.200596][ T4870] usb 5-1: USB disconnect, device number 109
[ 1105.228862][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[ 1105.250994][    T9] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1105.261347][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1105.288437][    T9] usb 4-1: config 0 descriptor??
[ 1105.308457][T19294] BTRFS info (device loop2): rebuilding free space tree
[ 1105.351612][T19294] BTRFS info (device loop2): disabling free space tree
[ 1105.358651][T19294] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1105.368853][T19294] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1105.452807][   T29] audit: type=1800 audit(2000000301.190:917): pid=19294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2851" name="bus" dev="loop2" ino=263 res=0 errno=0
[ 1105.499810][   T29] audit: type=1800 audit(2000000301.210:918): pid=19294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2851" name="bus" dev="loop2" ino=263 res=0 errno=0
[ 1105.566407][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1105.634636][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1105.696007][   T35] bond0 (unregistering): Released all slaves
[ 1105.712066][   T54] Bluetooth: hci6: command tx timeout
[ 1105.877920][   T29] audit: type=1326 audit(2000000301.600:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19321 comm="syz.4.2854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f150d375b29 code=0x0
[ 1105.928742][T19296] netlink: 'syz.3.2850': attribute type 10 has an invalid length.
[ 1105.981476][ T1148] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 1106.023758][T19296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1106.074093][ T1148] usb 1-1: USB disconnect, device number 119
[ 1106.082031][T19296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1106.157141][ T1148] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[ 1106.361753][T12836] usb 5-1: new low-speed USB device number 110 using dummy_hcd
[ 1106.375007][    T9] usbhid 4-1:0.0: can't add hid device: -71
[ 1106.384690][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1106.404175][    T9] usb 4-1: USB disconnect, device number 106
[ 1106.431901][ T5240] vhci_hcd: vhci_device speed not set
[ 1106.494201][   T35] hsr_slave_0: left promiscuous mode
[ 1106.503726][   T35] hsr_slave_1: left promiscuous mode
[ 1106.516076][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1106.525749][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1106.537982][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1106.550892][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1106.554549][T12836] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1106.582038][T12836] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1106.591209][T12836] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1106.601519][   T35] veth0_macvtap: left promiscuous mode
[ 1106.611974][   T35] veth1_vlan: left promiscuous mode
[ 1106.614352][T12836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1106.622135][   T35] veth0_vlan: left promiscuous mode
[ 1106.627531][T12836] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping
[ 1106.652059][T12836] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1106.678305][T12836] usb 5-1: string descriptor 0 read error: -22
[ 1106.684873][T12836] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1106.694388][T12836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1106.701892][ T1148] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 1106.733280][T12836] usb 5-1: 0:2 : does not exist
[ 1106.922691][ T1148] usb 1-1: Using ep0 maxpacket: 32
[ 1106.953678][ T1148] usb 1-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1106.985417][ T1148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1107.013524][ T1148] usb 1-1: config 0 descriptor??
[ 1107.065451][ T1148] usb 1-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1107.113795][ T1148] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1107.142483][ T1148] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1107.150993][ T1148] usb 1-1: media controller created
[ 1107.257028][ T1148] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1107.301872][ T1148] usb 1-1: selecting invalid altsetting 1
[ 1107.313297][ T1148] set interface failed
[ 1107.313329][ T1148] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1107.354258][ T1148] error writing reg: 0xff, val: 0x00
[ 1107.463747][ T1148] dvb_usb_mxl111sf 1-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1107.791857][   T54] Bluetooth: hci6: command tx timeout
[ 1107.864473][T10004] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1108.397348][T19327] loop3: detected capacity change from 0 to 40427
[ 1108.412154][T19327] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1108.420234][T19327] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1108.481794][T19327] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1108.606129][T19327] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1108.614477][T19327] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1108.651880][ T5229] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1108.674739][T19327] syz.3.2855: attempt to access beyond end of device
[ 1108.674739][T19327] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[ 1108.725537][   T29] audit: type=1804 audit(2000000304.460:920): pid=19327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2855" name="/root/syzkaller.XZ4C3x/43/bus/bus" dev="loop3" ino=10 res=1 errno=0
[ 1108.751136][   T35] team_slave_1 (unregistering): left promiscuous mode
[ 1108.774955][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1108.830160][ T5240] usb 5-1: USB disconnect, device number 110
[ 1108.836809][ T5229] usb 3-1: device descriptor read/64, error -71
[ 1109.124187][ T5229] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1109.302035][ T5229] usb 3-1: device descriptor read/64, error -71
[ 1109.412592][T19338] loop4: detected capacity change from 0 to 32768
[ 1109.420661][T19338] btrfs: Deprecated parameter 'usebackuproot'
[ 1109.423251][ T5229] usb usb3-port1: attempt power cycle
[ 1109.434996][T19338] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1109.445487][T19338] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2858 (19338)
[ 1109.470744][T19338] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1109.484615][T19338] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[ 1109.493568][T19338] BTRFS info (device loop4): disk space caching is enabled
[ 1109.687252][T19338] BTRFS info (device loop4): rebuilding free space tree
[ 1109.714728][T19338] BTRFS info (device loop4): disabling free space tree
[ 1109.741290][T19338] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1109.751119][T19338] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1109.908265][ T5229] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1109.960335][ T5229] usb 3-1: device descriptor read/8, error -71
[ 1110.030721][T16792] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1110.161176][T19366] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[ 1110.167780][T19366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1110.185598][T19366] vhci_hcd vhci_hcd.0: Device attached
[ 1110.252059][ T5229] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1110.310510][ T5229] usb 3-1: device descriptor read/8, error -71
[ 1110.452158][ T5229] usb usb3-port1: unable to enumerate USB device
[ 1110.461712][ T1148] usb 15-1: new low-speed USB device number 24 using vhci_hcd
[ 1110.496678][T19367] vhci_hcd: connection closed
[ 1110.499789][   T11] vhci_hcd: stop threads
[ 1110.524255][   T11] vhci_hcd: release socket
[ 1110.541333][    T9] usb 1-1: USB disconnect, device number 120
[ 1110.552330][   T11] vhci_hcd: disconnect device
[ 1111.027473][T19219] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1111.066380][T19219] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1111.114586][T19219] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1111.136776][T19219] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1111.261845][T19380] loop3: detected capacity change from 0 to 1024
[ 1111.306658][T19380] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1111.361800][T19380] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2861: Invalid block bitmap block 0 in block_group 0
[ 1111.418353][T19380] Quota error (device loop3): write_blk: dquota write failed
[ 1111.542854][T19380] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1111.592081][T19380] EXT4-fs error (device loop3): ext4_acquire_dquot:6858: comm syz.3.2861: Failed to acquire dquot type 0
[ 1111.640448][T19380] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.2861: Freeing blocks not in datazone - block = 0, count = 4096
[ 1111.686645][T19380] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.2861: Invalid inode bitmap blk 0 in block_group 0
[ 1111.716762][   T35] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8
[ 1111.738093][   T35] EXT4-fs error (device loop3): ext4_release_dquot:6881: comm kworker/u8:2: Failed to release dquot type 0
[ 1111.781917][T19219] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1111.789135][T19380] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[ 1111.813765][T19380] EXT4-fs (loop3): 1 orphan inode deleted
[ 1111.820981][T19380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1111.902052][T19393] netlink: 'syz.4.2865': attribute type 10 has an invalid length.
[ 1111.960811][T19393] bridge0: port 3(team0) entered disabled state
[ 1111.978390][T19393] team0: left allmulticast mode
[ 1111.987826][T19393] team_slave_0: left allmulticast mode
[ 1111.989251][   T54] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 1111.993534][T19393] team_slave_1: left allmulticast mode
[ 1111.993565][T19393] team0: left promiscuous mode
[ 1111.993584][T19393] team_slave_0: left promiscuous mode
[ 1111.994210][T19393] team_slave_1: left promiscuous mode
[ 1112.072081][T19393] bridge0: port 3(team0) entered disabled state
[ 1112.092241][T19393] batman_adv: batadv0: Adding interface: team0
[ 1112.098564][T19393] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1112.149387][T19393] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 1112.169330][   T54] Bluetooth: hci1: SCO packet for unknown connection handle 201
[ 1112.181903][T19397] netlink: 'syz.4.2865': attribute type 10 has an invalid length.
[ 1112.191956][ T5240] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1112.219519][T19397] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2865'.
[ 1112.241894][T19397] team0: entered promiscuous mode
[ 1112.247110][T19397] team_slave_0: entered promiscuous mode
[ 1112.272295][T19397] team_slave_1: entered promiscuous mode
[ 1112.286275][T19397] 8021q: adding VLAN 0 to HW filter on device team0
[ 1112.302100][T19397] batman_adv: batadv0: Interface activated: team0
[ 1112.308674][T19397] batman_adv: batadv0: Interface deactivated: team0
[ 1112.341670][T19397] batman_adv: batadv0: Removing interface: team0
[ 1112.362967][T12836] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1112.363382][T19397] bridge0: port 3(team0) entered blocking state
[ 1112.401664][ T5240] usb 4-1: Using ep0 maxpacket: 16
[ 1112.401920][T19397] bridge0: port 3(team0) entered disabled state
[ 1112.409125][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1112.433309][ T5240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1112.450169][ T5240] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1112.466732][ T5240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.475382][T19397] team0: entered allmulticast mode
[ 1112.488126][ T5240] usb 4-1: config 0 descriptor??
[ 1112.503523][T19397] team_slave_0: entered allmulticast mode
[ 1112.509326][T19397] team_slave_1: entered allmulticast mode
[ 1112.539415][T19397] bridge0: port 3(team0) entered blocking state
[ 1112.546004][T19397] bridge0: port 3(team0) entered forwarding state
[ 1112.581931][T12836] usb 3-1: Using ep0 maxpacket: 32
[ 1112.593075][T19400] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2866'.
[ 1112.603380][T12836] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1112.627375][T12836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1112.639833][T19219] 8021q: adding VLAN 0 to HW filter on device team0
[ 1112.659144][T12836] usb 3-1: config 0 descriptor??
[ 1112.676154][T12836] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1112.680299][T19398] loop0: detected capacity change from 0 to 40427
[ 1112.710091][T12836] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1112.713730][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1112.721535][T12836] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1112.734143][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1112.744615][T12836] usb 3-1: media controller created
[ 1112.751838][T19398] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1112.774144][T19398] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1112.798532][T12836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1112.829073][T19398] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1112.837859][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1112.845078][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1112.853031][T12836] usb 3-1: selecting invalid altsetting 1
[ 1112.860904][T12836] set interface failed
[ 1112.860940][T12836] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1112.894230][T12836] error writing reg: 0xff, val: 0x00
[ 1112.909487][T19378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1112.937225][T19378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1112.994838][   T29] audit: type=1326 audit(2000000308.720:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19407 comm="syz.4.2868" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f150d375b29 code=0x0
[ 1113.017445][T12836] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1113.035659][ T5240] hid (null): unknown global tag 0xd
[ 1113.043382][ T5240] hid (null): report_id 5085 is invalid
[ 1113.052079][T12836] usb 3-1: USB disconnect, device number 127
[ 1113.058028][T19398] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1113.062924][ T5240] hid-generic 0003:0158:0100.0040: unknown main item tag 0x0
[ 1113.070535][T19398] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1113.077946][ T5240] hid-generic 0003:0158:0100.0040: collection stack underflow
[ 1113.093565][ T5240] hid-generic 0003:0158:0100.0040: item 0 2 0 12 parsing failed
[ 1113.121206][ T5240] hid-generic 0003:0158:0100.0040: probe with driver hid-generic failed with error -22
[ 1114.206103][   T29] audit: type=1804 audit(2000000309.940:922): pid=19415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2867" name="/root/syzkaller.KszstQ/155/bus/bus" dev="loop0" ino=10 res=1 errno=0
[ 1114.263156][T19398] syz.0.2867: attempt to access beyond end of device
[ 1114.263156][T19398] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[ 1114.309892][T15046] usb 4-1: USB disconnect, device number 107
[ 1114.506659][T19419] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2869'.
[ 1114.724125][T19219] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1114.883933][T19219] veth0_vlan: entered promiscuous mode
[ 1114.921908][T15046] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1114.941603][T19219] veth1_vlan: entered promiscuous mode
[ 1115.022309][T10780] EXT4-fs error (device loop3): __ext4_get_inode_loc:4357: comm kworker/u8:11: Invalid inode table block 12884901889 in block_group 0
[ 1115.068961][T17722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1115.143105][T15046] usb 5-1: Using ep0 maxpacket: 32
[ 1115.160214][T15046] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1115.183671][T19219] veth0_macvtap: entered promiscuous mode
[ 1115.201724][T15046] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1115.220502][T15046] usb 5-1: config 0 descriptor??
[ 1115.232469][T19219] veth1_macvtap: entered promiscuous mode
[ 1115.260274][T15046] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1115.291637][T15046] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1115.321419][T15046] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1115.334920][T15046] usb 5-1: media controller created
[ 1115.365676][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.386322][T15046] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1115.401685][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.419141][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.442946][T15046] usb 5-1: selecting invalid altsetting 1
[ 1115.448736][T15046] set interface failed
[ 1115.448770][T15046] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1115.461823][T15046] error writing reg: 0xff, val: 0x00
[ 1115.477230][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.492882][T19434] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[ 1115.499514][T19434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1115.531948][T19434] vhci_hcd vhci_hcd.0: Device attached
[ 1115.542150][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.543168][T15046] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1115.576048][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.590768][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.608673][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.618616][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1115.633226][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.659247][ T1148] vhci_hcd: vhci_device speed not set
[ 1115.663934][T19219] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1115.729446][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1115.779462][T15046] usb 5-1: USB disconnect, device number 111
[ 1115.785843][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.811802][T11739] usb 9-1: new low-speed USB device number 19 using vhci_hcd
[ 1115.841897][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1115.861762][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.872594][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1115.891689][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.917549][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1115.930920][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1115.960750][T19219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1115.987825][T19219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1116.010246][T19219] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1116.045514][T19219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.055520][T19219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.076912][T19219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.086000][T19219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1116.153582][T19439] vhci_hcd: connection reset by peer
[ 1116.170094][T10780] vhci_hcd: stop threads
[ 1116.174982][T10780] vhci_hcd: release socket
[ 1116.179625][T10780] vhci_hcd: disconnect device
[ 1116.312476][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1116.334932][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1116.355286][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.362084][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.420424][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1116.449171][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1116.614777][T19453] netlink: 'syz.1.2836': attribute type 10 has an invalid length.
[ 1116.669229][T19453] batman_adv: batadv0: Adding interface: team0
[ 1116.698428][T19453] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1116.736120][T19459] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1116.750907][T19453] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 1116.817686][T19458] netlink: 'syz.1.2836': attribute type 10 has an invalid length.
[ 1117.065544][T19458] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2836'.
[ 1117.543426][T19458] team0: entered promiscuous mode
[ 1117.548550][T19458] team_slave_0: entered promiscuous mode
[ 1117.570687][T19458] team_slave_1: entered promiscuous mode
[ 1117.594423][T19458] 8021q: adding VLAN 0 to HW filter on device team0
[ 1117.719107][T19458] batman_adv: batadv0: Interface activated: team0
[ 1117.737083][T19458] batman_adv: batadv0: Interface deactivated: team0
[ 1117.779767][T19458] batman_adv: batadv0: Removing interface: team0
[ 1117.808239][T19458] bridge0: port 3(team0) entered blocking state
[ 1117.824323][T19458] bridge0: port 3(team0) entered disabled state
[ 1117.850231][T19458] team0: entered allmulticast mode
[ 1117.856668][T19458] team_slave_0: entered allmulticast mode
[ 1117.871843][T19458] team_slave_1: entered allmulticast mode
[ 1117.899404][T19458] bridge0: port 3(team0) entered blocking state
[ 1117.905901][T19458] bridge0: port 3(team0) entered forwarding state
[ 1118.011915][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2879'.
[ 1118.256888][T19478] netlink: 'syz.1.2881': attribute type 10 has an invalid length.
[ 1118.306651][T19478] bridge0: port 3(team0) entered disabled state
[ 1118.337592][T19478] team0: left allmulticast mode
[ 1118.352510][T19478] team_slave_0: left allmulticast mode
[ 1118.359636][T19478] team_slave_1: left allmulticast mode
[ 1118.365721][T19478] team0: left promiscuous mode
[ 1118.370611][T19478] team_slave_0: left promiscuous mode
[ 1118.378074][T19478] team_slave_1: left promiscuous mode
[ 1118.390977][T19478] bridge0: port 3(team0) entered disabled state
[ 1118.443591][T19478] batman_adv: batadv0: Adding interface: team0
[ 1118.461211][T19478] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1118.495280][T19478] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 1118.540561][T19482] netlink: 'syz.1.2881': attribute type 10 has an invalid length.
[ 1118.548646][T19482] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2881'.
[ 1118.566637][T19482] team0: entered promiscuous mode
[ 1118.572973][   T54] Bluetooth: hci1: ACL packet for unknown connection handle 201
[ 1118.596138][T19482] team_slave_0: entered promiscuous mode
[ 1118.602601][T19482] team_slave_1: entered promiscuous mode
[ 1118.610657][T19482] 8021q: adding VLAN 0 to HW filter on device team0
[ 1118.618092][T19482] batman_adv: batadv0: Interface activated: team0
[ 1118.627538][T19482] batman_adv: batadv0: Interface deactivated: team0
[ 1118.635800][T19482] batman_adv: batadv0: Removing interface: team0
[ 1118.655352][   T54] Bluetooth: hci1: SCO packet for unknown connection handle 201
[ 1118.661008][T19482] bridge0: port 3(team0) entered blocking state
[ 1118.737396][T19482] bridge0: port 3(team0) entered disabled state
[ 1118.791259][T19482] team0: entered allmulticast mode
[ 1118.810182][T19482] team_slave_0: entered allmulticast mode
[ 1118.834824][T19482] team_slave_1: entered allmulticast mode
[ 1118.854638][T19482] bridge0: port 3(team0) entered blocking state
[ 1118.861051][T19482] bridge0: port 3(team0) entered forwarding state
[ 1119.586342][T19484] netlink: 'syz.4.2883': attribute type 10 has an invalid length.
[ 1120.060432][T19484] bridge0: port 3(team0) entered disabled state
[ 1120.096096][T19484] team0: left allmulticast mode
[ 1120.109567][T19484] team_slave_0: left allmulticast mode
[ 1120.120045][T19484] team_slave_1: left allmulticast mode
[ 1120.130268][T19484] team0: left promiscuous mode
[ 1120.152244][T19484] team_slave_0: left promiscuous mode
[ 1120.173836][T19484] team_slave_1: left promiscuous mode
[ 1120.192336][T19484] bridge0: port 3(team0) entered disabled state
[ 1120.244790][T19484] batman_adv: batadv0: Adding interface: team0
[ 1120.251064][T19484] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1120.312315][T19484] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[ 1120.340503][T19486] netlink: 'syz.4.2883': attribute type 10 has an invalid length.
[ 1120.361662][T19486] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2883'.
[ 1120.398838][T19486] team0: entered promiscuous mode
[ 1120.411812][T19486] team_slave_0: entered promiscuous mode
[ 1120.417814][T19486] team_slave_1: entered promiscuous mode
[ 1120.443701][T19486] 8021q: adding VLAN 0 to HW filter on device team0
[ 1120.450702][T19486] batman_adv: batadv0: Interface activated: team0
[ 1120.471875][T19486] batman_adv: batadv0: Interface deactivated: team0
[ 1120.478582][T19486] batman_adv: batadv0: Removing interface: team0
[ 1120.502742][T19486] bridge0: port 3(team0) entered blocking state
[ 1120.509164][T19486] bridge0: port 3(team0) entered disabled state
[ 1120.531916][T19486] team0: entered allmulticast mode
[ 1120.537214][T19486] team_slave_0: entered allmulticast mode
[ 1120.551662][T19486] team_slave_1: entered allmulticast mode
[ 1120.559962][T19486] bridge0: port 3(team0) entered blocking state
[ 1120.566444][T19486] bridge0: port 3(team0) entered forwarding state
[ 1120.567028][   T25] usb 1-1: new full-speed USB device number 121 using dummy_hcd
[ 1120.803212][   T25] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1120.825149][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1120.846562][   T25] usb 1-1: config 0 descriptor??
[ 1121.001721][T11739] vhci_hcd: vhci_device speed not set
[ 1121.017719][T19499] loop3: detected capacity change from 0 to 32768
[ 1121.051491][T19499] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2885 (19499)
[ 1121.098189][T19499] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1121.117056][T19499] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1121.128507][T19499] BTRFS info (device loop3): using free-space-tree
[ 1121.264352][T19532] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[ 1121.270928][T19532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1121.320613][T19532] vhci_hcd vhci_hcd.0: Device attached
[ 1121.571914][    T9] usb 17-1: new low-speed USB device number 21 using vhci_hcd
[ 1121.670314][T19533] vhci_hcd: connection reset by peer
[ 1121.687195][   T35] vhci_hcd: stop threads
[ 1121.715029][   T35] vhci_hcd: release socket
[ 1121.725902][   T35] vhci_hcd: disconnect device
[ 1121.844974][T17722] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1122.744215][   T25] pegasus 1-1:0.0: can't reset MAC
[ 1123.366200][   T25] pegasus 1-1:0.0: probe with driver pegasus failed with error -5
[ 1123.525190][   T25] usb 1-1: USB disconnect, device number 121
[ 1123.963390][T19564] loop3: detected capacity change from 0 to 1024
[ 1124.000128][T19564] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1124.116425][T19564] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2896: Invalid block bitmap block 0 in block_group 0
[ 1124.172091][T19564] Quota error (device loop3): write_blk: dquota write failed
[ 1124.216880][T19564] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 1124.275284][T19564] EXT4-fs error (device loop3): ext4_acquire_dquot:6858: comm syz.3.2896: Failed to acquire dquot type 0
[ 1124.313665][T19564] EXT4-fs error (device loop3): ext4_free_blocks:6590: comm syz.3.2896: Freeing blocks not in datazone - block = 0, count = 4096
[ 1124.361209][T19564] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.2896: Invalid inode bitmap blk 0 in block_group 0
[ 1124.397818][T19564] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[ 1124.403435][  T139] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8
[ 1124.430949][T19564] EXT4-fs (loop3): 1 orphan inode deleted
[ 1124.452840][T19564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1124.467249][  T139] EXT4-fs error (device loop3): ext4_release_dquot:6881: comm kworker/u8:5: Failed to release dquot type 0
[ 1124.693224][T11378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1124.709724][T11378] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1124.720266][T11378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1124.731270][T11378] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1124.739442][T11378] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1124.746991][T11378] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1124.808955][   T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.052154][T11739] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1125.369005][T11739] usb 4-1: Using ep0 maxpacket: 16
[ 1125.584348][T11739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1125.666291][   T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1125.687175][T11739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1125.770040][T11739] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1125.824906][T19584] netlink: 'syz.0.2899': attribute type 10 has an invalid length.
[ 1125.834796][T11739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1125.862795][T11739] usb 4-1: config 0 descriptor??
[ 1125.979581][   T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.062184][T19588] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2901'.
[ 1126.151724][T12836] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 1126.182891][   T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1126.232261][ T5240] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1126.312705][T19560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1126.337552][T19560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1126.345779][T12836] usb 1-1: Using ep0 maxpacket: 16
[ 1126.357547][T12836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[ 1126.371099][T12836] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1126.380801][T12836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.400927][T11739] hid (null): unknown global tag 0xd
[ 1126.402760][T12836] usb 1-1: config 0 descriptor??
[ 1126.421693][ T5240] usb 5-1: Using ep0 maxpacket: 32
[ 1126.434892][ T5240] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1126.441690][T11739] hid (null): report_id 5085 is invalid
[ 1126.444684][ T5240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.483549][ T5240] usb 5-1: config 0 descriptor??
[ 1126.488434][T11739] hid-generic 0003:0158:0100.0041: unknown main item tag 0x0
[ 1126.501247][ T5240] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1126.531992][T11739] hid-generic 0003:0158:0100.0041: collection stack underflow
[ 1126.532646][ T5240] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1126.557205][T11739] hid-generic 0003:0158:0100.0041: item 0 2 0 12 parsing failed
[ 1126.566096][T11739] hid-generic 0003:0158:0100.0041: probe with driver hid-generic failed with error -22
[ 1126.591487][ T5240] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1126.661788][ T5240] usb 5-1: media controller created
[ 1126.682295][    T9] vhci_hcd: vhci_device speed not set
[ 1126.689153][   T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1126.717746][   T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1126.729739][   T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1126.743102][   T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1126.754465][   T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1126.762138][   T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1126.834742][T19584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1126.847199][T11378] Bluetooth: hci2: command tx timeout
[ 1126.887069][T19584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1126.896072][ T5240] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1126.962016][ T5240] usb 5-1: selecting invalid altsetting 1
[ 1126.976000][T12836] hid (null): unknown global tag 0x83
[ 1126.992140][ T5240] set interface failed
[ 1126.992180][ T5240] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1127.003151][T12836] hid (null): unknown global tag 0xc
[ 1127.008538][T12836] hid (null): global environment stack underflow
[ 1127.015452][ T5240] error writing reg: 0xff, val: 0x00
[ 1127.029021][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x1
[ 1127.055442][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.087512][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.107867][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.112029][T11739] usb 4-1: USB disconnect, device number 108
[ 1127.117717][ T5240] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1127.153135][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.160596][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.196651][ T5240] usb 5-1: USB disconnect, device number 112
[ 1127.227697][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.242168][   T35] team0: left allmulticast mode
[ 1127.247191][   T35] team_slave_0: left allmulticast mode
[ 1127.261012][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.285933][   T35] team_slave_1: left allmulticast mode
[ 1127.302389][   T35] bridge0: port 3(team0) entered disabled state
[ 1127.309426][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x4
[ 1127.327064][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.329056][   T35] bridge_slave_1: left allmulticast mode
[ 1127.343402][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.350839][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.360592][   T35] bridge_slave_1: left promiscuous mode
[ 1127.366333][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.375432][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1127.383266][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.414875][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.426102][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.436298][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.443848][T12836] hid-generic 0003:0158:0100.0042: unknown main item tag 0x0
[ 1127.453002][   T35] bridge_slave_0: left allmulticast mode
[ 1127.458699][   T35] bridge_slave_0: left promiscuous mode
[ 1127.464707][T12836] hid-generic 0003:0158:0100.0042: unexpected long global item
[ 1127.480704][T12836] hid-generic 0003:0158:0100.0042: probe with driver hid-generic failed with error -22
[ 1127.491080][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1127.504599][T12836] usb 1-1: USB disconnect, device number 122
[ 1127.937942][  T139] EXT4-fs error (device loop3): __ext4_get_inode_loc:4357: comm kworker/u8:5: Invalid inode table block 12884901889 in block_group 0
[ 1128.003551][T17722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1128.431748][T11739] usb 4-1: new full-speed USB device number 109 using dummy_hcd
[ 1128.664001][T11739] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1128.673640][T11739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.686946][T11739] usb 4-1: config 0 descriptor??
[ 1128.797013][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1128.819934][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1128.837507][   T35] bond0 (unregistering): Released all slaves
[ 1128.870205][T11378] Bluetooth: hci6: command tx timeout
[ 1128.883025][T19575] chnl_net:caif_netlink_parms(): no params data found
[ 1128.921977][T11378] Bluetooth: hci2: command tx timeout
[ 1130.135793][   T35] hsr_slave_0: left promiscuous mode
[ 1130.160820][   T35] hsr_slave_1: left promiscuous mode
[ 1130.182382][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1130.189861][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1130.232695][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1130.240226][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1130.337636][   T35] veth1_macvtap: left promiscuous mode
[ 1130.361841][   T35] veth0_macvtap: left promiscuous mode
[ 1130.380873][   T35] veth1_vlan: left promiscuous mode
[ 1130.391930][   T35] veth0_vlan: left promiscuous mode
[ 1130.490414][T11739] pegasus 4-1:0.0: can't reset MAC
[ 1130.503991][T11739] pegasus 4-1:0.0: probe with driver pegasus failed with error -5
[ 1130.534671][T11739] usb 4-1: USB disconnect, device number 109
[ 1130.711411][T19613] loop4: detected capacity change from 0 to 32768
[ 1130.737617][T19613] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2909 (19613)
[ 1130.761605][T19613] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1130.777565][T19613] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[ 1130.821757][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1130.838339][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1130.853231][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1130.881195][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1130.914437][ T5108] Bluetooth: hci6: command tx timeout
[ 1130.922789][   T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1130.932195][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1130.983525][T19613] BTRFS info (device loop4): rebuilding free space tree
[ 1130.992133][   T54] Bluetooth: hci2: command tx timeout
[ 1131.007760][T19613] BTRFS info (device loop4): disabling free space tree
[ 1131.040448][T19613] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1131.050550][T19613] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1131.153349][   T29] audit: type=1800 audit(2000000326.880:923): pid=19613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2909" name="bus" dev="loop4" ino=263 res=0 errno=0
[ 1131.174273][   T29] audit: type=1800 audit(2000000326.880:924): pid=19613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2909" name="bus" dev="loop4" ino=263 res=0 errno=0
[ 1131.918770][   T35] team_slave_1 (unregistering): left promiscuous mode
[ 1131.981277][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1132.081932][   T35] team_slave_0 (unregistering): left promiscuous mode
[ 1132.093310][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1132.992073][T11378] Bluetooth: hci0: command tx timeout
[ 1132.998272][   T54] Bluetooth: hci6: command tx timeout
[ 1133.029859][T19575] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1133.045433][T19575] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.061983][T19575] bridge_slave_0: entered allmulticast mode
[ 1133.071944][T11378] Bluetooth: hci2: command tx timeout
[ 1133.091470][T19575] bridge_slave_0: entered promiscuous mode
[ 1133.217394][T19575] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1133.272325][T19575] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1133.322980][T19575] bridge_slave_1: entered allmulticast mode
[ 1133.340244][T19575] bridge_slave_1: entered promiscuous mode
[ 1133.566741][T19575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1133.586120][T16792] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1133.624107][T19575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1133.989868][T19575] team0: Port device team_slave_0 added
[ 1134.095548][T19575] team0: Port device team_slave_1 added
[ 1134.281394][T19643] loop3: detected capacity change from 0 to 32768
[ 1134.290704][T19643] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2912 (19643)
[ 1134.307360][T19643] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1134.318154][T19643] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1134.327215][T19643] BTRFS info (device loop3): using free-space-tree
[ 1134.327607][T19647] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2913'.
[ 1134.345155][T19575] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1134.353454][T19575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1134.385374][T19575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1134.401315][T19575] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1134.408707][T19575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1134.435304][T19575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1134.541707][    T9] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1134.670536][T19575] hsr_slave_0: entered promiscuous mode
[ 1134.679234][T19575] hsr_slave_1: entered promiscuous mode
[ 1134.695872][T19575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1134.715064][T19575] Cannot create hsr debugfs directory
[ 1134.727022][T19592] chnl_net:caif_netlink_parms(): no params data found
[ 1134.743652][    T9] usb 5-1: Using ep0 maxpacket: 32
[ 1134.764563][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1134.786595][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1134.819314][    T9] usb 5-1: config 0 descriptor??
[ 1134.852518][T17722] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1134.868351][    T9] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1134.883756][    T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1134.903847][    T9] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1134.912851][    T9] usb 5-1: media controller created
[ 1134.957389][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1134.993133][    T9] usb 5-1: selecting invalid altsetting 1
[ 1134.999030][    T9] set interface failed
[ 1134.999063][    T9] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1135.014618][    T9] error writing reg: 0xff, val: 0x00
[ 1135.050145][    T9] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1135.079415][T11378] Bluetooth: hci0: command tx timeout
[ 1135.085552][   T54] Bluetooth: hci6: command tx timeout
[ 1135.460751][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.527851][T19614] chnl_net:caif_netlink_parms(): no params data found
[ 1135.579755][T19592] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1135.610951][    T9] usb 5-1: USB disconnect, device number 113
[ 1135.617389][T19592] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1135.632248][T19592] bridge_slave_0: entered allmulticast mode
[ 1135.640718][T19592] bridge_slave_0: entered promiscuous mode
[ 1135.660410][T19592] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1135.680640][T19592] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1135.697597][T19592] bridge_slave_1: entered allmulticast mode
[ 1135.707264][T19592] bridge_slave_1: entered promiscuous mode
[ 1135.766216][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.911243][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1135.941984][ T5229] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1135.975196][T19592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1135.989043][T19592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1136.023100][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.132322][ T5229] usb 4-1: Using ep0 maxpacket: 32
[ 1136.155577][ T5229] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1136.167753][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1136.180511][ T5229] usb 4-1: config 0 descriptor??
[ 1136.209212][ T5229] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1136.228815][ T5229] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1136.242358][ T5229] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1136.250802][T19614] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1136.259513][T19614] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1136.267378][ T5229] usb 4-1: media controller created
[ 1136.284370][T19614] bridge_slave_0: entered allmulticast mode
[ 1136.294044][T19614] bridge_slave_0: entered promiscuous mode
[ 1136.305733][T19681] vcan0: tx drop: invalid da for name 0x0000000000000003
[ 1136.313087][ T5229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1136.338008][T19592] team0: Port device team_slave_0 added
[ 1136.362987][ T5229] usb 4-1: selecting invalid altsetting 1
[ 1136.372186][ T5229] set interface failed
[ 1136.372222][ T5229] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1136.379859][T19592] team0: Port device team_slave_1 added
[ 1136.383066][ T5229] error writing reg: 0xff, val: 0x00
[ 1136.414633][T19614] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1136.431467][T19614] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1136.450510][T19614] bridge_slave_1: entered allmulticast mode
[ 1136.482398][T19614] bridge_slave_1: entered promiscuous mode
[ 1136.488994][ T5229] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1136.517416][ T5229] usb 4-1: USB disconnect, device number 110
[ 1136.567120][T19684] loop4: detected capacity change from 0 to 8
[ 1136.803241][T19592] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1136.811791][T19592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1136.839234][T19592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1136.904379][T19614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1136.925674][T19614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1136.936175][T19592] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1136.943499][T19592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1136.996618][T19592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1137.151882][T11378] Bluetooth: hci0: command tx timeout
[ 1137.290292][T19614] team0: Port device team_slave_0 added
[ 1137.323534][T19614] team0: Port device team_slave_1 added
[ 1137.456798][   T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1137.571461][T19688] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535)
[ 1137.806995][T19592] hsr_slave_0: entered promiscuous mode
[ 1137.838683][T19592] hsr_slave_1: entered promiscuous mode
[ 1137.864520][T19592] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1137.917574][T19592] Cannot create hsr debugfs directory
[ 1137.983991][   T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1138.136375][T19614] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1138.152781][T19614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1138.180639][T19614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1138.203621][T19614] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1138.215805][T19614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1138.256770][T19614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1138.345536][   T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1138.569617][   T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1138.597795][T19575] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1138.735423][T19575] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1138.759818][T19575] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1138.849687][T19575] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1138.914301][T11378] Bluetooth: hci5: command 0x0406 tx timeout
[ 1138.949300][T19693] loop3: detected capacity change from 0 to 32768
[ 1138.958693][T19693] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2920 (19693)
[ 1138.980290][T19614] hsr_slave_0: entered promiscuous mode
[ 1138.988817][T19614] hsr_slave_1: entered promiscuous mode
[ 1138.996288][T19614] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1139.005220][T19693] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1139.014439][T19614] Cannot create hsr debugfs directory
[ 1139.022215][T19693] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1139.048541][T19693] BTRFS info (device loop3): using free-space-tree
[ 1139.231965][   T54] Bluetooth: hci0: command tx timeout
[ 1139.380322][T19695] loop4: detected capacity change from 0 to 32768
[ 1139.409623][T19695] BTRFS: device /dev/loop4 (7:4) using temp-fsid 0cbd7d6a-20d4-4c0e-842b-6c21c509b4db
[ 1139.443433][T19695] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2921 (19695)
[ 1139.491388][T19695] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1139.511169][T19695] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[ 1139.527438][T19695] BTRFS info (device loop4): using free-space-tree
[ 1139.622227][   T35] team0: left allmulticast mode
[ 1139.627150][   T35] team_slave_1: left allmulticast mode
[ 1139.645703][   T35] bridge0: port 3(team0) entered disabled state
[ 1139.658854][   T35] bridge_slave_1: left allmulticast mode
[ 1139.664696][   T35] bridge_slave_1: left promiscuous mode
[ 1139.670439][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1139.693075][   T35] bridge_slave_0: left allmulticast mode
[ 1139.698873][   T35] bridge_slave_0: left promiscuous mode
[ 1139.723027][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1139.755046][   T35] team0: left allmulticast mode
[ 1139.778135][   T35] team_slave_1: left allmulticast mode
[ 1139.788645][   T35] bridge0: port 3(team0) entered disabled state
[ 1139.809462][   T35] bridge_slave_1: left allmulticast mode
[ 1139.816429][   T35] bridge_slave_1: left promiscuous mode
[ 1139.825610][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1139.849763][   T35] bridge_slave_0: left allmulticast mode
[ 1139.858345][T17722] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1139.873735][   T35] bridge_slave_0: left promiscuous mode
[ 1139.882678][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1140.234297][T16792] BTRFS info (device loop4): last unmount of filesystem 0cbd7d6a-20d4-4c0e-842b-6c21c509b4db
[ 1140.386245][T19733] vcan0: tx drop: invalid da for name 0x0000000000000003
[ 1140.750867][   T54] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 1141.141668][ T5229] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1141.371316][ T5229] usb 5-1: Using ep0 maxpacket: 8
[ 1141.383740][ T5229] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1141.395976][ T5229] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[ 1141.405278][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.577528][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1141.586695][   T35] bond_slave_0: left promiscuous mode
[ 1141.595653][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1141.609978][   T35] bond_slave_1: left promiscuous mode
[ 1141.618735][   T35] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[ 1141.629592][   T35] macvlan2: left promiscuous mode
[ 1141.640627][   T35] mac80211_hwsim hwsim30 wlan0: left allmulticast mode
[ 1141.649505][   T35] mac80211_hwsim hwsim30 wlan0: left promiscuous mode
[ 1141.661379][   T35] bond0 (unregistering): Released all slaves
[ 1141.858012][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1141.879572][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1141.897512][   T35] bond0 (unregistering): Released all slaves
[ 1141.956740][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2925'.
[ 1141.998020][T19743] netlink: 'syz.4.2923': attribute type 4 has an invalid length.
[ 1142.049820][ T5229] usb 5-1: string descriptor 0 read error: -71
[ 1142.068552][ T5229] hub 5-1:32.0: bad descriptor, ignoring hub
[ 1142.092309][ T5229] hub 5-1:32.0: probe with driver hub failed with error -5
[ 1142.174752][ T5229] usb 5-1: USB disconnect, device number 114
[ 1142.452791][T19746] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535)
[ 1142.832127][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[ 1143.094549][T19750] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 1143.101165][T19750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1143.119741][   T35] hsr_slave_0: left promiscuous mode
[ 1143.128145][T19750] vhci_hcd vhci_hcd.0: Device attached
[ 1143.149131][   T35] hsr_slave_1: left promiscuous mode
[ 1143.159130][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1143.178707][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1143.202211][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1143.220043][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1143.247384][   T35] hsr_slave_0: left promiscuous mode
[ 1143.260773][   T35] hsr_slave_1: left promiscuous mode
[ 1143.268436][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1143.278747][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1143.297143][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1143.315184][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1143.348337][   T54] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 1143.381986][ T5240] usb 17-1: new low-speed USB device number 22 using vhci_hcd
[ 1143.418297][   T35] veth0_macvtap: left promiscuous mode
[ 1143.426620][   T35] veth1_vlan: left promiscuous mode
[ 1143.440129][   T35] veth0_vlan: left promiscuous mode
[ 1143.457896][   T35] veth0_macvtap: left promiscuous mode
[ 1143.473215][   T35] veth1_vlan: left promiscuous mode
[ 1143.494536][   T35] veth0_vlan: left promiscuous mode
[ 1143.722710][    T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1143.782039][T19751] vhci_hcd: connection reset by peer
[ 1143.787726][T10780] vhci_hcd: stop threads
[ 1143.796536][T10780] vhci_hcd: release socket
[ 1143.805949][T10780] vhci_hcd: disconnect device
[ 1143.963909][    T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1143.995533][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1144.044826][    T9] usb 4-1: config 0 descriptor??
[ 1144.064090][    T9] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1144.396054][T19758] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2929'.
[ 1144.742236][ T1148] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1144.922946][   T35] team_slave_1 (unregistering): left promiscuous mode
[ 1144.938071][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1144.947009][ T1148] usb 5-1: Using ep0 maxpacket: 32
[ 1144.956981][ T1148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[ 1144.970074][ T1148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[ 1144.983632][ T1148] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1144.995565][ T1148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1145.021302][ T1148] usb 5-1: config 0 descriptor??
[ 1145.029635][ T1148] hub 5-1:0.0: USB hub found
[ 1145.122042][T19760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1145.131466][T19760] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1145.151904][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[ 1145.254354][ T1148] hub 5-1:0.0: 1 port detected
[ 1145.271919][    T9] gspca_sonixj: reg_r err -110
[ 1145.277066][    T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[ 1145.497155][   T29] audit: type=1800 audit(2000000341.220:925): pid=19759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2929" name="bus" dev="sda1" ino=2094 res=0 errno=0
[ 1146.292485][ T1148] hub 5-1:0.0: hub_hub_status failed (err = -32)
[ 1146.299083][ T1148] hub 5-1:0.0: config failed, can't get hub status (err -32)
[ 1146.331291][ T1148] usbhid 5-1:0.0: can't add hid device: -32
[ 1146.345249][ T1148] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[ 1146.561134][   T35] team_slave_1 (unregistering): left promiscuous mode
[ 1146.574413][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1147.486328][T11739] usb 4-1: USB disconnect, device number 111
[ 1147.532502][ T1148] usb 5-1: USB disconnect, device number 115
[ 1147.554590][T19575] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1147.764173][T19769] vcan0: tx drop: invalid da for name 0x0000000000000003
[ 1147.958095][T19575] 8021q: adding VLAN 0 to HW filter on device team0
[ 1147.994537][T19614] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1148.033865][T19614] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1148.088538][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1148.095783][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1148.182451][T19614] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1148.231637][T19614] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1148.302351][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1148.309521][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1148.522154][ T5240] vhci_hcd: vhci_device speed not set
[ 1148.736605][T19592] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1148.802450][T19592] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1148.889973][T19592] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1148.930379][T19592] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1149.161860][ T4870] usb 5-1: new full-speed USB device number 116 using dummy_hcd
[ 1149.204526][T19782] xt_recent: hitcount (4294967040) is larger than allowed maximum (65535)
[ 1149.224343][T19614] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1149.325313][T19614] 8021q: adding VLAN 0 to HW filter on device team0
[ 1149.380339][ T4870] usb 5-1: not running at top speed; connect to a high speed hub
[ 1149.399713][ T4870] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1149.419290][ T4870] usb 5-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1149.433636][ T4870] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1149.443319][T12836] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1149.450681][T12836] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1149.478498][ T4870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1149.489384][ T4870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1149.497891][ T4870] usb 5-1: Product: ࠬ
[ 1149.507555][ T4870] usb 5-1: Manufacturer: 倊
[ 1149.513573][ T4870] usb 5-1: SerialNumber: п
[ 1149.526036][T19776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1149.527549][T19575] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1149.546879][T12836] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1149.554261][T12836] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1149.656260][T19592] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1149.752626][T19776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1149.767941][T19776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1149.794435][T19776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1149.808059][T19776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1149.860180][T19776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1149.869894][T19776] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1149.873026][T19592] 8021q: adding VLAN 0 to HW filter on device team0
[ 1149.918458][ T4870] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 1149.947898][ T4870] usb 5-1: USB disconnect, device number 116
[ 1149.997044][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1150.004356][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1150.019217][T19575] veth0_vlan: entered promiscuous mode
[ 1150.039703][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1150.046947][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1150.056591][   T54] Bluetooth: hci5: ACL packet for unknown connection handle 200
[ 1150.114514][T19575] veth1_vlan: entered promiscuous mode
[ 1150.375264][T19575] veth0_macvtap: entered promiscuous mode
[ 1150.401727][T12836] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1150.477008][T19575] veth1_macvtap: entered promiscuous mode
[ 1150.594937][T12836] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[ 1150.597611][T19614] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1150.604217][T12836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.623618][T12836] usb 4-1: config 0 descriptor??
[ 1150.635736][T12836] gspca_main: sonixj-2.14.0 probing 0c45:614a
[ 1150.773060][T19575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1150.799602][T19575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1150.809710][T19575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1150.821801][T19575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1150.832430][T19575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1150.844247][T19575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1150.856987][T19575] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1150.914023][T19575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1150.924708][T19575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1150.934794][T19575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1150.947139][T19575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1150.957179][T19575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1150.969383][T19575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1150.983077][T19575] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1151.031330][T19575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1151.040658][T19575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1151.057149][T19575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1151.067035][T19575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1151.107279][T19592] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1151.262832][T19614] veth0_vlan: entered promiscuous mode
[ 1151.298089][T19580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1151.309372][ T5175] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1151.310516][T19580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1151.337724][T19614] veth1_vlan: entered promiscuous mode
[ 1151.415113][T19592] veth0_vlan: entered promiscuous mode
[ 1151.415182][T19580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1151.429653][T19580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1151.485698][T19592] veth1_vlan: entered promiscuous mode
[ 1151.502140][ T5175] usb 5-1: Using ep0 maxpacket: 16
[ 1151.518454][ T5175] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1151.568306][ T5175] usb 5-1: New USB device found, idVendor=1f4d, idProduct=3100, bcdDevice=90.a2
[ 1151.580769][T19614] veth0_macvtap: entered promiscuous mode
[ 1151.580839][T19789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1151.606683][ T5175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1151.618747][T19789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1151.639320][ T5175] usb 5-1: Product: syz
[ 1151.649135][ T5175] usb 5-1: Manufacturer: syz
[ 1151.671319][ T5175] usb 5-1: SerialNumber: syz
[ 1151.684337][ T5175] usb 5-1: config 0 descriptor??
[ 1151.693818][ T5175] dvb-usb: found a 'X3M TV SPC1400HD PCI' in warm state.
[ 1151.703047][ T5175] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1151.712064][ T5175] dvb-usb: bulk message failed: -22 (2/0)
[ 1151.730131][T19614] veth1_macvtap: entered promiscuous mode
[ 1151.732674][ T5175] dvb-usb: X3M TV SPC1400HD PCI error while loading driver (-22)
[ 1151.749586][T19805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2894'.
[ 1151.751498][T12836] gspca_sonixj: reg_r err -71
[ 1151.765800][T12836] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[ 1151.777059][T12836] usb 4-1: USB disconnect, device number 112
[ 1151.827418][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1151.839590][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1151.850668][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1151.863932][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1151.874668][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1151.885633][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1151.897033][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1151.919195][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1151.941424][T19614] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1151.962388][T19592] veth0_macvtap: entered promiscuous mode
[ 1151.981346][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1151.987803][T11739] usb 5-1: USB disconnect, device number 117
[ 1152.014712][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.027894][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.040471][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.056077][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.067550][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.081642][T19614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.096721][T19614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.120982][T19614] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1152.142944][T19592] veth1_macvtap: entered promiscuous mode
[ 1152.157283][T19614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.167125][T19614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.176897][T19614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.186763][T19614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.246207][T19592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.258675][T19592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.277707][T19592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.289559][T19592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.299719][T19592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.310407][T19592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.321350][T19592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.332794][T19592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.342691][T19592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1152.353753][T19592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.365843][T19592] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1152.495881][T19592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.520400][T19592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.531055][T19592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.542511][T19592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.553646][T19592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.564248][T19592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.574350][T19592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.587250][T19592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.611708][T19592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1152.626417][T19811] loop1: detected capacity change from 0 to 1024
[ 1152.633117][T19592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1152.660852][T19592] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1152.668878][T19811] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1152.712681][T19811] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2938: Invalid block bitmap block 0 in block_group 0
[ 1152.735930][T19811] Quota error (device loop1): write_blk: dquota write failed
[ 1152.746908][T19811] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[ 1152.760240][T10399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1152.768447][T19811] EXT4-fs error (device loop1): ext4_acquire_dquot:6858: comm syz.1.2938: Failed to acquire dquot type 0
[ 1152.779912][T10399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1152.790368][T19592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.800556][T19811] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.2938: Freeing blocks not in datazone - block = 0, count = 4096
[ 1152.820015][T19592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.830531][T19592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.849662][T19811] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2938: Invalid inode bitmap blk 0 in block_group 0
[ 1152.858761][T19592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1152.864200][T17225] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8
[ 1152.902340][T19811] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[ 1152.919165][T19811] EXT4-fs (loop1): 1 orphan inode deleted
[ 1152.931111][T19811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1152.944678][T17225] EXT4-fs error (device loop1): ext4_release_dquot:6881: comm kworker/u8:1: Failed to release dquot type 0
[ 1153.036714][T17225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1153.046538][T17225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1153.150990][T19820] syz_tun: entered promiscuous mode
[ 1153.190581][T19820] syz_tun: left promiscuous mode
[ 1153.242128][T11739] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1153.331825][ T5175] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1153.435041][T10780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1153.451811][T11739] usb 2-1: Using ep0 maxpacket: 16
[ 1153.469002][T10780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1153.479974][T11739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1153.513558][T11739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1153.529717][T11739] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1153.540099][ T5175] usb 4-1: Using ep0 maxpacket: 32
[ 1153.556142][ T5175] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1153.574632][T11739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1153.586749][ T5175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1153.611993][T11739] usb 2-1: config 0 descriptor??
[ 1153.620404][T17225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1153.628808][ T5175] usb 4-1: config 0 descriptor??
[ 1153.653897][T17225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1153.665376][ T5175] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1153.694988][ T5175] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1153.716282][ T5175] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1153.729348][ T5175] usb 4-1: media controller created
[ 1153.933393][ T5175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1154.048256][T19809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1154.102009][T19809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1154.144993][ T5175] usb 4-1: selecting invalid altsetting 1
[ 1154.150995][T11739] hid (null): report_id 0 is invalid
[ 1154.164229][ T5175] set interface failed
[ 1154.165864][ T5175] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1154.187255][T11739] hid-generic 0003:0158:0100.0043: unknown main item tag 0x0
[ 1154.197531][ T5175] error writing reg: 0xff, val: 0x00
[ 1154.213090][T11739] hid-generic 0003:0158:0100.0043: collection stack underflow
[ 1154.267355][T11739] hid-generic 0003:0158:0100.0043: item 0 2 0 12 parsing failed
[ 1154.296733][T11739] hid-generic 0003:0158:0100.0043: probe with driver hid-generic failed with error -22
[ 1154.321761][ T5175] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1154.385079][ T5175] usb 4-1: USB disconnect, device number 113
[ 1154.455047][   T25] usb 2-1: USB disconnect, device number 119
[ 1154.882658][T19843] 9pnet_fd: Insufficient options for proto=fd
[ 1154.938704][T19834] loop2: detected capacity change from 0 to 32768
[ 1154.967369][T19834] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2900 (19834)
[ 1155.021203][T19834] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1155.035144][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2946'.
[ 1155.048321][T19834] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[ 1155.082167][T19834] BTRFS info (device loop2): using free-space-tree
[ 1155.089345][T10399] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm kworker/u8:6: Invalid inode table block 12884901889 in block_group 0
[ 1155.137111][T19575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1155.487238][T19872] loop1: detected capacity change from 0 to 4096
[ 1155.572675][T19872] NILFS (loop1): invalid segment: Checksum error in segment payload
[ 1155.601756][T19872] NILFS (loop1): trying rollback from an earlier position
[ 1155.671750][T19872] NILFS (loop1): recovery complete
[ 1155.700792][T19875] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1155.891988][   T54] Bluetooth: hci2: SCO packet for unknown connection handle 0
[ 1156.183797][T19592] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1156.432114][ T5147] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1156.637770][ T5147] usb 5-1: Using ep0 maxpacket: 32
[ 1156.665220][ T5147] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[ 1156.675212][   T30] INFO: task syz-executor:16781 blocked for more than 143 seconds.
[ 1156.697297][   T30]       Not tainted 6.10.0-rc5-next-20240627-syzkaller #0
[ 1156.712354][ T5147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1156.741004][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1156.746227][ T5147] usb 5-1: config 0 descriptor??
[ 1156.777631][ T5147] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[ 1156.794022][   T30] task:syz-executor    state:D stack:19600 pid:16781 tgid:16781 ppid:1      flags:0x00004004
[ 1156.815143][ T5147] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1156.824859][   T54] Bluetooth: hci5: unexpected event for opcode 0x2036
[ 1156.828729][   T30] Call Trace:
[ 1156.852251][   T30]  <TASK>
[ 1156.881688][   T30]  __schedule+0x17e8/0x4a20
[ 1156.886081][ T5147] dvbdev: DVB: registering new adapter (HCW 126xxx)
[ 1156.891706][   T30]  ? __pfx___schedule+0x10/0x10
[ 1156.898093][ T5147] usb 5-1: media controller created
[ 1156.914282][   T30]  ? __pfx_lock_release+0x10/0x10
[ 1156.934483][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[ 1156.965380][   T30]  ? schedule+0x90/0x320
[ 1156.994967][   T30]  schedule+0x14b/0x320
[ 1157.006920][   T30]  v9fs_evict_inode+0x171/0x360
[ 1157.021332][   T30]  ? _raw_spin_unlock+0x28/0x50
[ 1157.050731][ T5147] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1157.055318][   T30]  ? __pfx_v9fs_evict_inode+0x10/0x10
[ 1157.121374][ T5147] usb 5-1: selecting invalid altsetting 1
[ 1157.144566][   T30]  ? __pfx_var_wake_function+0x10/0x10
[ 1157.144623][ T5147] set interface failed
[ 1157.144695][   T30]  ? __pfx_wake_bit_function+0x10/0x10
[ 1157.176579][ T5147] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1157.192496][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1157.195060][ T5147] error writing reg: 0xff, val: 0x00
[ 1157.211470][   T30]  ? _raw_spin_unlock+0x28/0x50
[ 1157.258800][   T30]  ? __pfx_v9fs_evict_inode+0x10/0x10
[ 1157.273634][   T30]  evict+0x2a8/0x630
[ 1157.286318][   T30]  __dentry_kill+0x20d/0x630
[ 1157.299177][   T30]  ? dput+0x37/0x2b0
[ 1157.309231][ T5147] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1157.312200][   T30]  dput+0x19f/0x2b0
[ 1157.377709][   T30]  shrink_dcache_for_umount+0xb4/0x180
[ 1157.404217][   T30]  generic_shutdown_super+0x6a/0x2d0
[ 1157.416828][   T30]  kill_anon_super+0x3b/0x70
[ 1157.432134][   T30]  v9fs_kill_super+0x4c/0x90
[ 1157.450574][   T30]  deactivate_locked_super+0xc4/0x130
[ 1157.461670][ T1148] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1157.464792][   T30]  cleanup_mnt+0x41f/0x4b0
[ 1157.475011][T19888] loop0: detected capacity change from 0 to 32768
[ 1157.479676][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[ 1157.523174][   T30]  task_work_run+0x24f/0x310
[ 1157.541774][   T30]  ? __pfx_task_work_run+0x10/0x10
[ 1157.555572][   T30]  ? __x64_sys_umount+0x123/0x170
[ 1157.575810][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[ 1157.585629][   T30]  syscall_exit_to_user_mode+0x168/0x370
[ 1157.617837][   T30]  do_syscall_64+0x100/0x230
[ 1157.640180][   T30]  ? clear_bhb_loop+0x35/0x90
[ 1157.648910][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1157.658699][   T30] RIP: 0033:0x7efd59b76e57
[ 1157.664468][   T30] RSP: 002b:00007ffd2302f778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1157.674763][   T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efd59b76e57
[ 1157.683253][   T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2302f830
[ 1157.697318][   T30] RBP: 00007ffd2302f830 R08: 0000000000000000 R09: 0000000000000000
[ 1157.705864][ T1148] usb 3-1: Using ep0 maxpacket: 32
[ 1157.708103][   T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd230308e0
[ 1157.722783][   T30] R13: 00007efd59be364a R14: 00000000000f4edc R15: 00007ffd23030920
[ 1157.731749][   T30]  </TASK>
[ 1157.736038][ T1148] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 1157.751818][   T30] 
[ 1157.751818][   T30] Showing all locks held in the system:
[ 1157.759574][   T30] 1 lock held by khungtaskd/30:
[ 1157.775874][ T1148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1157.777776][   T25] usb 5-1: USB disconnect, device number 118
[ 1157.790158][   T30]  #0: ffffffff8e3357e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[ 1157.827395][ T1148] usb 3-1: config 0 descriptor??
[ 1157.840040][   T30] 4 locks held by kworker/0:2/1148:
[ 1157.847661][   T30]  #0: ffff88801d2d8548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1157.862053][ T1148] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 1157.868253][   T30]  #1: ffffc90004287d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1157.884975][   T30]  #2: ffff888023923190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150
[ 1157.897844][   T30]  #3: ffff88807d24c190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520
[ 1157.908005][   T30] 2 locks held by kworker/u8:9/2461:
[ 1157.913653][   T30]  #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[ 1157.925761][   T30]  #1: ffffc90008e97d00 ((work_completion)(&wreq->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[ 1157.938144][   T30] 2 locks held by getty/4850:
[ 1157.944661][   T30]  #0: ffff88802b1570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1157.968583][   T30]  #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10
[ 1157.979412][   T30] 2 locks held by kworker/u8:11/10780:
[ 1157.986176][   T30] 1 lock held by syz-executor/16781:
[ 1157.992670][   T30]  #0: ffff88802e9320e0 (&type->s_umount_key#81){+.+.}-{3:3}, at: deactivate_super+0xb5/0xf0
[ 1158.005161][   T30] 1 lock held by syz-executor/19592:
[ 1158.012250][   T30]  #0: ffff8880b943e958 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140
[ 1158.023899][   T30] 
[ 1158.026503][   T30] =============================================
[ 1158.026503][   T30] 
[ 1158.042530][   T30] NMI backtrace for cpu 0
[ 1158.046948][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-next-20240627-syzkaller #0
[ 1158.056994][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1158.067093][   T30] Call Trace:
[ 1158.070395][   T30]  <TASK>
[ 1158.073339][   T30]  dump_stack_lvl+0x241/0x360
[ 1158.078121][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1158.083332][   T30]  ? __pfx__printk+0x10/0x10
[ 1158.087952][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[ 1158.093013][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[ 1158.098065][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1158.103550][   T30]  ? _printk+0xd5/0x120
[ 1158.107729][   T30]  ? __pfx__printk+0x10/0x10
[ 1158.112437][   T30]  ? __wake_up_klogd+0x109/0x140
[ 1158.117407][   T30]  ? __pfx__printk+0x10/0x10
[ 1158.122034][   T30]  ? __rcu_read_unlock+0xa1/0x110
[ 1158.127078][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1158.133081][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[ 1158.139191][   T30]  watchdog+0xfee/0x1030
[ 1158.143542][   T30]  ? watchdog+0x1ea/0x1030
[ 1158.147984][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1158.152685][   T30]  kthread+0x2f0/0x390
[ 1158.156789][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1158.161480][   T30]  ? __pfx_kthread+0x10/0x10
[ 1158.166086][   T30]  ret_from_fork+0x4b/0x80
[ 1158.170520][   T30]  ? __pfx_kthread+0x10/0x10
[ 1158.175133][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1158.179951][   T30]  </TASK>
[ 1158.184695][   T30] Sending NMI from CPU 0 to CPUs 1:
[ 1158.192224][    C1] NMI backtrace for cpu 1
[ 1158.192240][    C1] CPU: 1 UID: 0 PID: 19872 Comm: syz.1.2947 Not tainted 6.10.0-rc5-next-20240627-syzkaller #0
[ 1158.192262][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1158.192274][    C1] RIP: 0010:validate_chain+0x5b1/0x5920
[ 1158.192312][    C1] Code: c1 e8 03 42 0f b6 04 20 84 c0 0f 85 5f 48 00 00 83 3d 1e 4c 3f 0e 00 48 8b 8c 24 c0 00 00 00 0f 84 2e 3f 00 00 b8 01 00 00 00 <48> c7 84 24 00 01 00 00 0e 36 e0 45 49 c7 04 0c 00 00 00 00 49 c7
[ 1158.192328][    C1] RSP: 0018:ffffc90000a18200 EFLAGS: 00000002
[ 1158.192345][    C1] RAX: 0000000000000001 RBX: 0000000000022021 RCX: 1ffff92000143060
[ 1158.192358][    C1] RDX: 0000000000000000 RSI: ffff88801fe48b30 RDI: ffff88801fe48000
[ 1158.192372][    C1] RBP: ffffc90000a18500 R08: ffffffff93007787 R09: 1ffffffff2600ef0
[ 1158.192386][    C1] R10: dffffc0000000000 R11: fffffbfff2600ef1 R12: dffffc0000000000
[ 1158.192400][    C1] R13: ffff88801fe48b50 R14: 2c2a7c82d6aa0517 R15: 0000000000000000
[ 1158.192414][    C1] FS:  00007f49dc91e6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[ 1158.192433][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1158.192447][    C1] CR2: 0000001b2d20eff8 CR3: 000000007bf26000 CR4: 00000000003526f0
[ 1158.192464][    C1] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000
[ 1158.192475][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1158.192487][    C1] Call Trace:
[ 1158.192494][    C1]  <NMI>
[ 1158.192502][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[ 1158.192526][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1158.192551][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1158.192586][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[ 1158.192608][    C1]  ? nmi_handle+0x14f/0x5a0
[ 1158.192625][    C1]  ? nmi_handle+0x2a/0x5a0
[ 1158.192642][    C1]  ? validate_chain+0x5b1/0x5920
[ 1158.192676][    C1]  ? default_do_nmi+0x63/0x160
[ 1158.192702][    C1]  ? exc_nmi+0x123/0x1f0
[ 1158.192726][    C1]  ? end_repeat_nmi+0xf/0x53
[ 1158.192755][    C1]  ? validate_chain+0x5b1/0x5920
[ 1158.192782][    C1]  ? validate_chain+0x5b1/0x5920
[ 1158.192811][    C1]  ? validate_chain+0x5b1/0x5920
[ 1158.192841][    C1]  </NMI>
[ 1158.192848][    C1]  <IRQ>
[ 1158.192861][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1158.192885][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1158.192911][    C1]  ? __pfx_validate_chain+0x10/0x10
[ 1158.192938][    C1]  ? validate_chain+0x11e/0x5920
[ 1158.192969][    C1]  ? 0xffffffffa00038c0
[ 1158.192985][    C1]  ? 0xffffffffa00038c0
[ 1158.192999][    C1]  ? is_bpf_text_address+0x285/0x2a0
[ 1158.193026][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1158.193052][    C1]  ? ipv6_skip_exthdr+0x614/0x710
[ 1158.193070][    C1]  ? unwind_get_return_address+0x91/0xc0
[ 1158.193099][    C1]  ? mark_lock+0x9a/0x360
[ 1158.193130][    C1]  ? mark_lock+0x9a/0x360
[ 1158.193157][    C1]  __lock_acquire+0x1359/0x2000
[ 1158.193189][    C1]  lock_acquire+0x1ed/0x550
[ 1158.193214][    C1]  ? nf_hook+0x9e/0x450
[ 1158.193233][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[ 1158.193260][    C1]  ? __pfx_lock_acquire+0x10/0x10
[ 1158.193284][    C1]  ? ip6t_do_table+0x205/0x18a0
[ 1158.193310][    C1]  ? ip6t_do_table+0x16b3/0x18a0
[ 1158.193337][    C1]  ? ip6t_do_table+0x205/0x18a0
[ 1158.193361][    C1]  nf_hook+0xbf/0x450
[ 1158.193379][    C1]  ? nf_hook+0x9e/0x450
[ 1158.193397][    C1]  ? nf_hook+0x9e/0x450
[ 1158.193413][    C1]  ? __pfx_nf_hook+0x10/0x10
[ 1158.193431][    C1]  ? __pfx_ip6t_do_table+0x10/0x10
[ 1158.193455][    C1]  ? ndisc_send_skb+0x574/0x1380
[ 1158.193476][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1158.193502][    C1]  ip6_output+0x26f/0x3c0
[ 1158.193530][    C1]  ? __pfx_ip6_finish_output+0x10/0x10
[ 1158.193559][    C1]  ndisc_send_skb+0xab2/0x1380
[ 1158.193579][    C1]  ? ndisc_send_skb+0x574/0x1380
[ 1158.193599][    C1]  ? __alloc_skb+0x211/0x440
[ 1158.193625][    C1]  ? __pfx_ndisc_send_skb+0x10/0x10
[ 1158.193646][    C1]  ? ipv6_get_ifaddr+0x107/0x770
[ 1158.193673][    C1]  ? __pfx_dst_output+0x10/0x10
[ 1158.193692][    C1]  ? skb_set_owner_w+0x238/0x3e0
[ 1158.193723][    C1]  ? ndisc_send_rs+0x533/0x6b0
[ 1158.193747][    C1]  addrconf_rs_timer+0x36e/0x660
[ 1158.193769][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[ 1158.193792][    C1]  ? call_timer_fn+0xa8/0x650
[ 1158.193812][    C1]  call_timer_fn+0x18e/0x650
[ 1158.193828][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[ 1158.193846][    C1]  ? call_timer_fn+0xc0/0x650
[ 1158.193862][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[ 1158.193880][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[ 1158.193898][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[ 1158.193920][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[ 1158.193939][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[ 1158.193957][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1158.193978][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[ 1158.194005][    C1]  ? __pfx_addrconf_rs_timer+0x10/0x10
[ 1158.194024][    C1]  __run_timer_base+0x66a/0x8e0
[ 1158.194058][    C1]  ? __pfx___run_timer_base+0x10/0x10
[ 1158.194087][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1158.194115][    C1]  run_timer_softirq+0xb7/0x170
[ 1158.194142][    C1]  handle_softirqs+0x2c4/0x970
[ 1158.194165][    C1]  ? __irq_exit_rcu+0xf4/0x1c0
[ 1158.194193][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[ 1158.194216][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[ 1158.194242][    C1]  __irq_exit_rcu+0xf4/0x1c0
[ 1158.194263][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[ 1158.194289][    C1]  irq_exit_rcu+0x9/0x30
[ 1158.194308][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1158.194338][    C1]  </IRQ>
[ 1158.194344][    C1]  <TASK>
[ 1158.194351][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1158.194375][    C1] RIP: 0010:finish_task_switch+0x1ea/0x870
[ 1158.194404][    C1] Code: c9 50 e8 09 b8 0b 00 48 83 c4 08 4c 89 f7 e8 dd 38 00 00 e9 de 04 00 00 4c 89 f7 e8 40 0b 37 0a e8 9b 84 37 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc
[ 1158.194420][    C1] RSP: 0018:ffffc900091e7568 EFLAGS: 00000286
[ 1158.194435][    C1] RAX: 1fa9a2bab8e5ea00 RBX: ffff88801fe48000 RCX: ffffffff947eb803
[ 1158.194451][    C1] RDX: dffffc0000000000 RSI: ffffffff8bcac900 RDI: ffffffff8c206fe0
[ 1158.194467][    C1] RBP: ffffc900091e75b0 R08: ffffffff8faf392f R09: 1ffffffff1f5e725
[ 1158.194481][    C1] R10: dffffc0000000000 R11: fffffbfff1f5e726 R12: 1ffff110172a7ed7
[ 1158.194495][    C1] R13: dffffc0000000000 R14: ffff8880b943e940 R15: ffff8880b953f6b8
[ 1158.194518][    C1]  ? finish_task_switch+0x1e5/0x870
[ 1158.194568][    C1]  __schedule+0x17f0/0x4a20
[ 1158.194603][    C1]  ? __pfx___schedule+0x10/0x10
[ 1158.194630][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1158.194662][    C1]  ? schedule+0x90/0x320
[ 1158.194689][    C1]  schedule+0x14b/0x320
[ 1158.194713][    C1]  schedule_timeout+0xb0/0x310
[ 1158.194734][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[ 1158.194756][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1158.194785][    C1]  ? wait_for_completion+0x2fe/0x620
[ 1158.194810][    C1]  ? wait_for_completion+0x2fe/0x620
[ 1158.194834][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1158.194855][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[ 1158.194886][    C1]  ? wait_for_completion+0x2fe/0x620
[ 1158.194911][    C1]  wait_for_completion+0x355/0x620
[ 1158.194937][    C1]  ? __smp_call_single_queue+0x11a/0x3a0
[ 1158.194964][    C1]  ? __pfx_wait_for_completion+0x10/0x10
[ 1158.194993][    C1]  ? smp_call_function_single_async+0xb4/0x110
[ 1158.195018][    C1]  rdmsr_safe_on_cpu+0x16c/0x310
[ 1158.195040][    C1]  ? __pfx_rdmsr_safe_on_cpu+0x10/0x10
[ 1158.195061][    C1]  ? __pfx___rdmsr_safe_on_cpu+0x10/0x10
[ 1158.195081][    C1]  ? __might_fault+0xaa/0x120
[ 1158.195114][    C1]  ? __might_fault+0xc6/0x120
[ 1158.195144][    C1]  msr_read+0x160/0x260
[ 1158.195166][    C1]  ? __pfx_msr_read+0x10/0x10
[ 1158.195183][    C1]  ? bpf_lsm_file_permission+0x9/0x10
[ 1158.195204][    C1]  ? rw_verify_area+0x52a/0x6b0
[ 1158.195232][    C1]  ? __pfx_msr_read+0x10/0x10
[ 1158.195250][    C1]  vfs_read+0x204/0xbc0
[ 1158.195278][    C1]  ? __pfx_lock_release+0x10/0x10
[ 1158.195308][    C1]  ? __pfx_vfs_read+0x10/0x10
[ 1158.195334][    C1]  ? do_futex+0x392/0x560
[ 1158.195358][    C1]  ? __fget_files+0x29/0x470
[ 1158.195378][    C1]  ? __fget_files+0x3f6/0x470
[ 1158.195397][    C1]  ? __fget_files+0x29/0x470
[ 1158.195425][    C1]  ksys_read+0x1a0/0x2c0
[ 1158.195457][    C1]  ? __pfx_ksys_read+0x10/0x10
[ 1158.195485][    C1]  ? do_syscall_64+0x100/0x230
[ 1158.195505][    C1]  ? do_syscall_64+0xb6/0x230
[ 1158.195525][    C1]  do_syscall_64+0xf3/0x230
[ 1158.195543][    C1]  ? clear_bhb_loop+0x35/0x90
[ 1158.195571][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.195594][    C1] RIP: 0033:0x7f49dbb75b29
[ 1158.195609][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1158.195626][    C1] RSP: 002b:00007f49dc91e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1158.195644][    C1] RAX: ffffffffffffffda RBX: 00007f49dbd03fa0 RCX: 00007f49dbb75b29
[ 1158.195659][    C1] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000004
[ 1158.195676][    C1] RBP: 00007f49dbbf6756 R08: 0000000000000000 R09: 0000000000000000
[ 1158.195691][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1158.195704][    C1] R13: 000000000000000b R14: 00007f49dbd03fa0 R15: 00007ffd18856318
[ 1158.195725][    C1]  </TASK>
[ 1158.297480][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[ 1158.297506][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-next-20240627-syzkaller #0
[ 1158.297535][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[ 1158.297552][   T30] Call Trace:
[ 1158.297563][   T30]  <TASK>
[ 1158.297575][   T30]  dump_stack_lvl+0x241/0x360
[ 1158.297612][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1158.297638][   T30]  ? __pfx__printk+0x10/0x10
[ 1158.297677][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 1159.146247][   T30]  ? vscnprintf+0x5d/0x90
[ 1159.150604][   T30]  panic+0x349/0x870
[ 1159.154524][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 1159.160693][   T30]  ? __pfx_panic+0x10/0x10
[ 1159.165125][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[ 1159.170517][   T30]  ? __irq_work_queue_local+0x137/0x410
[ 1159.176081][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[ 1159.181464][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[ 1159.187721][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[ 1159.193893][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[ 1159.200056][   T30]  watchdog+0x102d/0x1030
[ 1159.204402][   T30]  ? watchdog+0x1ea/0x1030
[ 1159.208834][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1159.213523][   T30]  kthread+0x2f0/0x390
[ 1159.217607][   T30]  ? __pfx_watchdog+0x10/0x10
[ 1159.222295][   T30]  ? __pfx_kthread+0x10/0x10
[ 1159.226896][   T30]  ret_from_fork+0x4b/0x80
[ 1159.231323][   T30]  ? __pfx_kthread+0x10/0x10
[ 1159.235928][   T30]  ret_from_fork_asm+0x1a/0x30
[ 1159.240724][   T30]  </TASK>
[ 1159.244034][   T30] Kernel Offset: disabled
[ 1159.248378][   T30] Rebooting in 86400 seconds..