last executing test programs:

20m46.769382972s ago: executing program 32 (id=128):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

12m8.384925176s ago: executing program 33 (id=2320):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x2641d82c)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

11m26.865633054s ago: executing program 34 (id=2419):
socket$kcm(0x11, 0x3, 0x0)
r0 = getpid()
prlimit64(r0, 0xc, &(0x7f0000000140)={0x7ffffffffffffe}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x10}}, 0x40)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)

10m14.85014642s ago: executing program 35 (id=2528):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1)

5m43.924350841s ago: executing program 6 (id=3362):
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd6, 0x38, 0x9, 0x20, 0x46d, 0x8c2, 0xd471, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x10, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0xff, 0x1, 0x0, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "50ec0981"}, {0x5, 0x24, 0x0, 0x839a}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x91, 0x81}, {0x6}, [@acm={0x4}]}], [{{0x9, 0x5, 0x5, 0x3, 0x8, 0x9, 0x9, 0x5}}]}}]}}]}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000200)={0xf0f002})

5m41.901299701s ago: executing program 6 (id=3368):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)
close(0xffffffffffffffff)

5m40.680079715s ago: executing program 6 (id=3371):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000100)={0x20, 0x6, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
read(r1, 0x0, 0x0)

5m36.146075866s ago: executing program 6 (id=3377):
syz_usb_connect(0x2, 0x52, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd6, 0x38, 0x9, 0x20, 0x46d, 0x8c2, 0xd471, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x10, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0xff, 0x1, 0x0, 0x0, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "50ec0981"}, {0x5, 0x24, 0x0, 0x839a}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x91, 0x81}, {0x6}, [@acm={0x4}]}], [{{0x9, 0x5, 0x5, 0x3, 0x8, 0x9, 0x9, 0x5}}]}}]}}]}}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000200)={0xf0f002})

5m34.10894821s ago: executing program 6 (id=3385):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0)
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x80000, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

5m33.83355546s ago: executing program 6 (id=3386):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000100)={0x20, 0x6, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
read(r1, 0x0, 0x0)

5m18.312293187s ago: executing program 36 (id=3386):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000100)={0x20, 0x6, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
read(r1, 0x0, 0x0)

4m39.283427734s ago: executing program 8 (id=3495):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000600)='./bus\x00', 0x50)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
rmdir(&(0x7f0000000180)='./file1\x00')
chdir(&(0x7f00000001c0)='./bus\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4m38.707992105s ago: executing program 8 (id=3496):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x1c, 0x40, 0x403, 0x70bd28, 0x25dfdbff, {0x3}, [@typed={0x8, 0x13f, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x400d0)

4m38.198245787s ago: executing program 8 (id=3498):
socket$kcm(0xa, 0x5, 0x0)
timer_create(0xfffffffc, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x15, &(0x7f0000000300)=ANY=[], 0x0)

4m37.392016464s ago: executing program 8 (id=3500):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000640)="c73250b84fefe704f4bbf5b0ba4a6820ad8acd5a01d083f707a85e0cfc24b9b4d36fc34c3bbe8af6589d419ac225621db665c81fe00442249201e46d7c0397cefd3bad5065c2ced98619f5046e6c83c00fe4b6f34d2af97c1860efa12a84e737bd55baed8634982b17811d497f0c6f6afca0954f06164124f0ebf86c8630fc8f78ef4b8653720df7b8873d74405d7fcf7fcad1a9df1aaccebbc3876d714154a19ad0d14dde5749c23b31fdc0c9fe823520a0ec57f4448ec995e54dbe34f143c1c8f51aef5b27e55cd218b5c2", 0xcc}, {&(0x7f0000000b40)="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", 0x31f}], 0x2}}], 0x1, 0x9200000000000000)

4m36.885974377s ago: executing program 8 (id=3503):
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x101121)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

4m35.245832829s ago: executing program 8 (id=3506):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f2, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc4e, 0x4, 0x0, 0x0, 0x0, 0x93cd, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x789], 0x1, 0x400})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4m18.757397131s ago: executing program 37 (id=3506):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f2, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc4e, 0x4, 0x0, 0x0, 0x0, 0x93cd, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0x789], 0x1, 0x400})
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3m58.915648679s ago: executing program 9 (id=3557):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000000240)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x3, 0x4}, @mpls={[], @ipv6=@tcp={0x0, 0x6, "cba701", 0xdd, 0x6, 0x1, @local, @private1, {[@srh={0x3a, 0x2, 0x4, 0x1, 0x8, 0x50, 0x0, [@empty]}], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x13, 0x2, 0x8, 0x0, 0x6c9, {[@exp_fastopen={0xfe, 0xa, 0xf989, "1445b0695cf6"}, @timestamp={0x8, 0xa, 0xffffffff}, @window={0x3, 0x3}, @fastopen={0x22, 0x8, "efbdd6acd99c"}, @generic={0x4, 0x8, "43504c27c9dc"}, @sack={0x5, 0xe, [0x3, 0x7, 0x5]}]}}, {"7022fd014abfea2e4469e46cc69253908cbb041e17a491703784f6a155edfda24d15ce212f490a20f923e09f42c059adc4b8195fdecff2e78e625197b541c3af51566eddcf17c974c7a3e32dc6bf6883a205643a85191a11da72e909decad3c42c76d7971fdbe6c026baee0d80d660fb64ebd366196e18e02d"}}}}}}, 0x113)

3m58.35530619s ago: executing program 9 (id=3560):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom0\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getgid()
getdents64(r6, &(0x7f0000000080)=""/29, 0x1d)
ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f00000003c0))
sendmsg$AUDIT_USER(r1, 0x0, 0x40000085)
sendmsg$nl_route(r0, 0x0, 0x8080)
socket$inet6_udp(0xa, 0x2, 0x0)

3m57.876398058s ago: executing program 9 (id=3562):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
lseek(0xffffffffffffffff, 0x2, 0x0)

3m57.575495736s ago: executing program 9 (id=3563):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setuid(0xee00)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)

3m57.263112379s ago: executing program 9 (id=3564):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000009c0)={'dt2814\x00', [0xb013, 0x80000000, 0xb4, 0x2, 0xa3000, 0x8f, 0x1006, 0x9, 0x1002, 0xffffffff, 0x200, 0x7, 0x1000000c, 0x4, 0x5, 0x1, 0x0, 0x3, 0x9, 0x8e, 0x108, 0x6, 0x7, 0x0, 0x5, 0x7fff, 0xb0c4, 0xa, 0x8, 0x4]})

3m56.692483165s ago: executing program 9 (id=3566):
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c830}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3m45.246963378s ago: executing program 2 (id=3578):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="9500bb0000002b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m40.990210518s ago: executing program 38 (id=3566):
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c830}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3m40.888889656s ago: executing program 2 (id=3583):
pipe2(&(0x7f0000000000)={0x0, <r0=>0x0}, 0x84880)
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x121000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7d, 0x8, 0x0, 0x10001000})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r1, 0x0, 0x43)
close_range(r0, 0xffffffffffffffff, 0x0)

3m39.878719708s ago: executing program 2 (id=3584):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000440)=@ethtool_cmd={0x9, 0x2, 0x8f, 0x9, 0x7f, 0x2, 0x81, 0x7, 0x5, 0x62, 0xa, 0x2002, 0x0, 0x1, 0x6, 0x1002, [0x214, 0x443f]}})

3m39.05098396s ago: executing program 2 (id=3585):
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000340)=[{0x9, 0x0, 0xad, &(0x7f0000000100)="d7bc3388c8619e1ffd835c7089ecb55d62f36a888e3e068fd518e274782208ee63b4dd65d947ab030dd7c89f4e8396fc286ef12ddb2143b252b09b29d543b8b0aa72077b274d539693ea84f64d19"}], 0x1})

3m36.883045864s ago: executing program 2 (id=3590):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f00000093b020966e"], 0x0}, 0x0)

3m32.76402177s ago: executing program 2 (id=3596):
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x9, <r0=>0xffffffffffffffff, 0x80000})
read(r0, &(0x7f0000000200)=""/22, 0x16)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4b, 0x800, 0x1, 0x144}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$vim2m(0x0, 0x10001, 0x2)
syz_usb_connect(0x2, 0x36, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r2, 0x8001, 0x9, 0x0, 0xa, 0x1, {0x1}})
io_uring_enter(r2, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5)

3m16.803686459s ago: executing program 39 (id=3596):
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x9, <r0=>0xffffffffffffffff, 0x80000})
read(r0, &(0x7f0000000200)=""/22, 0x16)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000280))
r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4b, 0x800, 0x1, 0x144}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000240)=<r4=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$vim2m(0x0, 0x10001, 0x2)
syz_usb_connect(0x2, 0x36, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2004, @fd=r2, 0x8001, 0x9, 0x0, 0xa, 0x1, {0x1}})
io_uring_enter(r2, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5)

2m49.235042421s ago: executing program 1 (id=3582):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t'], 0x3d)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r5, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
ppoll(&(0x7f0000000100)=[{r2}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10)
syz_init_net_socket$llc(0x1a, 0x801, 0x0)

2m42.1002862s ago: executing program 1 (id=3649):
rt_sigprocmask(0x1, &(0x7f0000000000)={[0x8]}, &(0x7f0000000040), 0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, &(0x7f00000000c0)={0x1, 0x4, [0xb84, 0x842, 0x5dd, 0xd6a]})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xf, 0x0, 0x3}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

2m34.893015849s ago: executing program 1 (id=3656):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$eJzs3U9sHNd9B/DfG5Hi0m4rxnYUJ42LTVuksmK5+hdTsQp3VdNsA8gyEYq5BeCKpNSFKZIgqUY20oLupYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUMZvatuKRJmzb/iLI+H5v67s68N/PezHJGIvjmBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ8QcvXTl7Lt3vVgAAh+na6NfOnnf/B4CHynX//gcAAAAAAAAAAAAAgKMuRRGPR4q5a2tpvHrfVrva6r1zd2xoePtq/amqeawqX37Vzp2/cPHLzw1e6uTV1swH1N9vn4tXRq9fqb84e3tufmphYWqyPjbTmpidnNr1FvZaf6vT1QGo3371zuTNmwv1889e2LT67sB7fY+eHLg8+PSZpzplx4aGh0c3itS6y/d87Ia07TTC43gUcSZSPPO9n6ZmRBSx92NRO9xzv1V/1YnTVSfGhoarjky3mjOL5cqRzoEoIupdlRqdY7T9uYie3kPtw84aEUtl88sGny67NzrXnG/emJ6qjzTnF1uLrdmZkdRubdmfehRxKUUsR8Rq3/s31xtF9ESK75xYSzci4ljnOHypGhi8czuKA+zjLpTtrPdGLBcPwDk7wvqiiJcjxc/ePhUT+TpTXWu+GPFymT+IeLPMFyJS+cG4GPHuNp8jHkw9UcRfluf/8lqarK4HnevK1a/Xvzpzc7arbOe68hHvD++7Utyn+0P/ljwcR/zaVIsimtUVfy19/L/sAAAAAAAAAAAAAAAAALDf+qOIz0aKl/7jT6pxxVGNSz9xefAPB361e8z4kx+ynbLssxGxVOxuTO7xPDBwJI2kdJ/HEj/MalHEn+bxf2/c78YAAAAAAAAAAAAAAAAAAAA81Ir4SaR4/p1TaTm65xRvzdyqX2/emG7PCtuZ+7czZ/r6+vp6PbWzkXM851LO5ZwrOVdzRpHr52zkHM+5lHM550rO1ZxxLNfP2cg5nnMp53LOlZyrOaMn18/ZyDmecynncs6VnKs544jM3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ElSRBG/iBTf/uZaihQRjYjxaOdK3/1uHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ6ktFfD9S1P+ocW9ZT0Sk6v+2U+UfF6NxvMzHojFY5gvRuJKzWWVP44370H72pjcV8eNI0Vd7K1JPe1k+/73td/c+BvHmtzbefS6XPdZZOfBe36MnT1weHP6NJ3d6nbZrwOmrrZk7d+tjQ8PDo12Le/LeH+taNpD3W+xT34lYeO31V5vT01PzH/9F+RHYQ/UH6EX5DXIEmuHFYb2IniPRjPvTdx4C5f3/3Ujxu+/8Z+eG377/1+JX2u/u3eHj53+2cf9/fuuGdnn/79laL9//y3v6dvf/x7uWPZ//NtLbE1FbvD3XezKitvDa62dat5u3pm5NzVw8e/Yrg4NfuXC293hE7WZreqrr1b4cLgAAAAAAAAAAAAAAAIDDk4r4/UjR/PFaqkfE3Wq81sDlwafPPHUsjlXjrTaN235l9PqV+ouzt+fmpxYWpibrYzOtidnJqd3urlYN9xobGj6Qznyo/gNuf3/txdm51+Zbt/54cdv1j9Su3FhYnG9ObL86+qOIaHQvOV01eGxouGr0dKs5U1Ud2XYw/UfXm4r4r0gxcbGevpCX5fH/W0f4bxr/v7R1Qwc0/v9TXcvKfaZUxM8jxe/81ZPxhaqdj8T7jlku93eR4vSlz+dycbws12nDY9VDBNojA8uy/xcp/ukXm8t2xkO2xyBWZc/t/sg+GMrzfyJSfP8vvhu/mZdtfv7D9uf/ka0bOqDz/0TXskc2Pa9gz10nn/8zkeKFx9+K38rLPuj5H51nb5zKhe89n+OAzv+nu5YN5P3+9v50HQAAAAAAAAAA4IHWm4r4+0jxw+Ge9Fxetpvf/5vcuqED+v2vz3Qtm9yf+Yo+9MWeDyoAAAAAHBG9qYifRIpbi2/dG0O9efx31/jP39sY/zmUtqytfs73a9VzA/bz53/dBvJ+x/febQAAAAAAAAAAAAAAAAAAADhSUiriuTyf+ng1nn9yx/nUVyLFS//zTC6XTpblOvPAD1R/1q7Nzpy5Mj09O9FcbN6YnqqPzjUnpsq6T0SKtb/9fK5bVPOrd+abb8/xvjEX+3ykGP6HTtn2XOyducmf2Ch7riz7qUjx3/+Yy66vV2U781h/eqPs+bLs30SKb/zL5u12yp7cKHuhLPvdSPGjb9Q7ZR8py3aej/qZjbLPTswWB3BWAAAAAAAAAAAAAAAAAAAAeNj0piL+PFL87+3le2P58/z/vV1vK29+q2u+/y3uVvP8D1Tz/+/0+uPM/189V2Bpp70CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAnU4oiXo8Uc9fW0kpf+b6tdrU1c+fu2NDw9tX6U1XzWFW+/KqdO3/h4pefG7zUyQ+uv98+G6+MXr9Sf3H29tz81MLC1GR9bKY1MTs5test7LX+VqerA1C//eqdyZs3F+rnn72wafXdgff6Hj05cHnw6TNPdcqODQ0Pj3aV6en9qDt9Y8c1aYflx6OIv44Uz3zvp+mHfRFF7P1YbPvZ6dt9L/aov+rE6aoTY0PDVUemW82ZxXLlSOdAFBH1rkqNzjHat3NxQBoRS2XzywafLrs3Otecb96YnqqPNOcXW4ut2ZmR1G5t2Z96FHEpRSxHxOo256A3ing1UnznxFr6176IY53j8KVro187e37ndhQH2MddKNtZ741YLh6Ac3aE9UUR/xwpfvb2qfi3voieaH/FFyNeLvMHEW9G+3yn8oNxMeLdw/te5oD1RBH/X57/y2vp7b7yetC5rlz9ev2rMzdnu8p2risHcn84PP2Hurcjfm2qRRE/qq74a+nffV8DAAAAAAAAAAAAAAAAHCFF/HqkeP6dU6kaH3xvTHFr5lb9evPGdHtYX2fsX2fM9Pr6+no9tbORczznUs7lnCs5V3NGkevnbJRZW18fz++Xci7nXMm5mjOO5fo5GznHcy7lXM65knM1Z/Tk+jkbOcdzLuVczrmSczVnHJGxewAAAAAAAAAAAAAAAAAAwCdLUf2X4tvfXEvrfe35pcejnSvmA/3E+2UAAAD//xtt+zc=")
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

2m33.935960055s ago: executing program 1 (id=3659):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='scalable', 0x1d)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2m33.143448654s ago: executing program 1 (id=3662):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})
ioctl(r1, 0x8b27, &(0x7f0000000040))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x16}}]}}}]}, 0x40}}, 0xc0)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000140)={0x0, 0x8, 0x7, 0x2, 0x2, [], [0x708, 0x9, 0x3, 0x6e], [0x8, 0x87, 0x6, 0xae7], [0x6, 0xdc, 0x800, 0x7fff]})
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@uni_xlateno}, {@shortname_winnt}, {@fat=@sys_immutable}, {@uni_xlateno}]}, 0x1, 0x248, &(0x7f0000000a80)="$eJzs28+LG2UYB/Bn1uj2B20i/qIF8UUP6mXo5uTBQxdpQQwo2ghVkKZuomHHTdmEhRWxe9Krf4Jn8ehNkB697MW/wIMn97LHHsSRbJLtboxYYUkW+/lc8jBvvplneIfhISR7r3/z2Xqnn3dag1jKsli6GjtxP4taLMXETrz68s2fn3/v5gdvrTYa195N6frqjZV6SuniCz99+MX3L94bnH//h4s/Lsdu7aO9/fpvu8/uXtr788an3X7q9tNGb5Ba6XavN2jdLtpprdtfz1N6p2i3+u3U3ei3N4+td4renTvbqbWxVolj0qCXBpvbqfXJExGR53m6cC54OMszjza/u1+WsV8+fivKsjz7bUQl4teoRvZkyp66mj1zK3tuJ7u0X5bVuXfMPEzt//l7ccH+P0KOPNTPRBRfbzW3mqPX0fpqtyzLItpxJarxRwxvk7FRff3NxrUr6UAtvirujvN3t5qPjfKd6EY2Plltdn5llE/H88txbpIfnr8e1Xh6dr4+M38mXnnpSD6PavzycfSiiLUYZh/kv1xJ6Y23G4f5swf5ywfvAwD4v8nToZnzW57/0/oofzhf/ft8ODWfVeJyZbHXTkR/+/P1VlG0N0+oGI76J/qBioUUk++LTks/U8VrD9nY5DafWvp9fPi0XM5pLBbzPGK+Hmz6ojsBAAAAAAAAAADgv5jHzwmP/JUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgb/4KAAD//yfhxDQ=")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x416400)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000140)={'wg2\x00', @local})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
ioctl(r8, 0x1, &(0x7f0000000080))

2m26.040044718s ago: executing program 1 (id=3671):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
recvmmsg(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x44b2, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m6.912525678s ago: executing program 40 (id=3671):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
recvmmsg(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x2000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x44b2, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m17.145054626s ago: executing program 3 (id=3773):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, 0x0, 0x0)
bind$netrom(r0, 0x0, 0x0)

1m16.334816073s ago: executing program 3 (id=3775):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@noacl}, {@nodatasum}, {@autodefrag}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@discard_async}]}, 0x3, 0x510e, &(0x7f000000a240)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlVRGht7TRYv2LFNiVGIjE1EIwSlDVLyoQijKKr5ALUCEUkB4SLFESqPiKoogEChNURBpJQkIk2Q4mr23jN759ydhx9rvPT3k7xzZv7ncc+Zh+fce+dcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4/+HQV67622bxh397wdPPXTxx2d51F798zQVnPh7C5OzjHVm4o//6Wyd+fuf5d+29b81t9xy58P29ebk8HgaqfzrzO9fFWo8sDeHejhC608DKwSzQk98fjPW9YzCEM8JcoFZiqj8rkTYcvt8Xwv4wF6hV9b2+EAYLgYueeOjBG6uJW/pCWBZCqKRtPFvJ2uhLA+f0ZoH+NLCtOwv86mimFvhuZxaAExbfDLUX/cHJ+gwj85dr8PrrOWkb9sZKu9cVEyON8/1s3QJvVEFv+sDkCT1tpepYEKW3xyHvtkXwbiuN882etuIXqfwbytG5UCV0bp7asvHKmV3xkc4wNtbVqKYFep6fevVLm44lvWheh3EDRk7K6/Cmx5bd2bXiE4/es3LZiwc+sO+lE93MHxWGtJheaJWQv+YWzfMYTfg8WQRvv9K3pFFfukIIWz7/e59sFi/N/0eaz//jyznedtbljrW+PpTNzeMjgzHxylA2NwcAAIBFYzHsNd029sBHCsWHK0l9pfn/aHvH/+Mh/3wyn/X2UAgTs4l9wyGcNft4FrgjNnfJcAjvnk1N1gfWJYFDIbx9NrGiVlVSYkksMZoEfjKUByaSwOEYmEwC34qBm5PAdTFwMAlsioFDSeD8GAjT9f34/aG8H20H+mJgQzaIB+NZCL8Yiq0lY/VMrSoAAICTJJ8d9tTfLZzrcKIZ4vTyYF+rDPEM7IYZKkkN6Qy2Nq1qWEN3qxo6W9VQ6/ee5t0v1dzRqubSaRgd9Rlu/eXffCo0UZr/jzef/1fm2ZCO0vH/ENbP/o25O/PITC2+YbIuAwAAAHACBv73+W82i5fm/xPtnf8f94l0FTKHR+JuiK3DIYzXB7Jq/7AcyI56D+QBAAAAWAxqx+Nrx8Kn89vsFO10Pl3OP3mM+eOB/4l58/ceun9Ds+0tzf8n2zv/v7/+NtuIw3ErvjYcwpJC4AdxK6uBWaMx8OOP1gfy/h+OA3BDrCo/MaFW1Q2xxIYYGE8C+xuV+GGtxFn1gfzJqjW+r9aP6bxEIQAAAACnXNwdEI/Lx/P/3/ObNVc1K1ea/284tvP/Z+fBpdP7ZwZCWNUdQlf6w4BH+rOFAWNgsCNPPNCf1dWVVnVtfwjnVTuWVvV8vv5/d7rG4BN9WVUxcNZ7Drx6TjXxzb4QVhUDT37m9g9WE7uSQK3xv+wL4V3V3qaNf2dJ1nhP2vjXl4TwzkKgVtUlS0KoNtabVvVQJb+OQVrVP1dCeEshUKvqQ5UQdgcAFqn4X+nm4oM7d1+9dePMzNSOBUzEffh9Ycv0zNTYpm0zmysNtmlzss11yxhdW+5Tu1e+eSZfoujTd68fbCdd+53geLGtfD9+6cTB/H78LtQz2881PXV316Zdft97y02EwjepRl3uXOAu9xcrmXsSS/XH/L1hICy5cufUjrEvbty1a8fq7G+72ddkf+NhpmysVqdj1T/ftrXx8mi4WlbieMdqebGSVbsu375q5+6rV05fvvHSqUunrlj9oTXj546vHf/wuauqvRrP/rbo6vL5qk66evT2Nvt1Ert6dnehklPxqSEhIbHYEtsGljf9P7k0/9/efP4fP3XiJ3++PkOj4/8j8TB/9vjcYf4NMbC/3eP/I42O5tdODBhNAntiYI/D/AAAALw5xEl+3JsZ90r/dMV3XmxWrjT/39Pe7/9P0vr/taXrL2y0zP+KWGK80fr/6TL/tfX/9zRa/z9d5r+2/v/+N2D9/ytrgWRIfmH9fwAA4M3g1K3/33J5//QCAaUMLZf3Ty8QUMrQchn/di8QcMzr/z/7n3/136GJ0vz/5vbm/xbuBwAAgNPHl//sqt9pFi/N//e3N/8/9ev/hUbn/482Ckw2WhjQ+n8AAAAsUo3W/xu5vv9zzcqV5v8H25v/x9MuOutyx1pfH8rWtAvpmnavDNV+MgAAAACLQ2cYG+tpM2/dyqjrjr/Np/KlQJuli57/kyPHdv7/ofbm/3W/y7jpsWV3dq34xKOv37Ny2YsHPrDvpbnj/wAAAMDCaXe/BAAAAAAAAAAAAAAA8MZ7/j/2rm0WL/3+P6yffbzR7//jdf/i7wveWpc71tp6/b/8/kUfv2v37JKFjwyF8N5iYOverWeE/Nr8y4uBBz+74m3VxN60xP3Pnf9CNfG5NPCxlWe+Vk2clwQ2xEUS354G4lUVX1uaBOLyiv+eBuJ4HEwDvXngq0uzfnSkY/XTwWysOtKxenowhOFCoDZW9w5mbXSkHbwlCdQ6+IU0EDv453mgM92quwayrYqBwVj0toFsqwAAOG3Fb4E9Ycv0zNR4/Aofb8/urr+N6pYsu7ZcbUebzT+TL0326bvXD7aT7kq/i85da7wnVKpdWF36ulrM0jHby5NTS4uhe2uDLrda7a2zQbnUsQ5db+Me9WU9Gtu0bWZzT8uOr22dZU13yyyrS5OdYpbO2SFto5Y2tqWNHrU5Nm1scrzfGcbGupJcfxCDI6FOq1dEu7/XL67z1+hVUMxzxZF9v2pWX2n+P9Le/L9S7Ndr+cUA9sQr6/3dsGX+AQAAYGF9dd2vvxH/fer6h59slrc0/x9tb/4f92Dlh4KzvR2H4vX/9w2HMHtp/ZEscEds7pLhEN49m5qMJbIL6l8YS4xngTviDpMVscSGyfqqlsTAwSTwk6E8cCgJHI6BfC/FgZDvyvn7oRA+OJtaX19ieywxkgQ+GQOjSWAsBsaTwNIYmEgCLy/NA5NJ4N9iIEzXj9XdS/OxAgAAOBb5PKun/m5I53kHu1tl6GiVob9Vhs5WGSpNM/SEg416Ee9/O2bo6SiPQnyoJ222L6mllCFeDL/hhrcc3drh/x/W50wLlpqO5x/UzjfoqM9w30e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qdy8r8VTx0dj4McfrQ/kOwYOx8nuDbWqJvMS+aT9hlhiIgZGk8D2GJhIAhvW54H9b6sP5DPtWuP7ao1P5yUKAQAAADjl4g6CuJsmzv9v2/mVgWblSvP/ifbm/7G9gWJj18VajywN4d6Oua2pBVYOZoG4H2Mw/jz+HYMhnFHYwVErMdWflehNGg7f78t+od6bVvW9vuzHB/H+RU889OCN1cQtfSEsK+x9qbXxbCVroy8NnNObBfrTwLbuLBD3/NQC3+3MAnDCansF4wsqP9WlZmT+cg1ef2+Wa4Km3SvtA50n33y/uVoopR2u+T7VmmN72pruv+WkKb09Dnm3LcZ324h3W/GLVP4N5ehcqBI6N09t2XjlzK74SPGXrCUL9DwXf6XaTvokvA73HP/WtlZJN2A8+fgYn7/c/K/DjljdTY8tu7NrxScevWflshcPfGDfS21vRgPxh8IPXfOvgz8qDO9Cq4T8NbfoPk8mfZ4siv8Gknf3qKcthLD+5a/f0Cxemv9Ptjf/705uZ/06DubO4RDeVxjcR+Lw//Fw9jlYCGSfkm8pB7JD7v811PCTEwAAAE622u6O2v6C6fw2OyE8nSeX80+GcHT4GPLH/RUT8+Zvd7v7//qzy5rFS/P/Dc3n/0uSzXT83/F/Fojj//M63XdFL0kf2HNCu6JL1bEgHP+f1+n+bnP8f16O/zv+Px/H/1tw/H9ep/vTVvqWtN2XrhDCi3/0wNPN4qX5//b25v/W/5t/0b7a+n8bGq3/t73R+n97rP8HAAAsqAYLzaXzvNLqfaUM6ep9pQwtFwhsucRg8/X/mqyz96ZZ/680qK3W/3vh7Gd/E5oozf/3tDf/jy+HgWLri2X9v9H1Daq6OQa2WxgQAACA01GjfRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8se77h//Z3Cz+8G8vePq5iycu27vu4pevueDMx0OYnn28Iwt39F9/68TP7zz/rr33rbntniMXvr+Sl+vJb3+3Lnes9fWhEPYXHhmMiVeGqnfmAhd9/K7d3dXEI0MhvLcY2Lp36xnVxLeGQlheDDz42RVvqyb2piXuf+78F6qJz6WBj60887Vq4rw80JFu7j8uzTa3I93cG5eGMFwI1Db3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4bwQQnda1XO9WVXdac8f782qioGz3nPg1XOqif29IawqBp78zO0frCa+kARqjf9Fbwjvqr5k0sa/3ZM13pM2fktPCO8MIfSmJX7ZnZXoTUs83x3CWwqBWuOf7w5hd+BNIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kmxTIx2F9NFrj7/vz7z6pU3V20/fvX6wnXR3Xq5ndpPX9NTdXXu6b33crv5iJXPPR6n+mL83DIQlV+6c2jH2xY27du1Ynf1tN/ua7G9XHs3GavViGavlxUpW7bp8+6qdu69eOX35xkunLp26YvWH1oyfO752/MPnrqr2ajz7ezK6evup7+rZ3YVKTsUHgISExGJLdNZ9uo2f7h/kpS/6cxvaEyqzH9ClaUUxS8dsL09Gp9cdZ4+P53tKyx6tLk0cSlnWzJPl2vosa0uTibla+rIss9/rSpPDYmOds0Ma73eGsbGuRuMwUn+3OLw/O4HhfSofunbTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6zB6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//56HJTY=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
creat(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x17)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104)
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
fdatasync(r0)

1m11.25355371s ago: executing program 3 (id=3783):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0)

1m10.669144973s ago: executing program 3 (id=3785):
lseek(0xffffffffffffffff, 0xfffffffffffff96b, 0x0)
syz_open_dev$usbfs(0x0, 0x7, 0x252180)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x3000005, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="4c800000", @ANYRES8], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4)
write$UHID_INPUT(r4, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)

1m7.303747663s ago: executing program 3 (id=3792):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0)
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x80000, &(0x7f00000004c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0)

1m6.886070948s ago: executing program 3 (id=3794):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1}}}}}}, 0x0)

49.682190592s ago: executing program 41 (id=3794):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1}}}}}}, 0x0)

48.012027397s ago: executing program 0 (id=3824):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000600)='./bus\x00', 0x50)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
rmdir(&(0x7f0000000180)='./file1\x00')
chdir(&(0x7f00000001c0)='./bus\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

44.640426215s ago: executing program 0 (id=3826):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
r1 = syz_io_uring_setup(0x49b, &(0x7f0000000400)={0x0, 0xcc90, 0x100, 0x3, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r0, 0xb, 0x0, 0x0, 0x4, 0x1})
io_uring_enter(r1, 0x3513, 0x217, 0xa1, 0x0, 0x0)

42.733457179s ago: executing program 0 (id=3830):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x24004800)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008800)

39.130340678s ago: executing program 0 (id=3832):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

37.486855451s ago: executing program 0 (id=3837):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)

30.796378997s ago: executing program 0 (id=3848):
socket$inet(0x2, 0x6000000000000001, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
socket$nl_route(0x10, 0x3, 0x0)

14.984726524s ago: executing program 5 (id=3870):
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000600)='./bus\x00', 0x50)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
rmdir(&(0x7f0000000180)='./file1\x00')
chdir(&(0x7f00000001c0)='./bus\x00')
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

13.054763992s ago: executing program 42 (id=3848):
socket$inet(0x2, 0x6000000000000001, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r4, 0x4018aee1, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
socket$nl_route(0x10, 0x3, 0x0)

12.654101409s ago: executing program 5 (id=3874):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4, <r1=>0xffffffffffffffff})
lseek(r1, 0x2, 0x0)

9.769385804s ago: executing program 7 (id=3875):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000000), 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0)
read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0)
writev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)}], 0x1)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

9.202621817s ago: executing program 5 (id=3877):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x2e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480)

6.21967013s ago: executing program 7 (id=3878):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='wbt_timer\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
fcntl$setpipe(r3, 0x407, 0x2)
write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x4800, 0x4, 0x0, 0x8004}}, 0x50)
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
fcntl$setpipe(r3, 0x407, 0x2000000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f000031d000/0x2000)=nil, &(0x7f00006e3000/0x1000)=nil, 0x2000, 0x1})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x4fee, 0x0)

5.5372929s ago: executing program 5 (id=3880):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x0, 0xa, 0x4001, 0x40000000, 0x10})
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)

4.557248816s ago: executing program 5 (id=3881):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000600)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x1, 0x0, 0x1010000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

3.764418147s ago: executing program 7 (id=3882):
socket$inet(0x2, 0x4000000000000001, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4c7ca3e9, 0x4, 0xffffffffffffffff}, {0x3, 0x2, 0x2, 0x7fff}, 0x6, 0x8000}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414"], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000)

3.521920241s ago: executing program 5 (id=3883):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)

3.270075485s ago: executing program 4 (id=3884):
unshare(0x22020600)
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x4)
r2 = openat$cgroup_ro(r1, &(0x7f0000001140)='pids.events\x00', 0x5000000, 0x0)
readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1)

3.208989757s ago: executing program 7 (id=3885):
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700)

2.565558133s ago: executing program 7 (id=3886):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x22, &(0x7f0000000400)=@string={0x22, 0x3, "4b4fc2941bfa5b01f655f36a16cecf2aa245152bd02c45d70f834bb5b3759309"}}]})
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

2.549248034s ago: executing program 4 (id=3887):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)

2.064074641s ago: executing program 4 (id=3888):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x2e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480)

1.575415939s ago: executing program 4 (id=3889):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = dup2(r0, r0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x0, 0xa, 0x4001, 0x40000000, 0x10})

885.38141ms ago: executing program 4 (id=3890):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0)

319.16091ms ago: executing program 4 (id=3891):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r2, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0)
write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="61030202044bfed602f5ce2b4dc176ba62de0ea0d7097be15a7998e6"], 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)

0s ago: executing program 7 (id=3892):
syz_mount_image$fuse(0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, &(0x7f00000004c0)="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")
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

4.71
[ 1178.521941][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1178.530344][   T24] usb 3-1: Product: syz
[ 1178.534700][   T24] usb 3-1: Manufacturer: syz
[ 1178.539497][   T24] usb 3-1: SerialNumber: syz
[ 1178.543794][   T11] usb usb4-port1: attempt power cycle
[ 1178.653460][   T24] uvcvideo 3-1:16.50: Found Unit with invalid ID 0
[ 1178.922651][   T11] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1178.956054][   T24] uvcvideo 3-1:16.50: probe with driver uvcvideo failed with error -22
[ 1179.002406][   T11] usb 4-1: device descriptor read/8, error -71
[ 1179.054679][   T24] usb 3-1: USB disconnect, device number 104
[ 1179.262808][   T11] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1179.333753][   T11] usb 4-1: device descriptor read/8, error -71
[ 1179.493916][   T11] usb usb4-port1: unable to enumerate USB device
[ 1179.553745][T16206] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1179.711263][   T24] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1179.911946][   T24] usb 7-1: Using ep0 maxpacket: 32
[ 1179.958398][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1179.963032][T16357] syzkaller0: entered promiscuous mode
[ 1179.970450][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1179.975391][T16357] syzkaller0: entered allmulticast mode
[ 1179.985700][   T24] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1180.004667][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1180.112471][   T24] usb 7-1: config 0 descriptor??
[ 1180.765730][   T24] usbhid 7-1:0.0: can't add hid device: -32
[ 1180.772590][   T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -32
[ 1181.592523][T16206] veth0_vlan: entered promiscuous mode
[ 1181.661278][T16206] veth1_vlan: entered promiscuous mode
[ 1181.850617][T16206] veth0_macvtap: entered promiscuous mode
[ 1181.881098][T16206] veth1_macvtap: entered promiscuous mode
[ 1181.966729][T16206] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1182.061577][T16206] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1182.127724][T12315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1182.175215][T12315] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1182.249067][T12315] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1182.281678][T12306] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1182.771771][ T5436] usb 7-1: USB disconnect, device number 36
[ 1183.418654][   T24] usb 7-1: new full-speed USB device number 37 using dummy_hcd
[ 1183.642993][   T24] usb 7-1: config 16 has an invalid interface number: 50 but max is 0
[ 1183.651589][   T24] usb 7-1: config 16 has no interface number 0
[ 1183.711959][   T24] usb 7-1: New USB device found, idVendor=046d, idProduct=08c2, bcdDevice=d4.71
[ 1183.721645][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1183.729869][   T24] usb 7-1: Product: syz
[ 1183.734609][   T24] usb 7-1: Manufacturer: syz
[ 1183.739394][   T24] usb 7-1: SerialNumber: syz
[ 1183.833338][T16405] syzkaller0: entered promiscuous mode
[ 1183.839035][T16405] syzkaller0: entered allmulticast mode
[ 1183.851622][   T24] uvcvideo 7-1:16.50: Found Unit with invalid ID 0
[ 1184.156506][   T24] uvcvideo 7-1:16.50: probe with driver uvcvideo failed with error -22
[ 1184.241741][   T24] usb 7-1: USB disconnect, device number 37
[ 1186.561718][   T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[ 1186.801310][   T24] usb 7-1: Using ep0 maxpacket: 32
[ 1186.866160][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1186.877920][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1186.888110][   T24] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1186.897446][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1187.127930][   T24] usb 7-1: config 0 descriptor??
[ 1187.838173][   T24] usbhid 7-1:0.0: can't add hid device: -32
[ 1187.850524][   T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -32
[ 1190.490498][   T11] usb 7-1: USB disconnect, device number 38
[ 1190.755632][T12342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1190.763845][T12342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1190.936363][T12760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1190.944737][T12760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1191.271842][   T11] usb 7-1: new full-speed USB device number 39 using dummy_hcd
[ 1191.492702][   T11] usb 7-1: config 16 has an invalid interface number: 50 but max is 0
[ 1191.502534][   T11] usb 7-1: config 16 has no interface number 0
[ 1191.574587][   T11] usb 7-1: New USB device found, idVendor=046d, idProduct=08c2, bcdDevice=d4.71
[ 1191.587467][   T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.596105][   T11] usb 7-1: Product: syz
[ 1191.600648][   T11] usb 7-1: Manufacturer: syz
[ 1191.605432][   T11] usb 7-1: SerialNumber: syz
[ 1191.695617][   T11] uvcvideo 7-1:16.50: Found Unit with invalid ID 0
[ 1191.992633][   T11] uvcvideo 7-1:16.50: probe with driver uvcvideo failed with error -22
[ 1192.027607][   T11] usb 7-1: USB disconnect, device number 39
[ 1193.791305][   T24] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1194.010676][   T24] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1194.023644][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1194.033216][   T24] usb 9-1: Product: syz
[ 1194.037587][   T24] usb 9-1: Manufacturer: syz
[ 1194.042551][   T24] usb 9-1: SerialNumber: syz
[ 1195.021838][ T5436] usb 3-1: new full-speed USB device number 105 using dummy_hcd
[ 1195.032828][   T24] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[ 1195.050537][   T24] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1195.117042][   T24] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1195.165065][   T24] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71
[ 1195.205354][   T24] usb 9-1: USB disconnect, device number 32
[ 1195.279053][ T5436] usb 3-1: config 16 has an invalid interface number: 50 but max is 0
[ 1195.287587][ T5436] usb 3-1: config 16 has no interface number 0
[ 1195.365399][ T5436] usb 3-1: New USB device found, idVendor=046d, idProduct=08c2, bcdDevice=d4.71
[ 1195.375032][ T5436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1195.383470][ T5436] usb 3-1: Product: syz
[ 1195.387809][ T5436] usb 3-1: Manufacturer: syz
[ 1195.395349][ T5436] usb 3-1: SerialNumber: syz
[ 1195.457524][ T5436] uvcvideo 3-1:16.50: Found Unit with invalid ID 0
[ 1195.739804][ T5436] uvcvideo 3-1:16.50: probe with driver uvcvideo failed with error -22
[ 1195.807148][ T5436] usb 3-1: USB disconnect, device number 105
[ 1196.040553][   T24] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1196.200757][   T24] usb 6-1: device descriptor read/64, error -71
[ 1196.460473][   T24] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[ 1196.630375][   T24] usb 6-1: device descriptor read/64, error -71
[ 1196.742297][   T24] usb usb6-port1: attempt power cycle
[ 1197.121127][   T24] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[ 1197.172712][   T24] usb 6-1: device descriptor read/8, error -71
[ 1197.313730][ T9540] udevd[9540]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1197.460899][   T24] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[ 1197.587176][   T24] usb 6-1: device descriptor read/8, error -71
[ 1197.710378][   T24] usb usb6-port1: unable to enumerate USB device
[ 1200.147571][T16546] overlayfs: missing 'lowerdir'
[ 1205.040806][   T24] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[ 1205.227580][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1205.238293][   T24] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1205.247878][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1205.302167][   T24] usb 6-1: config 0 descriptor??
[ 1205.344841][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[ 1205.729652][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1205.742075][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[ 1205.761659][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1205.773622][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[ 1205.793654][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[ 1205.827565][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[ 1205.839197][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[ 1205.850959][   T24] pwc: recv_control_msg error -32 req 02 val 2100
[ 1205.862626][   T24] pwc: recv_control_msg error -32 req 04 val 1500
[ 1205.874864][   T24] pwc: recv_control_msg error -32 req 02 val 2500
[ 1205.886234][   T24] pwc: recv_control_msg error -32 req 02 val 2400
[ 1206.120866][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[ 1206.139900][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[ 1206.156467][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[ 1206.174886][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[ 1206.229264][   T24] pwc: Registered as video103.
[ 1206.238088][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input54
[ 1206.313592][   T24] usb 6-1: USB disconnect, device number 104
[ 1206.672005][T16576] overlayfs: missing 'lowerdir'
[ 1206.840579][ T5436] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1207.010934][ T5436] usb 9-1: device descriptor read/64, error -71
[ 1207.880573][ T5436] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1209.898479][ T5436] usb 9-1: device descriptor read/64, error -71
[ 1210.141905][ T5436] usb usb9-port1: attempt power cycle
[ 1210.320987][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1210.341764][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1210.352104][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1210.372642][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1210.384595][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1210.878939][T16593] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1211.998216][ T5808] Bluetooth: to_multiplier 0 < 10
[ 1212.591154][ T5808] Bluetooth: hci3: command tx timeout
[ 1212.714870][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1212.721887][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1212.922664][T16617] overlayfs: missing 'lowerdir'
[ 1213.262603][T16590] chnl_net:caif_netlink_parms(): no params data found
[ 1214.052496][ T5808] Bluetooth: hci2: command tx timeout
[ 1214.671422][ T5808] Bluetooth: hci3: command tx timeout
[ 1214.980581][   T11] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 1215.177102][T12342] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1215.239424][   T11] usb 6-1: no configurations
[ 1215.244575][   T11] usb 6-1: can't read configurations, error -22
[ 1215.440987][T12342] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1215.457198][   T11] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[ 1215.688487][   T11] usb 6-1: no configurations
[ 1215.694272][   T11] usb 6-1: can't read configurations, error -22
[ 1215.715520][T12342] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1215.978053][   T11] usb usb6-port1: attempt power cycle
[ 1216.553851][   T11] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 1216.592542][T12342] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1216.673718][   T11] usb 6-1: no configurations
[ 1216.678710][   T11] usb 6-1: can't read configurations, error -22
[ 1216.758854][ T5808] Bluetooth: hci3: command tx timeout
[ 1216.911662][   T11] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 1216.975757][   T11] usb 6-1: no configurations
[ 1216.980698][   T11] usb 6-1: can't read configurations, error -22
[ 1217.052326][   T11] usb usb6-port1: unable to enumerate USB device
[ 1217.129098][T16590] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1217.136898][T16590] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1217.144987][T16590] bridge_slave_0: entered allmulticast mode
[ 1217.154993][T16590] bridge_slave_0: entered promiscuous mode
[ 1217.612272][T16590] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1217.620082][T16590] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1217.628132][T16590] bridge_slave_1: entered allmulticast mode
[ 1217.638876][T16590] bridge_slave_1: entered promiscuous mode
[ 1218.000907][T12342] bridge_slave_1: left allmulticast mode
[ 1218.006785][T12342] bridge_slave_1: left promiscuous mode
[ 1218.013612][T12342] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1218.081551][T12342] bridge_slave_0: left allmulticast mode
[ 1218.092418][T12342] bridge_slave_0: left promiscuous mode
[ 1218.099058][T12342] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1218.774562][T16656] overlayfs: missing 'lowerdir'
[ 1218.890708][ T5808] Bluetooth: hci3: command tx timeout
[ 1219.030292][T12342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1219.071781][T12342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1219.133022][T12342] bond0 (unregistering): Released all slaves
[ 1219.151872][T16651] nvme_fabrics: missing parameter 'transport=%s'
[ 1219.158393][T16651] nvme_fabrics: missing parameter 'nqn=%s'
[ 1219.455803][T16590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1219.545185][T16660] tmpfs: Bad value for 'mpol'
[ 1219.569773][T16590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1220.100377][T12342] hsr_slave_0: left promiscuous mode
[ 1220.153800][T12342] hsr_slave_1: left promiscuous mode
[ 1220.162461][T12342] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1220.170317][T12342] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1220.289522][T12342] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1220.298015][T12342] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1220.310481][   T11] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[ 1220.456634][T12342] veth1_macvtap: left promiscuous mode
[ 1220.462811][T12342] veth0_macvtap: left promiscuous mode
[ 1220.468846][T12342] veth1_vlan: left promiscuous mode
[ 1220.474627][T12342] veth0_vlan: left promiscuous mode
[ 1220.480933][   T11] usb 6-1: Using ep0 maxpacket: 16
[ 1220.502368][   T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1220.554200][   T11] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1220.563931][   T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1220.572295][   T11] usb 6-1: Product: syz
[ 1220.576678][   T11] usb 6-1: Manufacturer: syz
[ 1220.581914][   T11] usb 6-1: SerialNumber: syz
[ 1220.628992][   T11] usb 6-1: config 0 descriptor??
[ 1220.753978][   T11] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1220.765576][   T11] em28xx 6-1:0.0: DVB interface 0 found: bulk
[ 1221.947260][   T11] em28xx 6-1:0.0: chip ID is em2765
[ 1222.095630][T16676] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3446'.
[ 1222.211693][T12342] team0 (unregistering): Port device team_slave_1 removed
[ 1222.249875][T12342] team0 (unregistering): Port device team_slave_0 removed
[ 1222.972387][T16590] team0: Port device team_slave_0 added
[ 1222.995943][T16590] team0: Port device team_slave_1 added
[ 1223.054896][   T11] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1223.063298][   T11] em28xx 6-1:0.0: board has no eeprom
[ 1224.581300][   T11] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1224.589543][   T11] em28xx 6-1:0.0: dvb set to bulk mode.
[ 1224.600056][T13234] em28xx 6-1:0.0: Binding DVB extension
[ 1224.960517][    T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1225.040510][   T11] usb 6-1: USB disconnect, device number 109
[ 1225.053346][   T11] em28xx 6-1:0.0: Disconnecting em28xx
[ 1225.285448][    T9] usb 4-1: no configurations
[ 1225.291328][    T9] usb 4-1: can't read configurations, error -22
[ 1225.416041][T13234] em28xx 6-1:0.0: Registering input extension
[ 1225.551646][   T11] em28xx 6-1:0.0: Closing input extension
[ 1225.650542][    T9] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1225.806347][   T11] em28xx 6-1:0.0: Freeing device
[ 1226.083385][T16590] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1226.090777][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1226.118568][T16590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1226.136060][T16627] udevd[16627]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1226.285727][T16690] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1226.295540][T16690] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1226.362740][    T9] usb 4-1: device descriptor read/all, error -71
[ 1226.412834][    T9] usb usb4-port1: attempt power cycle
[ 1226.486403][T16590] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1226.493793][T16590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1226.521455][T16590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1226.861661][T16697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3452'.
[ 1226.864134][T16590] hsr_slave_0: entered promiscuous mode
[ 1226.881746][T16590] hsr_slave_1: entered promiscuous mode
[ 1226.893649][T16590] debugfs: 'hsr0' already exists in 'hsr'
[ 1226.899562][T16590] Cannot create hsr debugfs directory
[ 1228.695418][T16590] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1228.831003][T16590] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1228.914372][T16590] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1229.036495][T16590] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1230.451568][    T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1230.715073][    T9] usb 3-1: no configurations
[ 1230.719993][    T9] usb 3-1: can't read configurations, error -22
[ 1230.980871][    T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 1231.274224][    T9] usb 3-1: no configurations
[ 1231.279248][    T9] usb 3-1: can't read configurations, error -22
[ 1231.432465][    T9] usb usb3-port1: attempt power cycle
[ 1231.466387][T16590] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1231.860786][T16590] 8021q: adding VLAN 0 to HW filter on device team0
[ 1231.891274][    T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 1232.025819][T13000] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1232.033431][T13000] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1232.057985][    T9] usb 3-1: no configurations
[ 1232.063487][    T9] usb 3-1: can't read configurations, error -22
[ 1232.188046][T13000] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1232.195643][T13000] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1232.321554][    T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 1232.363508][    T9] usb 3-1: no configurations
[ 1232.368331][    T9] usb 3-1: can't read configurations, error -22
[ 1232.431965][    T9] usb usb3-port1: unable to enumerate USB device
[ 1232.654181][T16627] udevd[16627]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1232.673716][T16737] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1232.683032][T16737] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1232.937712][T16742] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3464'.
[ 1237.936027][T16590] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1238.627032][T16627] udevd[16627]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1238.742731][T16783] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1238.752816][T16783] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1239.637190][   T24] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1239.863128][   T24] usb 9-1: no configurations
[ 1239.868103][   T24] usb 9-1: can't read configurations, error -22
[ 1240.057584][   T24] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1240.273891][   T24] usb 9-1: no configurations
[ 1240.278704][   T24] usb 9-1: can't read configurations, error -22
[ 1240.330878][   T24] usb usb9-port1: attempt power cycle
[ 1240.709407][   T24] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1240.774359][   T24] usb 9-1: no configurations
[ 1240.779321][   T24] usb 9-1: can't read configurations, error -22
[ 1240.831540][T16590] veth0_vlan: entered promiscuous mode
[ 1240.886883][T16590] veth1_vlan: entered promiscuous mode
[ 1240.991961][   T24] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1241.051730][   T24] usb 9-1: no configurations
[ 1241.056549][   T24] usb 9-1: can't read configurations, error -22
[ 1241.108719][   T24] usb usb9-port1: unable to enumerate USB device
[ 1241.200180][T16590] veth0_macvtap: entered promiscuous mode
[ 1241.367095][T16590] veth1_macvtap: entered promiscuous mode
[ 1241.678007][T16590] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1242.015725][T16590] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1242.222278][T13000] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.307623][T12928] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.481731][T12928] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1242.574841][T12928] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1244.501037][T16828] udevd[16828]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1247.410996][   T11] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[ 1247.628248][   T11] usb 6-1: no configurations
[ 1247.634675][   T11] usb 6-1: can't read configurations, error -22
[ 1247.732015][T16871] overlayfs: failed to resolve './file0': -2
[ 1247.830742][   T11] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 1248.035235][   T11] usb 6-1: no configurations
[ 1248.040056][   T11] usb 6-1: can't read configurations, error -22
[ 1248.104249][   T11] usb usb6-port1: attempt power cycle
[ 1248.465663][   T11] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 1248.549188][   T11] usb 6-1: no configurations
[ 1248.554165][   T11] usb 6-1: can't read configurations, error -22
[ 1248.743239][   T11] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 1248.842102][   T11] usb 6-1: no configurations
[ 1248.847017][   T11] usb 6-1: can't read configurations, error -22
[ 1248.891710][   T11] usb usb6-port1: unable to enumerate USB device
[ 1251.585681][T16912] tipc: Started in network mode
[ 1251.591900][T16912] tipc: Node identity fe9dff3834e4, cluster identity 4711
[ 1251.600511][T16912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1251.641868][T16911] overlayfs: failed to resolve './file0': -2
[ 1251.744375][T16912] tipc: Disabling bearer <eth:syzkaller0>
[ 1252.926806][T12750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1252.936452][T12750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1253.396986][T12926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1253.405561][T12926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1255.593898][T16950] overlayfs: failed to resolve './file0': -2
[ 1257.768746][T16956] evm: overlay not supported
[ 1261.101772][T16967] udevd[16967]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1263.612399][   T24] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 1263.849261][   T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1263.863170][   T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1263.878861][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1263.891015][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1263.926700][T16972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1264.009472][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1264.299011][T16972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1264.309037][T16972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1264.447137][ T5808] Bluetooth: hci3: link tx timeout
[ 1264.452833][ T5808] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1265.136193][   T24] usb 3-1: USB disconnect, device number 110
[ 1267.090742][T16983] Bluetooth: hci3: command 0x0406 tx timeout
[ 1267.871647][T16995] overlayfs: failed to resolve './file0': -2
[ 1273.468989][T17026] udevd[17026]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1273.867053][T16983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1273.882247][T16983] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1273.899193][T16983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1273.974684][T16983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1273.987401][T16983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1274.763258][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1274.769994][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1275.098347][   T24] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1275.321037][   T24] usb 4-1: device descriptor read/64, error -71
[ 1275.580378][   T24] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1276.830469][T16983] Bluetooth: hci4: command tx timeout
[ 1277.744797][   T24] usb 4-1: device descriptor read/64, error -71
[ 1279.099889][   T24] usb usb4-port1: attempt power cycle
[ 1279.199467][T16983] Bluetooth: hci4: command tx timeout
[ 1279.622540][T17050] overlayfs: failed to resolve './file0': -2
[ 1280.647732][T17023] chnl_net:caif_netlink_parms(): no params data found
[ 1280.782733][   T24] usb 3-1: new full-speed USB device number 111 using dummy_hcd
[ 1280.998056][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1281.012619][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1281.135856][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1281.145261][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1281.153528][   T24] usb 3-1: Product: syz
[ 1281.157775][   T24] usb 3-1: Manufacturer: syz
[ 1281.165024][   T24] usb 3-1: SerialNumber: syz
[ 1281.231065][ T5808] Bluetooth: hci4: command tx timeout
[ 1281.413863][T17066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1281.700591][T17005] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1282.013513][T17005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1282.026158][T17005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1282.036553][T17005] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1282.049852][T17005] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1282.059319][T17005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1282.324844][T17005] usb 4-1: config 0 descriptor??
[ 1282.652064][   T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1282.658930][   T24] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 1282.666770][   T24] cdc_ncm 3-1:1.0: setting rx_max = 2048
[ 1282.896879][T17005] usbhid 4-1:0.0: can't add hid device: -71
[ 1282.908318][T17005] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1283.011792][T17084] udevd[17084]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[ 1283.013830][   T24] cdc_ncm 3-1:1.0: setting tx_max = 184
[ 1283.048756][T17005] usb 4-1: USB disconnect, device number 111
[ 1283.321351][ T5808] Bluetooth: hci4: command tx timeout
[ 1283.398257][   T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 1283.607389][   T24] usb 3-1: USB disconnect, device number 111
[ 1283.615444][   T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[ 1283.698377][T17023] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1283.706428][T17023] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1283.715863][T17023] bridge_slave_0: entered allmulticast mode
[ 1283.730820][T17023] bridge_slave_0: entered promiscuous mode
[ 1284.297093][T17023] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1284.304660][T17023] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1284.312658][T17023] bridge_slave_1: entered allmulticast mode
[ 1284.321747][T17023] bridge_slave_1: entered promiscuous mode
[ 1285.789724][T17023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1286.027435][T17023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1286.510784][ T5808] Bluetooth: hci2: command 0x0406 tx timeout
[ 1286.667882][T17023] team0: Port device team_slave_0 added
[ 1286.757132][T17023] team0: Port device team_slave_1 added
[ 1286.799922][T17099] overlayfs: failed to resolve './file0': -2
[ 1286.855502][T17005] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1286.952700][T17023] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1286.959920][T17023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1286.987216][T17023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1287.008095][ T2230] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 1287.070732][T17023] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1287.077855][T17023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1287.107565][T17023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1287.143588][T17005] usb 4-1: Using ep0 maxpacket: 16
[ 1287.171999][T17005] usb 4-1: config 0 has an invalid interface number: 250 but max is 0
[ 1287.180610][T17005] usb 4-1: config 0 has no interface number 0
[ 1287.186856][T17005] usb 4-1: config 0 interface 250 altsetting 229 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1287.198423][T17005] usb 4-1: config 0 interface 250 has no altsetting 0
[ 1287.240562][T17005] usb 4-1: New USB device found, idVendor=0eb0, idProduct=3457, bcdDevice=32.8e
[ 1287.250025][T17005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1287.258436][T17005] usb 4-1: Product: syz
[ 1287.262861][T17005] usb 4-1: Manufacturer: syz
[ 1287.267541][T17005] usb 4-1: SerialNumber: syz
[ 1287.275454][ T2230] usb 6-1: device descriptor read/64, error -71
[ 1287.352482][T17005] usb 4-1: config 0 descriptor??
[ 1287.537945][ T2230] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[ 1287.632178][T17005] cxacru 4-1:0.250: cxacru_bind: interface has incorrect endpoints
[ 1287.641513][T17005] cxacru 4-1:0.250: usbatm_usb_probe: bind failed: -19!
[ 1287.685045][T17023] hsr_slave_0: entered promiscuous mode
[ 1287.695748][T17023] hsr_slave_1: entered promiscuous mode
[ 1287.705035][T17023] debugfs: 'hsr0' already exists in 'hsr'
[ 1287.711217][T17023] Cannot create hsr debugfs directory
[ 1287.740524][ T2230] usb 6-1: device descriptor read/64, error -71
[ 1287.762957][T17005] usb 4-1: USB disconnect, device number 112
[ 1287.868161][ T2230] usb usb6-port1: attempt power cycle
[ 1288.235553][ T2230] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 1288.316990][ T2230] usb 6-1: device descriptor read/8, error -71
[ 1288.604781][ T2230] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[ 1288.671380][ T2230] usb 6-1: device descriptor read/8, error -71
[ 1288.788408][ T2230] usb usb6-port1: unable to enumerate USB device
[ 1288.926203][T17023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1289.030316][   T24] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1289.041062][T17023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1289.197861][T17023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1289.224020][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1289.235577][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1289.245748][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1289.261978][   T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1289.272196][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1289.356463][   T24] usb 4-1: config 0 descriptor??
[ 1289.437950][T17023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1289.844848][   T24] usbhid 4-1:0.0: can't add hid device: -71
[ 1289.852835][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1290.090432][   T24] usb 4-1: USB disconnect, device number 113
[ 1290.322115][T17023] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1290.389798][T17023] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1290.497061][T17023] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1290.657604][T17023] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1290.694070][T17135] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1297.960584][T17023] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1298.248471][T17023] 8021q: adding VLAN 0 to HW filter on device team0
[ 1298.362437][ T5436] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 1298.382508][T17146] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1298.390707][T17146] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1298.921997][T17146] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1298.929334][T17146] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1299.915320][ T5436] usb 6-1: Using ep0 maxpacket: 8
[ 1299.947146][ T5436] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 1299.955631][ T5436] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1299.966200][ T5436] usb 6-1: config 0 has no interface number 0
[ 1299.972682][ T5436] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1299.982089][ T5436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1300.543316][ T5436] usb 6-1: config 0 descriptor??
[ 1300.563687][ T5436] ldusb 6-1:0.55: Interrupt in endpoint not found
[ 1300.874804][    T9] usb 6-1: USB disconnect, device number 118
[ 1301.445156][   T24] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1301.675610][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1301.686922][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1301.697852][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1301.711222][   T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1301.720569][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1302.032546][   T24] usb 4-1: config 0 descriptor??
[ 1302.210569][ T5436] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 1302.385710][ T5436] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1302.395378][ T5436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1302.492014][ T5436] usb 3-1: config 0 descriptor??
[ 1302.525889][ T5436] cp210x 3-1:0.0: cp210x converter detected
[ 1302.534533][   T24] usbhid 4-1:0.0: can't add hid device: -71
[ 1302.541904][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1302.643645][   T24] usb 4-1: USB disconnect, device number 114
[ 1302.821011][ T5436] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1302.828916][ T5436] cp210x 3-1:0.0: querying part number failed
[ 1302.919999][ T5436] usb 3-1: cp210x converter now attached to ttyUSB0
[ 1303.528912][T17023] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1304.692401][T17023] veth0_vlan: entered promiscuous mode
[ 1304.914516][T17023] veth1_vlan: entered promiscuous mode
[ 1305.413607][ T5861] usb 3-1: USB disconnect, device number 112
[ 1305.536372][ T5861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1305.547784][ T5861] cp210x 3-1:0.0: device disconnected
[ 1305.732605][T17023] veth0_macvtap: entered promiscuous mode
[ 1305.850201][T17023] veth1_macvtap: entered promiscuous mode
[ 1306.256896][T17023] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1306.487527][T17023] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1306.662948][T12763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.734918][T17146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.782845][T17146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.792596][T17146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1307.838530][T16983] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1307.848894][T16983] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1307.860004][T16983] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1307.924374][T16983] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1307.982441][T16983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1308.310449][ T2230] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1308.491106][ T2230] usb 3-1: Using ep0 maxpacket: 32
[ 1308.513962][ T2230] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[ 1308.523368][ T2230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1308.531770][ T2230] usb 3-1: Product: syz
[ 1308.536102][ T2230] usb 3-1: Manufacturer: syz
[ 1308.541225][ T2230] usb 3-1: SerialNumber: syz
[ 1308.590903][ T2230] usb 3-1: config 0 descriptor??
[ 1308.630533][ T2230] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[ 1308.638238][ T2230] dvb-usb: bulk message failed: -22 (2/0)
[ 1308.704286][ T2230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1308.835104][ T2230] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[ 1308.843556][ T2230] usb 3-1: media controller created
[ 1308.953986][ T2230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1309.062483][T17211] cxusb: i2c wr: len=173 is too big!
[ 1309.062483][T17211] 
[ 1309.200946][ T2230] usb 3-1: selecting invalid altsetting 7
[ 1309.206884][ T2230] cxusb: set interface failed
[ 1309.212121][ T2230] dvb-usb: bulk message failed: -22 (1/0)
[ 1309.702522][ T2230] DVB: Unable to find symbol lgdt330x_attach()
[ 1309.708885][ T2230] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[ 1310.030503][ T5808] Bluetooth: hci0: command tx timeout
[ 1310.121709][T17208] chnl_net:caif_netlink_parms(): no params data found
[ 1310.356291][ T2230] rc_core: IR keymap rc-dvico-portable not found
[ 1310.362973][ T2230] Registered IR keymap rc-empty
[ 1310.369897][ T2230] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[ 1310.385813][ T2230] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input56
[ 1310.623488][ T2230] dvb-usb: schedule remote query interval to 100 msecs.
[ 1310.631172][ T2230] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[ 1310.668523][ T2230] usb 3-1: USB disconnect, device number 113
[ 1310.735374][ T5808] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15
[ 1310.743028][ T5808] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[ 1310.840988][ T5861] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 1311.066231][ T5861] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1311.075670][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1311.221079][ T5861] usb 6-1: config 0 descriptor??
[ 1311.340580][ T5861] cp210x 6-1:0.0: cp210x converter detected
[ 1311.493409][ T5861] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1311.501566][ T5861] cp210x 6-1:0.0: querying part number failed
[ 1311.557560][ T2230] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[ 1311.612965][ T5861] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1312.080473][ T2230] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1312.111622][ T5808] Bluetooth: hci0: command tx timeout
[ 1312.304887][ T2230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1312.316244][ T2230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1312.326653][ T2230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1312.339973][ T2230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1312.349476][ T2230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1312.465280][ T2230] usb 3-1: config 0 descriptor??
[ 1312.920578][ T2230] hid_parser_main: 13 callbacks suppressed
[ 1312.920686][ T2230] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[ 1312.934346][ T2230] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[ 1312.941973][ T2230] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[ 1312.949551][ T2230] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[ 1312.963368][ T2230] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[ 1312.971467][ T2230] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[ 1312.979122][ T2230] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[ 1312.987169][ T2230] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[ 1312.994930][ T2230] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[ 1313.002972][ T2230] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0
[ 1313.176394][ T2230] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1313.203777][ T2230] usb 3-1: USB disconnect, device number 114
[ 1313.744623][ T5861] usb 6-1: USB disconnect, device number 119
[ 1313.799138][T17208] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1313.806835][T17208] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1313.816096][T17208] bridge_slave_0: entered allmulticast mode
[ 1313.824624][T17208] bridge_slave_0: entered promiscuous mode
[ 1313.864759][ T5861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1313.876126][ T5861] cp210x 6-1:0.0: device disconnected
[ 1314.118771][T17208] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1314.126941][T17208] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1314.138791][T17208] bridge_slave_1: entered allmulticast mode
[ 1314.147301][T17208] bridge_slave_1: entered promiscuous mode
[ 1314.191899][ T5808] Bluetooth: hci0: command tx timeout
[ 1314.234593][T17262] fido_id[17262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1315.223767][T17208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1315.323795][T17208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1315.376314][T12760] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1315.575791][T12760] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1315.793436][T12760] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1315.872106][T17208] team0: Port device team_slave_0 added
[ 1316.017817][T12760] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1316.154565][T17208] team0: Port device team_slave_1 added
[ 1316.271126][ T5808] Bluetooth: hci0: command tx timeout
[ 1316.582191][T17208] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1316.589663][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1316.622867][T17208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1316.754578][T12760] bridge_slave_1: left allmulticast mode
[ 1316.760934][T12760] bridge_slave_1: left promiscuous mode
[ 1316.767621][T12760] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1316.838637][T12760] bridge_slave_0: left allmulticast mode
[ 1316.844802][T12760] bridge_slave_0: left promiscuous mode
[ 1316.852205][T12760] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1317.603376][T12760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1317.755097][T12760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1317.877184][T12760] bond0 (unregistering): Released all slaves
[ 1318.044835][T17208] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1318.052137][T17208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1318.078473][T17208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1319.366295][T17208] hsr_slave_0: entered promiscuous mode
[ 1319.375418][T17208] hsr_slave_1: entered promiscuous mode
[ 1319.383538][T17208] debugfs: 'hsr0' already exists in 'hsr'
[ 1319.389360][T17208] Cannot create hsr debugfs directory
[ 1319.525202][T12760] hsr_slave_0: left promiscuous mode
[ 1319.534970][T12760] hsr_slave_1: left promiscuous mode
[ 1319.546182][T12760] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1319.554520][T12760] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1319.572049][T12760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1319.579602][T12760] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1319.695524][T12760] veth1_macvtap: left promiscuous mode
[ 1319.703011][T12760] veth0_macvtap: left promiscuous mode
[ 1319.708987][T12760] veth1_vlan: left promiscuous mode
[ 1319.714859][T12760] veth0_vlan: left promiscuous mode
[ 1321.562793][T12760] team0 (unregistering): Port device team_slave_1 removed
[ 1321.673782][T12760] team0 (unregistering): Port device team_slave_0 removed
[ 1322.435974][T17146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1322.444204][T17146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1322.724127][ T5808] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15
[ 1322.732321][ T5808] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[ 1322.930443][T17005] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 1325.251075][T17005] usb 6-1: Using ep0 maxpacket: 16
[ 1325.368717][T12315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1325.377041][T12315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1325.846211][T17005] usb 6-1: device descriptor read/all, error -71
[ 1326.532742][T17005] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 1326.722022][T17005] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1326.734880][T17005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1326.746217][ T2230] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1326.778445][T17005] usb 6-1: config 0 descriptor??
[ 1326.812518][T17005] cp210x 6-1:0.0: cp210x converter detected
[ 1326.928981][ T2230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1326.944548][ T2230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1326.955425][ T2230] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1326.968645][ T2230] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1326.977963][ T2230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1327.087955][T17005] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1327.095862][T17005] cp210x 6-1:0.0: querying part number failed
[ 1327.161900][T17005] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1327.218549][ T2230] usb 4-1: config 0 descriptor??
[ 1327.529186][T17208] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1327.668185][T17208] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1327.725760][ T2230] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1327.733462][ T2230] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1327.741171][ T2230] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1327.748686][ T2230] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1327.761001][ T2230] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1327.768535][ T2230] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1327.777369][ T2230] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1327.785056][ T2230] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1327.792957][ T2230] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1327.800845][ T2230] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0
[ 1327.865797][T17208] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1327.916205][T17208] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1328.157885][ T2230] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1328.284368][ T2230] usb 4-1: USB disconnect, device number 115
[ 1329.248367][T17328] fido_id[17328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1329.486853][ T2230] usb 6-1: USB disconnect, device number 121
[ 1329.568391][ T2230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1329.578073][ T2230] cp210x 6-1:0.0: device disconnected
[ 1329.735829][T17208] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1330.247311][T17208] 8021q: adding VLAN 0 to HW filter on device team0
[ 1330.462415][T12927] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1330.470327][T12927] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1330.694283][T12927] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1330.701769][T12927] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1331.148300][ T5436] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1331.400523][ T5436] usb 4-1: Using ep0 maxpacket: 16
[ 1331.484502][ T5436] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1331.496068][ T5436] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1331.562735][ T5436] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1331.572291][ T5436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.580731][ T5436] usb 4-1: Product: syz
[ 1331.585086][ T5436] usb 4-1: Manufacturer: syz
[ 1331.589854][ T5436] usb 4-1: SerialNumber: syz
[ 1331.901282][ T5436] usb 4-1: config 0 descriptor??
[ 1332.195692][ T5436] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input57
[ 1332.393519][    C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored
[ 1332.607485][    C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1332.638590][ T5436] imon:send_packet: packet tx failed (-71)
[ 1332.648835][T16983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1332.667106][T16983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1332.681164][T16983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1332.698717][T16983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1332.715688][T16983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1332.724654][ T5436] imon 4-1:0.0: panel buttons/knobs setup failed
[ 1333.641974][ T5436] rc_core: IR keymap rc-imon-pad not found
[ 1333.647978][ T5436] Registered IR keymap rc-empty
[ 1333.653526][ T5436] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1333.664714][ T5436] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1333.793816][ T5436] imon:send_packet: packet tx failed (-71)
[ 1333.841469][ T5436] imon 4-1:0.0: remote input dev register failed
[ 1333.848621][ T5436] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[ 1334.026545][ T5436] imon 4-1:0.0: unable to initialize intf0, err 0
[ 1334.033415][ T5436] imon:imon_probe: failed to initialize context!
[ 1334.040349][ T5436] imon 4-1:0.0: unable to register, err -19
[ 1334.094783][ T5436] usb 4-1: USB disconnect, device number 116
[ 1334.834508][T16983] Bluetooth: hci3: command tx timeout
[ 1336.163700][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1336.170520][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1336.912258][T16983] Bluetooth: hci3: command tx timeout
[ 1336.956134][T17208] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1337.356699][T17354] chnl_net:caif_netlink_parms(): no params data found
[ 1337.956640][T17208] veth0_vlan: entered promiscuous mode
[ 1338.010986][ T2230] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 1338.216157][ T2230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1338.227471][ T2230] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1338.237491][ T2230] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1338.250663][ T2230] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1338.259806][ T2230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1338.439898][ T2230] usb 6-1: config 0 descriptor??
[ 1338.497135][T17208] veth1_vlan: entered promiscuous mode
[ 1338.869198][ T2230] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1338.877825][ T2230] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1338.886027][ T2230] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1338.893937][ T2230] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1338.901794][ T2230] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1338.909502][ T2230] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1338.925547][ T2230] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1338.937660][ T2230] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1338.945906][ T2230] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1338.954072][ T2230] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[ 1339.038526][T16983] Bluetooth: hci3: command tx timeout
[ 1339.163689][ T2230] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1339.237014][T17208] veth0_macvtap: entered promiscuous mode
[ 1339.293688][ T2230] usb 6-1: USB disconnect, device number 122
[ 1339.314852][T17208] veth1_macvtap: entered promiscuous mode
[ 1339.523877][ T5436] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1339.601916][T17208] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1339.724847][T17208] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1339.804408][ T5436] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1339.813945][ T5436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1339.903268][T13000] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1339.925145][ T5436] usb 1-1: config 0 descriptor??
[ 1339.978895][T13000] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1339.996322][ T5436] cp210x 1-1:0.0: cp210x converter detected
[ 1340.053896][T12927] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.321729][ T5436] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1340.329640][ T5436] cp210x 1-1:0.0: querying part number failed
[ 1340.394346][T12310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.435071][T17390] fido_id[17390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1340.459493][ T5436] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1340.598611][T17354] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1340.606780][T17354] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1340.614766][T17354] bridge_slave_0: entered allmulticast mode
[ 1340.624587][T17354] bridge_slave_0: entered promiscuous mode
[ 1340.835755][T17354] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1340.843831][T17354] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1340.851839][T17354] bridge_slave_1: entered allmulticast mode
[ 1340.865442][T17354] bridge_slave_1: entered promiscuous mode
[ 1341.071035][T16983] Bluetooth: hci3: command tx timeout
[ 1341.309672][T17354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1341.331680][T17354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1341.613516][T17354] team0: Port device team_slave_0 added
[ 1341.756152][T17354] team0: Port device team_slave_1 added
[ 1342.148268][T17354] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1342.155575][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1342.182829][T17354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1342.460488][T17354] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1342.467744][T17354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1342.487029][ T2230] usb 1-1: USB disconnect, device number 2
[ 1342.494514][T17354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1342.611356][ T2230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1342.622257][ T2230] cp210x 1-1:0.0: device disconnected
[ 1343.264307][T17354] hsr_slave_0: entered promiscuous mode
[ 1343.274763][T17354] hsr_slave_1: entered promiscuous mode
[ 1343.283770][T17354] debugfs: 'hsr0' already exists in 'hsr'
[ 1343.289668][T17354] Cannot create hsr debugfs directory
[ 1343.310597][ T2230] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1343.510727][ T2230] usb 1-1: Using ep0 maxpacket: 16
[ 1343.551816][ T2230] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1343.563213][ T2230] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1343.673494][ T2230] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1343.682937][ T2230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1343.691356][ T2230] usb 1-1: Product: syz
[ 1343.695610][ T2230] usb 1-1: Manufacturer: syz
[ 1343.700446][ T2230] usb 1-1: SerialNumber: syz
[ 1343.792189][ T2230] usb 1-1: config 0 descriptor??
[ 1344.731213][    T9] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 1344.920654][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1344.932123][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1344.942213][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1344.955472][    T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1344.968480][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1345.436049][    T9] usb 6-1: config 0 descriptor??
[ 1345.972722][    T9] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[ 1345.990546][    T9] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[ 1346.004915][    T9] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[ 1346.014626][    T9] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[ 1346.023469][    T9] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0
[ 1346.377308][    T9] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1346.514026][    T9] usb 6-1: USB disconnect, device number 123
[ 1346.712962][    C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1346.724471][ T2230] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input59
[ 1347.016469][ T2230] imon:send_packet: packet tx failed (-71)
[ 1347.063033][ T2230] imon 1-1:0.0: panel buttons/knobs setup failed
[ 1347.476265][T17354] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1347.522538][T17354] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1347.637729][T17354] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1347.686253][T17354] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1347.774492][T17434] fido_id[17434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1348.210331][ T2230] rc_core: IR keymap rc-imon-pad not found
[ 1348.231140][ T2230] Registered IR keymap rc-empty
[ 1348.247560][ T2230] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1348.258098][ T2230] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1348.503424][ T2230] imon:send_packet: packet tx failed (-71)
[ 1348.546423][ T2230] imon 1-1:0.0: remote input dev register failed
[ 1348.553649][ T2230] imon 1-1:0.0: imon_init_intf0: rc device setup failed
[ 1348.798786][ T2230] imon 1-1:0.0: unable to initialize intf0, err 0
[ 1348.805898][ T2230] imon:imon_probe: failed to initialize context!
[ 1348.812954][ T2230] imon 1-1:0.0: unable to register, err -19
[ 1349.034310][ T2230] usb 1-1: USB disconnect, device number 3
[ 1349.401444][ T5436] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 1349.651999][ T5436] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1349.661476][ T5436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1349.814166][ T5436] usb 6-1: config 0 descriptor??
[ 1349.925345][ T5436] cp210x 6-1:0.0: cp210x converter detected
[ 1350.153628][ T5436] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1350.161932][ T5436] cp210x 6-1:0.0: querying part number failed
[ 1350.267683][ T5436] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1350.464468][T17354] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1350.738827][T17354] 8021q: adding VLAN 0 to HW filter on device team0
[ 1350.982211][T12763] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1350.989636][T12763] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1351.220256][T12763] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1351.227668][T12763] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1352.322800][ T2230] usb 6-1: USB disconnect, device number 124
[ 1352.374098][ T2230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1352.386323][ T2230] cp210x 6-1:0.0: device disconnected
[ 1352.875949][T17476] loop0: detected capacity change from 0 to 512
[ 1352.963231][T17478] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1353.013041][T17476] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 1353.026766][T17476] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1353.121542][T13000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1353.129613][T13000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.507648][T17476] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1353.682950][T17476] EXT4-fs (loop0): 1 truncate cleaned up
[ 1353.691211][T17476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1353.840970][T17476] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1353.919910][T12342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1353.931159][T12342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1357.013924][T17488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.531586][T17488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1357.796495][T17488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.129875][T17488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1358.485216][T17354] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1358.766829][T13000] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.822081][T13000] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.849188][T12928] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1358.947580][T12928] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.529260][T13000] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1359.789466][T13000] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1360.064170][T13000] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1360.152442][ T5436] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1360.255416][T13000] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1360.309120][T17523] block nbd3: shutting down sockets
[ 1360.450973][ T5436] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1360.460572][ T5436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1360.546781][ T5436] usb 1-1: config 0 descriptor??
[ 1360.561940][ T5436] cp210x 1-1:0.0: cp210x converter detected
[ 1360.874084][ T5436] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1360.882257][ T5436] cp210x 1-1:0.0: querying part number failed
[ 1361.006806][ T5436] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1361.066753][T13000] bridge_slave_1: left allmulticast mode
[ 1361.073312][T13000] bridge_slave_1: left promiscuous mode
[ 1361.079873][T13000] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1361.145968][T13000] bridge_slave_0: left allmulticast mode
[ 1361.154578][T13000] bridge_slave_0: left promiscuous mode
[ 1361.161595][T13000] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1362.092722][T13000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1362.162026][T13000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1362.204186][T13000] bond0 (unregistering): Released all slaves
[ 1362.503203][T13000] tipc: Left network mode
[ 1362.837461][T17354] veth0_vlan: entered promiscuous mode
[ 1363.049178][T13000] hsr_slave_0: left promiscuous mode
[ 1363.077114][T13000] hsr_slave_1: left promiscuous mode
[ 1363.089265][T13000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1363.097826][T13000] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1363.174588][T13000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1363.182395][T13000] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1363.182638][ T2230] usb 1-1: USB disconnect, device number 4
[ 1363.299689][ T2230] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1363.316056][ T2230] cp210x 1-1:0.0: device disconnected
[ 1363.430559][T13000] veth1_macvtap: left promiscuous mode
[ 1363.436313][T13000] veth0_macvtap: left promiscuous mode
[ 1363.442466][T13000] veth1_vlan: left promiscuous mode
[ 1363.448012][T13000] veth0_vlan: left promiscuous mode
[ 1364.854521][T13000] team0 (unregistering): Port device team_slave_1 removed
[ 1364.882046][T13000] team0 (unregistering): Port device team_slave_0 removed
[ 1365.228643][T17354] veth1_vlan: entered promiscuous mode
[ 1366.456699][T17354] veth0_macvtap: entered promiscuous mode
[ 1366.896086][T17354] veth1_macvtap: entered promiscuous mode
[ 1367.226508][T17354] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1367.342472][T17354] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1367.534417][T13000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1367.566409][T13000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1367.606020][T13000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1367.776390][T13000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1379.120367][ T5436] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1379.382657][ T5436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1379.394413][ T5436] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1379.403911][ T5436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1379.460341][ T5436] usb 1-1: config 0 descriptor??
[ 1379.928213][ T5436] usbhid 1-1:0.0: can't add hid device: -71
[ 1379.934772][ T5436] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1380.040462][ T5436] usb 1-1: USB disconnect, device number 5
[ 1381.074295][   T30] audit: type=1326 audit(1760093199.813:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17661 comm="syz.1.3671" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e0578eec9 code=0x0
[ 1381.255352][T12750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1381.263856][T12750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1382.117864][T12928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1382.126280][T12928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1383.092074][T17673] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[ 1385.039463][T17696] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3678'.
[ 1385.802234][T16983] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15
[ 1385.809781][T16983] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[ 1386.270897][ T5436] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 1386.478618][ T5436] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1386.490319][ T5436] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1386.499597][ T5436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1386.574531][ T5436] usb 6-1: config 0 descriptor??
[ 1387.141013][ T5436] usbhid 6-1:0.0: can't add hid device: -71
[ 1387.152775][ T5436] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1388.251145][ T5436] usb 6-1: USB disconnect, device number 125
[ 1390.272289][T17732] overlayfs: missing 'lowerdir'
[ 1390.297574][   T30] audit: type=1326 audit(1760093209.003:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.3.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c0f8eec9 code=0x7ffc0000
[ 1390.324356][   T30] audit: type=1326 audit(1760093209.003:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.3.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c0f8eec9 code=0x7ffc0000
[ 1390.348402][   T30] audit: type=1326 audit(1760093209.013:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.3.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c0f8eec9 code=0x7ffc0000
[ 1390.371677][   T30] audit: type=1326 audit(1760093209.013:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.3.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c0f8eec9 code=0x7ffc0000
[ 1390.394569][   T30] audit: type=1326 audit(1760093209.013:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.3.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f58c0f8d97f code=0x7ffc0000
[ 1390.417425][   T30] audit: type=1326 audit(1760093209.013:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.3.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c0f8eec9 code=0x7ffc0000
[ 1390.443295][   T30] audit: type=1326 audit(1760093209.013:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.3.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c0f8eec9 code=0x7ffc0000
[ 1390.467321][   T30] audit: type=1326 audit(1760093209.013:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.3.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58c0f8eec9 code=0x7ffc0000
[ 1390.490150][   T30] audit: type=1326 audit(1760093209.013:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.3.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c0f8eec9 code=0x7ffc0000
[ 1390.512878][   T30] audit: type=1326 audit(1760093209.013:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.3.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58c0f8eec9 code=0x7ffc0000
[ 1392.504550][T17738] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1393.974478][T17746] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3691'.
[ 1394.980790][T17750] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[ 1397.885003][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1397.891840][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1403.380545][ T5861] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1403.411653][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1403.423714][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1403.443075][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1403.455319][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1403.473529][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1405.384615][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1405.395894][ T5861] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1405.405414][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1406.070619][T16983] Bluetooth: hci5: command tx timeout
[ 1406.103222][ T5861] usb 1-1: config 0 descriptor??
[ 1406.616113][ T5861] usb 1-1: can't set config #0, error -71
[ 1406.672570][ T5861] usb 1-1: USB disconnect, device number 6
[ 1406.771924][T17787] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1407.368815][T17797] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3705'.
[ 1407.966514][T17773] chnl_net:caif_netlink_parms(): no params data found
[ 1408.110614][T16983] Bluetooth: hci5: command tx timeout
[ 1408.744266][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3708'.
[ 1410.190452][T16983] Bluetooth: hci5: command tx timeout
[ 1411.561354][T17823] loop0: detected capacity change from 0 to 1024
[ 1411.576367][T17773] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1411.584271][T17773] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1411.592372][T17773] bridge_slave_0: entered allmulticast mode
[ 1411.602348][T17773] bridge_slave_0: entered promiscuous mode
[ 1411.675772][T17823] EXT4-fs: Ignoring removed bh option
[ 1411.681788][T17823] EXT4-fs: inline encryption not supported
[ 1411.733752][T17005] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1411.749480][T17823] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1411.775493][T17823] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1411.792758][T17773] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1411.800579][T17773] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1411.808282][T17773] bridge_slave_1: entered allmulticast mode
[ 1411.816842][T17773] bridge_slave_1: entered promiscuous mode
[ 1411.937772][T17005] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1411.949027][T17005] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1411.958407][T17005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1412.069393][T17773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1412.155986][T17823] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3711: lblock 2 mapped to illegal pblock 2 (length 1)
[ 1412.245596][T17773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1412.249726][T17005] usb 6-1: config 0 descriptor??
[ 1412.268821][T17823] __quota_error: 12 callbacks suppressed
[ 1412.268905][T17823] Quota error (device loop0): qtree_write_dquot: dquota write failed
[ 1412.283975][T17823] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3711: lblock 0 mapped to illegal pblock 48 (length 1)
[ 1412.298931][T16983] Bluetooth: hci5: command tx timeout
[ 1412.417307][T17823] Quota error (device loop0): v2_write_file_info: Can't write info structure
[ 1412.426674][T17823] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.3711: Failed to acquire dquot type 0
[ 1412.536329][T17823] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem
[ 1412.596838][T17823] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3711: mark_inode_dirty error
[ 1412.669396][T17773] team0: Port device team_slave_0 added
[ 1412.688141][T17823] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[ 1412.699185][T17823] EXT4-fs (loop0): 1 orphan inode deleted
[ 1412.707320][T17823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1412.740970][T17005] usbhid 6-1:0.0: can't add hid device: -71
[ 1412.754145][T17005] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1412.785780][T17773] team0: Port device team_slave_1 added
[ 1412.869761][T12757] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1)
[ 1412.903923][T17005] usb 6-1: USB disconnect, device number 126
[ 1413.033304][T12757] Quota error (device loop0): remove_tree: Can't read quota data block 1
[ 1413.042496][T12757] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 0
[ 1414.103407][T17823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1414.731470][ T5808] Bluetooth: hci4: command 0x0406 tx timeout
[ 1414.819900][T17823] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.3711: Invalid inode table block 1 in block_group 0
[ 1414.889073][T17773] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1414.902783][T17773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1414.932100][T17773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1415.065060][T17823] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem
[ 1415.130709][T17823] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz.0.3711: mark_inode_dirty error
[ 1415.177678][T17773] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1415.185849][T17773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1415.216493][T17773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1416.068226][T17773] hsr_slave_0: entered promiscuous mode
[ 1416.078811][T17773] hsr_slave_1: entered promiscuous mode
[ 1416.087918][T17773] debugfs: 'hsr0' already exists in 'hsr'
[ 1416.093974][T17773] Cannot create hsr debugfs directory
[ 1416.729154][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3720'.
[ 1419.471788][T17005] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1419.640899][T17005] usb 1-1: device descriptor read/64, error -71
[ 1419.920786][T17005] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1420.100707][T17005] usb 1-1: device descriptor read/64, error -71
[ 1420.212240][T17005] usb usb1-port1: attempt power cycle
[ 1420.594301][ T2230] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 1420.608786][T17005] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1420.709820][T17773] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1420.711514][T17005] usb 1-1: device descriptor read/8, error -71
[ 1420.858743][ T2230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1420.870669][ T2230] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1420.879939][ T2230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1420.897620][T12928] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1420.954439][T17773] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1420.993014][ T2230] usb 5-1: config 0 descriptor??
[ 1421.046140][T17005] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1421.061272][T12928] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.116326][T17005] usb 1-1: device descriptor read/8, error -71
[ 1421.160597][T17773] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1421.256084][T17005] usb usb1-port1: unable to enumerate USB device
[ 1421.299927][T12928] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.415286][T17773] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1421.430571][ T2230] usbhid 5-1:0.0: can't add hid device: -71
[ 1421.437241][ T2230] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1421.587131][ T2230] usb 5-1: USB disconnect, device number 85
[ 1421.615671][T12928] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1422.425899][T12928] bridge_slave_1: left allmulticast mode
[ 1422.432662][T12928] bridge_slave_1: left promiscuous mode
[ 1422.439260][T12928] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1422.535282][T12928] bridge_slave_0: left allmulticast mode
[ 1422.541413][T12928] bridge_slave_0: left promiscuous mode
[ 1422.548079][T12928] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1423.404893][T12928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1423.483357][T12928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1423.529122][T12928] bond0 (unregistering): Released all slaves
[ 1425.070900][T17773] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1425.267524][T17773] 8021q: adding VLAN 0 to HW filter on device team0
[ 1425.619672][T12757] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1425.627292][T12757] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1425.643932][T12757] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1425.651534][T12757] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1427.485357][T12928] hsr_slave_0: left promiscuous mode
[ 1427.530304][T12928] hsr_slave_1: left promiscuous mode
[ 1427.538681][T12928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1427.546437][T12928] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1427.666154][T12928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1427.673964][T12928] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1427.793080][ T5436] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 1427.940952][T12928] veth1_macvtap: left promiscuous mode
[ 1427.946781][T12928] veth0_macvtap: left promiscuous mode
[ 1427.953173][T12928] veth1_vlan: left promiscuous mode
[ 1427.958753][T12928] veth0_vlan: left promiscuous mode
[ 1428.342669][ T5436] usb 5-1: device descriptor read/64, error -71
[ 1428.642072][ T5436] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1429.424785][ T5436] usb 5-1: device descriptor read/64, error -71
[ 1429.586442][ T5436] usb usb5-port1: attempt power cycle
[ 1429.588305][T12928] team0 (unregistering): Port device team_slave_1 removed
[ 1429.618672][T12928] team0 (unregistering): Port device team_slave_0 removed
[ 1430.094162][ T5436] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1430.176864][ T5436] usb 5-1: device descriptor read/8, error -71
[ 1431.197908][ T5436] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1431.461141][ T5436] usb 5-1: device descriptor read/8, error -71
[ 1431.660928][ T5436] usb usb5-port1: unable to enumerate USB device
[ 1433.588113][T17982] loop0: detected capacity change from 0 to 32768
[ 1435.681607][T17982] read_mapping_page failed!
[ 1435.705027][T17982] ialloc: diAlloc returned -5!
[ 1438.534862][T17919] Set syz1 is full, maxelem 65536 reached
[ 1438.940873][ T5861] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1439.082143][T17773] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1439.180528][ T5861] usb 4-1: Using ep0 maxpacket: 8
[ 1439.216783][ T5861] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1439.227535][ T5861] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1439.241047][ T5861] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1439.251510][ T5861] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1439.264896][ T5861] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1439.277729][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1439.333699][T17999] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3750'.
[ 1439.546594][T18002] overlayfs: missing 'lowerdir'
[ 1439.556475][ T5861] usbtmc 4-1:16.0: bulk endpoints not found
[ 1439.811392][    T9] usb 4-1: USB disconnect, device number 117
[ 1440.013957][ T5861] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1440.205757][ T5861] usb 1-1: device descriptor read/64, error -71
[ 1440.460313][ T5861] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1440.641505][ T5861] usb 1-1: device descriptor read/64, error -71
[ 1440.781927][ T5861] usb usb1-port1: attempt power cycle
[ 1442.551443][ T5861] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1444.561936][ T5861] usb 1-1: device descriptor read/8, error -71
[ 1444.911510][ T5861] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1445.064742][ T5861] usb 1-1: device descriptor read/8, error -71
[ 1445.086333][T17773] veth0_vlan: entered promiscuous mode
[ 1445.191712][ T5861] usb usb1-port1: unable to enumerate USB device
[ 1445.250915][T17773] veth1_vlan: entered promiscuous mode
[ 1445.543230][T18048] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1445.553222][T18048] block device autoloading is deprecated and will be removed.
[ 1445.853978][T17773] veth0_macvtap: entered promiscuous mode
[ 1445.863857][T18052] overlayfs: missing 'lowerdir'
[ 1445.927375][T17773] veth1_macvtap: entered promiscuous mode
[ 1446.125794][T17773] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1446.307047][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'.
[ 1446.320620][T18061] ------------[ cut here ]------------
[ 1446.326246][T18061] WARNING: CPU: 1 PID: 18061 at net/mac80211/rate.c:53 rate_control_rate_init+0x38a/0x640
[ 1446.340312][T18061] Modules linked in:
[ 1446.344451][T18061] CPU: 1 UID: 0 PID: 18061 Comm: syz.0.3765 Not tainted syzkaller #0 PREEMPT(none) 
[ 1446.355757][T18061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1446.366163][T18061] RIP: 0010:rate_control_rate_init+0x38a/0x640
[ 1446.372688][T18061] Code: 02 e8 f2 e9 aa fd ff ff 8b 3a e8 01 02 e8 f2 e9 bc fd ff ff 89 df e8 f5 01 e8 f2 4d 85 f6 0f 85 54 fe ff ff e8 c7 2d 42 f2 90 <0f> 0b 90 e8 0e 80 18 f2 e9 3a 01 00 00 8b 7d d4 e8 d1 01 e8 f2 e9
[ 1446.392777][T18061] RSP: 0018:ffff888118a3f188 EFLAGS: 00010287
[ 1446.399091][T18061] RAX: ffffffff8fb40009 RBX: 0000000000000000 RCX: 0000000000080000
[ 1446.407454][T18061] RDX: ffffc9000b00c000 RSI: 0000000000000f11 RDI: 0000000000000f12
[ 1446.415755][T18061] RBP: ffff888118a3f210 R08: ffffea000000000f R09: 0000000000000000
[ 1446.424038][T18061] R10: ffff88804c2b40e0 R11: 0000000000000002 R12: 0000000000000000
[ 1446.432319][T18061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1446.444043][T18061] FS:  00007fe991ed16c0(0000) GS:ffff8881ab07e000(0000) knlGS:0000000000000000
[ 1446.454351][T18061] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1446.461247][T18061] CR2: 0000001b33919ff8 CR3: 000000011ad5e000 CR4: 00000000003526f0
[ 1446.469501][T18061] Call Trace:
[ 1446.473003][T18061]  <TASK>
[ 1446.476101][T18061]  rate_control_rate_init_all_links+0x60/0x6f0
[ 1446.482726][T18061]  sta_apply_auth_flags+0x2a6/0x6e0
[ 1446.488299][T18061]  sta_apply_parameters+0x1c38/0x2260
[ 1446.494093][T18061]  ieee80211_add_station+0x72e/0x9f0
[ 1446.499690][T18061]  ? __pfx_ieee80211_add_station+0x10/0x10
[ 1446.505922][T18061]  rdev_add_station+0x7d/0x3d0
[ 1446.511121][T18061]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1446.517224][T18061]  nl80211_new_station+0x360c/0x36d0
[ 1446.522901][T18061]  ? kmsan_get_metadata+0xfb/0x160
[ 1446.528375][T18061]  ? __pfx_nl80211_new_station+0x10/0x10
[ 1446.534358][T18061]  genl_family_rcv_msg_doit+0x338/0x3f0
[ 1446.543834][T18061]  genl_rcv_msg+0xacf/0xc10
[ 1446.548587][T18061]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1446.555304][T18061]  ? __pfx_nl80211_new_station+0x10/0x10
[ 1446.561279][T18061]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1446.567010][T18061]  netlink_rcv_skb+0x54d/0x680
[ 1446.572221][T18061]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1446.577509][T18061]  genl_rcv+0x41/0x60
[ 1446.581806][T18061]  ? __pfx_genl_rcv+0x10/0x10
[ 1446.586696][T18061]  netlink_unicast+0xf01/0x12b0
[ 1446.591917][T18061]  netlink_sendmsg+0x10b3/0x1250
[ 1446.597141][T18061]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1446.602855][T18061]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1446.608409][T18061]  __sock_sendmsg+0x333/0x3d0
[ 1446.613500][T18061]  ____sys_sendmsg+0x7e0/0xd80
[ 1446.618563][T18061]  ___sys_sendmsg+0x271/0x3b0
[ 1446.623605][T18061]  ? __rcu_read_unlock+0x6d/0xd0
[ 1446.628793][T18061]  ? __fget_files+0x3b4/0x4a0
[ 1446.633843][T18061]  ? __fget_files+0x3b9/0x4a0
[ 1446.638771][T18061]  ? kmsan_get_metadata+0xfb/0x160
[ 1446.647647][T18061]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1446.654995][T18061]  __x64_sys_sendmsg+0x211/0x3e0
[ 1446.660359][T18061]  ? kmsan_get_metadata+0xfb/0x160
[ 1446.665759][T18061]  x64_sys_call+0x1dfd/0x3e30
[ 1446.670817][T18061]  do_syscall_64+0xd9/0x210
[ 1446.675610][T18061]  ? irqentry_exit+0x16/0x60
[ 1446.680663][T18061]  ? clear_bhb_loop+0x40/0x90
[ 1446.685576][T18061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1446.691791][T18061] RIP: 0033:0x7fe990f8eec9
[ 1446.696396][T18061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1446.716319][T18061] RSP: 002b:00007fe991ed1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1446.725135][T18061] RAX: ffffffffffffffda RBX: 00007fe9911e6180 RCX: 00007fe990f8eec9
[ 1446.733442][T18061] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009
[ 1446.745316][T18061] RBP: 00007fe991011f91 R08: 0000000000000000 R09: 0000000000000000
[ 1446.754562][T18061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1446.762846][T18061] R13: 00007fe9911e6218 R14: 00007fe9911e6180 R15: 00007ffe48d4c5b8
[ 1446.771123][T18061]  </TASK>
[ 1446.774286][T18061] ---[ end trace 0000000000000000 ]---
[ 1446.783393][T18061] ------------[ cut here ]------------
[ 1446.789021][T18061] WARNING: CPU: 1 PID: 18061 at net/mac80211/rate.c:53 rate_control_rate_init+0x38a/0x640
[ 1446.799401][T18061] Modules linked in:
[ 1446.803657][T18061] CPU: 1 UID: 0 PID: 18061 Comm: syz.0.3765 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[ 1446.815034][T18061] Tainted: [W]=WARN
[ 1446.818971][T18061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1446.829290][T18061] RIP: 0010:rate_control_rate_init+0x38a/0x640
[ 1446.835812][T18061] Code: 02 e8 f2 e9 aa fd ff ff 8b 3a e8 01 02 e8 f2 e9 bc fd ff ff 89 df e8 f5 01 e8 f2 4d 85 f6 0f 85 54 fe ff ff e8 c7 2d 42 f2 90 <0f> 0b 90 e8 0e 80 18 f2 e9 3a 01 00 00 8b 7d d4 e8 d1 01 e8 f2 e9
[ 1446.859712][T18061] RSP: 0018:ffff888118a3f2e0 EFLAGS: 00010287
[ 1446.867050][T18061] RAX: ffffffff8fb40009 RBX: 0000000000000000 RCX: 0000000000080000
[ 1446.875313][T18061] RDX: ffffc9000b00c000 RSI: 00000000000382fb RDI: 00000000000382fc
[ 1446.883686][T18061] RBP: ffff888118a3f368 R08: ffffea000000000f R09: 0000000000000000
[ 1446.892006][T18061] R10: ffff88804c2b40e0 R11: ffffffff817f4880 R12: 0000000000000000
[ 1446.900300][T18061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1446.908455][T18061] FS:  00007fe991ed16c0(0000) GS:ffff8881ab07e000(0000) knlGS:0000000000000000
[ 1446.917847][T18061] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1446.924709][T18061] CR2: 0000001b33919ff8 CR3: 000000011ad5e000 CR4: 00000000003526f0
[ 1446.932978][T18061] Call Trace:
[ 1446.936387][T18061]  <TASK>
[ 1446.939487][T18061]  rate_control_rate_init_all_links+0x60/0x6f0
[ 1446.946164][T18061]  ieee80211_add_station+0x98d/0x9f0
[ 1446.955224][T18061]  ? __pfx_ieee80211_add_station+0x10/0x10
[ 1446.962334][T18061]  rdev_add_station+0x7d/0x3d0
[ 1446.967356][T18061]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1446.973568][T18061]  nl80211_new_station+0x360c/0x36d0
[ 1446.979102][T18061]  ? kmsan_get_metadata+0xfb/0x160
[ 1446.984726][T18061]  ? __pfx_nl80211_new_station+0x10/0x10
[ 1446.990737][T18061]  genl_family_rcv_msg_doit+0x338/0x3f0
[ 1446.996566][T18061]  genl_rcv_msg+0xacf/0xc10
[ 1447.001386][T18061]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1447.006980][T18061]  ? __pfx_nl80211_new_station+0x10/0x10
[ 1447.012375][    T9] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 1447.012903][T18061]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1447.026054][T18061]  netlink_rcv_skb+0x54d/0x680
[ 1447.031194][T18061]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1447.036461][T18061]  genl_rcv+0x41/0x60
[ 1447.040876][T18061]  ? __pfx_genl_rcv+0x10/0x10
[ 1447.045859][T18061]  netlink_unicast+0xf01/0x12b0
[ 1447.054457][T18061]  netlink_sendmsg+0x10b3/0x1250
[ 1447.059730][T18061]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1447.066327][T18061]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1447.072966][T18061]  __sock_sendmsg+0x333/0x3d0
[ 1447.077898][T18061]  ____sys_sendmsg+0x7e0/0xd80
[ 1447.083068][T18061]  ___sys_sendmsg+0x271/0x3b0
[ 1447.088038][T18061]  ? __rcu_read_unlock+0x6d/0xd0
[ 1447.093331][T18061]  ? __fget_files+0x3b4/0x4a0
[ 1447.098272][T18061]  ? __fget_files+0x3b9/0x4a0
[ 1447.103318][T18061]  ? kmsan_get_metadata+0xfb/0x160
[ 1447.108700][T18061]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1447.114869][T18061]  __x64_sys_sendmsg+0x211/0x3e0
[ 1447.120205][T18061]  ? kmsan_get_metadata+0xfb/0x160
[ 1447.125600][T18061]  x64_sys_call+0x1dfd/0x3e30
[ 1447.130668][T18061]  do_syscall_64+0xd9/0x210
[ 1447.135403][T18061]  ? irqentry_exit+0x16/0x60
[ 1447.140386][T18061]  ? clear_bhb_loop+0x40/0x90
[ 1447.145318][T18061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1447.155607][T18061] RIP: 0033:0x7fe990f8eec9
[ 1447.161189][T18061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1447.181193][T18061] RSP: 002b:00007fe991ed1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1447.189946][T18061] RAX: ffffffffffffffda RBX: 00007fe9911e6180 RCX: 00007fe990f8eec9
[ 1447.198296][T18061] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000009
[ 1447.206591][T18061] RBP: 00007fe991011f91 R08: 0000000000000000 R09: 0000000000000000
[ 1447.214858][T18061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1447.223108][T18061] R13: 00007fe9911e6218 R14: 00007fe9911e6180 R15: 00007ffe48d4c5b8
[ 1447.231560][T18061]  </TASK>
[ 1447.233510][T17773] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1447.234699][T18061] ---[ end trace 0000000000000000 ]---
[ 1447.413382][T12750] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.442943][T12750] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.463264][    T9] usb 5-1: Using ep0 maxpacket: 8
[ 1447.515673][    T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1447.526498][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1447.538851][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1447.550184][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1447.566977][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1447.576943][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1447.630550][T12750] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.693984][    T9] usbtmc 5-1:16.0: bulk endpoints not found
[ 1447.809468][T12750] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1447.909757][    T9] usb 5-1: USB disconnect, device number 90
[ 1449.543635][    T9] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 1449.792859][    T9] usb 6-1: device descriptor read/64, error -71
[ 1450.065910][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1450.300926][    T9] usb 6-1: device descriptor read/64, error -71
[ 1450.418940][    T9] usb usb6-port1: attempt power cycle
[ 1450.850672][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1450.943381][    T9] usb 6-1: device descriptor read/8, error -71
[ 1451.243468][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1451.400478][    T9] usb 6-1: device descriptor read/8, error -71
[ 1451.530505][    T9] usb usb6-port1: unable to enumerate USB device
[ 1452.121867][T18106] overlayfs: missing 'lowerdir'
[ 1455.314145][T12310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1455.322612][T12310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1455.570778][ T2230] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1455.608295][T13000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1455.616538][T13000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1455.750885][ T2230] usb 6-1: Using ep0 maxpacket: 8
[ 1455.817620][ T2230] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1455.828368][ T2230] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1455.840140][ T2230] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1455.850603][ T2230] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1455.867608][ T2230] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1455.878425][ T2230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1456.184672][ T2230] usbtmc 6-1:16.0: bulk endpoints not found
[ 1456.411538][ T5861] usb 6-1: USB disconnect, device number 5
[ 1458.021251][T18155] overlayfs: missing 'lowerdir'
[ 1458.463802][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1458.470701][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1459.063121][ T2230] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1459.282623][ T2230] usb 1-1: device descriptor read/64, error -71
[ 1459.555508][ T2230] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1459.699008][ T5813] Bluetooth: hci3: unexpected event for opcode 0x200a
[ 1459.720285][ T2230] usb 1-1: device descriptor read/64, error -71
[ 1459.736444][T18167] loop7: detected capacity change from 0 to 4096
[ 1459.819733][T18167] ntfs3: Unknown parameter '0xffffffffffffffff˙0xffffffffffffffff'
[ 1459.845602][ T2230] usb usb1-port1: attempt power cycle
[ 1460.015716][ T5813] Bluetooth: hci5: unexpected subevent 0x0e length: 30 > 15
[ 1460.024663][ T5813] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[ 1460.265583][ T2230] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1460.330455][ T2230] usb 1-1: device descriptor read/8, error -71
[ 1460.599981][ T2230] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1460.661270][ T2230] usb 1-1: device descriptor read/8, error -71
[ 1460.734958][T18184] overlayfs: missing 'lowerdir'
[ 1460.793061][ T2230] usb usb1-port1: unable to enumerate USB device
[ 1461.400478][ T2230] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 1461.580628][ T2230] usb 5-1: device descriptor read/64, error -71
[ 1462.414479][ T2230] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1462.790576][ T2230] usb 5-1: device descriptor read/64, error -71
[ 1462.901656][ T2230] usb usb5-port1: attempt power cycle
[ 1463.304047][ T2230] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1463.372367][ T2230] usb 5-1: device descriptor read/8, error -71
[ 1463.641532][ T2230] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1465.397384][   T30] audit: type=1326 audit(1760093283.623:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bbd8eec9 code=0x7ffc0000
[ 1465.420847][   T30] audit: type=1326 audit(1760093283.623:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bbd8eec9 code=0x7ffc0000
[ 1465.443904][   T30] audit: type=1326 audit(1760093283.623:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bbd8eec9 code=0x7ffc0000
[ 1465.466963][   T30] audit: type=1326 audit(1760093283.633:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bbd8eec9 code=0x7ffc0000
[ 1465.493082][   T30] audit: type=1326 audit(1760093283.633:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f12bbd8d97f code=0x7ffc0000
[ 1465.516616][   T30] audit: type=1326 audit(1760093283.633:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bbd8eec9 code=0x7ffc0000
[ 1465.539625][   T30] audit: type=1326 audit(1760093283.633:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bbd8eec9 code=0x7ffc0000
[ 1465.564449][   T30] audit: type=1326 audit(1760093283.633:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12bbd8eec9 code=0x7ffc0000
[ 1465.590697][   T30] audit: type=1326 audit(1760093283.633:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bbd8eec9 code=0x7ffc0000
[ 1465.614212][   T30] audit: type=1326 audit(1760093283.633:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.7.3804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12bbd8eec9 code=0x7ffc0000
[ 1465.828296][ T2230] usb 5-1: device descriptor read/8, error -71
[ 1466.164956][ T2230] usb usb5-port1: unable to enumerate USB device
[ 1469.686787][T16983] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15
[ 1469.694510][T16983] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[ 1471.836065][T18237] overlayfs: missing 'lowerdir'
[ 1472.247176][T18245] fuse: Bad value for 'fd'
[ 1472.449242][T18250] block device autoloading is deprecated and will be removed.
[ 1473.839633][T18258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3814'.
[ 1479.297434][T18282] overlayfs: missing 'workdir'
[ 1479.371622][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1479.399275][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1479.521322][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1479.838767][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1479.848408][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1479.848516][   T30] audit: type=1326 audit(1760093298.553:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18274 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1479.878192][   T30] audit: type=1326 audit(1760093298.553:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18274 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1479.901158][   T30] audit: type=1326 audit(1760093298.553:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18274 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1479.927917][   T30] audit: type=1326 audit(1760093298.553:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18274 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1479.951972][   T30] audit: type=1326 audit(1760093298.563:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18274 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7b3578d97f code=0x7ffc0000
[ 1479.974756][   T30] audit: type=1326 audit(1760093298.563:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18274 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1479.997666][   T30] audit: type=1326 audit(1760093298.563:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18274 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1480.020530][   T30] audit: type=1326 audit(1760093298.563:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18274 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1480.047226][   T30] audit: type=1326 audit(1760093298.563:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18274 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1480.071402][   T30] audit: type=1326 audit(1760093298.563:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18274 comm="syz.4.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1480.623758][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1482.945440][ T5813] Bluetooth: hci0: command tx timeout
[ 1484.990922][ T5813] Bluetooth: hci0: command tx timeout
[ 1486.941714][T18281] chnl_net:caif_netlink_parms(): no params data found
[ 1488.005910][ T5813] Bluetooth: hci0: command tx timeout
[ 1489.221659][T18332] overlayfs: missing 'workdir'
[ 1489.980417][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 1489.980502][   T30] audit: type=1326 audit(1760093308.663:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18343 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1490.009780][   T30] audit: type=1326 audit(1760093308.663:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18343 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1490.033068][   T30] audit: type=1326 audit(1760093308.673:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18343 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1490.051862][ T5813] Bluetooth: hci0: command tx timeout
[ 1490.055967][   T30] audit: type=1326 audit(1760093308.673:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18343 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1490.088804][   T30] audit: type=1326 audit(1760093308.673:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18343 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1490.111435][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1490.117885][   T30] audit: type=1326 audit(1760093308.673:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18343 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1490.140907][   T30] audit: type=1326 audit(1760093308.673:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18343 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1490.163438][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1490.175145][   T30] audit: type=1326 audit(1760093308.673:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18343 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1490.197688][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1490.204421][   T30] audit: type=1326 audit(1760093308.673:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18343 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1490.226976][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1490.233371][   T30] audit: type=1326 audit(1760093308.673:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18343 comm="syz.4.3838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b3578eec9 code=0x7ffc0000
[ 1490.709679][ T5813] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15
[ 1490.718416][ T5813] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[ 1490.984198][T18281] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1490.994326][T18281] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1491.002510][T18281] bridge_slave_0: entered allmulticast mode
[ 1491.012490][T18281] bridge_slave_0: entered promiscuous mode
[ 1491.182326][T18281] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1491.194935][T18281] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1491.203257][T18281] bridge_slave_1: entered allmulticast mode
[ 1491.213173][T18281] bridge_slave_1: entered promiscuous mode
[ 1491.761542][T12928] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1491.891956][T12928] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1491.973523][T18281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1492.024008][T12928] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1492.127611][T18281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1492.176759][T12928] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1494.387001][ T2230] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1494.614978][ T2230] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1494.625676][ T2230] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1494.635260][ T2230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.825490][ T2230] usb 6-1: config 0 descriptor??
[ 1494.934022][ T2230] pwc: Askey VC010 type 2 USB webcam detected.
[ 1495.208633][T12928] bridge_slave_1: left allmulticast mode
[ 1495.216282][T12928] bridge_slave_1: left promiscuous mode
[ 1495.223566][T12928] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1495.298057][T12928] bridge_slave_0: left allmulticast mode
[ 1495.304226][T12928] bridge_slave_0: left promiscuous mode
[ 1495.311009][T12928] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1495.359194][ T2230] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1495.378895][ T2230] pwc: recv_control_msg error -32 req 02 val 2700
[ 1495.419895][ T2230] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1495.451644][ T2230] pwc: recv_control_msg error -32 req 04 val 1000
[ 1495.471734][ T2230] pwc: recv_control_msg error -32 req 04 val 1300
[ 1495.515981][ T2230] pwc: recv_control_msg error -32 req 04 val 1400
[ 1495.537828][ T2230] pwc: recv_control_msg error -32 req 02 val 2000
[ 1495.568301][ T2230] pwc: recv_control_msg error -32 req 02 val 2100
[ 1495.608915][ T2230] pwc: recv_control_msg error -32 req 04 val 1500
[ 1495.655153][ T2230] pwc: recv_control_msg error -32 req 02 val 2500
[ 1495.681740][ T2230] pwc: recv_control_msg error -32 req 02 val 2400
[ 1495.713423][T18383] overlayfs: missing 'workdir'
[ 1495.764007][ T2230] pwc: recv_control_msg error -32 req 02 val 2600
[ 1495.992079][T12928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1496.068946][ T2230] pwc: recv_control_msg error -71 req 02 val 2800
[ 1496.116160][ T2230] pwc: recv_control_msg error -71 req 04 val 1100
[ 1496.122493][T12928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1496.138073][ T2230] pwc: recv_control_msg error -71 req 04 val 1200
[ 1496.152274][ T2230] pwc: Registered as video103.
[ 1496.161692][ T2230] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input61
[ 1496.186452][T12928] bond0 (unregistering): Released all slaves
[ 1496.342143][ T2230] usb 6-1: USB disconnect, device number 6
[ 1496.784261][T18281] team0: Port device team_slave_0 added
[ 1497.068603][T18281] team0: Port device team_slave_1 added
[ 1497.791242][T12928] hsr_slave_0: left promiscuous mode
[ 1497.810406][T12928] hsr_slave_1: left promiscuous mode
[ 1497.818507][T12928] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1497.826622][T12928] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1497.949158][T12928] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1497.957218][T12928] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1498.091779][T12928] veth1_macvtap: left promiscuous mode
[ 1498.103390][T12928] veth0_macvtap: left promiscuous mode
[ 1498.109397][T12928] veth1_vlan: left promiscuous mode
[ 1498.115360][T12928] veth0_vlan: left promiscuous mode
[ 1498.694837][ T5813] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15
[ 1498.702576][ T5813] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[ 1499.753735][T12928] team0 (unregistering): Port device team_slave_1 removed
[ 1499.803751][T12928] team0 (unregistering): Port device team_slave_0 removed
[ 1501.463610][T18281] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1501.471061][T18281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1501.497807][T18281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1502.382108][T18281] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1502.389164][T18281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1502.416749][T18281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1503.176034][T18281] hsr_slave_0: entered promiscuous mode
[ 1503.185198][T18281] hsr_slave_1: entered promiscuous mode
[ 1503.193556][T18281] debugfs: 'hsr0' already exists in 'hsr'
[ 1503.199504][T18281] Cannot create hsr debugfs directory
[ 1505.303329][T18432] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1505.316307][T18432] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1507.534873][T18281] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1507.606430][T18281] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1507.711090][T18281] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1507.814663][T18281] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1508.668512][ T5813] Bluetooth: hci3: unexpected subevent 0x0e length: 30 > 15
[ 1508.676412][ T5813] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[ 1509.161320][T18281] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1509.190830][    T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1509.332490][T18281] 8021q: adding VLAN 0 to HW filter on device team0
[ 1509.398404][T12763] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1509.406030][T12763] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1509.474242][    T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1509.483909][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.554829][T12763] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1509.562418][T12763] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1509.592793][    T9] usb 6-1: config 0 descriptor??
[ 1509.645193][    T9] cp210x 6-1:0.0: cp210x converter detected
[ 1509.990748][T18281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1510.001672][T18281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1510.146411][    T9] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1510.242471][    T9] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1510.302947][T18470] syz_tun: entered allmulticast mode
[ 1510.373851][    T9] usb 6-1: USB disconnect, device number 7
[ 1510.422615][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1510.531440][    T9] cp210x 6-1:0.0: device disconnected
[ 1513.698524][T18483] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1513.707803][T18483] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1517.327796][T18281] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1519.972586][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1519.979059][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1520.803149][T16983] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1520.831192][T16983] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1520.845152][T16983] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1520.869836][T16983] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1520.891313][T16983] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1521.700818][    T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1521.754135][T18522] block device autoloading is deprecated and will be removed.
[ 1521.948146][    T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1521.958067][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1522.039775][    T9] usb 5-1: config 0 descriptor??
[ 1522.102934][    T9] cp210x 5-1:0.0: cp210x converter detected
[ 1522.475695][    T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1522.497924][    T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1522.506007][    T9] cp210x 5-1:0.0: GPIO initialisation failed: -71
[ 1522.526973][    T9] usb 5-1: cp210x converter now attached to ttyUSB0
[ 1522.577077][    T9] usb 5-1: USB disconnect, device number 95
[ 1522.674096][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1522.684974][    T9] cp210x 5-1:0.0: device disconnected
[ 1522.991545][ T5813] Bluetooth: hci1: command tx timeout
[ 1523.171546][T18507] chnl_net:caif_netlink_parms(): no params data found
[ 1523.886891][T12927] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1524.072219][T12927] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1524.225733][T12927] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1524.422315][T12927] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1524.640931][    T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[ 1524.876759][T18281] veth0_vlan: entered promiscuous mode
[ 1524.885213][    T9] usb 8-1: Using ep0 maxpacket: 16
[ 1524.942361][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1524.953855][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1524.964314][    T9] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[ 1524.973791][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1525.071911][T16983] Bluetooth: hci1: command tx timeout
[ 1525.222944][    T9] usb 8-1: config 0 descriptor??
[ 1525.287645][T18281] veth1_vlan: entered promiscuous mode
[ 1525.303437][T12927] bridge_slave_1: left allmulticast mode
[ 1525.309429][T12927] bridge_slave_1: left promiscuous mode
[ 1525.317018][T12927] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1525.413966][T12927] bridge_slave_0: left allmulticast mode
[ 1525.420570][T12927] bridge_slave_0: left promiscuous mode
[ 1525.427668][T12927] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1525.773435][    T9] hid (null): usage index exceeded
[ 1525.983268][T12927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1526.013059][T18553] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1526.032638][T12927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1526.056402][T12927] bond0 (unregistering): Released all slaves
[ 1526.100753][    T9] usb 8-1: string descriptor 0 read error: -71
[ 1526.133823][T18507] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1526.141618][T18507] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1526.149765][T18507] bridge_slave_0: entered allmulticast mode
[ 1526.160329][T18507] bridge_slave_0: entered promiscuous mode
[ 1526.234449][    T9] usb 8-1: Max retries (5) exceeded reading string descriptor 200
[ 1526.243832][    T9] letsketch 0003:6161:4D15.0023: probe with driver letsketch failed with error -32
[ 1526.372027][    T9] usb 8-1: USB disconnect, device number 3
[ 1526.446980][T18507] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1526.455527][T18507] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1526.463618][T18507] bridge_slave_1: entered allmulticast mode
[ 1526.473578][T18507] bridge_slave_1: entered promiscuous mode
[ 1526.755088][T18281] veth0_macvtap: entered promiscuous mode
[ 1526.911739][T13000] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4b
[ 1526.920232][T13000] =====================================================
[ 1526.930541][T13000] BUG: KMSAN: uninit-value in nci_ntf_packet+0x26b2/0x46c0
[ 1526.938005][T13000]  nci_ntf_packet+0x26b2/0x46c0
[ 1526.944729][T18281] veth1_macvtap: entered promiscuous mode
[ 1526.951025][T13000]  nci_rx_work+0x403/0x750
[ 1526.955621][T13000]  process_scheduled_works+0xb91/0x1d80
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1526.961444][T13000]  worker_thread+0xedf/0x1590
[ 1526.966279][T13000]  kthread+0xd59/0xf00
[ 1526.970627][T13000]  ret_from_fork+0x233/0x380
[ 1526.976283][T13000]  ret_from_fork_asm+0x1a/0x30
[ 1526.981430][T13000] 
[ 1526.983833][T13000] Uninit was created at:
[ 1526.988306][T13000]  kmem_cache_alloc_node_noprof+0x989/0x16b0
[ 1526.994742][T13000]  kmalloc_reserve+0x13c/0x4b0
[ 1526.999786][T13000]  __alloc_skb+0x347/0x7d0
[ 1527.004978][T13000]  virtual_ncidev_write+0x6b/0x430
[ 1527.010546][T13000]  vfs_write+0x487/0x15d0
[ 1527.015050][T13000]  __x64_sys_write+0x1fb/0x4d0
[ 1527.020544][T13000]  x64_sys_call+0x3014/0x3e30
[ 1527.028299][T13000]  do_syscall_64+0xd9/0x210
[ 1527.033965][T13000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1527.039057][T18507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1527.040160][T13000] 
[ 1527.040229][T13000] CPU: 1 UID: 0 PID: 13000 Comm: kworker/u8:38 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[ 1527.063383][T13000] Tainted: [W]=WARN
[ 1527.067283][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1527.078101][T13000] Workqueue: nfc2_nci_rx_wq nci_rx_work
[ 1527.083932][T13000] =====================================================
[ 1527.091051][T13000] Disabling lock debugging due to kernel taint
[ 1527.097753][T13000] Kernel panic - not syncing: kmsan.panic set ...
[ 1527.104295][T13000] CPU: 1 UID: 0 PID: 13000 Comm: kworker/u8:38 Tainted: G    B   W           syzkaller #0 PREEMPT(none) 
[ 1527.115701][T13000] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1527.120843][T13000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1527.131042][T13000] Workqueue: nfc2_nci_rx_wq nci_rx_work
[ 1527.136798][T13000] Call Trace:
[ 1527.140173][T13000]  <TASK>
[ 1527.143200][T13000]  __dump_stack+0x26/0x30
[ 1527.147733][T13000]  dump_stack_lvl+0x53/0x270
[ 1527.152607][T13000]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1527.158647][T13000]  dump_stack+0x1e/0x25
[ 1527.163037][T13000]  vpanic+0x435/0xd30
[ 1527.167227][T13000]  panic+0x15d/0x160
[ 1527.171356][T13000]  kmsan_report+0x31c/0x320
[ 1527.176057][T13000]  ? __msan_warning+0x1b/0x30
[ 1527.180913][T13000]  ? nci_ntf_packet+0x26b2/0x46c0
[ 1527.186127][T13000]  ? nci_rx_work+0x403/0x750
[ 1527.190889][T13000]  ? process_scheduled_works+0xb91/0x1d80
[ 1527.196811][T13000]  ? worker_thread+0xedf/0x1590
[ 1527.201826][T13000]  ? kthread+0xd59/0xf00
[ 1527.206236][T13000]  ? ret_from_fork+0x233/0x380
[ 1527.211160][T13000]  ? ret_from_fork_asm+0x1a/0x30
[ 1527.216346][T13000]  ? ret_from_fork_asm+0x1a/0x30
[ 1527.221495][T13000]  ? vprintk_emit+0xb51/0xb60
[ 1527.226378][T13000]  ? vprintk_default+0x3f/0x50
[ 1527.231341][T13000]  ? vprintk+0x36/0x50
[ 1527.235564][T13000]  ? _printk+0x17e/0x1b0
[ 1527.240058][T13000]  ? kmsan_get_metadata+0xfb/0x160
[ 1527.245613][T13000]  __msan_warning+0x1b/0x30
[ 1527.250393][T13000]  nci_ntf_packet+0x26b2/0x46c0
[ 1527.255538][T13000]  ? kmsan_internal_unpoison_memory+0x14/0x20
[ 1527.261835][T13000]  ? sk_skb_reason_drop+0x13f/0x440
[ 1527.267312][T13000]  nci_rx_work+0x403/0x750
[ 1527.271932][T13000]  ? __pfx_nci_rx_work+0x10/0x10
[ 1527.277050][T13000]  process_scheduled_works+0xb91/0x1d80
[ 1527.282938][T13000]  worker_thread+0xedf/0x1590
[ 1527.287837][T13000]  kthread+0xd59/0xf00
[ 1527.292088][T13000]  ? __pfx_worker_thread+0x10/0x10
[ 1527.297501][T13000]  ? __pfx_kthread+0x10/0x10
[ 1527.302400][T13000]  ret_from_fork+0x233/0x380
[ 1527.307184][T13000]  ? __pfx_kthread+0x10/0x10
[ 1527.311976][T13000]  ret_from_fork_asm+0x1a/0x30
[ 1527.316974][T13000]  </TASK>
[ 1527.320263][T13000] Kernel Offset: disabled
[ 1527.324639][T13000] Rebooting in 86400 seconds..