last executing test programs:

5m4.517371065s ago: executing program 32 (id=77):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040)
connect$unix(r1, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

4m39.471384833s ago: executing program 33 (id=203):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x200002, 0x200003, 0x803, 0x4, 0x7})
writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108ec50000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

4m22.082482768s ago: executing program 5 (id=312):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000240)="5f90", 0x23, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1e}}, 0x14)

4m22.017636344s ago: executing program 5 (id=313):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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")
syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000600))
chdir(&(0x7f0000000640)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000007d40)='./file1\x00', 0x1a37c1, 0x42)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000007d80)={0x9, 0x24, 0x2, 0x3, 0x8})
unlink(0x0)

4m21.018149757s ago: executing program 5 (id=324):
r0 = gettid()
timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x5058, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x46, 0x0, 0x3, {0x8, 0xb, 0x1, 0x1, 0x1, 0x22, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0xb, 0x4, {0xa, 0x25, 0x25, 0x1, 0xb, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x8, 0x5, {0xa, 0x25, 0x25, 0xb, 0xff, 0x9}}}}}}}}]}}, 0x0)

4m19.971991924s ago: executing program 5 (id=322):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101)

4m19.61800912s ago: executing program 5 (id=325):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='('], 0x28)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c)

4m18.93004166s ago: executing program 5 (id=330):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
syz_usb_connect(0x2, 0x4e, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

4m18.53857261s ago: executing program 34 (id=330):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
syz_usb_connect(0x2, 0x4e, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

4m5.11605667s ago: executing program 3 (id=413):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000680)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000006c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000700)=0x4, 0x8)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)

4m2.47750642s ago: executing program 3 (id=429):
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000dc0)={0x1, 0xc, 0x8, 0x9ba})

4m2.249261843s ago: executing program 3 (id=431):
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r1=>0x0})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
sendmsg$inet6(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x30040000)
close(r0)

4m2.003317488s ago: executing program 3 (id=434):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000300)={0xaa, 0x99})
syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x81c010, &(0x7f00000001c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000001180)="$eJzs3AuYzlW7MPD7Xmv9GdOkp0kOw1rr/vOkwTJJkkOKHJIkSZKcEpImSRISQ0gSkpwPk+QwhOQwjUnjfD7knDR5pUmSkJzC+q7pbW/vu3v3297f2/581577d13rmnXPeu71rDX3zDz/9b+u5/m+x8i6zevVakpE8C/Bv35JAYAYABgCANcBQAAAleIrxeeOF5CY8q89CftzPZJ2tVfAriauf97G9c/buP55G9c/b+P6521c/7yN65+3cf0Zy8u2zyl2Pbe82/j+f17Gr///i+SUn/z1xvI39vxvpHD98zauf97G9c/buP55G9c/b+P6/+9X85+Mcf3zNq4/Y3nZ1b7/zO3qtqv9+8cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLG84569QAPBv/au9LsYYY4wxxhhjjP15fP6rvQLGGGOMMcYYY4z9z0MQIEFBAPkgP8RAAYiFayAOroWCcB1E4HqIhxugENwIhaEIFIVikADFoQRoMGCBIISSUAqicBOUhpshEcpAWSgHDspDEtwCFeBWqAi3QSW4HSrDHVAFqkI1qA53Qg24C+6GmlAL7oHaUAfqQj24F+rDfdAA7oeG8AA0ggehMTwETeBhaAqPQDN4FJrDY9ACHoeW0ApaQxto+3+V/zL0gVegL/SDFOgPA+BVGAiDYDC8BkPgdRgKb8AweBOGwwgYCW/BKHgbRsM7MAbGwjgYDxNgIkyCyTAFpkIqvAvT4D2YDu/DDJgJs2A2pMEcmAsfwDyYDwvgQ1gIH8EiWAxLYCmkw8eQAcsgEz6B5fApZMEKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w2ewA3bCLtgNe2Av7IPPYT98AQfgS8iGr/6b+Wf/Q35PBAQUKFChwnyYD2MwBmMxFuMwDgtiQYxgBOMxHgthISyMhbEoFsUETMASWAINGiQkLIklMYpRLI2lMRETsSyWRYcOkzAJK+CtWBErYiWshJWxMlbBqlgVq2N1rIE18G6EKgHUwtpYG+tiXbwX78X7sAE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2NrbIttsR22w/bYHjtiR+yEnbAzdsZkTMYu2AW7Ylfsht2wO3bHHtgDe2Iv7IUv48v4Cr6C/bC26I8DcAAOxIEHcv8YXsPXcSi+gW/gmzgcR+BIfAvfwrdxNJ7BMTgWx+E4rCEm4iScjCSmYiqm4jSchtNxOs7AmTgTZ2MazsG5OBfn4Xycjx/iQvwIP8LFuBiXYjqmYwYuw0zMxOV4FrNwBa7EVbga1+BqXIfrcR1uxE24EbfgFtyG2/Az/Ax34k7cjbtxL+7Fz/Fz/AK/wOGYjdl4EA/iITyEh/Ew5mAOHsEjeBSP4jE8hsfxOJ7Ak3gKT+JpPI1n8Cyew3N4AS/gRXwx4dtme8tsGA4ilxJK5BP5RIyIEbEiVsSJOFFQFBQRERHxIl4UEoVEYVFYFBVFRYJIECVECWGEESRCUVKUFFERFaVFaZEoEkVZUVY44USSSBIVRAVRUVQUlcTtorK4Q1QRVUUHV11UFzVER3e3qClqiVqitqgj6op6op6oL+qLBqKBaCgaikaikWgsHhJNRH8cjI+I3Mo0FyOwhRiJLUUr0Vq0EW/jE6KdGI3tRQfRUTwlxuIY7CzauWTxrOgiJmFX8byYjC+I7mIq9hAviZ6il+gtXhZ9RHvXV/QTM7C/GCBm40AxSAwWr4l5WEfkVqyueFMMFyPESPGWWIpvi9HiHTFGjBXjxHgxQUwUk8RkMUVMFaniXTFNvCemi/fFDDFTzBKzRZqYI+aKD8Q8MV8sEB+KheIjsUgsFkvEUpEuPhYZYpnIFJ+I5eJTkSVWiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im9guPhM7xE6xS+wWe8ResU98LvaLL8QB8aXIFl+Jg+Iv4pD4WhwW34gc8a04Ir4TR8X34pj4QRwXP4oT4qQ4JX4Sp8XP4ow4K86J8+KC+EVcFJfEZeEFSJRCSqlkIPPJ/DJGFpCx8hoZJ6+VBeV1MiKvl/HyBllI3igLyyKyqCwmE2RxWUJqaaSVJENZUpaSUXmTLC1vlomyjCwry0kny8skeYusIG+VFeVtspK8XVaWd8gqsqqsJqvLO2UNeZe8W9aUteQ9srasI+vKevJeWV/eJxvI+2VD+YBsJB+UjeVDsol8WDaVj8hm8lHZXD4mW8jHZUvZSraWbWRb+YRsJ5+U7WUH2VE+JTvJp2Vn+YxMls/KLvI52VU+L7vJF2R3+aLsIV+SPWUv2Vtekpell31lP5ki+8sB8lU5UA6Sg+Vrcoh8XQ6Vb8hh8k05XI6QI+VbcpR8W46W78gxcqwcJ8fLCXKinCQnyylyqkyV78pp8j05Xb4vZ8iZcpacLdPkHDn4t5kW/Bfy3/sH+cN+ffZtcrv8TO6QO+UuuVvukXvlPrlP7pf75QF5QGbLbHlQHpSH5CF5WB6WOTJHHpFH5FF5VB6Tx+RxeVyekCflefmTPC1/lmfkWXlWnpcX5AV58befAShUQkmlVKDyqfwqRhVQseoaFaeuVQXVdSqirlfx6gZVSN2oCqsiqqgqphJUcVVCaWWUVaRCVVKVUlF1kyqtblaJqowqq8opp8qrJHXLv5z/R+trq9qqdqqdaq/aq46qo+qkOqnOqrNKVsmqi+qiuqquqpvqprqr7qqH6qF6qp6qt+qt+qg+qq/qq1JUihqgXlUD1SA1WL2mhqjX1VA1VA1Tw9RwNVyNVCPVKDVKjVaj1Rg1Ro1T49QENUFNUpPUFDVFpapUNU1NU9PVdDVDzVCz1CyVptLUXDVXzVPz1AK1QC1UC9UitUgtUUtUukpXGSpDZapMtVwtV1lqhVqhVqlVao1ao9apdWqD2qA2qU1qi9qistR2tV3tUDvULrVL7VF71D61T+1X+9UBdUBlq2x1UB1Uh9QhdVgdVjkqRx1RR9RRdVQdU8fUcXVcnVAn1Cl1Sp1Wp9UZdUadU+fUBXVBXVQX1WV1OfeyLxCBCFSggnxBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEoAMT2ICCMCgZlAqiwU1B6eDmIDEoE5QNygUuKB8kBbcEFYJbg4rBbUGl4PagcnBHUCWoGlQLqgd3BjWCu4K7g5pBreCeoHZQJ6gb1AvuDeoH9wUNgvuDhsEDQaPgwaBx8FDQJHg4aBo8EjQLHg2aB48FLYLHg5ZBq6B10CZo+6fO7/2ZIk+6vrqfTtH99QD9qh6oB+nB+jU9RL+uh+o39DD9ph6uR+iR+i09Sr+tR+t39Bg9Vo/T4/UEPVFP0pP1FD1Vp+p39TT9np6u39cz9Ew9S8/WaXqOnqs/0PP0fL1Af6gX6o/0Ir1YL9FLdbr+WGfoZTpTf6KX6091ll6hV+pVerVeo9fqdXq93qA36k16s96it+pterv+TO/QO/UuvVvv0Xv1Pv253q+/0Af0lzpbf6UP6r/oQ/prfVh/o3P0t/qI/k4f1d/rY/oHfVz/qE/ok/qU/kmf1j/rM/qsPqfP6wv6F31RX9KXtc+9uM99eTfKKJPP5DMxJsbEmlgTZ+JMQVPQREzExJt4U8gUMoVNYVPUFDUJJsGUMCVMLjJkSpqSJmqiprQpbRJNoilryhpnnEkySaaCqWAqmoqmkqlkKpvKpoqpYqqZauZOc6e5y9xlapqa5h5zj6lj6ph6pp6pb+qbBqaBaWgamkamkWlsGpsmpolpapqaZqaZaW6amxamhWlpWprWprVpa9qadqadaW/am46mo+lkOpnOprNJNsmmi+liupquppvpZrqb7qaH6WF6mp6mt+lt+pg+pq/pa1JMihlgBpiBZqAZbAabIWaIGWqGmmFmmBlfYVPN3JPTKDPKjDajzRgz1owz480EM9FMMpPNFDPVpJpUM81MM9PNdDPDzDCzzCyTZtLMXDPXzDPzzAKzwCw0C80is8gsMUtMukk3GSbDZJpMs9wsN1kmy6w0K81qs9qsNWvNerPebDQbzWaz2Ww1W812s93sMDvMLrPL7DF7zD6zz+w3+80Bc8Bkm+yY3w535rA5bHJMjjlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86ZC+YXc9FcMpeNNzFWQKy9xsbZa21Be52NsQXs38ZFbTGbYIvbElbbwrbI38XGWptoy9iytpx1trxNsrf8Lq5iq9pqtrq909awd9m7fxfXt/fZBvZ+29A+YOvZe/8ubmQftI3tY7aJfdw2ta1sM9vGNreP2Rb2cdvStrKtbRvbyT5tO9tnbLJ91naxz/0uzrDL7Hq7wW60m+x++4U9Z8/bo/Z7e8H+YvvafnaIfd0OtW/YYfZNO9yO+F08zo63E+xEO8lOtlPs1N/Fs+xsm2bn2Ln2AzvPzv9dnG4/tgttpl1kF9sldumvce6aMu0ndrn91GbZFXalXWVX2zV2rV3372tdZbfYrXab3Wc/tzvsTrvL7rZ77N5f49x9HLBf2mz7lT1iv7OH7Nf2sD1mc+y3v8a5+wP4wR63P9oT9qQ9ZX+yp+3P9ow9++v+c/f+k71kL1tvgZAESVIUUD7KTzFUgGLpGoqja6kgXUcRup7i6QYqRDdSYSpCRakYJVBxKkGaDFkiCqkklaIo3USl6WZKpDJUlsqRo/KURLdQBbqVKtJtVIlup8p0B1WhqlSNqtOdVIPuorupJtWie6g21aG6VI/upfp0HzWg+6khPUCN6EFqTA9RE3qYmtIj1Iwepeb0GLWgx6kltaLW1Iba0hPUjp6k9tSBOtJT1Imeps70DCXTs9SFnqOu9Dx1oxeoO71IPegl6km9qDe9TH3oFepL/SiF+tMAepUG0iAaTK/REHqdhtIbNIzepOE0gkbSWzSK3qbR9A6NobE0jsbTBJpIk2gyTaGplErv0jR6j6bT+zSDZtIsmk1pNIfm0gc0j+bTAvqQFtJHtIgW0xJaSun0MWXQMsqkT2g5fUpZtIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+30Ge2gnbSLdtMe2kv76HPaT1/QAfqSsukrOkh/oUP0NR2mbyiHvqUj9B0dpe/pGP1Ax+lHOkEn6RT9RKfpZzpDZ+kcnacL9AtdpEt0mTxBiKEIZajCIMwX5g9jwgJhbHhNGBdeGxYMrwsj4fVhfHhDWCi8MSwcFgmLhsXChLB4WCLUoQltSGEYlgxLhdHwprB0eHOYGJYJy4blQheWD5PCW8IK4a1hxfC2sFJ4e1g5vCOsElYNH3ugenhnWCO8K7w7rBnWCu8Ja4d1wrphvfDesH54X9ggvD9sGD4QVgwfDBuHD4VNwofDpuEjYbPw0bB5+FjYInw8bBm2CluHbcK24RNhu/DJsH3YIewYPhV2Cp8OO4fPhMnhs2GX8Lk/HE8J+4cDwlfDV0Pv75dLokuj6dGPoxnRZdHM6CfR5dFPo1nRFdGV0VXR1dE10bXRddH10Q3RjdFN0c3RLdGt0W1R7+vlB4dOOOmUC1w+l9/FuAIu1l3j4ty1rqC7zkXc9S7e3eAKuRtdYVfEFXXFXIIr7ko47YyzjlzoSrpSLupucqXdzS7RlXFlXTnnXHmX5Nq4tq6ta+eedO1dB9fRPeWeck+7p90z7hn3rOvinnNd3fOum3vBdXcvuhfdS66n6+V6u5ddH/eK6+v6uRSX4ga4AW6gG+gGu8FuiBvihrqhbpgb5oa74W6kG+lGuVFutBvtxrgxbpwb5ya4CW6Sm+SmuCku1aW6aW6am+6muxluhpvlZrk0l+bmurlunpvnFrgFbmHiQrfILXJL3BKX7tJdhstwmS7TLXfLXZbLcivdSrfarXZr3Vq33q13G91Gt9ltdlvdVrfdbXc73A63y+1ye9wet8/tc/vdfnfAHXDZLtsddAfdIXfIHXbfuBz3rTvivnNH3ffumPvBHXc/uhPupDvlfnKn3c/ujDvrzrnz7oL7xV10l9xl511q5N3ItMh7kemR9yMzIjMjsyKzI2mROZG5kQ8i8yLzIwsiH0YWRj6KLIosjiyJLI2kRz6OZESWRTIjn0SWRz6NZEVWRFZGVkVWR9ZEvC++I/QlfSkf9Tf50v5mn+jL+LK+nHe+vE/yt/gK/lZf0d/mK/nbfWV/h6/iq/pq/nHf0rfyrX0b39Y/4dv5J31738F39E/5Tv5p39k/45P9s76Lf8539c/7bv4F392/6Hv4l3xP38v39i/7Pv4V39f38ym+vx/gX/UD/SA/2L/mh/jX/VD/hh/m3/TD/Qg/0r/lR/m3/Wj/jh/jx/pxfryf4Cf6SX6yn+Kn+lT/rp/m3/PT/ft+hp/pZ/nZPs3P8XP9B36en+8X+A/9Qv+RX+QX+yV+qU/3H/sMv8xn+k/8cv+pz/Ir/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3n/kdfqff5Xf7PX6v3+c/9/v9F/6A/9Jn+6/8Qf8Xf8h/7Q/7b3yO/9Yf8d/5o/57f8z/4I/7H/0Jf9Kf8j/50/5nf8af9ef8eX/B/+Iv+kv+8n/1PWv5/ifvpTPGGGOM/f8v9Q/G+/+D74nfWq4BAHDtzmI5fzsuAWBz4b/2B4mEThEAeLZfj0f+rdWunZKS8ttjsyQEpRYDQORK/q+XaL/FK6AjPA3J0AEq/MP1DRK9LtAfzB+9HSD2b3Ji/voxB/9h/lv/k/mfeGpcRuXwXPw/mX8xQGKpKzkF4Ep8Zf6K/8n8Rdr9wfoLfJ0K0P5vcuLgSnxl/iR4Ep6D5L97JGOMMcYYY4wx9leDRLVulHsihn9+Pk9QV3Lyw5X4j87njDHGGGOMMcYYu/pe6NX7mSeSkzt04w53uMOdf+9c7f9MjDHGGGOMsT/blYv+q70SxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMs7/p/8XFiV3uPjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG2NX2fwIAAP//sN45jQ==")
syz_clone(0x200, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000026c0)='./mnt\x00', 0x1ff)
r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

4m1.030770147s ago: executing program 3 (id=443):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0)
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

4m0.31476492s ago: executing program 3 (id=449):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
close(0x3)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x20, 0x1405, 0xa09, 0x70bd2b, 0x25dfdbfe, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004090}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)

3m59.879718925s ago: executing program 35 (id=449):
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
close(0x3)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x20, 0x1405, 0xa09, 0x70bd2b, 0x25dfdbfe, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004090}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0)

3m48.894380826s ago: executing program 7 (id=451):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xa, 0x28102)
r1 = fcntl$dupfd(r0, 0x0, r0)
readv(r1, &(0x7f0000000340)=[{&(0x7f0000000380)=""/132, 0x84}], 0x1)
read(r1, &(0x7f0000000440)=""/66, 0x42)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write$snddsp(r1, &(0x7f0000000540)="87ecc00c05dbb58b776f34f9b779d998d21e0e3353174bb169f81d1590532836dee3667c58e173cdd67b", 0x2a)

3m47.937754064s ago: executing program 7 (id=490):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000009e00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4800)

3m47.748731053s ago: executing program 7 (id=491):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
getrandom(&(0x7f0000000380)=""/286, 0xffffff9a, 0x0)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyUSB0\x00', 0x1, 0x84)
write(r0, &(0x7f0000000340)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40)

3m46.11861424s ago: executing program 2 (id=500):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e018", @ANYRES32], 0x38}}], 0x1, 0xc050)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

3m45.836589979s ago: executing program 2 (id=503):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_read_part_table(0x40a2, &(0x7f0000000000)="$eJzsz89JA1EQB+Bfsn8jQhQU7MGL2oU3D6YBa/DuyRYsIsQCBMEu7MEqnqzZVTx4DIp832Fn3swwy4TfVabk9fK0+96qx3iQ9M9TaVNKyTy52RwOIbl/2ra6fhxvX75WnJ2n2etn2U9ym2ooXT8kF/V2/Wq9y9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/4yTJMkm5G16z+fBtPrt1Zh9xkaTLVZvp9TbNLFKNWZ8qzTB+lDwe//jD+ZSs1js4BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD439r0Scrynf05OEEghoIAOohJ9GR1tmENXmzBIuzBWixD8OJCArukgL29dxrmw8Cf2+9/WItj0lJ6POQ3jvfUXjzefSNt3jhv8XNJajndnrm+dvwFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHJAAAAAACPr/uh2BAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwUAAAAP//JLsnIw==")
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x100000, 0x0, 0x77, 0x8, 0x0, 0xc8, 0x2, 0x0, 0xf7, 0x6}, {0x1000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, {0xeeee0000, 0x1000, 0x10, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x45, 0xb5, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x7}, {0x1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x0, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0x5000}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x40]})

3m44.74656701s ago: executing program 1 (id=509):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000000)='./dev\x00', 0x8400, 0x28)
r1 = openat(r0, &(0x7f0000000100)='./dev\x00', 0x101042, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x40000000)
madvise(&(0x7f00001cb000/0x3000)=nil, 0x3000, 0x9)

3m44.726766792s ago: executing program 6 (id=510):
getrandom(&(0x7f0000000b80)=""/286, 0xffffff9a, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000cc0)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000f40)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000f80)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000fc0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0xffff, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "4fd4f676cef00d"}]}}}}}}}, 0x0)

3m44.558493309s ago: executing program 1 (id=511):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r1, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x4044004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, 0x0, 0x0}, 0x94)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

3m44.206544725s ago: executing program 1 (id=512):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

3m44.012502055s ago: executing program 2 (id=513):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000000000850000006100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a82b9a86dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x4000801, 0x4, 0x4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2ab4d}, 0x80)

3m43.849090001s ago: executing program 7 (id=514):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f0000000940)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000005f00)='./bus\x00', 0x40, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000005f40)='./bus\x00', 0x1c1002, 0x12)
write(r1, &(0x7f0000005f80)="c7", 0x1)
sendfile(r1, r0, 0x0, 0x7ffff000)
rename(&(0x7f0000005fc0)='./bus\x00', &(0x7f0000006000)='./file0\x00')

3m43.354912682s ago: executing program 6 (id=515):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket(0x2, 0x805, 0x0)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={r3, 0x5, 0x20, 0x1949, 0xffffffffffffffff}, &(0x7f0000000240)=0x29)

3m43.348178183s ago: executing program 2 (id=516):
r0 = open(0x0, 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, 0x0, 0x0)
mkdir(&(0x7f00000003c0)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='mnt\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303", @ANYRESOCT], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000500)='mnt/ttyUSB0\x00', 0x2, 0x0)

3m43.036463764s ago: executing program 6 (id=517):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8}]}, 0x24}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x78, r2, 0xa03, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="64d79361c461568f18acee28656d5b90efb6a19ad9057119c6d52b83e3bbd1bc"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "50e5a7c52131cedf"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6a9c7f5f38301f62d52677ff9d8068631aef0ded829df53f9495344b5c6510b0"}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)

3m42.711967317s ago: executing program 6 (id=518):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c)
sendto$inet6(r0, &(0x7f00000004c0)='O', 0x1, 0x80, &(0x7f0000000500)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f0000000580), &(0x7f00000005c0)=0x8)

3m42.010789309s ago: executing program 6 (id=519):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8a9}, 0x1c)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c)

3m41.336288358s ago: executing program 6 (id=520):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x582, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
ioctl(r0, 0x8914, &(0x7f0000000340)="7573623000000000000000000000000003")

3m40.691986934s ago: executing program 2 (id=521):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002b00)='\x00', 0x1}], 0x1, &(0x7f00000004c0)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="c7", 0x1}], 0x1}}], 0x2, 0x4000c00)

3m40.462875077s ago: executing program 1 (id=522):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x4, 0x8, 0xc}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000009e00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)

3m40.256653918s ago: executing program 2 (id=523):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0x322}}]})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x405})

3m40.029720522s ago: executing program 7 (id=524):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

3m39.785924656s ago: executing program 1 (id=525):
set_mempolicy(0x4005, &(0x7f0000000040)=0x8, 0x8)
r0 = memfd_create(&(0x7f0000000200)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xe5,\x82\x03\x00\x19\x8d\xff\xff\xff\xff\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xe7!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7c\x06\x00\x00\x00\x00\x00\x00\x001\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfc^\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11X\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xfc\xbc\xeb[^\xc7\xc0v/\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0a\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xed\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x9f\x0f\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00', 0x6)
fallocate(r0, 0x0, 0xb, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b80)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x8, 0x3)

3m27.574693762s ago: executing program 1 (id=526):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)

3m0.869956977s ago: executing program 36 (id=520):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x582, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
ioctl(r0, 0x8914, &(0x7f0000000340)="7573623000000000000000000000000003")

3m0.512632743s ago: executing program 37 (id=523):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @sint={0x0, 0x322}}]})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x405})

3m0.023276264s ago: executing program 38 (id=524):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

2m59.721754944s ago: executing program 39 (id=526):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_MTU={0x8, 0x4, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)

7.959831258s ago: executing program 9 (id=1457):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

5.558744383s ago: executing program 9 (id=1465):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x9, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="6000508011000a004abee339084eeef16f162471f40000000800030009ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4)

4.289577392s ago: executing program 9 (id=1471):
connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write(r0, &(0x7f0000000300)='l', 0x1)

3.260385917s ago: executing program 9 (id=1477):
r0 = syz_open_dev$dri(&(0x7f0000001940), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000001980)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000019c0)={&(0x7f0000001a00)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000001a40)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000001a80)={&(0x7f0000001ac0)=[<r3=>0x0], &(0x7f0000000080), 0x1, r2})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={0x0, 0x0, 0x0, r3})

2.801498374s ago: executing program 9 (id=1481):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1ab640, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x25000, 0x9000})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0xb000, 0x103000, 0x1})
fanotify_mark(0xffffffffffffffff, 0xffffff80, 0x40001019, 0xffffffffffffffff, 0x0)

2.683088496s ago: executing program 8 (id=1483):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x44, r2, 0x1, 0x70bd28, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe}]}, 0x44}}, 0xc010)

2.54787871s ago: executing program 0 (id=1484):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x83)
mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000640)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
write(r0, &(0x7f00000007c0)='0', 0x1)

2.483732246s ago: executing program 9 (id=1485):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x2, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe)
shutdown(r0, 0x1)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x400002e, 0x141, 0x0)

2.212369684s ago: executing program 0 (id=1486):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)={0x1, [<r1=>0x0]}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={<r2=>r1, 0x8}, &(0x7f0000000400)=0x8)
sendmmsg$inet_sctp(r0, &(0x7f0000000440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r2}}], 0x20, 0x4c004}], 0x1, 0x10)

1.936671913s ago: executing program 8 (id=1488):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000a00)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000300)=0x1, 0x4)
bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c)

1.85844895s ago: executing program 0 (id=1489):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x6}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff3c, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48)

1.825738533s ago: executing program 4 (id=1490):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x30)
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r1, 0x0, r0, 0x0, 0x76aa819b, 0xa)

1.613913675s ago: executing program 8 (id=1491):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000200)={{&(0x7f00002e3000/0x3000)=nil, 0x3000}})
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x9)

1.47269019s ago: executing program 4 (id=1492):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x809}, @broadcast, @device_a, @initial, {0x4, 0x81}}, 0x0, 0x29, @random=0x1, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x40000)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
mount$binder(0x0, 0x0, 0x0, 0x4021802, 0x0)

1.432061124s ago: executing program 0 (id=1493):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0xc0000007})
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
poll(&(0x7f0000000400)=[{r1, 0x8450}], 0x1, 0x1d)

1.252505432s ago: executing program 8 (id=1494):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x641, 0x8000026, r0, 0x0)
r2 = openat(r0, &(0x7f0000000340)='./file0\x00', 0x42, 0x2)
pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61)
pread64(r2, &(0x7f0000000180)=""/73, 0x49, 0x800055)

1.086909279s ago: executing program 4 (id=1495):
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

990.088299ms ago: executing program 0 (id=1496):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregset(0x4205, r0, 0x1, 0x0)

842.956834ms ago: executing program 8 (id=1497):
setns(0xc9, 0x0)
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r2})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000380)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r2})

699.593008ms ago: executing program 4 (id=1498):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0001)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x2181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001040)={0x0, 0x400, 0x0, 'queue0\x00', 0x800000})
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000440)={{0x0, 0x2, 0x3}})

474.933542ms ago: executing program 8 (id=1499):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

357.490893ms ago: executing program 4 (id=1500):
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)

347.493485ms ago: executing program 0 (id=1501):
mkdir(&(0x7f0000000b00)='./my_configfs\x00', 0x0)
mount(0x0, &(0x7f0000000b40)='./my_configfs\x00', &(0x7f0000000b80)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000bc0)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000ec0)='./my_configfs/target/core/rd_mcp_0\x00', 0xa000, 0xb0)
getdents(r0, &(0x7f0000000f00)=""/117, 0x75)
rmdir(&(0x7f00000010c0)='./my_configfs/target/core/rd_mcp_0\x00')

0s ago: executing program 4 (id=1502):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000203, 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r0, 0x0)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)

kernel console output (not intermixed with test programs):

/TASK>
[  246.675106][ T8021] veth0_macvtap: entered promiscuous mode
[  246.686699][ T8021] veth1_macvtap: entered promiscuous mode
[  246.917167][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.939038][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.958559][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  246.970438][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  246.988328][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.012084][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.030409][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.041140][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.052183][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.063329][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.073489][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  247.084108][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.096077][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.254649][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.280590][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.294172][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.305258][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.315307][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.328002][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.343119][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.353919][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.365003][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.377835][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.389088][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  247.400753][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.430212][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.691028][ T8021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.707739][ T8021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.719523][ T8021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.729419][ T8021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  247.845733][ T8024] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.506676][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.528877][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.641756][    T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  248.738351][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.748751][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.829672][ T8024] veth0_vlan: entered promiscuous mode
[  248.842528][    T8] usb 9-1: Using ep0 maxpacket: 32
[  248.860487][    T8] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  248.891965][    T8] usb 9-1: config 0 interface 0 has no altsetting 0
[  248.899048][    T8] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  248.943341][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.976876][    T8] usb 9-1: config 0 descriptor??
[  249.069984][ T8024] veth1_vlan: entered promiscuous mode
[  249.298835][ T8024] veth0_macvtap: entered promiscuous mode
[  249.469360][ T8024] veth1_macvtap: entered promiscuous mode
[  249.504384][    T8] corsair-cpro 0003:1B1C:0C10.000B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.8-1/input0
[  249.590932][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.651844][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.681389][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.721668][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.731537][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.773788][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.832023][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.863663][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.886031][    T8] corsair-cpro: probe of 0003:1B1C:0C10.000B failed with error -71
[  249.894694][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.919346][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.948026][    T8] usb 9-1: USB disconnect, device number 2
[  249.967928][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.990535][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.016062][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  250.040528][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  250.060451][ T8024] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.153872][ T8321] loop0: detected capacity change from 0 to 256
[  250.165870][ T8321] exfat: Deprecated parameter 'utf8'
[  250.171442][ T8321] exfat: Deprecated parameter 'namecase'
[  250.207895][   T11] hsr_slave_0: left promiscuous mode
[  250.282039][ T8321] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  250.311714][   T11] hsr_slave_1: left promiscuous mode
[  250.320200][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.348927][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.381216][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.425743][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.445934][   T11] bridge_slave_1: left allmulticast mode
[  250.461786][   T11] bridge_slave_1: left promiscuous mode
[  250.467587][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.492703][   T11] bridge_slave_0: left allmulticast mode
[  250.501799][   T11] bridge_slave_0: left promiscuous mode
[  250.510711][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.589124][   T11] hsr_slave_0: left promiscuous mode
[  250.642759][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.650286][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.658829][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.668639][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.699745][   T11] bridge_slave_1: left allmulticast mode
[  250.731908][   T11] bridge_slave_1: left promiscuous mode
[  250.737767][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.781751][   T11] bridge_slave_0: left allmulticast mode
[  250.791729][   T11] bridge_slave_0: left promiscuous mode
[  250.797498][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.954877][   T11] veth1_macvtap: left promiscuous mode
[  250.960489][   T11] veth0_macvtap: left promiscuous mode
[  250.976589][   T11] veth1_vlan: left promiscuous mode
[  250.986816][   T11] veth0_vlan: left promiscuous mode
[  250.996690][   T11] veth1_macvtap: left promiscuous mode
[  251.013727][   T11] veth0_macvtap: left promiscuous mode
[  251.019428][   T11] veth1_vlan: left promiscuous mode
[  251.051984][   T11] veth0_vlan: left promiscuous mode
[  251.812277][ T8353] binder: 8352:8353 ioctl c0306201 200000000200 returned -14
[  251.995214][ T8355] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 5 (only 8 groups)
[  252.502501][ T8369] FAULT_INJECTION: forcing a failure.
[  252.502501][ T8369] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  252.527545][ T8369] CPU: 0 PID: 8369 Comm: syz.0.576 Not tainted syzkaller #0
[  252.534895][ T8369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  252.544984][ T8369] Call Trace:
[  252.548292][ T8369]  <TASK>
[  252.551258][ T8369]  dump_stack_lvl+0x18c/0x250
[  252.555993][ T8369]  ? show_regs_print_info+0x20/0x20
[  252.561256][ T8369]  ? load_image+0x420/0x420
[  252.565810][ T8369]  ? __lock_acquire+0x7eb0/0x7eb0
[  252.570888][ T8369]  ? sort+0xaf/0xf0
[  252.574779][ T8369]  ? __virt_addr_valid+0x10c/0x380
[  252.579941][ T8369]  should_fail_ex+0x394/0x4c0
[  252.584680][ T8369]  _copy_from_user+0x2f/0xe0
[  252.589317][ T8369]  bpf_vlog_reverse_ubuf+0x122/0x3a0
[  252.594687][ T8369]  bpf_vlog_finalize+0x1b3/0x3e0
[  252.599674][ T8369]  btf_new_fd+0x4ca/0x9e0
[  252.604092][ T8369]  ? bpf_btf_show_fdinfo+0x80/0x80
[  252.609224][ T8369]  ? capable+0x88/0xe0
[  252.613323][ T8369]  __sys_bpf+0x670/0x890
[  252.617578][ T8369]  ? bpf_link_show_fdinfo+0x560/0x560
[  252.622991][ T8369]  ? lock_chain_count+0x20/0x20
[  252.627913][ T8369]  __x64_sys_bpf+0x7c/0x90
[  252.632371][ T8369]  do_syscall_64+0x55/0xb0
[  252.636826][ T8369]  ? clear_bhb_loop+0x40/0x90
[  252.641555][ T8369]  ? clear_bhb_loop+0x40/0x90
[  252.646265][ T8369]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  252.652195][ T8369] RIP: 0033:0x7fd5cd79fb19
[  252.656630][ T8369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  252.676265][ T8369] RSP: 002b:00007fd5ce61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  252.684714][ T8369] RAX: ffffffffffffffda RBX: 00007fd5cda25fa0 RCX: 00007fd5cd79fb19
[  252.692735][ T8369] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  252.700738][ T8369] RBP: 00007fd5cd837af8 R08: 0000000000000000 R09: 0000000000000000
[  252.708742][ T8369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  252.716741][ T8369] R13: 00007fd5cda26038 R14: 00007fd5cda25fa0 R15: 00007fff38eb0a28
[  252.724810][ T8369]  </TASK>
[  252.727945][    C0] vkms_vblank_simulate: vblank timer overrun
[  252.992951][ T8374] capability: warning: `syz.8.579' uses 32-bit capabilities (legacy support in use)
[  253.092921][ T8381] FAULT_INJECTION: forcing a failure.
[  253.092921][ T8381] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  253.108818][   T11] team0 (unregistering): Port device team_slave_1 removed
[  253.116487][ T8381] CPU: 1 PID: 8381 Comm: syz.8.580 Not tainted syzkaller #0
[  253.123859][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  253.133958][ T8381] Call Trace:
[  253.137277][ T8381]  <TASK>
[  253.140295][ T8381]  dump_stack_lvl+0x18c/0x250
[  253.145085][ T8381]  ? show_regs_print_info+0x20/0x20
[  253.150336][ T8381]  ? load_image+0x420/0x420
[  253.154912][ T8381]  ? __lock_acquire+0x7eb0/0x7eb0
[  253.160015][ T8381]  ? snd_pcm_open_substream+0xbb/0x2540
[  253.165742][ T8381]  ? snd_pcm_capture_open+0x72/0xe0
[  253.170976][ T8381]  ? chrdev_open+0x58c/0x600
[  253.175597][ T8381]  ? do_dentry_open+0x880/0x14b0
[  253.180577][ T8381]  should_fail_ex+0x394/0x4c0
[  253.185322][ T8381]  prepare_alloc_pages+0x1e1/0x5b0
[  253.190479][ T8381]  __alloc_pages+0x134/0x460
[  253.195106][ T8381]  ? zone_statistics+0x170/0x170
[  253.200093][ T8381]  alloc_pages_exact+0x39/0x70
[  253.204892][ T8381]  snd_pcm_attach_substream+0x5c1/0xad0
[  253.210489][ T8381]  snd_pcm_open_substream+0xbb/0x2540
[  253.215902][ T8381]  ? mutex_lock_nested+0x20/0x20
[  253.220876][ T8381]  ? snd_pcm_drop+0x250/0x250
[  253.225599][ T8381]  snd_pcm_open+0x1e0/0x670
[  253.230231][ T8381]  ? snd_pcm_mmap_control_fault+0x270/0x270
[  253.236157][ T8381]  ? do_task_dead+0xd0/0xd0
[  253.240699][ T8381]  snd_pcm_capture_open+0x72/0xe0
[  253.245765][ T8381]  chrdev_open+0x58c/0x600
[  253.250221][ T8381]  ? cd_forget+0x160/0x160
[  253.254676][ T8381]  ? fsnotify_perm+0x3ed/0x5e0
[  253.259505][ T8381]  do_dentry_open+0x880/0x14b0
[  253.264306][ T8381]  ? cd_forget+0x160/0x160
[  253.268760][ T8381]  path_openat+0x284f/0x3270
[  253.273394][ T8381]  ? do_sys_openat2+0xda/0x1d0
[  253.278185][ T8381]  ? __x64_sys_openat+0x139/0x160
[  253.283279][ T8381]  ? verify_lock_unused+0x140/0x140
[  253.288507][ T8381]  ? do_filp_open+0x430/0x430
[  253.293218][ T8381]  do_filp_open+0x1f2/0x430
[  253.297744][ T8381]  ? vfs_tmpfile+0x620/0x620
[  253.302380][ T8381]  ? _raw_spin_unlock+0x28/0x40
[  253.307258][ T8381]  ? alloc_fd+0x590/0x640
[  253.311650][ T8381]  do_sys_openat2+0x134/0x1d0
[  253.316362][ T8381]  ? vma_end_read+0x18/0x170
[  253.320993][ T8381]  ? do_sys_open+0xe0/0xe0
[  253.325448][ T8381]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  253.331460][ T8381]  ? lock_chain_count+0x20/0x20
[  253.336339][ T8381]  ? lock_chain_count+0x20/0x20
[  253.341225][ T8381]  __x64_sys_openat+0x139/0x160
[  253.346117][ T8381]  do_syscall_64+0x55/0xb0
[  253.350589][ T8381]  ? clear_bhb_loop+0x40/0x90
[  253.355302][ T8381]  ? clear_bhb_loop+0x40/0x90
[  253.360014][ T8381]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  253.365939][ T8381] RIP: 0033:0x7f73bcd6034e
[  253.370383][ T8381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  253.390017][ T8381] RSP: 002b:00007f73bdb86b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  253.398464][ T8381] RAX: ffffffffffffffda RBX: 00007f73bdb876c0 RCX: 00007f73bcd6034e
[  253.406463][ T8381] RDX: 0000000000000002 RSI: 00007f73bdb86c00 RDI: ffffffffffffff9c
[  253.414460][ T8381] RBP: 00007f73bdb86c00 R08: 0000000000000000 R09: 0000000000000000
[  253.422462][ T8381] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  253.430458][ T8381] R13: 00007f73bd026038 R14: 00007f73bd025fa0 R15: 00007ffcdc345fa8
[  253.438466][ T8381]  </TASK>
[  253.552557][   T11] team0 (unregistering): Port device team_slave_0 removed
[  253.612991][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.674600][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.074467][   T11] bond0 (unregistering): Released all slaves
[  254.568441][ T8386] loop8: detected capacity change from 0 to 8192
[  254.618467][ T8386] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  254.664325][ T8386] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal
[  254.674048][ T8386] REISERFS (device loop8): using ordered data mode
[  254.680621][ T8386] reiserfs: using flush barriers
[  254.699995][ T8386] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  254.752392][ T8386] REISERFS (device loop8): checking transaction log (loop8)
[  254.935734][ T8386] REISERFS (device loop8): Using tea hash to sort names
[  254.945678][ T8386] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  255.012523][   T11] team0 (unregistering): Port device team_slave_1 removed
[  255.086980][   T11] team0 (unregistering): Port device team_slave_0 removed
[  255.147322][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.217109][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.373138][ T8390] xt_hashlimit: size too large, truncated to 1048576
[  255.719262][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  255.901775][   T11] bond0 (unregistering): Released all slaves
[  255.994676][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.007792][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.021199][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.041196][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.056313][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.069098][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.079343][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.090402][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.100637][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.111466][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.137309][ T8024] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.289242][ T8391] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  256.342211][ T8024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.351066][ T8024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.398350][ T8024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.429054][ T8024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.827937][ T7989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.858078][ T7989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.949443][ T7989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.985231][ T7989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.153964][ T8404] loop9: detected capacity change from 0 to 128
[  257.252298][ T8404] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  257.306926][ T8404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.853068][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.967659][ T8418] loop4: detected capacity change from 0 to 2048
[  258.044897][ T8418] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  258.108621][ T8418] jffs2: notice: (8418) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  258.121460][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.302575][ T7698] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  258.333667][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.514186][ T7698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.528164][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.541813][ T7698] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  258.550904][ T7698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.581077][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.9.597'.
[  258.612873][ T7698] usb 1-1: config 0 descriptor??
[  258.860137][ T7698] usbhid 1-1:0.0: can't add hid device: -71
[  258.872965][ T7698] usbhid: probe of 1-1:0.0 failed with error -71
[  258.906419][ T7698] usb 1-1: USB disconnect, device number 3
[  258.939418][ T8436] loop4: detected capacity change from 0 to 8192
[  259.064195][ T8436] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  259.172637][ T8436] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  259.214681][ T8436] REISERFS (device loop4): using ordered data mode
[  259.241733][ T8436] reiserfs: using flush barriers
[  259.255108][ T8436] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  259.292414][ T8436] REISERFS (device loop4): checking transaction log (loop4)
[  259.431845][ T7698] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  259.573821][ T8436] REISERFS (device loop4): Using tea hash to sort names
[  259.597109][ T8436] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  259.621677][ T7698] usb 1-1: Using ep0 maxpacket: 32
[  259.643288][ T7698] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.686094][ T7698] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  259.738054][ T7698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.772533][ T7698] usb 1-1: config 0 descriptor??
[  259.806163][ T7698] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  259.846487][ T7698] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  260.350036][ T7698] usb 1-1: USB disconnect, device number 4
[  260.386551][ T7698] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  260.696045][   T28] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  260.901835][   T28] usb 5-1: Using ep0 maxpacket: 8
[  260.920860][   T28] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  260.970993][   T28] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  261.001689][   T28] usb 5-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  261.031262][   T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.083906][   T28] kobil_sct 5-1:1.0: KOBIL USB smart card terminal converter detected
[  261.095260][ T8469] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.600'.
[  261.129488][   T28] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  261.514886][   T11] hsr_slave_0: left promiscuous mode
[  261.521532][   T11] hsr_slave_1: left promiscuous mode
[  261.532984][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  261.545264][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  261.592738][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  261.612112][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  261.632600][   T11] bridge_slave_1: left allmulticast mode
[  261.638320][   T11] bridge_slave_1: left promiscuous mode
[  261.654045][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.677351][   T11] bridge_slave_0: left allmulticast mode
[  261.683426][   T11] bridge_slave_0: left promiscuous mode
[  261.693209][ T8486] loop9: detected capacity change from 0 to 512
[  261.703928][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.717000][ T8486] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  261.764785][ T8486] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  261.813447][ T8486] EXT4-fs (loop9): orphan cleanup on readonly fs
[  261.831973][   T11] veth1_macvtap: left promiscuous mode
[  261.865249][   T11] veth0_macvtap: left promiscuous mode
[  261.875184][ T8486] EXT4-fs (loop9): 1 truncate cleaned up
[  261.899813][   T11] veth1_vlan: left promiscuous mode
[  261.918603][ T8486] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  261.949949][   T11] veth0_vlan: left promiscuous mode
[  261.963142][   T23] usb 5-1: USB disconnect, device number 4
[  261.983453][   T23] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  262.038830][   T23] kobil_sct 5-1:1.0: device disconnected
[  262.114700][ T8010] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.114642][ T8519] loop8: detected capacity change from 0 to 128
[  263.141321][ T8519] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  263.164802][ T8519] hpfs: filesystem error: improperly stopped
[  263.170997][ T8519] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  263.179034][ T8519] hpfs: You really don't want any checks? You are crazy...
[  263.186477][ T8519] hpfs: Code page index out of array
[  263.191999][ T8519] hpfs: code page support is disabled
[  263.229654][ T8519] hpfs: hpfs_map_4sectors(): unaligned read
[  263.238872][ T8519] hpfs: hpfs_map_4sectors(): unaligned read
[  263.245758][ T8519] hpfs: filesystem error: unable to find root dir
[  263.289930][ T8519] hpfs: hpfs_map_4sectors(): unaligned read
[  263.610212][   T11] team0 (unregistering): Port device team_slave_1 removed
[  263.660323][   T11] team0 (unregistering): Port device team_slave_0 removed
[  263.707770][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.765103][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  264.141381][   T11] bond0 (unregistering): Released all slaves
[  264.448454][ T8531] netlink: 112 bytes leftover after parsing attributes in process `syz.8.619'.
[  264.699456][ T8544] EXT4-fs warning (device sda1): verify_group_input:175: Bad blocks count 4294705151
[  266.696950][ T8602] rxe_eth0 speed is unknown, defaulting to 1000
[  266.841620][    C0] sched: RT throttling activated
[  266.904597][ T8589] loop8: detected capacity change from 0 to 131072
[  266.932456][ T8589] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0)
[  266.940678][ T8589] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  266.975913][ T8589] F2FS-fs (loop8): invalid crc value
[  267.010063][ T8589] F2FS-fs (loop8): Found nat_bits in checkpoint
[  267.079028][ T8589] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  267.086170][ T8589] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  267.922123][ T8636] tipc: Started in network mode
[  267.927210][ T8636] tipc: Node identity ac1414aa, cluster identity 4711
[  267.951577][ T8636] tipc: New replicast peer: 172.20.20.187
[  267.969388][ T8636] tipc: Enabled bearer <udp:syz0>, priority 10
[  268.401966][ T8650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.651'.
[  268.424681][ T8650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.651'.
[  269.073646][    T9] tipc: Node number set to 2886997162
[  269.705882][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.9.660'.
[  269.907218][ T8696] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  269.931819][   T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  270.187773][   T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  270.222519][   T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  270.251787][   T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  270.277785][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.705032][ T3543] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  270.742197][ T8726] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  270.764820][   T23] lg-g15 0003:046D:C222.000C: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0
[  270.932365][   T23] lg-g15 0003:046D:C222.000C: Error -90 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver
[  271.002705][   T23] usb 5-1: USB disconnect, device number 5
[  271.080960][ T8731] fido_id[8731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  273.530190][ T8822] loop8: detected capacity change from 0 to 2048
[  273.629651][ T8822] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  273.666168][ T8822] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  273.694007][ T8822] UDF-fs: Scanning with blocksize 512 failed
[  273.737076][ T8822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  274.314094][ T8849] ip_tables: iptables: counters copy to user failed while replacing table
[  274.491426][ T8855] loop0: detected capacity change from 0 to 8
[  274.591189][ T8857] loop4: detected capacity change from 0 to 16
[  274.602202][ T8857] erofs: (device loop4): mounted with root inode @ nid 36.
[  274.634934][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at folio 155 @ nid 36
[  274.645139][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at folio 154 @ nid 36
[  274.654476][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at folio 153 @ nid 36
[  274.663771][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at folio 152 @ nid 36
[  274.673939][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at folio 139 @ nid 36
[  274.683238][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at folio 138 @ nid 36
[  274.692712][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at folio 137 @ nid 36
[  274.702927][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at folio 136 @ nid 36
[  274.713371][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at folio 128 @ nid 36
[  274.723099][ T8857] erofs: (device loop4): z_erofs_readahead: readahead error at folio 120 @ nid 36
[  274.733369][ T8857] syz.4.693: attempt to access beyond end of device
[  274.733369][ T8857] loop4: rw=524288, sector=13478624032, nr_sectors = 32 limit=16
[  274.747803][ T8857] syz.4.693: attempt to access beyond end of device
[  274.747803][ T8857] loop4: rw=524288, sector=13478624040, nr_sectors = 32 limit=16
[  274.762245][ T8857] syz.4.693: attempt to access beyond end of device
[  274.762245][ T8857] loop4: rw=524288, sector=14550774152, nr_sectors = 32 limit=16
[  274.776809][ T8857] syz.4.693: attempt to access beyond end of device
[  274.776809][ T8857] loop4: rw=524288, sector=14550774160, nr_sectors = 32 limit=16
[  274.791340][ T8857] syz.4.693: attempt to access beyond end of device
[  274.791340][ T8857] loop4: rw=524288, sector=13716630376, nr_sectors = 32 limit=16
[  274.806710][ T8857] syz.4.693: attempt to access beyond end of device
[  274.806710][ T8857] loop4: rw=524288, sector=13716630384, nr_sectors = 32 limit=16
[  274.822718][ T8857] syz.4.693: attempt to access beyond end of device
[  274.822718][ T8857] loop4: rw=524288, sector=790384, nr_sectors = 32 limit=16
[  274.837719][ T8857] syz.4.693: attempt to access beyond end of device
[  274.837719][ T8857] loop4: rw=524288, sector=790392, nr_sectors = 32 limit=16
[  274.851811][ T8857] syz.4.693: attempt to access beyond end of device
[  274.851811][ T8857] loop4: rw=524288, sector=72, nr_sectors = 32 limit=16
[  274.865603][ T8857] syz.4.693: attempt to access beyond end of device
[  274.865603][ T8857] loop4: rw=524288, sector=80, nr_sectors = 32 limit=16
[  275.081876][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  275.229512][ T8871] ptp ptp0: new virtual clock ptp1
[  275.265882][ T8871] ptp ptp0: new virtual clock ptp2
[  275.287266][ T8871] ptp ptp0: new virtual clock ptp3
[  275.308594][ T8871] ptp ptp0: new virtual clock ptp4
[  275.325952][ T8871] ptp ptp0: guarantee physical clock free running
[  275.354301][ T8879] ptp ptp0: delete virtual clock ptp4
[  275.390374][ T8886] loop8: detected capacity change from 0 to 2048
[  275.465062][ T8879] ptp ptp0: delete virtual clock ptp3
[  275.476617][ T8886] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.525714][ T8879] ptp ptp0: delete virtual clock ptp2
[  275.572718][ T8879] ptp ptp0: delete virtual clock ptp1
[  275.606004][ T8879] ptp ptp0: only physical clock in use now
[  275.715364][ T8883] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  275.773961][ T8883] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 78 with max blocks 2 with error 28
[  275.816966][ T8883] EXT4-fs (loop8): This should not happen!! Data will be lost
[  275.816966][ T8883] 
[  275.835812][ T8883] EXT4-fs (loop8): Total free blocks count 0
[  275.850403][ T8883] EXT4-fs (loop8): Free/Dirty block details
[  275.867153][ T8883] EXT4-fs (loop8): free_blocks=2415919504
[  275.884481][ T8883] EXT4-fs (loop8): dirty_blocks=16
[  275.899838][ T8883] EXT4-fs (loop8): Block reservation details
[  275.909958][ T8883] EXT4-fs (loop8): i_reserved_data_blocks=1
[  276.027606][ T8008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.347175][ T8927] netlink: 32 bytes leftover after parsing attributes in process `syz.9.711'.
[  276.389887][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.9.711'.
[  276.416548][ T8927] netlink: 32 bytes leftover after parsing attributes in process `syz.9.711'.
[  276.440748][ T8927] netlink: 24 bytes leftover after parsing attributes in process `syz.9.711'.
[  276.641900][ T8940] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  276.779481][ T8947] loop0: detected capacity change from 0 to 1024
[  276.793374][ T8947] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  276.812649][ T8947] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  277.080351][ T8947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  277.411274][ T8967] loop8: detected capacity change from 0 to 512
[  277.469391][ T8967] EXT4-fs: Ignoring removed nobh option
[  277.509121][ T8021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.546657][ T8967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.595489][ T8976] FAULT_INJECTION: forcing a failure.
[  277.595489][ T8976] name failslab, interval 1, probability 0, space 0, times 0
[  277.651010][ T8967] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.700911][ T8976] CPU: 0 PID: 8976 Comm: syz.9.725 Not tainted syzkaller #0
[  277.708263][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  277.718356][ T8976] Call Trace:
[  277.721679][ T8976]  <TASK>
[  277.724663][ T8976]  dump_stack_lvl+0x18c/0x250
[  277.729391][ T8976]  ? show_regs_print_info+0x20/0x20
[  277.734642][ T8976]  ? load_image+0x420/0x420
[  277.739201][ T8976]  ? __lock_acquire+0x7eb0/0x7eb0
[  277.744294][ T8976]  should_fail_ex+0x394/0x4c0
[  277.749039][ T8976]  should_failslab+0x9/0x20
[  277.753591][ T8976]  slab_pre_alloc_hook+0x59/0x300
[  277.758653][ T8976]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  277.764678][ T8976]  kmem_cache_alloc_lru+0x4d/0x2c0
[  277.769834][ T8976]  ? new_inode_pseudo+0x82/0x1d0
[  277.774824][ T8976]  new_inode_pseudo+0x82/0x1d0
[  277.779651][ T8976]  alloc_anon_inode+0x1e/0x2f0
[  277.784466][ T8976]  aio_setup_ring+0x104/0xf30
[  277.789196][ T8976]  ? pcpu_alloc+0x11e7/0x1880
[  277.793926][ T8976]  ? ioctx_alloc+0x2e2/0x770
[  277.798559][ T8976]  ? free_ioctx_reqs+0x190/0x190
[  277.803552][ T8976]  ioctx_alloc+0x316/0x770
[  277.808059][ T8976]  __se_sys_io_setup+0x7b/0x190
[  277.812956][ T8976]  do_syscall_64+0x55/0xb0
[  277.817415][ T8976]  ? clear_bhb_loop+0x40/0x90
[  277.822140][ T8976]  ? clear_bhb_loop+0x40/0x90
[  277.826875][ T8976]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  277.832831][ T8976] RIP: 0033:0x7f1177f9fb19
[  277.837284][ T8976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  277.856936][ T8976] RSP: 002b:00007f1178ecf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  277.865397][ T8976] RAX: ffffffffffffffda RBX: 00007f1178225fa0 RCX: 00007f1177f9fb19
[  277.873419][ T8976] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  277.881477][ T8976] RBP: 00007f1178037af8 R08: 0000000000000000 R09: 0000000000000000
[  277.889498][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  277.897512][ T8976] R13: 00007f1178226038 R14: 00007f1178225fa0 R15: 00007ffdbdb65d28
[  277.905535][ T8976]  </TASK>
[  278.005599][ T8008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.157188][ T8990] mmap: syz.8.728 (8990) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  278.522580][    T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  278.721941][    T8] usb 1-1: Using ep0 maxpacket: 32
[  278.760146][    T8] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  278.780384][    T8] usb 1-1: config 0 has no interface number 0
[  278.795284][    T8] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  278.819022][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.839683][    T8] usb 1-1: Product: syz
[  278.855208][    T8] usb 1-1: Manufacturer: syz
[  278.861520][    T8] usb 1-1: SerialNumber: syz
[  278.869749][    T8] usb 1-1: config 0 descriptor??
[  278.879928][    T8] smsc95xx v2.0.0
[  279.006444][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.9.739'.
[  279.122078][ T5789] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  279.135312][ T9036] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2147483653 (only 8 groups)
[  279.295636][    T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  279.326817][    T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  279.351691][ T5789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  279.362552][ T5789] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  279.381527][ T5789] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  279.401451][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  279.422149][ T5789] usb 5-1: SerialNumber: syz
[  279.436179][ T5789] usb 5-1: bad CDC descriptors
[  279.704272][ T5872] usb 5-1: USB disconnect, device number 6
[  279.766157][    T8] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  279.797610][    T8] smsc95xx: probe of 1-1:0.67 failed with error -71
[  279.817859][    T8] usb 1-1: USB disconnect, device number 5
[  280.610432][ T5796] block nbd0: Receive control failed (result -32)
[  280.618985][ T9073] loop4: detected capacity change from 0 to 128
[  280.629984][ T9069] block nbd0: shutting down sockets
[  280.655067][ T9073] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  280.774697][ T9073] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  280.859350][ T9073] ext2 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.149621][ T8024] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  282.274748][ T9123] IPv6: sit1: Disabled Multicast RS
[  282.885029][ T9140] loop4: detected capacity change from 0 to 128
[  282.986097][ T9140] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8)
[  283.007942][ T9140] FAT-fs (loop4): Filesystem has been set read-only
[  283.016745][ T9140] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522)
[  283.211937][ T9145] TCP: TCP_TX_DELAY enabled
[  283.268614][ T9149] loop4: detected capacity change from 0 to 512
[  283.324986][ T9149] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  283.424009][ T9149] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.766: bad orphan inode 13
[  283.436014][ T9149] ext4_test_bit(bit=12, block=18) = 1
[  283.441460][ T9149] is_bad_inode(inode)=0
[  283.446225][ T9149] NEXT_ORPHAN(inode)=0
[  283.450345][ T9149] max_ino=32
[  283.455023][ T9149] i_nlink=1
[  283.459721][ T9149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  283.582790][ T9128] loop8: detected capacity change from 0 to 40427
[  283.640557][ T9128] F2FS-fs (loop8): invalid crc value
[  283.652183][ T9128] F2FS-fs (loop8): Found nat_bits in checkpoint
[  283.733479][ T8024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  283.873188][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  283.927741][ T9128] F2FS-fs (loop8): Start checkpoint disabled!
[  284.013618][ T9128] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  284.155953][ T9128] bio_check_eod: 8 callbacks suppressed
[  284.155977][ T9128] syz.8.761: attempt to access beyond end of device
[  284.155977][ T9128] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  284.463239][ T8318] kworker/u4:15: attempt to access beyond end of device
[  284.463239][ T8318] loop8: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  284.499195][ T8318] kworker/u4:15: attempt to access beyond end of device
[  284.499195][ T8318] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  284.533438][ T8318] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  284.540658][ T8318] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  285.344192][ T9208] loop8: detected capacity change from 0 to 4096
[  285.363682][ T9208] EXT4-fs: Ignoring removed bh option
[  285.404461][ T9208] EXT4-fs (loop8): Test dummy encryption mode enabled
[  285.440132][ T9208] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.570832][   T27] kauditd_printk_skb: 8 callbacks suppressed
[  285.570848][   T27] audit: type=1800 audit(1793627277.213:63): pid=9208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.775" name="file1" dev="loop8" ino=15 res=0 errno=0
[  285.755977][ T8008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.241990][ T5789] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  286.264828][ T9246] loop8: detected capacity change from 0 to 512
[  286.318554][ T9246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.348081][ T9246] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.453906][   T27] audit: type=1804 audit(1793627278.093:64): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.791" name="/newroot/76/file1/file1" dev="loop8" ino=15 res=1 errno=0
[  286.474777][    C0] vkms_vblank_simulate: vblank timer overrun
[  286.493025][ T5789] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30
[  286.549128][ T5789] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  286.551004][   T27] audit: type=1804 audit(1793627278.133:65): pid=9246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.791" name="/newroot/76/file1/file1" dev="loop8" ino=15 res=1 errno=0
[  286.584774][ T5789] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.619560][ T5789] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  286.647035][ T5789] usb 5-1: config 0 interface 0 has no altsetting 0
[  286.683179][ T5789] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  286.712700][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.747956][ T5789] usb 5-1: config 0 descriptor??
[  286.795182][ T8008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.186344][ T5789] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0
[  287.226869][ T5789] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0
[  287.242844][ T5789] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0
[  287.249672][ T5789] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0
[  287.271713][ T5789] ryos 0003:1E7D:3138.000D: unknown main item tag 0x0
[  287.284654][ T5789] ryos 0003:1E7D:3138.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0
[  287.499348][   T28] usb 5-1: USB disconnect, device number 7
[  288.737410][ T9325] loop0: detected capacity change from 0 to 128
[  288.927477][ T9333] loop4: detected capacity change from 0 to 128
[  289.549811][ T9362] netlink: 316 bytes leftover after parsing attributes in process `syz.8.824'.
[  289.709865][ T9373] ip_tables: iptables: counters copy to user failed while replacing table
[  289.734171][ T9373] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  289.748730][ T9373] ip_tables: iptables: counters copy to user failed while replacing table
[  289.941674][ T5789] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  290.133764][ T5789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  290.159289][ T5789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  290.171855][    T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  290.182654][ T5789] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  290.193736][ T5789] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  290.207960][ T5789] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  290.219341][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.262504][   T27] audit: type=1804 audit(1793627281.903:66): pid=9394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.832" name="/newroot/91/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=100 res=1 errno=0
[  290.371812][    T8] usb 1-1: Using ep0 maxpacket: 16
[  290.382376][    T8] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  290.394487][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.404177][    T8] usb 1-1: Product: syz
[  290.408475][    T8] usb 1-1: Manufacturer: syz
[  290.414235][    T8] usb 1-1: SerialNumber: syz
[  290.424758][    T8] usb 1-1: config 0 descriptor??
[  290.439662][    T8] usb 1-1: selecting invalid altsetting 1
[  290.446265][    T8] technisat-usb2: could not set alternate setting to 0
[  290.660604][    T8] technisat-usb2: firmware version: 0.0
[  290.679103][    T8] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  291.118648][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  291.137633][    T8] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2))
[  291.156944][    T8] usb 1-1: media controller created
[  291.165607][    T8] technisat-usb2: i2c-error: out failed 53 = -22
[  291.178966][    T8] dvb-usb: MAC address reading failed.
[  291.241945][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  291.265583][ T9379] technisat-usb2: i2c TX buffer can't exceed 62 bytes (dev 0x01)
[  291.277657][ T5789] gud 5-1:1.0: USB-1: Failed to add properties (ret=-5)
[  291.284781][ T9379] technisat-usb2: i2c-error: out failed 01 = -22
[  291.311831][ T5789] gud 5-1:1.0: Failed to get connectors (error=-5)
[  291.318434][ T5789] gud: probe of 5-1:1.0 failed with error -5
[  291.329250][ T9422] FAULT_INJECTION: forcing a failure.
[  291.329250][ T9422] name failslab, interval 1, probability 0, space 0, times 0
[  291.372239][ T9422] CPU: 0 PID: 9422 Comm: syz.8.837 Not tainted syzkaller #0
[  291.379590][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  291.389677][ T9422] Call Trace:
[  291.392991][ T9422]  <TASK>
[  291.395993][ T9422]  dump_stack_lvl+0x18c/0x250
[  291.400748][ T9422]  ? show_regs_print_info+0x20/0x20
[  291.406011][ T9422]  ? load_image+0x420/0x420
[  291.410576][ T9422]  ? __might_sleep+0xe0/0xe0
[  291.415231][ T9422]  ? __lock_acquire+0x7eb0/0x7eb0
[  291.420329][ T9422]  should_fail_ex+0x394/0x4c0
[  291.425066][ T9422]  should_failslab+0x9/0x20
[  291.429646][ T9422]  slab_pre_alloc_hook+0x59/0x300
[  291.434722][ T9422]  ? nfnetlink_rcv+0xebe/0x2490
[  291.439726][ T9422]  __kmem_cache_alloc_node+0x53/0x260
[  291.445146][ T9422]  ? nfnetlink_rcv+0xebe/0x2490
[  291.450059][ T9422]  kmalloc_trace+0x2a/0xe0
[  291.454531][ T9422]  nfnetlink_rcv+0xebe/0x2490
[  291.459299][ T9422]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  291.464957][ T9422]  ? __lock_acquire+0x7eb0/0x7eb0
[  291.470034][ T9422]  ? netlink_deliver_tap+0x2e/0x1b0
[  291.475338][ T9422]  netlink_unicast+0x856/0x9e0
[  291.480191][ T9422]  netlink_sendmsg+0x8d0/0xbf0
[  291.485031][ T9422]  ? netlink_getsockopt+0x590/0x590
[  291.490312][ T9422]  ? apparmor_socket_sendmsg+0x8e/0x330
[  291.495945][ T9422]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  291.501284][ T9422]  ? security_socket_sendmsg+0x80/0xa0
[  291.506815][ T9422]  ? netlink_getsockopt+0x590/0x590
[  291.512051][ T9422]  ____sys_sendmsg+0x61b/0x980
[  291.516921][ T9422]  ? __asan_memset+0x22/0x40
[  291.521549][ T9422]  ? __sys_sendmsg_sock+0x30/0x30
[  291.526613][ T9422]  ? __import_iovec+0x5f2/0x850
[  291.531501][ T9422]  ? import_iovec+0x73/0xa0
[  291.536027][ T9422]  ___sys_sendmsg+0x2a6/0x360
[  291.540734][ T9422]  ? __sys_sendmsg+0x2b0/0x2b0
[  291.545554][ T9422]  __se_sys_sendmsg+0x1d0/0x2c0
[  291.550505][ T9422]  ? __x64_sys_sendmsg+0x80/0x80
[  291.555496][ T9422]  ? lockdep_hardirqs_on+0x98/0x150
[  291.560767][ T9422]  do_syscall_64+0x55/0xb0
[  291.565221][ T9422]  ? clear_bhb_loop+0x40/0x90
[  291.569967][ T9422]  ? clear_bhb_loop+0x40/0x90
[  291.574698][ T9422]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  291.580636][ T9422] RIP: 0033:0x7f73bcd9fb19
[  291.585079][ T9422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  291.604706][ T9422] RSP: 002b:00007f73bdb87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.613140][ T9422] RAX: ffffffffffffffda RBX: 00007f73bd025fa0 RCX: 00007f73bcd9fb19
[  291.621142][ T9422] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004
[  291.629140][ T9422] RBP: 00007f73bce37af8 R08: 0000000000000000 R09: 0000000000000000
[  291.637132][ T9422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  291.645134][ T9422] R13: 00007f73bd026038 R14: 00007f73bd025fa0 R15: 00007ffcdc345fa8
[  291.653151][ T9422]  </TASK>
[  291.725341][    T8] DVB: Unable to find symbol stv090x_attach()
[  291.752127][    T8] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)'
[  291.793153][ T5789] usb 5-1: USB disconnect, device number 8
[  291.941856][    T8] rc_core: IR keymap rc-technisat-usb2 not found
[  291.961671][    T8] Registered IR keymap rc-empty
[  291.991888][    T8] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  292.023660][    T8] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input13
[  292.101696][    T8] dvb-usb: schedule remote query interval to 100 msecs.
[  292.133750][    T8] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected.
[  292.182560][    T8] usb 1-1: USB disconnect, device number 6
[  292.453803][    T8] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected.
[  292.967850][ T9461] fuse: Bad value for 'fd'
[  293.257105][ T9434] loop8: detected capacity change from 0 to 40427
[  293.285042][ T9434] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  293.317964][ T9434] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  293.337420][ T9434] F2FS-fs (loop8): invalid crc value
[  293.356756][ T9434] F2FS-fs (loop8): Found nat_bits in checkpoint
[  293.476839][ T9479] loop4: detected capacity change from 0 to 512
[  293.577635][ T9479] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.853: Unrecognised inode hash code 4
[  293.631994][ T9434] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  293.642515][ T9479] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.853: Corrupt directory, running e2fsck is recommended
[  293.663462][ T9479] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  293.667795][ T9434] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  293.672361][ T9479] EXT4-fs error (device loop4): ext4_iget_extra_inode:4752: inode #15: comm syz.4.853: corrupted in-inode xattr: invalid ea_ino
[  293.697341][ T9479] EXT4-fs (loop4): Remounting filesystem read-only
[  293.707769][ T9479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.858935][ T9479] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.853: Unrecognised inode hash code 4
[  293.887077][   T27] audit: type=1804 audit(1793627285.533:67): pid=9496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.840" name="/newroot/93/file0/bus" dev="loop8" ino=10 res=1 errno=0
[  293.931306][ T9479] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.853: Corrupt directory, running e2fsck is recommended
[  293.994519][ T9479] EXT4-fs warning (device loop4): ext4_empty_dir:3149: inode #2: comm syz.4.853: directory missing '.'
[  294.148591][ T8024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.839687][ T9518] loop0: detected capacity change from 0 to 512
[  294.886719][ T9518] ext2: Bad value for 'debug_want_extra_isize'
[  295.798378][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.8.867'.
[  295.956737][ T9543] bond1: entered promiscuous mode
[  296.007512][ T9543] 8021q: adding VLAN 0 to HW filter on device bond1
[  296.112692][ T9548] 8021q: adding VLAN 0 to HW filter on device bond1
[  296.138504][ T9548] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  296.178868][ T9548] bond1: (slave ip6gre1): Error -95 calling set_mac_address
[  296.456707][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.871'.
[  297.110897][   T23] IPVS: starting estimator thread 0...
[  297.131990][ T9583] IPVS: fo: FWM 3 0x00000003 - no destination available
[  297.139094][    C0] IPVS: fo: FWM 3 0x00000003 - no destination available
[  297.194844][ T9587] netlink: 'syz.9.877': attribute type 3 has an invalid length.
[  297.221787][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.9.877'.
[  297.231685][ T9584] IPVS: using max 20 ests per chain, 48000 per kthread
[  297.837432][ T9612] clocksource: Switched to clocksource acpi_pm
[  297.854240][ T9612] clocksource: Switched to clocksource tsc
[  298.588711][ T9649] FAULT_INJECTION: forcing a failure.
[  298.588711][ T9649] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  298.608716][ T9649] CPU: 1 PID: 9649 Comm: syz.8.893 Not tainted syzkaller #0
[  298.616058][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  298.626145][ T9649] Call Trace:
[  298.629462][ T9649]  <TASK>
[  298.632430][ T9649]  dump_stack_lvl+0x18c/0x250
[  298.637160][ T9649]  ? show_regs_print_info+0x20/0x20
[  298.642404][ T9649]  ? load_image+0x420/0x420
[  298.646956][ T9649]  ? __lock_acquire+0x7eb0/0x7eb0
[  298.652046][ T9649]  should_fail_ex+0x394/0x4c0
[  298.656774][ T9649]  prepare_alloc_pages+0x1e1/0x5b0
[  298.661957][ T9649]  __alloc_pages+0x134/0x460
[  298.666594][ T9649]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  298.672710][ T9649]  ? zone_statistics+0x170/0x170
[  298.677699][ T9649]  ? alloc_pages+0x4e1/0x740
[  298.682344][ T9649]  kimage_alloc_pages+0xc5/0x330
[  298.687380][ T9649]  kimage_alloc_control_pages+0x483/0xb30
[  298.693181][ T9649]  ? kimage_free_pages+0x1d0/0x1d0
[  298.698367][ T9649]  do_kexec_load+0x354/0x6d0
[  298.703031][ T9649]  __se_sys_kexec_load+0x134/0x160
[  298.708195][ T9649]  do_syscall_64+0x55/0xb0
[  298.712706][ T9649]  ? clear_bhb_loop+0x40/0x90
[  298.717426][ T9649]  ? clear_bhb_loop+0x40/0x90
[  298.722159][ T9649]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  298.728121][ T9649] RIP: 0033:0x7f73bcd9fb19
[  298.732578][ T9649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.752252][ T9649] RSP: 002b:00007f73bdb87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[  298.760722][ T9649] RAX: ffffffffffffffda RBX: 00007f73bd025fa0 RCX: 00007f73bcd9fb19
[  298.768742][ T9649] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000
[  298.776746][ T9649] RBP: 00007f73bce37af8 R08: 0000000000000000 R09: 0000000000000000
[  298.784755][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  298.792775][ T9649] R13: 00007f73bd026038 R14: 00007f73bd025fa0 R15: 00007ffcdc345fa8
[  298.800834][ T9649]  </TASK>
[  298.825287][ T9649] kexec: Could not allocate control_code_buffer
[  299.796895][ T5796] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  300.522039][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  300.976199][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.9.912'.
[  301.082963][ T9730] ip_tables: iptables: counters copy to user failed while replacing table
[  301.252060][ T9733] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  301.430158][ T9744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.918'.
[  301.483708][ T9751] netlink: 104 bytes leftover after parsing attributes in process `syz.4.921'.
[  301.618340][ T9759] loop5: detected capacity change from 0 to 7
[  301.638005][ T9759] Dev loop5: unable to read RDB block 7
[  301.663705][ T9759]  loop5: unable to read partition table
[  301.669616][ T9759] loop5: partition table beyond EOD, truncated
[  301.684393][ T9759] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  301.988966][   T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.043350][   T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.306686][   T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.345408][   T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.402042][ T9776] bridge0: port 3(syz_tun) entered blocking state
[  302.408791][ T9776] bridge0: port 3(syz_tun) entered disabled state
[  302.426174][ T9776] syz_tun: entered allmulticast mode
[  302.445711][ T9776] syz_tun: entered promiscuous mode
[  302.470223][ T9776] bridge0: port 3(syz_tun) entered blocking state
[  302.478473][ T9776] bridge0: port 3(syz_tun) entered forwarding state
[  302.570153][   T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  302.631829][   T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.680318][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.4.933'.
[  302.740063][ T9788] bond0: entered promiscuous mode
[  302.777409][ T9788] gretap0: entered promiscuous mode
[  302.798386][ T9788] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  302.843258][ T9788] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  302.863094][ T9788] hsr0: entered promiscuous mode
[  303.066793][   T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  303.097695][   T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.109457][ T9802] FAULT_INJECTION: forcing a failure.
[  303.109457][ T9802] name failslab, interval 1, probability 0, space 0, times 0
[  303.146972][ T9802] CPU: 0 PID: 9802 Comm: syz.8.937 Not tainted syzkaller #0
[  303.154322][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  303.164420][ T9802] Call Trace:
[  303.167722][ T9802]  <TASK>
[  303.170683][ T9802]  dump_stack_lvl+0x18c/0x250
[  303.175432][ T9802]  ? show_regs_print_info+0x20/0x20
[  303.180711][ T9802]  ? load_image+0x420/0x420
[  303.185272][ T9802]  ? __might_sleep+0xe0/0xe0
[  303.189907][ T9802]  ? __lock_acquire+0x7eb0/0x7eb0
[  303.194991][ T9802]  should_fail_ex+0x394/0x4c0
[  303.199730][ T9802]  should_failslab+0x9/0x20
[  303.204281][ T9802]  slab_pre_alloc_hook+0x59/0x300
[  303.209372][ T9802]  ? ioc_cpd_alloc+0x73/0x110
[  303.214140][ T9802]  __kmem_cache_alloc_node+0x53/0x260
[  303.219578][ T9802]  ? ioc_cpd_alloc+0x73/0x110
[  303.224313][ T9802]  kmalloc_trace+0x2a/0xe0
[  303.228797][ T9802]  ioc_cpd_alloc+0x73/0x110
[  303.233342][ T9802]  blkcg_css_alloc+0x44f/0xa60
[  303.238137][ T9802]  cgroup_apply_control_enable+0x3cc/0xb00
[  303.243983][ T9802]  cgroup_mkdir+0xc83/0xe70
[  303.248515][ T9802]  ? css_task_iter_end+0x2c0/0x2c0
[  303.253654][ T9802]  ? kernfs_iop_permission+0x2c4/0x3b0
[  303.259169][ T9802]  ? css_task_iter_end+0x2c0/0x2c0
[  303.264319][ T9802]  kernfs_iop_mkdir+0x241/0x3e0
[  303.269204][ T9802]  vfs_mkdir+0x2a5/0x470
[  303.273490][ T9802]  do_mkdirat+0x1dc/0x450
[  303.277855][ T9802]  ? vfs_mkdir+0x470/0x470
[  303.282305][ T9802]  __x64_sys_mkdirat+0x89/0xa0
[  303.287098][ T9802]  do_syscall_64+0x55/0xb0
[  303.291531][ T9802]  ? clear_bhb_loop+0x40/0x90
[  303.296244][ T9802]  ? clear_bhb_loop+0x40/0x90
[  303.300951][ T9802]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  303.306874][ T9802] RIP: 0033:0x7f73bcd9fb19
[  303.311324][ T9802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  303.330966][ T9802] RSP: 002b:00007f73bdb87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  303.339455][ T9802] RAX: ffffffffffffffda RBX: 00007f73bd025fa0 RCX: 00007f73bcd9fb19
[  303.347498][ T9802] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  303.355494][ T9802] RBP: 00007f73bce37af8 R08: 0000000000000000 R09: 0000000000000000
[  303.363530][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  303.371536][ T9802] R13: 00007f73bd026038 R14: 00007f73bd025fa0 R15: 00007ffcdc345fa8
[  303.379563][ T9802]  </TASK>
[  303.518925][ T9808] loop0: detected capacity change from 0 to 2048
[  303.596329][ T9808] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  304.017500][ T9820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.945'.
[  304.125939][    T9] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  304.238643][ T9828] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[  304.370978][    T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.402071][    T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  304.411281][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.462050][    T9] usb 9-1: config 0 descriptor??
[  304.477968][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  304.520440][ T9838] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  304.892082][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  304.910685][    T9] pwc: recv_control_msg error -32 req 02 val 2700
[  304.928850][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  305.142635][    T9] pwc: recv_control_msg error -71 req 04 val 1300
[  305.176927][    T9] pwc: recv_control_msg error -71 req 04 val 1400
[  305.193639][    T9] pwc: recv_control_msg error -71 req 02 val 2000
[  305.215722][    T9] pwc: recv_control_msg error -71 req 02 val 2100
[  305.235346][    T9] pwc: recv_control_msg error -71 req 04 val 1500
[  305.250654][    T9] pwc: recv_control_msg error -71 req 02 val 2500
[  305.270202][    T9] pwc: recv_control_msg error -71 req 02 val 2400
[  305.284427][    T9] pwc: recv_control_msg error -71 req 02 val 2600
[  305.321951][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  305.339743][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  305.365576][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  305.381395][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  305.494603][    T9] pwc: Registered as video103.
[  305.510488][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input14
[  305.560899][    T9] usb 9-1: USB disconnect, device number 3
[  306.071965][ T9884] loop8: detected capacity change from 0 to 128
[  306.166194][   T60] hsr_slave_0: left promiscuous mode
[  306.199620][   T60] hsr_slave_1: left promiscuous mode
[  306.218163][ T9886] IPv4: Oversized IP packet from 127.202.26.0
[  306.260383][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  306.288780][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  306.337445][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  306.392678][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  306.431083][   T60] bridge_slave_1: left allmulticast mode
[  306.451211][   T60] bridge_slave_1: left promiscuous mode
[  306.481546][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.602586][   T60] bridge_slave_0: left allmulticast mode
[  306.613467][   T60] bridge_slave_0: left promiscuous mode
[  306.619252][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.768149][ T9909] loop0: detected capacity change from 0 to 256
[  306.787839][   T60] veth1_macvtap: left promiscuous mode
[  306.821896][   T60] veth0_macvtap: left promiscuous mode
[  306.851911][   T60] veth1_vlan: left promiscuous mode
[  306.867664][   T60] veth0_vlan: left promiscuous mode
[  307.705555][ T9923] loop0: detected capacity change from 0 to 32768
[  307.746944][ T9923] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.970 (9923)
[  307.818042][ T9923] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  307.841916][ T9923] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  307.859894][ T9923] BTRFS info (device loop0): using free space tree
[  307.931985][ T9940] block nbd8: Device being setup by another task
[  307.975525][ T9933] block nbd8: shutting down sockets
[  308.152549][ T9923] BTRFS info (device loop0): enabling ssd optimizations
[  308.440887][   T27] audit: type=1804 audit(1793627300.078:68): pid=9923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.970" name="/newroot/107/file0/bus" dev="loop0" ino=263 res=1 errno=0
[  308.799465][ T8021] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  309.329928][   T60] team0 (unregistering): Port device team_slave_1 removed
[  309.404399][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.459967][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.632342][ T7698] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  309.850972][ T7698] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  309.875217][ T7698] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.896223][ T7698] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  309.906394][   T60] bond0 (unregistering): Released all slaves
[  309.908530][ T7698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.920618][ T7698] usb 1-1: Product: syz
[  309.930900][ T7698] usb 1-1: Manufacturer: syz
[  309.935905][ T7698] usb 1-1: SerialNumber: syz
[  309.949452][ T7698] cdc_mbim 1-1:1.0: skipping garbage
[  310.231366][ T9974] loop8: detected capacity change from 0 to 512
[  310.343764][ T9974] FAT-fs (loop8): error, corrupted file size (i_pos 51, 8960)
[  310.392213][ T9974] FAT-fs (loop8): error, corrupted file size (i_pos 51, 8960)
[  310.468762][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'.
[  310.506930][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'.
[  310.982907][ T7698] cdc_mbim 1-1:1.0: bind() failure
[  310.999304][ T7698] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  311.021771][ T7698] cdc_ncm 1-1:1.1: bind() failure
[  311.071879][ T5789] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  311.132138][ T5875] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  311.211074][    T9] usb 1-1: USB disconnect, device number 7
[  311.273303][ T5789] usb 5-1: Using ep0 maxpacket: 16
[  311.293402][ T5789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  311.312314][ T5789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  311.322238][ T5875] usb 9-1: Using ep0 maxpacket: 16
[  311.334052][ T5875] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.345054][ T5789] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  311.364536][ T5789] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.372183][ T5875] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.383527][ T5789] usb 5-1: Product: syz
[  311.383546][ T5789] usb 5-1: Manufacturer: syz
[  311.383561][ T5789] usb 5-1: SerialNumber: syz
[  311.437998][ T5875] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  311.495632][ T5875] usb 9-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[  311.526746][ T5875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.562398][ T5875] usb 9-1: config 0 descriptor??
[  311.640702][ T5789] usb 5-1: 0:2 : does not exist
[  311.675177][ T5789] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  311.768887][ T5789] usb 5-1: USB disconnect, device number 9
[  311.979561][T10019] loop0: detected capacity change from 0 to 256
[  312.034879][ T5875] hid-generic 0003:057E:2019.000E: hidraw0: USB HID v0.05 Device [HID 057e:2019] on usb-dummy_hcd.8-1/input0
[  312.054997][T10019] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  312.146244][   T27] audit: type=1800 audit(1793627303.788:69): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.990" name="file1" dev="loop0" ino=1048744 res=0 errno=0
[  312.561980][    T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  312.731514][   T23] usb 9-1: USB disconnect, device number 4
[  312.761737][    T8] usb 1-1: Using ep0 maxpacket: 16
[  312.776119][    T8] usb 1-1: config 0 has no interfaces?
[  312.791151][    T8] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  312.829118][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.841045][    T8] usb 1-1: Product: syz
[  312.857849][    T8] usb 1-1: Manufacturer: syz
[  312.866323][    T8] usb 1-1: SerialNumber: syz
[  312.885346][    T8] usb 1-1: config 0 descriptor??
[  312.950890][T10039] bridge_slave_0: left allmulticast mode
[  312.960055][T10039] bridge_slave_0: left promiscuous mode
[  312.970323][T10039] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.126778][    T8] usb 1-1: USB disconnect, device number 8
[  313.859719][T10047] loop4: detected capacity change from 0 to 40427
[  313.892727][T10047] F2FS-fs (loop4): invalid crc value
[  313.906639][T10047] F2FS-fs (loop4): Found nat_bits in checkpoint
[  313.964329][T10075] loop0: detected capacity change from 0 to 512
[  314.010215][T10075] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  314.061530][T10047] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  314.085214][T10075] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1001: invalid indirect mapped block 32768 (level 2)
[  314.111291][T10075] EXT4-fs (loop0): 1 orphan inode deleted
[  314.142246][T10075] EXT4-fs (loop0): 1 truncate cleaned up
[  314.164582][T10075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  314.542011][T10078] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  314.828544][ T8021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.920370][T10099] netlink: 'syz.9.1014': attribute type 12 has an invalid length.
[  314.970207][T10099] ip6gre1: entered promiscuous mode
[  314.985960][T10099] ip6gre1: entered allmulticast mode
[  315.842303][ T5884] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  315.856827][T10143] loop4: detected capacity change from 0 to 8192
[  315.875538][T10143] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  315.888780][T10143] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  315.899781][T10143] REISERFS (device loop4): using ordered data mode
[  315.906516][T10143] reiserfs: using flush barriers
[  315.913863][T10143] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  315.936117][T10143] REISERFS (device loop4): checking transaction log (loop4)
[  316.058152][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  316.103679][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.147610][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  316.196579][ T5884] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  316.223997][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.240724][T10143] REISERFS (device loop4): Using tea hash to sort names
[  316.249323][T10143] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  316.263826][ T5884] usb 1-1: config 0 descriptor??
[  316.721620][ T5884] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving
[  316.768003][ T5884] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  317.158538][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  317.262436][T10187] loop8: detected capacity change from 0 to 2048
[  317.283051][T10187] UDF-fs: warning (device loop8): udf_fill_super: No fileset found
[  317.305628][ T5884] usb 1-1: USB disconnect, device number 9
[  317.333412][T10187] jffs2: notice: (10187) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  317.411773][ T1193] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  317.477070][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1027'.
[  317.615383][ T1193] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  317.646311][ T1193] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  317.659947][ T1193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.676900][ T1193] usb 5-1: config 0 descriptor??
[  318.104652][ T1193] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  318.127261][ T1193] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  318.148906][ T1193] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  318.168571][ T1193] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  318.186155][ T1193] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  318.211828][ T1193] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  318.239208][ T1193] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  318.261858][ T1193] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  318.268944][ T1193] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  318.292074][ T1193] uclogic 0003:5543:0003.0010: unknown main item tag 0x0
[  318.329449][ T1193] uclogic 0003:5543:0003.0010: No inputs registered, leaving
[  318.373901][ T1193] uclogic 0003:5543:0003.0010: hidraw0: USB HID v0.02 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0
[  318.426477][ T1193] usb 5-1: USB disconnect, device number 10
[  318.505356][T10227] fido_id[10227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  318.630009][T10237] netlink: 203516 bytes leftover after parsing attributes in process `syz.8.1038'.
[  319.046876][T10255] xt_hashlimit: size too large, truncated to 1048576
[  319.106552][T10250] loop8: detected capacity change from 0 to 8192
[  319.122873][T10259] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  319.178406][T10250] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  319.191920][T10250] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal
[  319.201475][T10250] REISERFS (device loop8): using ordered data mode
[  319.211761][T10250] reiserfs: using flush barriers
[  319.246541][T10250] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  319.330291][T10250] REISERFS (device loop8): checking transaction log (loop8)
[  319.375561][T10250] REISERFS (device loop8): Using r5 hash to sort names
[  319.410722][T10250] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage.
[  319.565452][T10269] loop0: detected capacity change from 0 to 128
[  319.575651][   T27] audit: type=1800 audit(1793627311.218:70): pid=10250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1042" name="file1" dev="loop8" ino=3 res=0 errno=0
[  319.640624][T10269] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  319.681717][T10269] hpfs: filesystem error: improperly stopped
[  319.687764][T10269] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  319.751716][T10269] hpfs: You really don't want any checks? You are crazy...
[  319.773910][T10269] hpfs: Code page index out of array
[  319.779281][T10269] hpfs: code page support is disabled
[  319.812893][T10269] hpfs: hpfs_map_4sectors(): unaligned read
[  319.818980][T10269] hpfs: hpfs_map_4sectors(): unaligned read
[  319.841937][T10269] hpfs: filesystem error: unable to find root dir
[  319.944904][T10269] hpfs: hpfs_map_4sectors(): unaligned read
[  321.610587][T10320] loop0: detected capacity change from 0 to 4096
[  322.166849][T10334] loop0: detected capacity change from 0 to 128
[  322.213207][T10334] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  322.817867][T10356] loop0: detected capacity change from 0 to 512
[  322.883027][T10356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.968703][T10356] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.189359][ T8021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.344308][T10375] tls_set_device_offload_rx: netdev not found
[  323.789387][T10391] loop8: detected capacity change from 0 to 512
[  323.822435][T10391] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  323.898334][T10391] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #16: comm syz.8.1070: invalid indirect mapped block 32768 (level 2)
[  323.968132][T10391] EXT4-fs (loop8): 1 orphan inode deleted
[  323.999833][T10391] EXT4-fs (loop8): 1 truncate cleaned up
[  324.028705][T10391] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.219876][ T8008] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.442097][T10160] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  324.588351][T10415] Bluetooth: ISO socket layer initialized
[  324.635019][T10160] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  324.656533][T10160] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  324.679194][T10160] usb 1-1: Product: syz
[  324.698393][T10160] usb 1-1: SerialNumber: syz
[  324.726143][T10160] usb 1-1: config 0 descriptor??
[  324.939374][T10160] hso 1-1:0.0: Can't find BULK IN endpoint
[  325.150795][   T28] usb 1-1: USB disconnect, device number 10
[  326.052078][ T1193] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  326.241830][ T1193] usb 1-1: Using ep0 maxpacket: 8
[  326.257891][ T1193] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  326.287644][ T1193] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  326.311199][ T1193] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  326.330747][ T1193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.360757][ T1193] kobil_sct 1-1:1.0: KOBIL USB smart card terminal converter detected
[  326.397413][ T1193] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  326.556239][T10501] netlink: 112 bytes leftover after parsing attributes in process `syz.9.1097'.
[  327.196778][ T5789] usb 1-1: USB disconnect, device number 11
[  327.230185][ T5789] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  327.268548][ T5789] kobil_sct 1-1:1.0: device disconnected
[  327.469889][T10538] tipc: Started in network mode
[  327.479462][T10538] tipc: Node identity ac1414aa, cluster identity 4711
[  327.495268][T10538] tipc: New replicast peer: 172.20.20.187
[  327.511115][T10538] tipc: Enabled bearer <udp:syz0>, priority 10
[  327.814714][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1107'.
[  328.623905][ T5789] tipc: Node number set to 2886997162
[  328.920079][T10591] ptp ptp0: new virtual clock ptp1
[  328.942533][T10591] ptp ptp0: new virtual clock ptp2
[  328.975692][T10591] ptp ptp0: new virtual clock ptp3
[  329.013229][T10591] ptp ptp0: new virtual clock ptp4
[  329.018405][T10591] ptp ptp0: guarantee physical clock free running
[  329.061746][T10595] ptp ptp0: delete virtual clock ptp4
[  329.093549][T10595] ptp ptp0: delete virtual clock ptp3
[  329.120182][T10595] ptp ptp0: delete virtual clock ptp2
[  329.145423][T10595] ptp ptp0: delete virtual clock ptp1
[  329.162068][T10595] ptp ptp0: only physical clock in use now
[  329.303690][T10604] EXT4-fs warning (device sda1): verify_group_input:175: Bad blocks count 4294705151
[  329.320119][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1127'.
[  330.673104][T10650] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  332.572413][T10687] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  333.582741][ T5789] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  333.808290][ T5789] usb 1-1: Using ep0 maxpacket: 8
[  333.844884][ T5789] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  333.892435][ T5789] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  333.960427][ T5789] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  334.284942][ T5789] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  334.331398][T10713] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1151'.
[  334.337390][ T5789] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  334.431956][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  334.750790][ T5789] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  334.787034][ T5789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.262331][ T5789] usb 1-1: GET_CAPABILITIES returned 0
[  335.267977][ T5789] usbtmc 1-1:16.0: can't read capabilities
[  335.570157][  T788] usb 1-1: USB disconnect, device number 12
[  336.512109][  T788] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  336.765611][  T788] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  336.811588][  T788] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.831431][  T788] usb 9-1: Product: syz
[  336.841999][  T788] usb 9-1: Manufacturer: syz
[  336.857195][  T788] usb 9-1: SerialNumber: syz
[  336.883952][  T788] usb 9-1: config 0 descriptor??
[  337.499464][  T788] usb 9-1: Firmware: major: 63, minor: 28, hardware type: UNKNOWN (21)
[  337.838762][  T788] usb 9-1: no permanent extended address found, random address set
[  338.001190][  T788] usb 9-1: atusb_probe: initialization failed, error = -524
[  338.202837][  T788] atusb: probe of 9-1:0.0 failed with error -524
[  338.351154][T10773] loop0: detected capacity change from 0 to 256
[  338.441176][T10773] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  338.481855][  T788] usb 9-1: USB disconnect, device number 5
[  338.593494][T10776] loop4: detected capacity change from 0 to 1024
[  338.719794][ T8442] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  339.442170][T10783] tls_set_device_offload: netdev not found
[  339.754376][T10788] ip_tables: iptables: counters copy to user failed while replacing table
[  340.294590][T10801] gadgetfs: bound to dummy_udc driver
[  340.731595][T10781] loop8: detected capacity change from 0 to 40427
[  340.765344][T10781] F2FS-fs (loop8): Wrong secs_per_zone / total_sections (262145, 24)
[  340.787643][T10781] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  340.817345][T10781] F2FS-fs (loop8): invalid crc value
[  340.824867][T10781] F2FS-fs (loop8): invalid crc value
[  340.830277][T10781] F2FS-fs (loop8): Failed to get valid F2FS checkpoint
[  341.482649][T10831] ip_tables: iptables: counters copy to user failed while replacing table
[  341.531254][T10831] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  341.579030][T10831] ip_tables: iptables: counters copy to user failed while replacing table
[  342.370738][T10826] loop0: detected capacity change from 0 to 40427
[  342.380686][T10826] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  342.443606][T10826] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  342.514109][T10826] F2FS-fs (loop0): invalid crc value
[  342.553678][T10826] F2FS-fs (loop0): Found nat_bits in checkpoint
[  342.804027][T10826] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  342.823737][T10826] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  343.035602][   T27] audit: type=1804 audit(1793627334.678:71): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1188" name="/newroot/153/file0/bus" dev="loop0" ino=10 res=1 errno=0
[  344.493618][T10908] netlink: 'syz.8.1196': attribute type 3 has an invalid length.
[  344.501474][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1196'.
[  344.860342][ T8322] Bluetooth: hci0: Frame reassembly failed (-84)
[  346.469071][T10948] FAULT_INJECTION: forcing a failure.
[  346.469071][T10948] name failslab, interval 1, probability 0, space 0, times 0
[  346.469267][T10948] CPU: 1 PID: 10948 Comm: syz.4.1213 Not tainted syzkaller #0
[  346.469292][T10948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  346.469307][T10948] Call Trace:
[  346.469317][T10948]  <TASK>
[  346.469328][T10948]  dump_stack_lvl+0x18c/0x250
[  346.469373][T10948]  ? show_regs_print_info+0x20/0x20
[  346.469406][T10948]  ? load_image+0x420/0x420
[  346.469437][T10948]  ? __might_sleep+0xe0/0xe0
[  346.469469][T10948]  ? __lock_acquire+0x7eb0/0x7eb0
[  346.469512][T10948]  should_fail_ex+0x394/0x4c0
[  346.469549][T10948]  should_failslab+0x9/0x20
[  346.469570][T10948]  slab_pre_alloc_hook+0x59/0x300
[  346.469596][T10948]  ? drm_atomic_state_init+0x9c/0x310
[  346.469666][T10948]  ? drm_atomic_state_init+0x9c/0x310
[  346.469691][T10948]  __kmem_cache_alloc_node+0x53/0x260
[  346.469722][T10948]  ? drm_atomic_state_init+0x9c/0x310
[  346.469747][T10948]  __kmalloc+0xa7/0x240
[  346.469787][T10948]  drm_atomic_state_init+0x9c/0x310
[  346.469818][T10948]  drm_atomic_state_alloc+0xbb/0x100
[  346.469846][T10948]  drm_client_modeset_commit_atomic+0x119/0x7b0
[  346.469891][T10948]  ? trace_contention_end+0x39/0xe0
[  346.469916][T10948]  ? __mutex_lock+0x30d/0xce0
[  346.469940][T10948]  ? drm_client_modeset_check+0x180/0x180
[  346.469970][T10948]  ? __mutex_lock+0x30d/0xce0
[  346.470008][T10948]  ? mutex_lock_nested+0x20/0x20
[  346.470029][T10948]  ? __drm_fb_helper_restore_fbdev_mode_unlocked+0x77/0x140
[  346.470061][T10948]  ? mutex_lock_nested+0x20/0x20
[  346.470091][T10948]  drm_client_modeset_commit_locked+0xcb/0x4c0
[  346.470131][T10948]  drm_client_modeset_commit+0x4a/0x70
[  346.470164][T10948]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x98/0x140
[  346.470199][T10948]  drm_fb_helper_set_par+0xaf/0x100
[  346.470229][T10948]  fb_set_var+0x804/0x1000
[  346.470296][T10948]  ? fb_pan_display+0x680/0x680
[  346.470345][T10948]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  346.470375][T10948]  ? __lock_acquire+0x7eb0/0x7eb0
[  346.470403][T10948]  ? lock_chain_count+0x20/0x20
[  346.470436][T10948]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  346.470465][T10948]  ? lockdep_hardirqs_on+0x98/0x150
[  346.470490][T10948]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  346.470555][T10948]  fbcon_resize+0xc85/0x16c0
[  346.470584][T10948]  ? kasan_set_track+0x4e/0x70
[  346.470611][T10948]  ? __kasan_kmalloc+0x8f/0xa0
[  346.470639][T10948]  ? __kmalloc+0xb7/0x240
[  346.470711][T10948]  ? fbcon_set_def_font+0x4d0/0x4d0
[  346.470766][T10948]  ? vc_do_resize+0x357/0x17f0
[  346.470798][T10948]  ? rcu_is_watching+0x15/0xb0
[  346.470830][T10948]  ? vc_do_resize+0x357/0x17f0
[  346.470861][T10948]  vc_do_resize+0x7bf/0x17f0
[  346.470903][T10948]  ? lock_chain_count+0x20/0x20
[  346.470939][T10948]  ? read_lock_is_recursive+0x20/0x20
[  346.470969][T10948]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  346.470997][T10948]  ? vc_resize+0x50/0x50
[  346.471040][T10948]  vt_resizex+0x3f0/0x5a0
[  346.471080][T10948]  ? vt_disallocate+0x90/0x90
[  346.471112][T10948]  ? security_capable+0x89/0xb0
[  346.471149][T10948]  vt_ioctl+0x125f/0x1f20
[  346.471188][T10948]  ? __vt_event_wait+0x260/0x260
[  346.471235][T10948]  ? __fget_files+0x28/0x460
[  346.471276][T10948]  ? tty_jobctrl_ioctl+0x378/0xba0
[  346.471307][T10948]  tty_ioctl+0x91e/0xdc0
[  346.471345][T10948]  ? tty_get_icount+0xb0/0xb0
[  346.471372][T10948]  __se_sys_ioctl+0xfd/0x170
[  346.471409][T10948]  do_syscall_64+0x55/0xb0
[  346.471438][T10948]  ? clear_bhb_loop+0x40/0x90
[  346.471469][T10948]  ? clear_bhb_loop+0x40/0x90
[  346.471509][T10948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  346.471541][T10948] RIP: 0033:0x7f4b1519fb19
[  346.471564][T10948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  346.471585][T10948] RSP: 002b:00007f4b16114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  346.471611][T10948] RAX: ffffffffffffffda RBX: 00007f4b15425fa0 RCX: 00007f4b1519fb19
[  346.471633][T10948] RDX: 0000200000000100 RSI: 000000000000560a RDI: 0000000000000004
[  346.471649][T10948] RBP: 00007f4b15237af8 R08: 0000000000000000 R09: 0000000000000000
[  346.471663][T10948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.471678][T10948] R13: 00007f4b15426038 R14: 00007f4b15425fa0 R15: 00007ffc260fa8f8
[  346.471715][T10948]  </TASK>
[  346.619772][T10950] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  346.912068][ T5796] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  347.101574][T10960] loop8: detected capacity change from 0 to 512
[  348.174081][T10986] loop0: detected capacity change from 0 to 128
[  348.772809][T11004] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1222'.
[  348.818413][T11004] netlink: 'syz.8.1222': attribute type 9 has an invalid length.
[  348.872759][T11004] netlink: 23 bytes leftover after parsing attributes in process `syz.8.1222'.
[  348.942500][T11012] ip_tables: iptables: counters copy to user failed while replacing table
[  349.171427][T11020] FAULT_INJECTION: forcing a failure.
[  349.171427][T11020] name failslab, interval 1, probability 0, space 0, times 0
[  349.201901][T11020] CPU: 0 PID: 11020 Comm: syz.4.1226 Not tainted syzkaller #0
[  349.209503][T11020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  349.219627][T11020] Call Trace:
[  349.222969][T11020]  <TASK>
[  349.225956][T11020]  dump_stack_lvl+0x18c/0x250
[  349.230727][T11020]  ? show_regs_print_info+0x20/0x20
[  349.236008][T11020]  ? load_image+0x420/0x420
[  349.240586][T11020]  ? __lock_acquire+0x7eb0/0x7eb0
[  349.245695][T11020]  should_fail_ex+0x394/0x4c0
[  349.250459][T11020]  should_failslab+0x9/0x20
[  349.255034][T11020]  slab_pre_alloc_hook+0x59/0x300
[  349.260124][T11020]  ? lockdep_softirqs_off+0x440/0x440
[  349.265566][T11020]  ? init_pseudo+0x56/0x140
[  349.270138][T11020]  __kmem_cache_alloc_node+0x53/0x260
[  349.275705][T11020]  ? init_pseudo+0x56/0x140
[  349.280274][T11020]  kmalloc_trace+0x2a/0xe0
[  349.284766][T11020]  init_pseudo+0x56/0x140
[  349.289161][T11020]  pipefs_init_fs_context+0x1c/0x90
[  349.294447][T11020]  alloc_fs_context+0x618/0x7a0
[  349.299380][T11020]  __se_sys_fsopen+0xa0/0x2c0
[  349.304128][T11020]  do_syscall_64+0x55/0xb0
[  349.308601][T11020]  ? clear_bhb_loop+0x40/0x90
[  349.313355][T11020]  ? clear_bhb_loop+0x40/0x90
[  349.318113][T11020]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  349.324070][T11020] RIP: 0033:0x7f4b1519fb19
[  349.328587][T11020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.348337][T11020] RSP: 002b:00007f4b16114028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  349.356808][T11020] RAX: ffffffffffffffda RBX: 00007f4b15425fa0 RCX: 00007f4b1519fb19
[  349.364856][T11020] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0
[  349.372878][T11020] RBP: 00007f4b15237af8 R08: 0000000000000000 R09: 0000000000000000
[  349.380891][T11020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  349.388899][T11020] R13: 00007f4b15426038 R14: 00007f4b15425fa0 R15: 00007ffc260fa8f8
[  349.396941][T11020]  </TASK>
[  349.400136][    C0] vkms_vblank_simulate: vblank timer overrun
[  349.458268][T11016] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  349.484135][T11016] overlayfs: failed to set xattr on upper
[  349.501763][T11016] overlayfs: ...falling back to redirect_dir=nofollow.
[  349.529151][T11016] overlayfs: ...falling back to index=off.
[  349.560839][T11016] overlayfs: ...falling back to uuid=null.
[  349.631285][T11016] overlayfs: maximum fs stacking depth exceeded
[  349.885845][T11031] loop4: detected capacity change from 0 to 256
[  349.960495][   T52] Bluetooth: hci5: command 0x0406 tx timeout
[  349.968709][ T5799] Bluetooth: hci7: command 0x0406 tx timeout
[  349.969633][ T5798] Bluetooth: hci6: command 0x0406 tx timeout
[  349.974807][ T5799] Bluetooth: hci4: command 0x0406 tx timeout
[  350.057201][T11031] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  350.302125][   T27] audit: type=1800 audit(1793627341.928:72): pid=11031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1230" name="file1" dev="loop4" ino=1048748 res=0 errno=0
[  350.519020][T11047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1233'.
[  350.547477][T11047] netlink: 'syz.0.1233': attribute type 9 has an invalid length.
[  350.572080][T11047] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1233'.
[  350.626670][T11051] ip_tables: iptables: counters copy to user failed while replacing table
[  350.641891][T10159] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  350.861936][T10159] usb 5-1: Using ep0 maxpacket: 16
[  350.874772][T10159] usb 5-1: config 0 has no interfaces?
[  350.883552][T10159] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  350.916604][T10159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.937944][T10159] usb 5-1: Product: syz
[  350.951396][T10159] usb 5-1: Manufacturer: syz
[  350.957780][T10159] usb 5-1: SerialNumber: syz
[  350.998249][T10159] usb 5-1: config 0 descriptor??
[  351.011761][T11060] FAULT_INJECTION: forcing a failure.
[  351.011761][T11060] name failslab, interval 1, probability 0, space 0, times 0
[  351.041929][T11060] CPU: 1 PID: 11060 Comm: syz.9.1237 Not tainted syzkaller #0
[  351.049503][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  351.059631][T11060] Call Trace:
[  351.062968][T11060]  <TASK>
[  351.065950][T11060]  dump_stack_lvl+0x18c/0x250
[  351.070721][T11060]  ? show_regs_print_info+0x20/0x20
[  351.076002][T11060]  ? load_image+0x420/0x420
[  351.080556][T11060]  ? __might_sleep+0xe0/0xe0
[  351.085200][T11060]  ? __lock_acquire+0x7eb0/0x7eb0
[  351.090286][T11060]  ? kasan_save_free_info+0x28/0x40
[  351.095547][T11060]  ? slab_free_freelist_hook+0x154/0x240
[  351.101243][T11060]  ? __kmem_cache_free+0xba/0x1f0
[  351.106308][T11060]  should_fail_ex+0x394/0x4c0
[  351.111043][T11060]  should_failslab+0x9/0x20
[  351.115594][T11060]  slab_pre_alloc_hook+0x59/0x300
[  351.120662][T11060]  kmem_cache_alloc_node+0x5e/0x320
[  351.125904][T11060]  ? __alloc_skb+0x103/0x2c0
[  351.130934][T11060]  __alloc_skb+0x103/0x2c0
[  351.135411][T11060]  netlink_ack+0x377/0x1160
[  351.139971][T11060]  ? lockdep_hardirqs_on+0x98/0x150
[  351.145212][T11060]  ? netlink_dump+0xec0/0xec0
[  351.149938][T11060]  ? nfnetlink_rcv+0x22c4/0x2490
[  351.154991][T11060]  ? __kmem_cache_free+0xba/0x1f0
[  351.160065][T11060]  nfnetlink_rcv+0x21ba/0x2490
[  351.164907][T11060]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  351.170560][T11060]  ? __lock_acquire+0x7eb0/0x7eb0
[  351.175654][T11060]  ? netlink_deliver_tap+0x2e/0x1b0
[  351.180898][T11060]  netlink_unicast+0x856/0x9e0
[  351.185758][T11060]  netlink_sendmsg+0x8d0/0xbf0
[  351.190620][T11060]  ? netlink_getsockopt+0x590/0x590
[  351.195877][T11060]  ? apparmor_socket_sendmsg+0x8e/0x330
[  351.201503][T11060]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  351.206851][T11060]  ? security_socket_sendmsg+0x80/0xa0
[  351.212368][T11060]  ? netlink_getsockopt+0x590/0x590
[  351.217612][T11060]  ____sys_sendmsg+0x61b/0x980
[  351.222430][T11060]  ? __asan_memset+0x22/0x40
[  351.227079][T11060]  ? __sys_sendmsg_sock+0x30/0x30
[  351.232155][T11060]  ? __import_iovec+0x5f2/0x850
[  351.237074][T11060]  ? import_iovec+0x73/0xa0
[  351.241629][T11060]  ___sys_sendmsg+0x2a6/0x360
[  351.246367][T11060]  ? __sys_sendmsg+0x2b0/0x2b0
[  351.251227][T11060]  __se_sys_sendmsg+0x1d0/0x2c0
[  351.256129][T11060]  ? __x64_sys_sendmsg+0x80/0x80
[  351.261122][T11060]  ? lockdep_hardirqs_on+0x98/0x150
[  351.266367][T11060]  do_syscall_64+0x55/0xb0
[  351.270828][T11060]  ? clear_bhb_loop+0x40/0x90
[  351.275554][T11060]  ? clear_bhb_loop+0x40/0x90
[  351.280277][T11060]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  351.286217][T11060] RIP: 0033:0x7f1177f9fb19
[  351.290682][T11060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  351.310346][T11060] RSP: 002b:00007f1178ecf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  351.318812][T11060] RAX: ffffffffffffffda RBX: 00007f1178225fa0 RCX: 00007f1177f9fb19
[  351.326831][T11060] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004
[  351.334849][T11060] RBP: 00007f1178037af8 R08: 0000000000000000 R09: 0000000000000000
[  351.342866][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  351.350919][T11060] R13: 00007f1178226038 R14: 00007f1178225fa0 R15: 00007ffdbdb65d28
[  351.358949][T11060]  </TASK>
[  351.564107][ T8078] usb 5-1: USB disconnect, device number 11
[  351.747594][T11072] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  351.767158][T11072] overlayfs: failed to set xattr on upper
[  351.779479][T11072] overlayfs: ...falling back to redirect_dir=nofollow.
[  351.793101][T11072] overlayfs: ...falling back to index=off.
[  351.810041][T11072] overlayfs: ...falling back to uuid=null.
[  351.834698][T11072] overlayfs: maximum fs stacking depth exceeded
[  353.392255][T11110] FAULT_INJECTION: forcing a failure.
[  353.392255][T11110] name failslab, interval 1, probability 0, space 0, times 0
[  353.442194][T11110] CPU: 1 PID: 11110 Comm: syz.0.1248 Not tainted syzkaller #0
[  353.449776][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  353.459898][T11110] Call Trace:
[  353.463228][T11110]  <TASK>
[  353.466209][T11110]  dump_stack_lvl+0x18c/0x250
[  353.470960][T11110]  ? show_regs_print_info+0x20/0x20
[  353.476226][T11110]  ? load_image+0x420/0x420
[  353.480790][T11110]  ? __might_sleep+0xe0/0xe0
[  353.485444][T11110]  ? __lock_acquire+0x7eb0/0x7eb0
[  353.490538][T11110]  should_fail_ex+0x394/0x4c0
[  353.495282][T11110]  should_failslab+0x9/0x20
[  353.499891][T11110]  slab_pre_alloc_hook+0x59/0x300
[  353.504973][T11110]  ? nfnetlink_rcv+0xebe/0x2490
[  353.509904][T11110]  __kmem_cache_alloc_node+0x53/0x260
[  353.515346][T11110]  ? nfnetlink_rcv+0xebe/0x2490
[  353.520293][T11110]  kmalloc_trace+0x2a/0xe0
[  353.524795][T11110]  nfnetlink_rcv+0xebe/0x2490
[  353.529587][T11110]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  353.535292][T11110]  ? __lock_acquire+0x7eb0/0x7eb0
[  353.540423][T11110]  ? netlink_deliver_tap+0x2e/0x1b0
[  353.545697][T11110]  netlink_unicast+0x856/0x9e0
[  353.550556][T11110]  netlink_sendmsg+0x8d0/0xbf0
[  353.555410][T11110]  ? netlink_getsockopt+0x590/0x590
[  353.560674][T11110]  ? apparmor_socket_sendmsg+0x8e/0x330
[  353.566295][T11110]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  353.571646][T11110]  ? security_socket_sendmsg+0x80/0xa0
[  353.577177][T11110]  ? netlink_getsockopt+0x590/0x590
[  353.582448][T11110]  ____sys_sendmsg+0x61b/0x980
[  353.587291][T11110]  ? __asan_memset+0x22/0x40
[  353.591957][T11110]  ? __sys_sendmsg_sock+0x30/0x30
[  353.597032][T11110]  ? __import_iovec+0x5f2/0x850
[  353.601954][T11110]  ? import_iovec+0x73/0xa0
[  353.606530][T11110]  ___sys_sendmsg+0x2a6/0x360
[  353.611283][T11110]  ? __sys_sendmsg+0x2b0/0x2b0
[  353.616182][T11110]  __se_sys_sendmsg+0x1d0/0x2c0
[  353.621155][T11110]  ? __x64_sys_sendmsg+0x80/0x80
[  353.626192][T11110]  ? lockdep_hardirqs_on+0x98/0x150
[  353.631479][T11110]  do_syscall_64+0x55/0xb0
[  353.635964][T11110]  ? clear_bhb_loop+0x40/0x90
[  353.640716][T11110]  ? clear_bhb_loop+0x40/0x90
[  353.645485][T11110]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  353.651539][T11110] RIP: 0033:0x7fd5cd79fb19
[  353.656020][T11110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  353.675707][T11110] RSP: 002b:00007fd5ce61f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  353.684251][T11110] RAX: ffffffffffffffda RBX: 00007fd5cda25fa0 RCX: 00007fd5cd79fb19
[  353.692345][T11110] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004
[  353.700406][T11110] RBP: 00007fd5cd837af8 R08: 0000000000000000 R09: 0000000000000000
[  353.708447][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  353.716506][T11110] R13: 00007fd5cda26038 R14: 00007fd5cda25fa0 R15: 00007fff38eb0a28
[  353.724568][T11110]  </TASK>
[  353.919289][T11118] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  353.991794][T11118] overlayfs: failed to set xattr on upper
[  353.997621][T11118] overlayfs: ...falling back to redirect_dir=nofollow.
[  354.012215][T11118] overlayfs: ...falling back to index=off.
[  354.018202][T11118] overlayfs: ...falling back to uuid=null.
[  354.101727][T11118] overlayfs: maximum fs stacking depth exceeded
[  354.953300][T11134] FAULT_INJECTION: forcing a failure.
[  354.953300][T11134] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  355.057926][T11134] CPU: 1 PID: 11134 Comm: syz.0.1255 Not tainted syzkaller #0
[  355.065512][T11134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  355.075636][T11134] Call Trace:
[  355.078995][T11134]  <TASK>
[  355.081981][T11134]  dump_stack_lvl+0x18c/0x250
[  355.086757][T11134]  ? show_regs_print_info+0x20/0x20
[  355.092031][T11134]  ? load_image+0x420/0x420
[  355.096603][T11134]  ? __lock_acquire+0x7eb0/0x7eb0
[  355.101714][T11134]  should_fail_ex+0x394/0x4c0
[  355.106470][T11134]  prepare_alloc_pages+0x1e1/0x5b0
[  355.111665][T11134]  __alloc_pages+0x134/0x460
[  355.116349][T11134]  ? zone_statistics+0x170/0x170
[  355.121405][T11134]  alloc_pages_exact+0x39/0x70
[  355.126234][T11134]  snd_pcm_attach_substream+0x622/0xad0
[  355.131875][T11134]  snd_pcm_open_substream+0xbb/0x2540
[  355.137334][T11134]  ? mutex_lock_nested+0x20/0x20
[  355.142340][T11134]  ? snd_pcm_drop+0x250/0x250
[  355.147097][T11134]  snd_pcm_open+0x1e0/0x670
[  355.151677][T11134]  ? snd_pcm_mmap_control_fault+0x270/0x270
[  355.157659][T11134]  ? do_task_dead+0xd0/0xd0
[  355.162250][T11134]  snd_pcm_capture_open+0x72/0xe0
[  355.167354][T11134]  chrdev_open+0x58c/0x600
[  355.171859][T11134]  ? cd_forget+0x160/0x160
[  355.176351][T11134]  ? fsnotify_perm+0x3ed/0x5e0
[  355.181247][T11134]  do_dentry_open+0x880/0x14b0
[  355.186090][T11134]  ? cd_forget+0x160/0x160
[  355.190584][T11134]  path_openat+0x284f/0x3270
[  355.195272][T11134]  ? do_sys_openat2+0xda/0x1d0
[  355.200100][T11134]  ? __x64_sys_openat+0x139/0x160
[  355.205201][T11134]  ? verify_lock_unused+0x140/0x140
[  355.210469][T11134]  ? do_filp_open+0x430/0x430
[  355.215236][T11134]  do_filp_open+0x1f2/0x430
[  355.219815][T11134]  ? vfs_tmpfile+0x620/0x620
[  355.224506][T11134]  ? _raw_spin_unlock+0x28/0x40
[  355.229427][T11134]  ? alloc_fd+0x590/0x640
[  355.233845][T11134]  do_sys_openat2+0x134/0x1d0
[  355.238605][T11134]  ? vma_end_read+0x18/0x170
[  355.243273][T11134]  ? do_sys_open+0xe0/0xe0
[  355.247774][T11134]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  355.253824][T11134]  ? lock_chain_count+0x20/0x20
[  355.258742][T11134]  ? lock_chain_count+0x20/0x20
[  355.263668][T11134]  __x64_sys_openat+0x139/0x160
[  355.268606][T11134]  do_syscall_64+0x55/0xb0
[  355.273108][T11134]  ? clear_bhb_loop+0x40/0x90
[  355.277867][T11134]  ? clear_bhb_loop+0x40/0x90
[  355.282630][T11134]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  355.288643][T11134] RIP: 0033:0x7fd5cd76034e
[  355.293129][T11134] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  355.312806][T11134] RSP: 002b:00007fd5ce61eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  355.321299][T11134] RAX: ffffffffffffffda RBX: 00007fd5ce61f6c0 RCX: 00007fd5cd76034e
[  355.329339][T11134] RDX: 0000000000000002 RSI: 00007fd5ce61ec00 RDI: ffffffffffffff9c
[  355.337380][T11134] RBP: 00007fd5ce61ec00 R08: 0000000000000000 R09: 0000000000000000
[  355.345415][T11134] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  355.353444][T11134] R13: 00007fd5cda26038 R14: 00007fd5cda25fa0 R15: 00007fff38eb0a28
[  355.361498][T11134]  </TASK>
[  356.454318][T11147] loop0: detected capacity change from 0 to 512
[  356.476976][T11151] fuse: Bad value for 'fd'
[  356.634672][T11147] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.1260: Unrecognised inode hash code 4
[  356.697211][T11147] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1260: Corrupt directory, running e2fsck is recommended
[  356.833345][T11147] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  356.863916][T11147] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.1260: corrupted in-inode xattr: invalid ea_ino
[  356.919670][T11147] EXT4-fs (loop0): Remounting filesystem read-only
[  356.948420][T11147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.148441][T11147] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.1260: Unrecognised inode hash code 4
[  357.180943][T11147] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1260: Corrupt directory, running e2fsck is recommended
[  357.229634][T11147] EXT4-fs warning (device loop0): ext4_empty_dir:3149: inode #2: comm syz.0.1260: directory missing '.'
[  357.363781][ T8021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.991239][T11172] fuse: Bad value for 'fd'
[  359.200227][T11185] loop0: detected capacity change from 0 to 8192
[  359.267950][T11185] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  359.314919][T11185] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  359.359773][T11185] REISERFS (device loop0): using ordered data mode
[  359.396257][T11185] reiserfs: using flush barriers
[  359.440738][T11185] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  359.500083][T11185] REISERFS (device loop0): checking transaction log (loop0)
[  359.798095][T11185] REISERFS (device loop0): Using tea hash to sort names
[  359.832196][T11185] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  360.932463][T11211] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  361.402063][T11215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1278'.
[  364.223113][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'.
[  364.284242][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'.
[  364.334500][T11269] vxcan1: tx drop: invalid da for name 0xfffffffffffffffd
[  365.952259][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  366.139601][T11302] fuse: Bad value for 'fd'
[  366.165793][    T9] usb 1-1: Using ep0 maxpacket: 8
[  366.193344][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  366.216373][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  366.243350][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  366.273040][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  366.326282][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  366.356039][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.683028][    T9] usb 1-1: GET_CAPABILITIES returned 0
[  366.717472][    T9] usbtmc 1-1:16.0: can't read capabilities
[  366.963932][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.020536][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.029766][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.038937][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.048918][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.058106][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.067332][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.081998][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.091193][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.100371][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.110288][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.119467][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.128624][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.137797][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.147647][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.156837][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  367.387715][ T8078] usb 1-1: USB disconnect, device number 13
[  367.961888][ T5790] Bluetooth: hci7: command 0x0406 tx timeout
[  370.576012][T11367] FAULT_INJECTION: forcing a failure.
[  370.576012][T11367] name failslab, interval 1, probability 0, space 0, times 0
[  370.639453][T11367] CPU: 1 PID: 11367 Comm: syz.9.1323 Not tainted syzkaller #0
[  370.647102][T11367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  370.657260][T11367] Call Trace:
[  370.660606][T11367]  <TASK>
[  370.663593][T11367]  dump_stack_lvl+0x18c/0x250
[  370.668347][T11367]  ? show_regs_print_info+0x20/0x20
[  370.673613][T11367]  ? load_image+0x420/0x420
[  370.678177][T11367]  ? __might_sleep+0xe0/0xe0
[  370.682824][T11367]  ? __lock_acquire+0x7eb0/0x7eb0
[  370.687919][T11367]  should_fail_ex+0x394/0x4c0
[  370.692674][T11367]  should_failslab+0x9/0x20
[  370.697232][T11367]  slab_pre_alloc_hook+0x59/0x300
[  370.702323][T11367]  ? ops_init+0x8b/0x640
[  370.706662][T11367]  ? ops_init+0x8b/0x640
[  370.710958][T11367]  __kmem_cache_alloc_node+0x53/0x260
[  370.716391][T11367]  ? ops_init+0x8b/0x640
[  370.720684][T11367]  __kmalloc+0xa7/0x240
[  370.724899][T11367]  ? csum_init_net+0x15a/0x190
[  370.729833][T11367]  ops_init+0x8b/0x640
[  370.733972][T11367]  setup_net+0x3b6/0xa20
[  370.738278][T11367]  ? copy_net_ns+0x530/0x530
[  370.742937][T11367]  ? copy_net_ns+0x347/0x530
[  370.747588][T11367]  ? down_read_killable+0x1d0/0x340
[  370.752858][T11367]  copy_net_ns+0x361/0x530
[  370.757344][T11367]  create_new_namespaces+0x3ce/0x700
[  370.762711][T11367]  unshare_nsproxy_namespaces+0x11a/0x160
[  370.768520][T11367]  ksys_unshare+0x4fa/0x8f0
[  370.773105][T11367]  ? sighand_ctor+0x50/0x50
[  370.777678][T11367]  ? lock_chain_count+0x20/0x20
[  370.782594][T11367]  ? syscall_enter_from_user_mode+0x25/0x80
[  370.788548][T11367]  __x64_sys_unshare+0x38/0x40
[  370.793415][T11367]  do_syscall_64+0x55/0xb0
[  370.797905][T11367]  ? clear_bhb_loop+0x40/0x90
[  370.802663][T11367]  ? clear_bhb_loop+0x40/0x90
[  370.807414][T11367]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  370.813377][T11367] RIP: 0033:0x7f1177f9fb19
[  370.817854][T11367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.837739][T11367] RSP: 002b:00007f1178ecf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  370.846251][T11367] RAX: ffffffffffffffda RBX: 00007f1178225fa0 RCX: 00007f1177f9fb19
[  370.854281][T11367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  370.862312][T11367] RBP: 00007f1178037af8 R08: 0000000000000000 R09: 0000000000000000
[  370.870336][T11367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  370.878361][T11367] R13: 00007f1178226038 R14: 00007f1178225fa0 R15: 00007ffdbdb65d28
[  370.886437][T11367]  </TASK>
[  372.467930][   T27] audit: type=1800 audit(1793627620.108:73): pid=11404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1336" name="serialnumber" dev="configfs" ino=27722 res=0 errno=0
[  372.797839][T11406] loop0: detected capacity change from 0 to 1024
[  372.873224][T11406] EXT4-fs: Ignoring removed oldalloc option
[  372.901915][T11406] EXT4-fs: Ignoring removed oldalloc option
[  372.963323][T11406] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  373.083433][T11406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.117931][ T8021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.612418][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  379.027348][   T28] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  379.047837][ T5902] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  379.377796][   T28] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  379.405080][ T5902] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  379.761910][T11503] ceph: No mds server is up or the cluster is laggy
[  379.821973][T11507] ceph: No mds server is up or the cluster is laggy
[  379.861445][T11522] loop0: detected capacity change from 0 to 4096
[  380.152191][ T5902] libceph: mon0 (1)127.0.0.1:6789 socket error on write
[  380.372447][   T28] libceph: mon0 (1)0.0.0.0:6789 socket error on write
[  380.466522][T11537] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[  380.793359][T11522] ntfs3: loop0: Failed to load $Extend (-22).
[  380.799543][T11522] ntfs3: loop0: Failed to initialize $Extend.
[  381.009343][T11550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1378'.
[  383.608594][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'.
[  383.787983][T11590] netlink: 'syz.0.1388': attribute type 1 has an invalid length.
[  383.848647][T11590] netlink: 'syz.0.1388': attribute type 2 has an invalid length.
[  384.691373][T11609] "syz.8.1394" (11609) uses obsolete ecb(arc4) skcipher
[  385.165046][T11621] Illegal XDP return value 4294967282 on prog  (id 120) dev syz_tun, expect packet loss!
[  386.468604][T11652] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.1407'.
[  387.984891][T10130] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  388.818064][T11709] FAULT_INJECTION: forcing a failure.
[  388.818064][T11709] name failslab, interval 1, probability 0, space 0, times 0
[  388.871804][T11709] CPU: 1 PID: 11709 Comm: syz.0.1423 Not tainted syzkaller #0
[  388.879337][T11709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  388.889423][T11709] Call Trace:
[  388.892739][T11709]  <TASK>
[  388.895702][T11709]  dump_stack_lvl+0x18c/0x250
[  388.900430][T11709]  ? show_regs_print_info+0x20/0x20
[  388.905686][T11709]  ? load_image+0x420/0x420
[  388.910224][T11709]  ? __lock_acquire+0x7eb0/0x7eb0
[  388.915317][T11709]  ? crng_make_state+0x411/0x700
[  388.920316][T11709]  should_fail_ex+0x394/0x4c0
[  388.925088][T11709]  should_failslab+0x9/0x20
[  388.929624][T11709]  slab_pre_alloc_hook+0x59/0x300
[  388.934713][T11709]  kmem_cache_alloc_lru+0x4d/0x2c0
[  388.939868][T11709]  ? shmem_alloc_inode+0x28/0x40
[  388.944876][T11709]  ? __lock_acquire+0x7eb0/0x7eb0
[  388.949947][T11709]  shmem_alloc_inode+0x28/0x40
[  388.954754][T11709]  ? shmem_match+0x160/0x160
[  388.959379][T11709]  new_inode_pseudo+0x63/0x1d0
[  388.964181][T11709]  new_inode+0x22/0x1d0
[  388.968377][T11709]  shmem_get_inode+0x34d/0xcd0
[  388.973192][T11709]  shmem_fill_super+0xbca/0x1060
[  388.978179][T11709]  ? shmem_reconfigure+0xc10/0xc10
[  388.983328][T11709]  ? sget_fc+0x852/0x930
[  388.987610][T11709]  ? kill_litter_super+0x60/0x60
[  388.992587][T11709]  ? shmem_reconfigure+0xc10/0xc10
[  388.997733][T11709]  get_tree_nodev+0xb5/0x140
[  389.002361][T11709]  vfs_get_tree+0x8c/0x280
[  389.006822][T11709]  do_new_mount+0x24a/0xa60
[  389.011384][T11709]  __se_sys_mount+0x2e7/0x3d0
[  389.016111][T11709]  ? __x64_sys_mount+0xc0/0xc0
[  389.020921][T11709]  ? lockdep_hardirqs_on+0x98/0x150
[  389.026165][T11709]  ? __x64_sys_mount+0x20/0xc0
[  389.030978][T11709]  do_syscall_64+0x55/0xb0
[  389.035446][T11709]  ? clear_bhb_loop+0x40/0x90
[  389.040168][T11709]  ? clear_bhb_loop+0x40/0x90
[  389.044890][T11709]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  389.050823][T11709] RIP: 0033:0x7fd5cd79fb19
[  389.055280][T11709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.074941][T11709] RSP: 002b:00007fd5ce61f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  389.083437][T11709] RAX: ffffffffffffffda RBX: 00007fd5cda25fa0 RCX: 00007fd5cd79fb19
[  389.091448][T11709] RDX: 0000200000000a80 RSI: 0000200000000880 RDI: 0000000000000000
[  389.099446][T11709] RBP: 00007fd5cd837af8 R08: 0000000000000000 R09: 0000000000000000
[  389.107443][T11709] R10: 0000000002000080 R11: 0000000000000246 R12: 0000000000000000
[  389.115441][T11709] R13: 00007fd5cda26038 R14: 00007fd5cda25fa0 R15: 00007fff38eb0a28
[  389.123481][T11709]  </TASK>
[  390.203279][T11737] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.1432'.
[  391.796490][   T27] audit: type=1326 audit(1793627639.438:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.4.1439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b1519fb19 code=0x7fc00000
[  391.843634][T11767] FAULT_INJECTION: forcing a failure.
[  391.843634][T11767] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  391.919404][T11767] CPU: 1 PID: 11767 Comm: syz.0.1441 Not tainted syzkaller #0
[  391.927012][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  391.937115][T11767] Call Trace:
[  391.940427][T11767]  <TASK>
[  391.943393][T11767]  dump_stack_lvl+0x18c/0x250
[  391.948117][T11767]  ? show_regs_print_info+0x20/0x20
[  391.953365][T11767]  ? load_image+0x420/0x420
[  391.957907][T11767]  ? __might_fault+0xaa/0x120
[  391.962616][T11767]  ? __lock_acquire+0x7eb0/0x7eb0
[  391.967677][T11767]  ? __virt_addr_valid+0x10c/0x380
[  391.972834][T11767]  should_fail_ex+0x394/0x4c0
[  391.977554][T11767]  _copy_to_user+0x2f/0xa0
[  391.981999][T11767]  bpf_verifier_vlog+0x4e6/0x840
[  391.986984][T11767]  __btf_verifier_log+0xe3/0x140
[  391.991968][T11767]  ? btf_check_sec_info+0x350/0x350
[  391.997219][T11767]  btf_verifier_log_member+0x5a9/0x800
[  392.002728][T11767]  ? __btf_verifier_log_type+0x690/0x690
[  392.008418][T11767]  btf_struct_check_meta+0xb3c/0xce0
[  392.013767][T11767]  btf_check_all_metas+0x371/0xaf0
[  392.018939][T11767]  btf_parse_type_sec+0xfc/0x1960
[  392.023993][T11767]  ? btf_check_sec_info+0x350/0x350
[  392.029233][T11767]  ? __virt_addr_valid+0x10c/0x380
[  392.034390][T11767]  ? btf_verifier_log+0x1a0/0x1a0
[  392.039476][T11767]  ? btf_parse_hdr+0x545/0x700
[  392.044273][T11767]  ? btf_parse_str_sec+0x20d/0x2a0
[  392.049427][T11767]  btf_new_fd+0x440/0x9e0
[  392.053815][T11767]  ? bpf_btf_show_fdinfo+0x80/0x80
[  392.058976][T11767]  ? capable+0x88/0xe0
[  392.063100][T11767]  __sys_bpf+0x670/0x890
[  392.067378][T11767]  ? bpf_link_show_fdinfo+0x560/0x560
[  392.072797][T11767]  ? lock_chain_count+0x20/0x20
[  392.077701][T11767]  __x64_sys_bpf+0x7c/0x90
[  392.082158][T11767]  do_syscall_64+0x55/0xb0
[  392.086609][T11767]  ? clear_bhb_loop+0x40/0x90
[  392.091329][T11767]  ? clear_bhb_loop+0x40/0x90
[  392.096064][T11767]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  392.101996][T11767] RIP: 0033:0x7fd5cd79fb19
[  392.106473][T11767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  392.126117][T11767] RSP: 002b:00007fd5ce61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  392.134563][T11767] RAX: ffffffffffffffda RBX: 00007fd5cda25fa0 RCX: 00007fd5cd79fb19
[  392.142564][T11767] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012
[  392.150569][T11767] RBP: 00007fd5cd837af8 R08: 0000000000000000 R09: 0000000000000000
[  392.158585][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  392.166585][T11767] R13: 00007fd5cda26038 R14: 00007fd5cda25fa0 R15: 00007fff38eb0a28
[  392.174605][T11767]  </TASK>
[  392.516594][   T27] audit: type=1326 audit(1793627640.148:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.4.1439" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b1519fb19 code=0x7fc00000
[  395.201326][T11820] rxe_eth0 speed is unknown, defaulting to 1000
[  398.267594][T11869] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1465'.
[  398.324902][T11873] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  399.412873][T11893] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  400.168102][T11912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1476'.
[  403.265305][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1499'.
[  403.575470][T11971] 
[  403.577860][T11971] ======================================================
[  403.584893][T11971] WARNING: possible circular locking dependency detected
[  403.591935][T11971] syzkaller #0 Not tainted
[  403.596394][T11971] ------------------------------------------------------
[  403.603434][T11971] syz.0.1501/11971 is trying to acquire lock:
[  403.609511][T11971] ffffffff8eb20570 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980
[  403.618879][T11971] 
[  403.618879][T11971] but task is already holding lock:
[  403.626257][T11971] ffff888076b0a9e0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0
[  403.635963][T11971] 
[  403.635963][T11971] which lock already depends on the new lock.
[  403.635963][T11971] 
[  403.646407][T11971] 
[  403.646407][T11971] the existing dependency chain (in reverse order) is:
[  403.655616][T11971] 
[  403.655616][T11971] -> #2 (&sb->s_type->i_mutex_key#25){++++}-{3:3}:
[  403.664368][T11971]        down_write+0x97/0x200
[  403.669152][T11971]        configfs_depend_item_unlocked+0x157/0x460
[  403.675680][T11971]        usbg_make_tpg+0x1e1/0x550
[  403.680928][T11971]        target_fabric_make_tpg+0xa4/0x6d0
[  403.686896][T11971]        configfs_mkdir+0x515/0x9e0
[  403.692137][T11971]        vfs_mkdir+0x2a5/0x470
[  403.696935][T11971]        do_mkdirat+0x1dc/0x450
[  403.701822][T11971]        __x64_sys_mkdirat+0x89/0xa0
[  403.707166][T11971]        do_syscall_64+0x55/0xb0
[  403.712146][T11971]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  403.718605][T11971] 
[  403.718605][T11971] -> #1 (tpg_instances_lock){+.+.}-{3:3}:
[  403.726545][T11971]        __mutex_lock+0x135/0xce0
[  403.731594][T11971]        usbg_make_tpg+0xf9/0x550
[  403.736648][T11971]        target_fabric_make_tpg+0xa4/0x6d0
[  403.742483][T11971]        configfs_mkdir+0x515/0x9e0
[  403.747702][T11971]        vfs_mkdir+0x2a5/0x470
[  403.752505][T11971]        do_mkdirat+0x1dc/0x450
[  403.757383][T11971]        __x64_sys_mkdirat+0x89/0xa0
[  403.762699][T11971]        do_syscall_64+0x55/0xb0
[  403.767670][T11971]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  403.774201][T11971] 
[  403.774201][T11971] -> #0 (&subsys->su_mutex){+.+.}-{3:3}:
[  403.782086][T11971]        __lock_acquire+0x3a07/0x7eb0
[  403.787507][T11971]        lock_acquire+0x19e/0x420
[  403.792575][T11971]        __mutex_lock+0x135/0xce0
[  403.797634][T11971]        configfs_rmdir+0x63c/0x980
[  403.802868][T11971]        vfs_rmdir+0x352/0x4b0
[  403.807695][T11971]        do_rmdir+0x29f/0x590
[  403.812425][T11971]        __x64_sys_rmdir+0x49/0x50
[  403.817588][T11971]        do_syscall_64+0x55/0xb0
[  403.822572][T11971]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  403.829035][T11971] 
[  403.829035][T11971] other info that might help us debug this:
[  403.829035][T11971] 
[  403.839289][T11971] Chain exists of:
[  403.839289][T11971]   &subsys->su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#25
[  403.839289][T11971] 
[  403.853877][T11971]  Possible unsafe locking scenario:
[  403.853877][T11971] 
[  403.861381][T11971]        CPU0                    CPU1
[  403.866783][T11971]        ----                    ----
[  403.872179][T11971]   lock(&sb->s_type->i_mutex_key#25);
[  403.877682][T11971]                                lock(tpg_instances_lock);
[  403.884921][T11971]                                lock(&sb->s_type->i_mutex_key#25);
[  403.892941][T11971]   lock(&subsys->su_mutex);
[  403.897571][T11971] 
[  403.897571][T11971]  *** DEADLOCK ***
[  403.897571][T11971] 
[  403.905744][T11971] 3 locks held by syz.0.1501/11971:
[  403.910968][T11971]  #0: ffff888019718418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  403.920268][T11971]  #1: ffff888148f35fc0 (&default_group_class[depth - 1]#7/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590
[  403.931140][T11971]  #2: ffff888076b0a9e0 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0
[  403.941322][T11971] 
[  403.941322][T11971] stack backtrace:
[  403.947251][T11971] CPU: 0 PID: 11971 Comm: syz.0.1501 Not tainted syzkaller #0
[  403.954749][T11971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  403.964927][T11971] Call Trace:
[  403.968235][T11971]  <TASK>
[  403.971197][T11971]  dump_stack_lvl+0x18c/0x250
[  403.975927][T11971]  ? load_image+0x420/0x420
[  403.980467][T11971]  ? show_regs_print_info+0x20/0x20
[  403.985713][T11971]  ? print_circular_bug+0x12b/0x1a0
[  403.990971][T11971]  check_noncircular+0x2fc/0x400
[  403.995961][T11971]  ? print_deadlock_bug+0x5d0/0x5d0
[  404.001200][T11971]  ? lockdep_lock+0xf5/0x230
[  404.005842][T11971]  ? _find_first_zero_bit+0xd6/0x100
[  404.011174][T11971]  __lock_acquire+0x3a07/0x7eb0
[  404.016090][T11971]  ? verify_lock_unused+0x140/0x140
[  404.021333][T11971]  ? verify_lock_unused+0x140/0x140
[  404.026572][T11971]  lock_acquire+0x19e/0x420
[  404.031117][T11971]  ? configfs_rmdir+0x63c/0x980
[  404.036021][T11971]  ? __might_sleep+0xe0/0xe0
[  404.040657][T11971]  ? read_lock_is_recursive+0x20/0x20
[  404.046084][T11971]  __mutex_lock+0x135/0xce0
[  404.050634][T11971]  ? configfs_rmdir+0x63c/0x980
[  404.055537][T11971]  ? configfs_rmdir+0x63c/0x980
[  404.060428][T11971]  ? mutex_lock_nested+0x20/0x20
[  404.065410][T11971]  ? __lock_acquire+0x7eb0/0x7eb0
[  404.070476][T11971]  ? lockref_put_or_lock+0x72/0xb0
[  404.075639][T11971]  ? dput+0x3b/0x1e0
[  404.079571][T11971]  ? dput+0x3b/0x1e0
[  404.083510][T11971]  configfs_rmdir+0x63c/0x980
[  404.088251][T11971]  vfs_rmdir+0x352/0x4b0
[  404.092565][T11971]  do_rmdir+0x29f/0x590
[  404.096766][T11971]  ? __check_object_size+0x4fc/0xa40
[  404.102100][T11971]  ? d_delete_notify+0x150/0x150
[  404.107088][T11971]  ? getname_flags+0x20a/0x500
[  404.111992][T11971]  __x64_sys_rmdir+0x49/0x50
[  404.116622][T11971]  do_syscall_64+0x55/0xb0
[  404.121095][T11971]  ? clear_bhb_loop+0x40/0x90
[  404.125825][T11971]  ? clear_bhb_loop+0x40/0x90
[  404.130570][T11971]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  404.136510][T11971] RIP: 0033:0x7fd5cd79fb19
[  404.140963][T11971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  404.160618][T11971] RSP: 002b:00007fd5ce61f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  404.169071][T11971] RAX: ffffffffffffffda RBX: 00007fd5cda25fa0 RCX: 00007fd5cd79fb19
[  404.177075][T11971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000010c0
[  404.185076][T11971] RBP: 00007fd5cd837af8 R08: 0000000000000000 R09: 0000000000000000
[  404.193084][T11971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.201091][T11971] R13: 00007fd5cda26038 R14: 00007fd5cda25fa0 R15: 00007fff38eb0a28
[  404.209118][T11971]  </TASK>