last executing test programs:

12.901564889s ago: executing program 2 (id=923):
r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfe}, 0x2)

12.741165094s ago: executing program 2 (id=925):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/182, 0xb6}, {&(0x7f0000004d00)=""/4106, 0x100a}, {&(0x7f0000000640)=""/100, 0x64}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000580)=""/124, 0x7c}, {&(0x7f0000000880)=""/93, 0x5d}], 0x6}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001980)=""/190, 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000000200)=""/142, 0x8e}], 0x3}}], 0x3, 0x0, 0x0)

12.48092791s ago: executing program 1 (id=926):
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
socket(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001080)={0x0, 0x0})

12.332788378s ago: executing program 1 (id=927):
socket$kcm(0x10, 0x2, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4)
sendto$inet(r0, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0)
connect(r0, &(0x7f0000000080)=@un=@abs, 0x80)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x84400, 0x0)

11.10082762s ago: executing program 2 (id=931):
set_mempolicy(0x3, &(0x7f0000000080)=0x7fffffffffffffff, 0x7fff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000001, 0x8020, 0x0, 0x0, {0x401}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x1, 0x206, &(0x7f0000002040)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000b80), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4000000, [{0x0, 0x1}]}, @enum={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a, 0x0, 0x1}, 0x20)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000))

10.978622283s ago: executing program 5 (id=932):
syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000240)='./file7\x00', 0xc43, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="acd80c0d60d998833a1cade74acff2316dcd1b77321c8c7923848a29438d7107758ad5b2afaeb99e055ddf01db57db6e50113ba1639931066080a75a3d5b82b8dc4f36671cb8be0e7c3a0b1b5148f8388b5e3eadd2670427b3f90cd3e30f68856df292f6031ac33d8a5b09111dab3b9f871abc2ea3aa10961b853e84e94e460bfd8190c1cb395ffa35900a543a5800cda076438b7a3a3412983abdb1f6e51c764463c5175462e7ccb36c7367e3eaceab1dcc", @ANYRES16=0x0, @ANYBLOB="b940f56b03bb1a415f50f732a91369cb9795c7993f4cfd0c2bff60529bb1572a17f927a60844da24f9d681051c75656585e7d0fa8be5f01fa511ffed2b57eb23df3e4949ea7f2902e5b943a049ed03a1aa1784131cdfa0a4e2af39b8523470a1f7176c446691b303df29ff78c42585de1731975d34ae2441111ac0eafe331526fc325638ccdef6db59154aac6af705481255f279fa4a0b", @ANYRESOCT=0x0, @ANYRES64], 0x84, 0x5f96, &(0x7f000000d1c0)="$eJzs3VtvHGf9B/DfHrw+9N/U6kWVf8QhTTm0lCaNkzYtp6ZC4gIEVKpyn8i4VUQKKAkVrSziKhL3SFyj8iK4BqHeIBWJl8AbiBT3hgpEB439PMl4bGdtEu+s/Xw+kjP722fG+0y+Hs+u5/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDf/96bZ3sRcfnd9MRixP/FIKIfMV/XJ+OvEXExzz+MiOOx0RxPRcSx2Yh6+Y1/nog4HxEfH4u4u766XD+9tMd+vPTGnb/98M0frf32i3/5+78/+v2f2u1vfPTdH/zxVsTi8d/87j+3Hs26AwAAQCmqqqp6Gx/zI06kz/f9rjsFAExE3v9XSX5erX6Yehhbdd0ftVqtVm9X7exWs4iIteYy9XsGh+MB4JBZi0+77gIdkn/RhhHxWNedAKZar+sOcCDurq8u91K+veb+4ORmez4XZEv+a71713fsNh2nfY7JpH6+bscgntylP/MT6sM0yfn32/lf3mwfpfkOOv9J2S3/0ealT8XJ+Q/a+bfsJf+5fbxud/n3d8y/VDn/4b7yHxzi7V/+AAAAAAAcffnv/4sdH/+dffhV2ZMHHf89OaE+AAAAAAAAAMCjtofx/+oHu47/d4/x/wAAAGBq1Z/Vax8eu//cbvdiq5+/1It4vDU/UJh0scxC1/0AAAAAAAAAAAAAgJIMN8/hvdSLmImIxxcWqqqqv5ra9X497PKHXenrDyXr+pc8AABs+vhY61r+XsRcRFxK9/qbWVhYqKq5+YVqoZqfze9nR7Nz1Xzjc22e1s/Njvbwhng4qupvNtdYrmnc5+Vx7e3vV7/WqBrsoWOT0WHgABARm3uju/ZIR0xVPRFdv8vhcLD9Hz22f/ai659TAAAA4OBVVVX10u28T6Rj/v2uOwUATETe/7ePC6invp6rJ1PUH7VarVYfgrqp2tmtZhERa81l6vcMhuMHgENmLT7tugt0SP5FG0bE8a47AUy1Xtcd4EDcXV9d7qV8e839QRrfPZ8LsiX/td7Gcnn5nabjtM8xmdTP1+0YxJO79OepCfVhmuT8++38L2+2j9J8B53/pOyWf72eix30p2s5/0E7/5ajk39/x/xLlfMf7iv/gfwBAAAAAGCK5b//Lzr+m1cZAAAAAAAAAA6du+ury/m613z8/3M7zOf6z6Mp59+Tf5Fy/v12/q0TcgaNx3dev5//J+uryx/+/4Uv5OnU5z8zGNWvPdPrD4ab5/z8M9/adCVe3DZ/PU8181ZcjWuxEme3tc9saV8a035uW/uobp/P7adjOX4e1+In99pnx5wYNTemvRrTnvMf2P6LlPMfNr7q/BdSe681rd35oL9tu29Od3qdiz/+7ML2rWvybsfg3ro11et3qoP+bPyfPDaKX95YuX76V1du3rx+NtJky7NLkSaPWM5/Jn3l/J99ZrM9/95vbq93PhjtO/9pcTuGu+b/TONxvb7PTbhvXcj5j9JXzj/vgXbe/g9z/rtv/8930B8AAAAAAAAAAAAAAAB4kKqqNi4RvRgRL6frf7q6NhMAmKy8/6/yzTAStVqtVqvVR69uqnb2WrOIiD83l6nfM/x6p28GAEyzzyLiH113gs7Iv2D5fn/19EtddwaYqBvvvf/TK9eurVy/8b8sXQ0efY8AAAAAAAAAgP3K43+ebIz/vHEeUGvc6C3jv74eJz9ZX11+d/Ffnz9043/2R4ONsc7TCj0dzfG5t49QfCoePP73cMzrzYxpH41pnx3TPjemfccLPRpy/k+njHP+J9KKPWj815x/ezrmJTv1oPFfn+2gP13L+Z9KYz3n/L/amq+Zf/WHwzz+b39L/mduvvOLMzfee/+Fq+9ceXvl7ZWfnTu/9OrZpQvnX3nxzFtXr62kfzvs8cHK+eexr50HWpacf85c/mXJ+X851fIvS87/K6mWf1ly/vn9nvzLkvPPn33kX5ac/3Opln9Zcv5fS7X8y5Lzfz7V8i9Lzv/rqZZ/WXL+L6Ra/mXJ+Z9OtfzLkvM/k2r5lyXnn49wyb8sOf98ZoP8y5LzX0q1/MuS8z+XavmXJed/PtXyL0vO/6VUy78sOf+XU72P/N376wjI+V9Ite2/LDn/V1It/7Lk/F9NtfzLkvP/RqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vxP2LSeVfjpz/a6m2/Zfl/v3/PfDAAw/yg65/MwEAAAAAAAAAAAAAbZM4nbjrdQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzdW4xc9X0H8LM3e22IvUkcAsSEtTHEhMW7vuBLWycOuZRC2xAS6I3UuPbaOPGtXpsAQmIjaIoEUnnggVZKCghVeUgV1CZqkGhEpUpt+tI+tS9VWqlRhaJQOWlfGhVcnTn//98zs7Nz1t5de+aczwfhn3fmzMx/z5yZ3e9Y3xkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLbhk9N/OJBlWf5/44+xLLs6//uqbF/+5ezOK71CAAAAYLHeafz5rbXphH0LuFDTNn/34X/8zvnz589n2Z+s++AL+QzGs2zNyiwrzgtGf3yqZZvgqWx0YLDp68GSmx8qOX+45PyRkvNXlJy/suT80ZLz5+yAOVYVr8c0rmxT469jxS7N1mUjjfM2dbjUUwMrBwfjazkNA43LnB85nB3NjmXT2dScyww0/suyNzbkt3VXFm9rsOm21mdZdu6nTxyMaxgI+3hT1nJjDc333dufyMZ/9tMnDj4y9vMbOs3S3TBnpVm2eWO+zqez7MLLVdlAtjLtk7jOwaZ1ru+wzqGWdQ40Lpf/vX2d5xa4zvh9j4Z1/lOXda4Ppz16U5Zls9m827R7KhvMVrfdatrfo8URkV9Hfle+Lxu+qONkwwKOk/wyP7qp9ThpPybj/t8Q9snwPGtovjve/uqKOfv9Uo+T/LvuhWM1v+578xsdHW1+abXlWM23eeLm+Y+Bjvddh2MgHctNx8DGsmNgcMVQ4xgYvLDmjS3HwNY5lxnMBhq39dbN3Y+ByTPHT03OPPb47UePHzgyfWT6xPYd2/Zs3bZrx+6pycNHj02HPy9ul/aR1dlgOgY3hueaeAx+pG3b5kPy/MvF4+Cl63Z9uNO8mDWMLtHjYDFryMLx8oVb8gVdPZjNc4zn2zy9efGPg/Rzv+lxMNz0OOj4nNrhcTC8gMdBvs25zQv7mTnc9H+nNXR6LlyKY2Cs6RhYzM/D5jVcys/D/DYfvHX+58L1YV3PfPRifx4OzTkG4rc1EB57+Snp973R3WG/zD0urs/PuGpFdnZm+vSWRw+cOXN6axbGZfH+pvuq/XhZ3fQ9ZXOOl8GLPl72ffbdXdd3OH0s7KvR27rfV/k2Oya631eNZ/fO+7Pl1G1ZGEvscu/PTj/N8v2ZskSX/Zlv8/Tti/9dMOWSpue/kbLnv6GR4eL5byjtjZGW57+5d81QY2VZdu72hT3/jYT/L/fz37oeef7L99WDW7ofA/k2z0xe7DEw3PX576YwB8J6bg2JYbQp97/bOH+2OEyb7svS42Z4eCQcN8PxFluPm+1zLpNfW37bm6cu7bjZfFPrfdXye0sFj5t8X70w1f24ybd5c+vinztWxb82PXesKDsGRoZW5OsdSQdB8Xx3flU8BrZkB7OT2bHsULpMfi/ntzWxbWHHwIrw/+V+7ri2R46BfF+9uK37MZBv87fbl/Z3p83hlLRN0+9O7a8vzJf5rx++cH3tu22pM3++zk/t6P7aUL7NT3ZcbM7ovp9uC6dc1WE/tT9+5jumD2Xl+2mpjul8ncfu6P7aVL7Nup0LPJ72ZVn2+rOvFq93Fa/v/sXZf/5Oy+u+nV5Tfv3ZVz933Q9+cDHrBwDg0r3b+HN2RfG7ZtO/WC/k3/8BAACAvhBz/2CYifwPAAAAlRFz/1CYifwPAAAAlRFz/3CYyb6yd8erhocHvvbCO09m6d0Azwfx/PgyyL0ri+1ix3s2fD1+/oL89DtfHbnnu08u7LYHsyz7v7s/1HH7h1fGdRVOxXUOtZ4+x7U3Luj2H7r/wnbN759wbrC4/vj9LPRloNhVfuPf7mxc7/itxXzz7qwx75t95qnG9e8pvo7bv/UfxXZfD29asu/wQMvlN4f1bApzPLynzL2rLuyHfMbLffuNI3//sQcu3F683MDGNY1v88UtxfXG94h6/i+L7eP3Pd/6//rZb3473/7Rmzuv/8nBzut/K1zvj8L837eL05v3+Xeb1v8HYf3x9uLltrzy/Y7rf+2viu1fC8fFS2G2r/8Tf3TDO53ur3g7+4aLy8Xbn/qzTzcuF68vXn/7+kcn72zZH+3X/+YrxfXsfeR/hpq3j6fH24keGm49vgfC/dvSI8+y7Jtfy1r2czZSXO71tvXH6zs13Hn9t7Wt89TLDzcu3/79RN+4/5Mdv9+4nn1/Ptby/Ty/Juy/wVX/kF/vWx8Kx2M4/+ezxfW1v5fpa2tan2/i9i+NFY/beH2Tbet/vm39szfm+658/Xf9rFj/ax9f2bL+fWvD8fTeYpat/8ifrm25/MufKdZz+isTJ07OnD0a3+NgrO1xvHJ01eqrrn7PmrXhubT96/0nzzw8fXp8anwqy8b78C0Dl3v9r4T5X8WYXfpbKPzLcHHcPXdP8XPrIyPF18+H0x8K92f8+fiNPx5pOV7b7/fZ0WIudv0fDetYqPWbfrx7QRv+547XXvjX+77Y/ntB/H5OfWC08f29uOGaxnkDbxbntz9flfn3D7Q+rn+4rpjfC/v1fHhn5o3XFLfXfv3xvUme+3zx+I2/ycXLZ23vJzI21Pp9LHb9Pwy/x3z/2tbnv3h8fO/JtndzHssG8iXMhueHbLY4P24V9/dz567peHvxfXiy2esuZpnzmnlsZvLY0RNnH508Mz1zZnLmscf3Hz959sSZ/Y33Lt3/pbLLX3h8r248vg9N79yRNR7tJ4uxzK70+k/df/DQrqlbDk0fPnD28Jn7T02fPnJwZubg9KGZWw4cPjz9lbLLHz20d+u2Pdt3bZs4cvTQ3t179mzfM3H0xMl8GcWiSuyc+vLEidP7GxeZ2btjz9Y77tgxNXH85KHpvbumpibOll2+8bNpIr/0IxOnp48dOHP0+PTEzNHHp/du3bNz57bSd388furwzPjk6bMnJs/OTJ+eLL6X8TONk/OffWWXpx5m1obnuzYD4bfzT9+2M70/bu7Vr857VcUmY60n/iS8F9TXR7fvXsjXMfePhJn4938AAACojJj7w+dTXHjdXf4HAACAyggf+Bc+M9K//wMAAEAVxdw/GmZSk/yv/6//fwn9/1TX1v/X/8/0//X/S+j/6/93o/+v/9/P69f/1/+nXK/1/2PuX5Vltcz/AAAAUAcx968OM5H/AQAAoDJi7r8qzET+BwAAgMqIuf/qMJOa5H/9f/1/n/9fvf7/QJbN6v/r//cK/X/9/270//X/+3n9+v/6/5Trtf5/zP3vCTOpSf4HAACAOoi5f02YifwPAAAAlRFz/9owE/kfAAAAKiPm/rEwkyrl/4/Pf5b+v/6//n/1+v8+/7+g/98b9P/1/7vR/9f/7+f16//r/1Ou1/r/Mfe/N8ykSvkfAAAAai7m/veFmcj/AAAAUBkx978/zET+BwAAgMqIuX9dmElN8r/+v/6//r/+v/6//v9y0v+vRv9/VThZ/7+V/r/+v/6//j/d9Vr/P+b+D4SZ1CT/AwAAQB3E3H9NmIn8DwAAAJURc/8Hw0zkfwAAAKiMmPuvDTOpSf7X/9f/1//X/9f/1/9fTvr/1ej/x5P1/1vp/+v/6//r/9Ndr/X/Y+6/LsykJvkfAAAA6iDm/uvDTOR/AAAAqIyY+z8UZiL/AwAAQGXE3L8+zKQm+V//X/9f/1//X/9f/3856f/r/3ej/6//38/r1//X/6dcr/X/Y+6/IcykJvkfAAAA6iDm/g+Hmcj/AAAAUBkx998YZiL/AwAAQGXE3D8eZlKT/K//r/+v/6//r/+v/7+c9P/1/7vR/9f/7+f16//r/1Ou1/r/MfdvCDOpSf4HAACAOoi5f2OYifwPAAAAlRFz/01hJvI/AAAAVEbM/ZvCTGqS//X/9f/1/6va/x/S/9f/7wn6//r/3ej/6//38/r1//X/Kddr/f+Y+28OM6lJ/gcAAIA6iLn/ljAT+R8AAAAqI+b+j4SZyP8AAABQGTH3bw4zqUn+1//X/9f/r2r/3+f/6//3Bv1//f9u9P/1//t5/fr/Jf3//y67Buqg1/r/MfffGmZSk/wPAAAAdRBz/0fDTOR/AAAAqIyY+28LM5H/AQAAoDJi7p8IM6lJ/tf/1//X/9f/1//X/19O+v/6/93o/+v/9/P69f99/j/leq3/H3P/7WEmNcn/AAAAUAcx928JM5H/AQAAoDJi7p8MM5H/AQAAoDJi7p8KM6lJ/tf/1//X/9f/1//X/19O+v/6/93o/+v/9/P69f/1/ynXa/3/mPu3hpnUJP8DAABAn7rhYjaOuX9bmIn8DwAAAJURc//2MBP5HwAAACoj5v4dYSY1yf/6//r/+v/6//r/+v/LSf9f/7+b5v5/fkn9/7r0/+f7SdMv6y/o/+v/U67X+v8x998RZlKT/A8AAAB1EHP/zjAT+R8AAAAqI+b+XWEmc/P/31y+VQEAAABLKeb+3WEmff/v/wvrVdWq/3/grvRX/f+C/r/+f6b/r/+/zPT/9f+78fn/de3/L40rvX79f/1/yvVa/z/m/j1hJn2f/wEAAIAo5v5fCDOR/wEAAKAyYu7/xTAT+R8AAAAqI+b+XwozqUn+r1X/v4n+f0H/X/8/0//X/19m+v/6/93o/+v/9/P6e7f//63VWab/T2/otf5/zP17w0xqkv8BAACgDmLu/1iYifwPAAAAlRFz/8fDTOR/AAAAqIyY+/eFmdQk/+v/6//r/+v/6//r/y8n/X/9/24W1/8f1/9fpCvdn+/39fdu/9/n/9M7eq3/H3P/J8JMapL/AQAAoA5i7r8zzET+BwAAgMqIuf+TYSbyPwAAAFRGzP2fCjOpSf6/bP3/DoVi/X/9/0z/X/9f/1//f5H0/+vc//f5/4t1pfvz/b5+/X/9f8r1Wv8/5v5Ph5nUJP8DAABAHcTc/5kwE/kfAAAAKiPm/l8OM5H/AQAAoDJi7r8rzKQm+d/n/+v/6//r/+v/6/8vJ/1//f9u9P/1//t5/fr/+v+U67X+f8z9vxJmUpP8DwAAAHUQc//dYSbyPwAAAFRGzP33hJnI/wAAAFAZMff/aphJTfK//r/+v/6//r/+v/7/ctL/1//vRv9f/7+f16//r/9PuV7r/8fc/2thJjXJ/wAAAFAHMff/epiJ/A8AAACVEXP/Z8NM5H8AAACojJj77w0zqUn+1//X/9f/X97+/3jT6fr/+v+Z/v+S0//X/8/0/y/Zle7P9/v69f/1/ynXa/3/mPs/F2ZSk/wPAAAAdRBz/31hJvI/AAAAVEbM/Z8PM5H/AQAAoA+cW9BWMfd/IcykJvlf/1//X//f5/8vYf9/Rab/n+j/r2r8qf+v/9+N/r/+fz+vX/+/c/9/vt8jqKde6//H3H9/mElN8j8AAADUQcz9D4SZyP8AAABQGTH3/0aYifwPAAAAlRFz/2+GmdQk/+v/6//r/+v/+/x//f/lpP+v/9+N/r/+fz+vX//f5/9Trtf6/zH3/1aYSU3yPwAAANRBzP2/HWYi/wMAAEBlxNz/O2Em8j8AAABURsz9D4aZ1CT/F/3/Bw7q/xf0//X/9f/1/yP9/6Wh/6//343+v/5/P69f/1//n3K91v+Puf+LYSY1yf8AAABQBzH3/26YifwPAAAAlRFz//4wE/kfAAAAKiPm/ofCTGqS/33+v/6//r/+/8X0/1d1OF3/v6D/35n+v/5/N/r/Ve7/r1iSNV659c/3hDWc/qb/r/9PuV7r/8fcfyDMpCb5HwAAAOog5v7fCzOR/wEAAKAyYu4/GGYi/wMAAEBlxNx/KMykJvlf/1//v3/6/xda4vr/tfz8/5FsOfr/s/r/y60i/f839f8L+v+t9P99/r/+v/4/3fVa/z/m/ukwk5rkfwAAAOh3C3nX0Zj7D4eZyP8AAABQGTH3Hwkzkf8BAACgMmLufzjMpCb5vxf7/zfq/+v/+/z/dD36/z7/X/+/O5//r/+f6f9fsivdn+/39ev/6/9Trtf6/zH3Hw0zqUn+BwAAgDqIuf9LYSbyPwAAAFRGzP1fDjOR/wEAAKAyYu4/FmZSk/zfi/3/TP9f/1//P12P/r/+v/5/d/r/+v+Z/v8lu9L9+X5fv/6//j/leq3/H3P/8TCTmuR/AAAAqIOY+0+Emcj/AAAAUBkx958MM5H/AQAAoDJi7j8VZtKX+X9g3t7ufPT/9f97rf/f3LysdP9/pf6//r/+/1LQ/9f/z/T/L9mV7s/3+/r1//X/Kddr/f+Y+38/zKQv8z8AAADQScz9p8NM5H8AAACojJj7Z8JM5H8AAACojJj7z4SZdM///8/effXodVZ9HH4cJX5fDoBzhATfBMT34JhPQIfE9BZ6DS3U0HvvLXQIJfTee6+hSEHyrLWSSey9PSM/M/e+13WdLEw8nh3ZGeuv0U/7iv0+1cnR/+v/R+v/277//0r9f9L/6/+PQv+v/9/p/4/ttPv5rT+//l//z7rR+v/c/Q+MW3z/HwAAAKaRu/9BcYv9DwAAANPI3f/guMX+BwAAgGnk7n9I3NJk/59s/3+/Qz/S/+v/d8fq//+vPnaq/t/7/2/7fdX/6/+PoGv/n18J9f8H9P/Hc9r9/NafX/+v/2fdaP1/7v6Hxi1N9j8AAAB0kLv/YXGL/Q8AAADTyN3/8LjF/gcAAIBp5O5/RNzSZP97/7/+f3v9/6Tv/9f/F/2//v8ouvb/Sf9/QP9/PKfdz2/9+fX/+n/Wjdb/5+5/ZNzSZP8DAABAB7n7r45b7H8AAACYRu7+a+IW+x8AAACmkbv/XNzSZP/r//X/+n/9v/5f/79P+n/9/xL9/7j9/636/9XP37f/v/leB1f/z7rR+v9z1+7O7/6DT9Nv/wMAAEAHufsfHbfY/wAAADCN3P2PiVvsfwAAAJhG7v7Hxi1N9r/+X/+v/9f/6//1//uk/9f/L9H/j9v/e/+//n/t473/n0sxWv+fu/9xcUuT/Q8AAAAd5O5/fNxi/wMAAMA0cvc/IW6x/wEAAGAaufufGLc02f/6f/2//l//r//X/++T/l//v2Qj/X/8Enf+7dH/T93/P+CeKx9/0f7/zE7/r/8njNb/5+5/UtzSZP8DAABAB7n7nxy32P8AAAAwjdz9T4lb7H8AAACYRu7+a+OWJvtf/6//1//r//X/+v990v/r/5dspP+/KP3/1P3/6uf3/n/9P+tG6/9z9z81bmmy/wEAAKCD3P1Pi1vsfwAAAJhG7v6nxy32PwAAAEwjd/8z4pYm+1//v97/X33X9V9P/3/h59f/6//1//p//f8G+v8bLvAT9f+XRP/fqP+/y50/Xv+v/2fdaP1/7v5nxi1N9j8AAAB0kLv/WXGL/Q8AAADTyN3/7LjF/gcAAIBp5O5/Ttxy393uEjP2TdP/e/+//l//r//X/++T/n8D/f+F6P8vif6/Uf9/Afp//T/rRuv/c/c/N27x/X8AAACYRu7+58Ut9j8AAABMI3f/8+MW+x8AAACmkbv/BXFLk/2v/9f/6/9PtP+/x43X31//H/9c/6//vxz0//r/nf7/2E67n9/68+v/9f+sG63/z91/XdzSZP8DAABAB7n7Xxi32P8AAAAwjdz9L4pb7H8AAACYRu7+F8ctTfa//l//r//3/n/9/8HzPyr+PCb9/+Wh/9f/L7kM/f91d9P/H9tp9/Nbf379v/6fdaP1/7n7XxK3NNn/AAAA0EHu/pfGLfY/AAAATCN3//Vxi/0PAAAA08jd/7K4pcn+1//r//X/+n/9v/f/75P+X/+/xPv/9f9bfv4T6P/v+FfkIfp/tmC0/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGnk7n9l3GL/AwAAwDRy978qbmmy//X/+n/9/8X6/+v1/3eg/9f/H4f+X/+/RP+v/9/y83v/v/6fdaP1/7n7Xx23NNn/AAAA0EHu/hviFvsfAAAAppG7/zVxi/0PAAAA08jd/9q4pcn+1//r//X/3v+v/9f/75P+X/+/RP+v/9/y8+v/9f+sG63/z93/urilyf4HAACADnL3vz5usf8BAABgGrn73xC32P8AAAAwjdz9b4xbmux//b/+X/+v/9f/6//3Sf+v/1+i/9f/b/n59f/6f9aN1v/n7n9T3NJk/wMAAEAHufvfHLfY/wAAADCN3P1viVvsfwAAAJhG7v63xi1N9r/+X/+v/9f/6//1//uk/9f/L9H/6/+3/Pz6f/0/60br/3P3vy1uabL/AQAAoIPc/W+PW+x/AAAAmEbu/nfELfY/AAAATCN3/zvjlib7X/+v/9f/6//1//r/fdL/6/+XbK//v+rQj/T/+n/9v/6fZaP1/7n73xW3NNn/AAAA0EHu/nfHLfY/AAAATCN3/3viFvsfAAAAppG7/71xS5P9r//v3P+fObfb6f93+n/9v/5/r/T/+v8l2+v/D9P/6//1//p/lo3W/+fuf1/c0mT/AwAAQAe5+98ft9j/AAAAMI3c/R+IW+x/AAAAmEbu/g/GLU32v/6/c//v/f/6/8PPqf/X/++D/l//v0T/r//f8vOP3P9fof9nEKP1/7n7PxS3NNn/AAAA0EHu/g/HLfY/AAAATCN3/0fiFvsfAAAAppG7/6NxS5P9r//X/+v/9f+37//PXviP+Hn6f/3/cej/9f9L9P/6/y0//8j9v/f/M4rR+v/c/R+LW5rsfwAAAOggd//H4xb7HwAAAKaRu/8TcYv9DwAAANPI3X9j3NJk/+v/9f/6f/2/9//r//dJ/6//X6L/31z/f+Xtf6D/1//r/1kzWv+fu/+TcUuT/Q8AAAAd5O7/VNxi/wMAAMA0cvd/Om6x/wEAAGAaufs/E7c02f/6f/2//l//r//X/++T/l//v0T/v7n+/xD9v/5f/8+a0fr/3P2fjVua7H8AAADoIHf/5+IW+x8AAACmkbv/83GL/Q8AAADTyN3/hbilyf7X/+v/9f9H6v+v0f/r//X/R6P/1/8vua3/v8+uR/9/VfwP/f8Mz6//1/+zbrT+P3f/F+OWJvsfAAAAOsjdf1PcYv8DAADANHL3fylusf8BAABgGrn7vxy3NNn/+n/9v/7f+//1//r/fdL/H7X/P3uk55qn//f+/53+f3PPr//X/7NutP4/d/9X4pYm+x8AAAA6yN3/1bjF/gcAAIBp5O6/OW6x/wEAAGAaufu/Frc02f/6f/2//l//r//X/++T/t/7/5fo//X/W35+/b/+n3Wj9f+5+78etzTZ/wAAANBB7v5vxC32PwAAAEwjd/834xb7HwAAAKaRu/9bcUuT/a//1//r//X/+v9B+v8z5/T/x6D/1//v9P/Hdtr9/NafX/+v/2fdaP1/7v5vxy1N9j8AAAB0kLv/O3GL/Q8AAADTyN3/3bjF/gcAAIBp5O7/XtzSZP+v9P/VwOn/l+n/d+f/+9H/H/719f/6f+//1//r/5fp//X/W35+/b/+n3Wj9f+5+78ft9w2/M4e/d8SAAAAGEnu/h/ELU2+/w8AAAAd5O7/Ydxi/wMAAMA0cvf/KG5psv+9/1//7/3/+n/9v/5/n/T/+v8l+n/9/5afX/+v/2fdaP1/7v4fxy1N9j8AAAB0kLv/J3GL/Q8AAADTyN3/07jF/gcAAIBp5O7/WdzSZP/r//X/+n/9v/5f/79P+n/9/5I79P/15UD/r//fwvPr//X/rBut/8/d//O4pcn+BwAAgO27YvVn5O7/Rdxi/wMAAMA0cvf/Mm6x/wEAAGAauft/Fbc02f/6f/3/hP3/vXf6f/2//n8Y+n/9/xLv/9f/b/n59f/6f9aN1v/n7v913NJk/wMAAEAHuft/E7fY/wAAADCN3P2/jVvsfwAAAJhG7v7fxS1N9r/+fx/9/036f+//P0//r//X/2+//z8TX3D0/wf0/4fp//X/+n/9P8tG6/9z9/8+bmmy/wEAAKCD3P1/iFvsfwAAAJhG7v4/xi32PwAAAEwjd/+f4pYm+3+e/j+edIj+3/v/9f8H9P/6f/3/9vv/pP8/oP8/TP+v/9f/6/9ZNlr/n7v/z3FLk/0PAAAAHeTu/0vcYv8DAADANHL3/zVusf8BAABgGrn7/xa3NNn/8/T/Qf+v/9f/6//j/9f/j0H/r/9fov/X/2/5+fX/+n/Wjdb/5+7/e9zSZP8DAABAB7n7/xG32P8AAAAwjdz9/4xb7H8AAACYRu7+W+KWO+3/syf4VCdH/6//31//f+vddzv9v/5f/6//1//r/y9O/6//3/Lz6//1/6wbrf+/5fzftf+/+9f5j/b9fwAAAJhR7v5/xy32PwAAAEwjd/9/4hb7HwAAAKaRu/+/cUuT/a//1/97/7/+X/+v/98n/b/+f4n+X/+/5efX/+v/WTda/5+7/38BAAD//1fujIM=")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000002200)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@noprefix}, {@subsystem='cpuacct'}]})
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='xdp_exception\x00', r2}, 0x10)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000f2ffffff000000850000006100000018110000", @ANYRESHEX=0x0, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90)
r4 = socket$inet6(0xa, 0x2, 0xfffffffc)
setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4)
syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x7)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="434759c5614e22462270939f1e7d2604ff00"], 0x3)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962a1dab9fa4c3c9d49d87496c1ce44b6"], 0x22)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
copy_file_range(r5, 0x0, r5, &(0x7f00000001c0), 0x0, 0x0)
write$binfmt_script(r5, &(0x7f0000000400), 0x208e24b)
syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c90010000c000500170308000600090085990000ded9798a6768340c8cfa57a1fcce48e680631537f499fe02c6aab8327b828448f4fc1abf3c8dfad850860f0b8630f1d3e8ab9e06cb984a81e3e8280ebb9eaff1206c01fd6852fea26981a57fb5e5a5b3977f097c36732a60b9060d09dd742aecb6b2c90cec7bd0e7e991b95a4c93510a7a19a1b8f78120a2f34b5be48535c701f6835a6647d43d09fc201427f973ebd2f336d1dadee1f195a15403c494"], 0x15)
readahead(r5, 0x0, 0x5)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f0419"], 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0])
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

10.035774611s ago: executing program 0 (id=936):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f00000007c0), &(0x7f0000000400)=@tcp6}, 0x20)

9.741912562s ago: executing program 0 (id=938):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=""/256})
r3 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r3})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffff4328, 0x52}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040}, 0x20001011)

9.370658361s ago: executing program 0 (id=940):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000001040)={0x0, 0x7, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

8.916044182s ago: executing program 5 (id=941):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0xffff7fff, 0x8, 0x2, 0x1010, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
r5 = socket$inet6(0xa, 0x0, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0x0, 0x0, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x0)
unshare(0x62040200)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800ea1101650005000000", 0x29}], 0x1)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x1, 0x8, 0x26, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7d0, 0x700, 0xfffffeff, 0x5}})
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0)

8.903425531s ago: executing program 3 (id=942):
ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)

7.540442359s ago: executing program 3 (id=943):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000300), 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/182, 0xb6}, {&(0x7f0000004d00)=""/4106, 0x100a}, {&(0x7f0000000640)=""/100, 0x64}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000580)=""/124, 0x7c}, {&(0x7f0000000880)=""/93, 0x5d}], 0x6}}, {{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001980)=""/190, 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000000200)=""/142, 0x8e}], 0x3}}], 0x3, 0x0, 0x0)

7.425692228s ago: executing program 1 (id=944):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x90)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00 \x00', @ANYRES16=r0, @ANYBLOB="01"], 0x24}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000002"], 0x24d8}], 0x1}, 0x0)

7.109396459s ago: executing program 1 (id=945):
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
close(r0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
syz_io_uring_setup(0x2eac, &(0x7f00000001c0)={0x0, 0x0, 0x22}, &(0x7f0000000000), &(0x7f0000000480))
fcntl$setsig(r1, 0xa, 0x21)
fcntl$setlease(r1, 0x400, 0x1)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x801)
execveat(r6, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)

7.080470722s ago: executing program 4 (id=946):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x7, 0x1, 0x2008, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x9ca9, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8], 0x1c8}}, 0x0)

5.198932416s ago: executing program 0 (id=947):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0)
sendto(r0, &(0x7f0000000100)="20fc4c5ca4605b1b0b02fe0cc6a884ab2a5d89ee151f9e5523bc2e50f84a16cd3877afe2b9fc3ffdf3d6b22e25b8ae9841638d384e53ad759646c47ceba42a945f22494badbd790ca1125e8b2431138f8d36fd98365baca9d8362b42e534b418e6dba499bbe8e299dc6cae174fc19e06a4284e4e3d90d8a4d4e91cb295b8bf7a4841c2a6d200e3b80d5b51bfd4adfa904094a9224929e827cc79bd40eef7abc9f8bd7b6976b4f6c937a633fd49144ae716a41c5f65c441d9363953b4daf584e8e1c84462d8124631cc7c49d7c5d646763dd71e2760c86b1e01da0ae6bc4dfc77320e9f5826a68abcdb35bbf7c505868fa6512f77", 0xf4, 0x811, &(0x7f0000000240)=@x25, 0x80)
accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000300)=0x1c, 0x80800)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024842, 0x0)
syz_io_uring_setup(0x231, &(0x7f0000000080), &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r1, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400))
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4000000000000002, 0x0, 0x0)
listen(r3, 0x200)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r4, &(0x7f0000000080)={0x3, 0x0, 0x2, 0x2}, 0x8)

5.056824996s ago: executing program 3 (id=948):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0)

5.031546684s ago: executing program 1 (id=949):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

5.021354796s ago: executing program 4 (id=950):
set_mempolicy(0x3, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000001, 0x8020, 0x0, 0x0, {0x401}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x1, 0x206, &(0x7f0000002040)="$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")
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000b80), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfd14)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0}, 0x20)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000))
syz_extract_tcp_res(0x0, 0x0, 0x1cd)
syz_emit_ethernet(0x108, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x24, 0x4, 0x2, 0x4, 0xfa, 0x66, 0x0, 0xa9, 0x6, 0x0, @local, @multicast1, {[@lsrr={0x83, 0x13, 0x4b, [@broadcast, @rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_addr={0x44, 0x1c, 0x62, 0x1, 0x4, [{@remote, 0x2}, {@empty, 0x8ef}, {@local, 0x800}]}, @ssrr={0x89, 0x2b, 0x23, [@multicast2, @broadcast, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @loopback, @remote, @loopback, @local]}, @timestamp={0x44, 0x18, 0x93, 0x0, 0x6, [0x4, 0xfffff801, 0x800, 0x2, 0x1]}, @ssrr={0x89, 0x7, 0x56, [@multicast1]}]}}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x2, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x7, 0xffffffff}, @nop, @nop, @exp_smc={0xfe, 0x6}]}}, {"98f11d4143a3014bd22d9556757a96ca9c884fbd1b8744c1f343dfb44f0d89981c65ac3cb547bc88a5d6177c96f1cf6850b7f03da819d7fcbaf4e0029108a1dc5227"}}}}}}, 0x0)

4.711545339s ago: executing program 3 (id=951):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfe}, 0x2)

4.644151828s ago: executing program 0 (id=952):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=""/256})
r3 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r3})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xffff4328, 0x52}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040}, 0x20001011)

4.643474605s ago: executing program 3 (id=953):
syz_mount_image$jfs(&(0x7f00000002c0), &(0x7f0000000240)='./file7\x00', 0xc43, &(0x7f0000000940)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="acd80c0d60d998833a1cade74acff2316dcd1b77321c8c7923848a29438d7107758ad5b2afaeb99e055ddf01db57db6e50113ba1639931066080a75a3d5b82b8dc4f36671cb8be0e7c3a0b1b5148f8388b5e3eadd2670427b3f90cd3e30f68856df292f6031ac33d8a5b09111dab3b9f871abc2ea3aa10961b853e84e94e460bfd8190c1cb395ffa35900a543a5800cda076438b7a3a3412983abdb1f6e51c764463c5175462e7ccb36c7367e3eaceab1dcc", @ANYRES16=0x0, @ANYBLOB="b940f56b03bb1a415f50f732a91369cb9795c7993f4cfd0c2bff60529bb1572a17f927a60844da24f9d681051c75656585e7d0fa8be5f01fa511ffed2b57eb23df3e4949ea7f2902e5b943a049ed03a1aa1784131cdfa0a4e2af39b8523470a1f7176c446691b303df29ff78c42585de1731975d34ae2441111ac0eafe331526fc325638ccdef6db59154aac6af705481255f279fa4a0b", @ANYRESOCT=0x0, @ANYRES64], 0x84, 0x5f96, &(0x7f000000d1c0)="$eJzs3VtvHGf9B/DfHrw+9N/U6kWVf8QhTTm0lCaNkzYtp6ZC4gIEVKpyn8i4VUQKKAkVrSziKhL3SFyj8iK4BqHeIBWJl8AbiBT3hgpEB439PMl4bGdtEu+s/Xw+kjP722fG+0y+Hs+u5/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDf/96bZ3sRcfnd9MRixP/FIKIfMV/XJ+OvEXExzz+MiOOx0RxPRcSx2Yh6+Y1/nog4HxEfH4u4u766XD+9tMd+vPTGnb/98M0frf32i3/5+78/+v2f2u1vfPTdH/zxVsTi8d/87j+3Hs26AwAAQCmqqqp6Gx/zI06kz/f9rjsFAExE3v9XSX5erX6Yehhbdd0ftVqtVm9X7exWs4iIteYy9XsGh+MB4JBZi0+77gIdkn/RhhHxWNedAKZar+sOcCDurq8u91K+veb+4ORmez4XZEv+a71713fsNh2nfY7JpH6+bscgntylP/MT6sM0yfn32/lf3mwfpfkOOv9J2S3/0ealT8XJ+Q/a+bfsJf+5fbxud/n3d8y/VDn/4b7yHxzi7V/+AAAAAAAcffnv/4sdH/+dffhV2ZMHHf89OaE+AAAAAAAAAMCjtofx/+oHu47/d4/x/wAAAGBq1Z/Vax8eu//cbvdiq5+/1It4vDU/UJh0scxC1/0AAAAAAAAAAAAAgJIMN8/hvdSLmImIxxcWqqqqv5ra9X497PKHXenrDyXr+pc8AABs+vhY61r+XsRcRFxK9/qbWVhYqKq5+YVqoZqfze9nR7Nz1Xzjc22e1s/Njvbwhng4qupvNtdYrmnc5+Vx7e3vV7/WqBrsoWOT0WHgABARm3uju/ZIR0xVPRFdv8vhcLD9Hz22f/ai659TAAAA4OBVVVX10u28T6Rj/v2uOwUATETe/7ePC6invp6rJ1PUH7VarVYfgrqp2tmtZhERa81l6vcMhuMHgENmLT7tugt0SP5FG0bE8a47AUy1Xtcd4EDcXV9d7qV8e839QRrfPZ8LsiX/td7Gcnn5nabjtM8xmdTP1+0YxJO79OepCfVhmuT8++38L2+2j9J8B53/pOyWf72eix30p2s5/0E7/5ajk39/x/xLlfMf7iv/gfwBAAAAAGCK5b//Lzr+m1cZAAAAAAAAAA6du+ury/m613z8/3M7zOf6z6Mp59+Tf5Fy/v12/q0TcgaNx3dev5//J+uryx/+/4Uv5OnU5z8zGNWvPdPrD4ab5/z8M9/adCVe3DZ/PU8181ZcjWuxEme3tc9saV8a035uW/uobp/P7adjOX4e1+In99pnx5wYNTemvRrTnvMf2P6LlPMfNr7q/BdSe681rd35oL9tu29Od3qdiz/+7ML2rWvybsfg3ro11et3qoP+bPyfPDaKX95YuX76V1du3rx+NtJky7NLkSaPWM5/Jn3l/J99ZrM9/95vbq93PhjtO/9pcTuGu+b/TONxvb7PTbhvXcj5j9JXzj/vgXbe/g9z/rtv/8930B8AAAAAAAAAAAAAAAB4kKqqNi4RvRgRL6frf7q6NhMAmKy8/6/yzTAStVqtVqvVR69uqnb2WrOIiD83l6nfM/x6p28GAEyzzyLiH113gs7Iv2D5fn/19EtddwaYqBvvvf/TK9eurVy/8b8sXQ0efY8AAAAAAAAAgP3K43+ebIz/vHEeUGvc6C3jv74eJz9ZX11+d/Ffnz9043/2R4ONsc7TCj0dzfG5t49QfCoePP73cMzrzYxpH41pnx3TPjemfccLPRpy/k+njHP+J9KKPWj815x/ezrmJTv1oPFfn+2gP13L+Z9KYz3n/L/amq+Zf/WHwzz+b39L/mduvvOLMzfee/+Fq+9ceXvl7ZWfnTu/9OrZpQvnX3nxzFtXr62kfzvs8cHK+eexr50HWpacf85c/mXJ+X851fIvS87/K6mWf1ly/vn9nvzLkvPPn33kX5ac/3Opln9Zcv5fS7X8y5Lzfz7V8i9Lzv/rqZZ/WXL+L6Ra/mXJ+Z9OtfzLkvM/k2r5lyXnn49wyb8sOf98ZoP8y5LzX0q1/MuS8z+XavmXJed/PtXyL0vO/6VUy78sOf+XU72P/N376wjI+V9Ite2/LDn/V1It/7Lk/F9NtfzLkvP/RqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vxP2LSeVfjpz/a6m2/Zfl/v3/PfDAAw/yg65/MwEAAAAAAAAAAAAAbZM4nbjrdQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7IDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzdW4xc9X0H8LM3e22IvUkcAsSEtTHEhMW7vuBLWycOuZRC2xAS6I3UuPbaOPGtXpsAQmIjaIoEUnnggVZKCghVeUgV1CZqkGhEpUpt+tI+tS9VWqlRhaJQOWlfGhVcnTn//98zs7Nz1t5de+aczwfhn3fmzMx/z5yZ3e9Y3xkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLbhk9N/OJBlWf5/44+xLLs6//uqbF/+5ezOK71CAAAAYLHeafz5rbXphH0LuFDTNn/34X/8zvnz589n2Z+s++AL+QzGs2zNyiwrzgtGf3yqZZvgqWx0YLDp68GSmx8qOX+45PyRkvNXlJy/suT80ZLz5+yAOVYVr8c0rmxT469jxS7N1mUjjfM2dbjUUwMrBwfjazkNA43LnB85nB3NjmXT2dScyww0/suyNzbkt3VXFm9rsOm21mdZdu6nTxyMaxgI+3hT1nJjDc333dufyMZ/9tMnDj4y9vMbOs3S3TBnpVm2eWO+zqez7MLLVdlAtjLtk7jOwaZ1ru+wzqGWdQ40Lpf/vX2d5xa4zvh9j4Z1/lOXda4Ppz16U5Zls9m827R7KhvMVrfdatrfo8URkV9Hfle+Lxu+qONkwwKOk/wyP7qp9ThpPybj/t8Q9snwPGtovjve/uqKOfv9Uo+T/LvuhWM1v+578xsdHW1+abXlWM23eeLm+Y+Bjvddh2MgHctNx8DGsmNgcMVQ4xgYvLDmjS3HwNY5lxnMBhq39dbN3Y+ByTPHT03OPPb47UePHzgyfWT6xPYd2/Zs3bZrx+6pycNHj02HPy9ul/aR1dlgOgY3hueaeAx+pG3b5kPy/MvF4+Cl63Z9uNO8mDWMLtHjYDFryMLx8oVb8gVdPZjNc4zn2zy9efGPg/Rzv+lxMNz0OOj4nNrhcTC8gMdBvs25zQv7mTnc9H+nNXR6LlyKY2Cs6RhYzM/D5jVcys/D/DYfvHX+58L1YV3PfPRifx4OzTkG4rc1EB57+Snp973R3WG/zD0urs/PuGpFdnZm+vSWRw+cOXN6axbGZfH+pvuq/XhZ3fQ9ZXOOl8GLPl72ffbdXdd3OH0s7KvR27rfV/k2Oya631eNZ/fO+7Pl1G1ZGEvscu/PTj/N8v2ZskSX/Zlv8/Tti/9dMOWSpue/kbLnv6GR4eL5byjtjZGW57+5d81QY2VZdu72hT3/jYT/L/fz37oeef7L99WDW7ofA/k2z0xe7DEw3PX576YwB8J6bg2JYbQp97/bOH+2OEyb7svS42Z4eCQcN8PxFluPm+1zLpNfW37bm6cu7bjZfFPrfdXye0sFj5t8X70w1f24ybd5c+vinztWxb82PXesKDsGRoZW5OsdSQdB8Xx3flU8BrZkB7OT2bHsULpMfi/ntzWxbWHHwIrw/+V+7ri2R46BfF+9uK37MZBv87fbl/Z3p83hlLRN0+9O7a8vzJf5rx++cH3tu22pM3++zk/t6P7aUL7NT3ZcbM7ovp9uC6dc1WE/tT9+5jumD2Xl+2mpjul8ncfu6P7aVL7Nup0LPJ72ZVn2+rOvFq93Fa/v/sXZf/5Oy+u+nV5Tfv3ZVz933Q9+cDHrBwDg0r3b+HN2RfG7ZtO/WC/k3/8BAACAvhBz/2CYifwPAAAAlRFz/1CYifwPAAAAlRFz/3CYyb6yd8erhocHvvbCO09m6d0Azwfx/PgyyL0ri+1ix3s2fD1+/oL89DtfHbnnu08u7LYHsyz7v7s/1HH7h1fGdRVOxXUOtZ4+x7U3Luj2H7r/wnbN759wbrC4/vj9LPRloNhVfuPf7mxc7/itxXzz7qwx75t95qnG9e8pvo7bv/UfxXZfD29asu/wQMvlN4f1bApzPLynzL2rLuyHfMbLffuNI3//sQcu3F683MDGNY1v88UtxfXG94h6/i+L7eP3Pd/6//rZb3473/7Rmzuv/8nBzut/K1zvj8L837eL05v3+Xeb1v8HYf3x9uLltrzy/Y7rf+2viu1fC8fFS2G2r/8Tf3TDO53ur3g7+4aLy8Xbn/qzTzcuF68vXn/7+kcn72zZH+3X/+YrxfXsfeR/hpq3j6fH24keGm49vgfC/dvSI8+y7Jtfy1r2czZSXO71tvXH6zs13Hn9t7Wt89TLDzcu3/79RN+4/5Mdv9+4nn1/Ptby/Ty/Juy/wVX/kF/vWx8Kx2M4/+ezxfW1v5fpa2tan2/i9i+NFY/beH2Tbet/vm39szfm+658/Xf9rFj/ax9f2bL+fWvD8fTeYpat/8ifrm25/MufKdZz+isTJ07OnD0a3+NgrO1xvHJ01eqrrn7PmrXhubT96/0nzzw8fXp8anwqy8b78C0Dl3v9r4T5X8WYXfpbKPzLcHHcPXdP8XPrIyPF18+H0x8K92f8+fiNPx5pOV7b7/fZ0WIudv0fDetYqPWbfrx7QRv+547XXvjX+77Y/ntB/H5OfWC08f29uOGaxnkDbxbntz9flfn3D7Q+rn+4rpjfC/v1fHhn5o3XFLfXfv3xvUme+3zx+I2/ycXLZ23vJzI21Pp9LHb9Pwy/x3z/2tbnv3h8fO/JtndzHssG8iXMhueHbLY4P24V9/dz567peHvxfXiy2esuZpnzmnlsZvLY0RNnH508Mz1zZnLmscf3Hz959sSZ/Y33Lt3/pbLLX3h8r248vg9N79yRNR7tJ4uxzK70+k/df/DQrqlbDk0fPnD28Jn7T02fPnJwZubg9KGZWw4cPjz9lbLLHz20d+u2Pdt3bZs4cvTQ3t179mzfM3H0xMl8GcWiSuyc+vLEidP7GxeZ2btjz9Y77tgxNXH85KHpvbumpibOll2+8bNpIr/0IxOnp48dOHP0+PTEzNHHp/du3bNz57bSd388furwzPjk6bMnJs/OTJ+eLL6X8TONk/OffWWXpx5m1obnuzYD4bfzT9+2M70/bu7Vr857VcUmY60n/iS8F9TXR7fvXsjXMfePhJn4938AAACojJj7w+dTXHjdXf4HAACAyggf+Bc+M9K//wMAAEAVxdw/GmZSk/yv/6//fwn9/1TX1v/X/8/0//X/S+j/6/93o/+v/9/P69f/1/+nXK/1/2PuX5Vltcz/AAAAUAcx968OM5H/AQAAoDJi7r8qzET+BwAAgMqIuf/qMJOa5H/9f/1/n/9fvf7/QJbN6v/r//cK/X/9/270//X/+3n9+v/6/5Trtf5/zP3vCTOpSf4HAACAOoi5f02YifwPAAAAlRFz/9owE/kfAAAAKiPm/rEwkyrl/4/Pf5b+v/6//n/1+v8+/7+g/98b9P/1/7vR/9f/7+f16//r/1Ou1/r/Mfe/N8ykSvkfAAAAai7m/veFmcj/AAAAUBkx978/zET+BwAAgMqIuX9dmElN8r/+v/6//r/+v/6//v9y0v+vRv9/VThZ/7+V/r/+v/6//j/d9Vr/P+b+D4SZ1CT/AwAAQB3E3H9NmIn8DwAAAJURc/8Hw0zkfwAAAKiMmPuvDTOpSf7X/9f/1//X/9f/1/9fTvr/1ej/x5P1/1vp/+v/6//r/9Ndr/X/Y+6/LsykJvkfAAAA6iDm/uvDTOR/AAAAqIyY+z8UZiL/AwAAQGXE3L8+zKQm+V//X/9f/1//X/9f/3856f/r/3ej/6//38/r1//X/6dcr/X/Y+6/IcykJvkfAAAA6iDm/g+Hmcj/AAAAUBkx998YZiL/AwAAQGXE3D8eZlKT/K//r/+v/6//r/+v/7+c9P/1/7vR/9f/7+f16//r/1Ou1/r/MfdvCDOpSf4HAACAOoi5f2OYifwPAAAAlRFz/01hJvI/AAAAVEbM/ZvCTGqS//X/9f/1/6va/x/S/9f/7wn6//r/3ej/6//38/r1//X/Kddr/f+Y+28OM6lJ/gcAAIA6iLn/ljAT+R8AAAAqI+b+j4SZyP8AAABQGTH3bw4zqUn+1//X/9f/r2r/3+f/6//3Bv1//f9u9P/1//t5/fr/Jf3//y67Buqg1/r/MfffGmZSk/wPAAAAdRBz/0fDTOR/AAAAqIyY+28LM5H/AQAAoDJi7p8IM6lJ/tf/1//X/9f/1//X/19O+v/6/93o/+v/9/P69f99/j/leq3/H3P/7WEmNcn/AAAAUAcx928JM5H/AQAAoDJi7p8MM5H/AQAAoDJi7p8KM6lJ/tf/1//X/9f/1//X/19O+v/6/93o/+v/9/P69f/1/ynXa/3/mPu3hpnUJP8DAABAn7rhYjaOuX9bmIn8DwAAAJURc//2MBP5HwAAACoj5v4dYSY1yf/6//r/+v/6//r/+v/LSf9f/7+b5v5/fkn9/7r0/+f7SdMv6y/o/+v/U67X+v8x998RZlKT/A8AAAB1EHP/zjAT+R8AAAAqI+b+XWEmc/P/31y+VQEAAABLKeb+3WEmff/v/wvrVdWq/3/grvRX/f+C/r/+f6b/r/+/zPT/9f+78fn/de3/L40rvX79f/1/yvVa/z/m/j1hJn2f/wEAAIAo5v5fCDOR/wEAAKAyYu7/xTAT+R8AAAAqI+b+XwozqUn+r1X/v4n+f0H/X/8/0//X/19m+v/6/93o/+v/9/P6e7f//63VWab/T2/otf5/zP17w0xqkv8BAACgDmLu/1iYifwPAAAAlRFz/8fDTOR/AAAAqIyY+/eFmdQk/+v/6//r/+v/6//r/y8n/X/9/24W1/8f1/9fpCvdn+/39fdu/9/n/9M7eq3/H3P/J8JMapL/AQAAoA5i7r8zzET+BwAAgMqIuf+TYSbyPwAAAFRGzP2fCjOpSf6/bP3/DoVi/X/9/0z/X/9f/1//f5H0/+vc//f5/4t1pfvz/b5+/X/9f8r1Wv8/5v5Ph5nUJP8DAABAHcTc/5kwE/kfAAAAKiPm/l8OM5H/AQAAoDJi7r8rzKQm+d/n/+v/6//r/+v/6/8vJ/1//f9u9P/1//t5/fr/+v+U67X+f8z9vxJmUpP8DwAAAHUQc//dYSbyPwAAAFRGzP33hJnI/wAAAFAZMff/aphJTfK//r/+v/6//r/+v/7/ctL/1//vRv9f/7+f16//r/9PuV7r/8fc/2thJjXJ/wAAAFAHMff/epiJ/A8AAACVEXP/Z8NM5H8AAACojJj77w0zqUn+1//X/9f/X97+/3jT6fr/+v+Z/v+S0//X/8/0/y/Zle7P9/v69f/1/ynXa/3/mPs/F2ZSk/wPAAAAdRBz/31hJvI/AAAAVEbM/Z8PM5H/AQAAoA+cW9BWMfd/IcykJvlf/1//X//f5/8vYf9/Rab/n+j/r2r8qf+v/9+N/r/+fz+vX/+/c/9/vt8jqKde6//H3H9/mElN8j8AAADUQcz9D4SZyP8AAABQGTH3/0aYifwPAAAAlRFz/2+GmdQk/+v/6//r/+v/+/x//f/lpP+v/9+N/r/+fz+vX//f5/9Trtf6/zH3/1aYSU3yPwAAANRBzP2/HWYi/wMAAEBlxNz/O2Em8j8AAABURsz9D4aZ1CT/F/3/Bw7q/xf0//X/9f/1/yP9/6Wh/6//343+v/5/P69f/1//n3K91v+Puf+LYSY1yf8AAABQBzH3/26YifwPAAAAlRFz//4wE/kfAAAAKiPm/ofCTGqS/33+v/6//r/+/8X0/1d1OF3/v6D/35n+v/5/N/r/Ve7/r1iSNV659c/3hDWc/qb/r/9PuV7r/8fcfyDMpCb5HwAAAOog5v7fCzOR/wEAAKAyYu4/GGYi/wMAAEBlxNx/KMykJvlf/1//v3/6/xda4vr/tfz8/5FsOfr/s/r/y60i/f839f8L+v+t9P99/r/+v/4/3fVa/z/m/ukwk5rkfwAAAOh3C3nX0Zj7D4eZyP8AAABQGTH3Hwkzkf8BAACgMmLufzjMpCb5vxf7/zfq/+v/+/z/dD36/z7/X/+/O5//r/+f6f9fsivdn+/39ev/6/9Trtf6/zH3Hw0zqUn+BwAAgDqIuf9LYSbyPwAAAFRGzP1fDjOR/wEAAKAyYu4/FmZSk/zfi/3/TP9f/1//P12P/r/+v/5/d/r/+v+Z/v8lu9L9+X5fv/6//j/leq3/H3P/8TCTmuR/AAAAqIOY+0+Emcj/AAAAUBkx958MM5H/AQAAoDJi7j8VZtKX+X9g3t7ufPT/9f97rf/f3LysdP9/pf6//r/+/1LQ/9f/z/T/L9mV7s/3+/r1//X/Kddr/f+Y+38/zKQv8z8AAADQScz9p8NM5H8AAACojJj7Z8JM5H8AAACojJj7z4SZdM///8/effXodVZ9HH4cJX5fDoBzhATfBMT34JhPQIfE9BZ6DS3U0HvvLXQIJfTee6+hSEHyrLWSSey9PSM/M/e+13WdLEw8nh3ZGeuv0U/7iv0+1cnR/+v/R+v/277//0r9f9L/6/+PQv+v/9/p/4/ttPv5rT+//l//z7rR+v/c/Q+MW3z/HwAAAKaRu/9BcYv9DwAAANPI3f/guMX+BwAAgGnk7n9I3NJk/59s/3+/Qz/S/+v/d8fq//+vPnaq/t/7/2/7fdX/6/+PoGv/n18J9f8H9P/Hc9r9/NafX/+v/2fdaP1/7v6Hxi1N9j8AAAB0kLv/YXGL/Q8AAADTyN3/8LjF/gcAAIBp5O5/RNzSZP97/7/+f3v9/6Tv/9f/F/2//v8ouvb/Sf9/QP9/PKfdz2/9+fX/+n/Wjdb/5+5/ZNzSZP8DAABAB7n7r45b7H8AAACYRu7+a+IW+x8AAACmkbv/XNzSZP/r//X/+n/9v/5f/79P+n/9/xL9/7j9/636/9XP37f/v/leB1f/z7rR+v9z1+7O7/6DT9Nv/wMAAEAHufsfHbfY/wAAADCN3P2PiVvsfwAAAJhG7v7Hxi1N9r/+X/+v/9f/6//1//uk/9f/L9H/j9v/e/+//n/t473/n0sxWv+fu/9xcUuT/Q8AAAAd5O5/fNxi/wMAAMA0cvc/IW6x/wEAAGAaufufGLc02f/6f/2//l//r//X/++T/l//v2Qj/X/8Enf+7dH/T93/P+CeKx9/0f7/zE7/r/8njNb/5+5/UtzSZP8DAABAB7n7nxy32P8AAAAwjdz9T4lb7H8AAACYRu7+a+OWJvtf/6//1//r//X/+v990v/r/5dspP+/KP3/1P3/6uf3/n/9P+tG6/9z9z81bmmy/wEAAKCD3P1Pi1vsfwAAAJhG7v6nxy32PwAAAEwjd/8z4pYm+1//v97/X33X9V9P/3/h59f/6//1//p//f8G+v8bLvAT9f+XRP/fqP+/y50/Xv+v/2fdaP1/7v5nxi1N9j8AAAB0kLv/WXGL/Q8AAADTyN3/7LjF/gcAAIBp5O5/Ttxy393uEjP2TdP/e/+//l//r//X/++T/n8D/f+F6P8vif6/Uf9/Afp//T/rRuv/c/c/N27x/X8AAACYRu7+58Ut9j8AAABMI3f/8+MW+x8AAACmkbv/BXFLk/2v/9f/6/9PtP+/x43X31//H/9c/6//vxz0//r/nf7/2E67n9/68+v/9f+sG63/z91/XdzSZP8DAABAB7n7Xxi32P8AAAAwjdz9L4pb7H8AAACYRu7+F8ctTfa//l//r//3/n/9/8HzPyr+PCb9/+Wh/9f/L7kM/f91d9P/H9tp9/Nbf379v/6fdaP1/7n7XxK3NNn/AAAA0EHu/pfGLfY/AAAATCN3//Vxi/0PAAAA08jd/7K4pcn+1//r//X/+n/9v/f/75P+X/+/xPv/9f9bfv4T6P/v+FfkIfp/tmC0/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGnk7n9l3GL/AwAAwDRy978qbmmy//X/+n/9/8X6/+v1/3eg/9f/H4f+X/+/RP+v/9/y83v/v/6fdaP1/7n7Xx23NNn/AAAA0EHu/hviFvsfAAAAppG7/zVxi/0PAAAA08jd/9q4pcn+1//r//X/3v+v/9f/75P+X/+/RP+v/9/y8+v/9f+sG63/z93/urilyf4HAACADnL3vz5usf8BAABgGrn73xC32P8AAAAwjdz9b4xbmux//b/+X/+v/9f/6//3Sf+v/1+i/9f/b/n59f/6f9aN1v/n7n9T3NJk/wMAAEAHufvfHLfY/wAAADCN3P1viVvsfwAAAJhG7v63xi1N9r/+X/+v/9f/6//1//uk/9f/L9H/6/+3/Pz6f/0/60br/3P3vy1uabL/AQAAoIPc/W+PW+x/AAAAmEbu/nfELfY/AAAATCN3/zvjlib7X/+v/9f/6//1//r/fdL/6/+XbK//v+rQj/T/+n/9v/6fZaP1/7n73xW3NNn/AAAA0EHu/nfHLfY/AAAATCN3/3viFvsfAAAAppG7/71xS5P9r//v3P+fObfb6f93+n/9v/5/r/T/+v8l2+v/D9P/6//1//p/lo3W/+fuf1/c0mT/AwAAQAe5+98ft9j/AAAAMI3c/R+IW+x/AAAAmEbu/g/GLU32v/6/c//v/f/6/8PPqf/X/++D/l//v0T/r//f8vOP3P9fof9nEKP1/7n7PxS3NNn/AAAA0EHu/g/HLfY/AAAATCN3/0fiFvsfAAAAppG7/6NxS5P9r//X/+v/9f+37//PXviP+Hn6f/3/cej/9f9L9P/6/y0//8j9v/f/M4rR+v/c/R+LW5rsfwAAAOggd//H4xb7HwAAAKaRu/8TcYv9DwAAANPI3X9j3NJk/+v/9f/6f/2/9//r//dJ/6//X6L/31z/f+Xtf6D/1//r/1kzWv+fu/+TcUuT/Q8AAAAd5O7/VNxi/wMAAMA0cvd/Om6x/wEAAGAaufs/E7c02f/6f/2//l//r//X/++T/l//v0T/v7n+/xD9v/5f/8+a0fr/3P2fjVua7H8AAADoIHf/5+IW+x8AAACmkbv/83GL/Q8AAADTyN3/hbilyf7X/+v/9f9H6v+v0f/r//X/R6P/1/8vua3/v8+uR/9/VfwP/f8Mz6//1/+zbrT+P3f/F+OWJvsfAAAAOsjdf1PcYv8DAADANHL3fylusf8BAABgGrn7vxy3NNn/+n/9v/7f+//1//r/fdL/H7X/P3uk55qn//f+/53+f3PPr//X/7NutP4/d/9X4pYm+x8AAAA6yN3/1bjF/gcAAIBp5O6/OW6x/wEAAGAaufu/Frc02f/6f/2//l//r//X/++T/t/7/5fo//X/W35+/b/+n3Wj9f+5+78etzTZ/wAAANBB7v5vxC32PwAAAEwjd/834xb7HwAAAKaRu/9bcUuT/a//1//r//X/+v9B+v8z5/T/x6D/1//v9P/Hdtr9/NafX/+v/2fdaP1/7v5vxy1N9j8AAAB0kLv/O3GL/Q8AAADTyN3/3bjF/gcAAIBp5O7/XtzSZP+v9P/VwOn/l+n/d+f/+9H/H/719f/6f+//1//r/5fp//X/W35+/b/+n3Wj9f+5+78ft9w2/M4e/d8SAAAAGEnu/h/ELU2+/w8AAAAd5O7/Ydxi/wMAAMA0cvf/KG5psv+9/1//7/3/+n/9v/5/n/T/+v8l+n/9/5afX/+v/2fdaP1/7v4fxy1N9j8AAAB0kLv/J3GL/Q8AAADTyN3/07jF/gcAAIBp5O7/WdzSZP/r//X/+n/9v/5f/79P+n/9/5I79P/15UD/r//fwvPr//X/rBut/8/d//O4pcn+BwAAgO27YvVn5O7/Rdxi/wMAAMA0cvf/Mm6x/wEAAGAauft/Fbc02f/6f/3/hP3/vXf6f/2//n8Y+n/9/xLv/9f/b/n59f/6f9aN1v/n7v913NJk/wMAAEAHuft/E7fY/wAAADCN3P2/jVvsfwAAAJhG7v7fxS1N9r/+fx/9/036f+//P0//r//X/2+//z8TX3D0/wf0/4fp//X/+n/9P8tG6/9z9/8+bmmy/wEAAKCD3P1/iFvsfwAAAJhG7v4/xi32PwAAAEwjd/+f4pYm+3+e/j+edIj+3/v/9f8H9P/6f/3/9vv/pP8/oP8/TP+v/9f/6/9ZNlr/n7v/z3FLk/0PAAAAHeTu/0vcYv8DAADANHL3/zVusf8BAABgGrn7/xa3NNn/8/T/Qf+v/9f/6//j/9f/j0H/r/9fov/X/2/5+fX/+n/Wjdb/5+7/e9zSZP8DAABAB7n7/xG32P8AAAAwjdz9/4xb7H8AAACYRu7+W+KWO+3/syf4VCdH/6//31//f+vddzv9v/5f/6//1//r/y9O/6//3/Lz6//1/6wbrf+/5fzftf+/+9f5j/b9fwAAAJhR7v5/xy32PwAAAEwjd/9/4hb7HwAAAKaRu/+/cUuT/a//1/97/7/+X/+v/98n/b/+f4n+X/+/5efX/+v/WTda/5+7/38BAAD//1fujIM=")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000002200)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@noprefix}, {@subsystem='cpuacct'}]})
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='xdp_exception\x00', r2}, 0x10)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000f2ffffff000000850000006100000018110000", @ANYRESHEX=0x0, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90)
r4 = socket$inet6(0xa, 0x2, 0xfffffffc)
setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4)
syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x7)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="434759c5614e22462270939f1e7d2604ff00"], 0x3)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962a1dab9fa4c3c9d49d87496c1ce44b6"], 0x22)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
copy_file_range(r5, 0x0, r5, &(0x7f00000001c0), 0x0, 0x0)
write$binfmt_script(r5, &(0x7f0000000400), 0x208e24b)
syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="02c90010000c000500170308000600090085990000ded9798a6768340c8cfa57a1fcce48e680631537f499fe02c6aab8327b828448f4fc1abf3c8dfad850860f0b8630f1d3e8ab9e06cb984a81e3e8280ebb9eaff1206c01fd6852fea26981a57fb5e5a5b3977f097c36732a60b9060d09dd742aecb6b2c90cec7bd0e7e991b95a4c93510a7a19a1b8f78120a2f34b5be48535c701f6835a6647d43d09fc201427f973ebd2f336d1dadee1f195a15403c494"], 0x15)
readahead(r5, 0x0, 0x5)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040f0419"], 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6fd9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a3021"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0])
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

3.936195884s ago: executing program 2 (id=954):
socket(0x10, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
socket(0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001080)={0x0, 0x0})

3.769002528s ago: executing program 0 (id=955):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={<r1=>0x0, @in6={{0xa, 0x0, 0x9, @private0, 0x8000}}, 0x0, 0x0, 0x0, 0x7fffffff}, &(0x7f0000000080)=0x98)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @multicast1}}, 0xfffffff7, 0x49, 0x200, 0x266, 0x4}, &(0x7f0000000300)=0x98)
sendmmsg(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x2c000011)
socket(0x0, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480), 0x0, 0xfffffffffffffffd)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0x6)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)

3.590291621s ago: executing program 5 (id=956):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000))
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
setgid(0xee00)
setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000000000), 0x4)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000140), 0x12)
membarrier(0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{}, {0x2d}, {0x6}]})
read$FUSE(r3, 0x0, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x1000)=nil, 0x2)
open(0x0, 0x0, 0x0)

3.581544971s ago: executing program 4 (id=957):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x90)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00 \x00', @ANYRES16=r0, @ANYBLOB="01"], 0x24}}, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000002"], 0x24d8}], 0x1}, 0x0)

3.251768566s ago: executing program 2 (id=958):
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='}', 0x1, 0x0, 0x0, 0x0)
socket(0x15, 0x5, 0x0)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x0, 0x0, &(0x7f0000000040))
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x2, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0)

2.485065578s ago: executing program 5 (id=959):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10)
dup(0xffffffffffffffff)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"a2e3ad214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b3266078b089b3b083844090890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b333b0d07680936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0afc9397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6258742317662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e0088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76ccc2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2e57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849d11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f9d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f0712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1ccced94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1025}}, 0x1006)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x7, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

2.312606294s ago: executing program 2 (id=960):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000f00)=ANY=[@ANYBLOB="1000000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x103)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
ppoll(&(0x7f0000000d40)=[{r2}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7f4eb1462d4b2726, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0)
syz_usb_connect$uac1(0x0, 0xbc, &(0x7f0000000640)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902aa0003010000000904000000010100000a24010400050201020c2402060002021fff0781010d240802feff9bdc58d0dee8b30c2402000402006afcff00080924030403030300000524050600090401000001020000090401010101000009050109ff03000001072501020000000904020000010200000904020101010200000924020207000000000724010000011009058209000200000007250100000000"], &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10)
clock_settime(0x0, &(0x7f0000000540)={0x77359400})
getresuid(0x0, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10)
syz_clone(0x18001080, 0x0, 0x0, 0x0, 0x0, 0x0)

1.25055181s ago: executing program 5 (id=961):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf090000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0x5450, 0x0)
setreuid(0xee00, 0x0)
r3 = getuid()
setreuid(0xee00, r3)
mlockall(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x53f72b8e0285169b, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3})
chdir(&(0x7f0000000000)='./file0\x00')
add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6685d4982a83b71b906769e737201ac6b7a7804454156569cbf3a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xffffffffffffffff)
open(&(0x7f0000000000)='.\x00', 0x0, 0x0)

1.249904316s ago: executing program 4 (id=962):
syz_clone3(&(0x7f0000000040)={0xb8944400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.213270637s ago: executing program 1 (id=963):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_open_dev$ndb(0x0, 0x0, 0x0)
r2 = socket(0x28, 0x5, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
sendto$inet(r0, 0x0, 0x0, 0x2000c010, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000200)="dfb9547ed387dbe9abc84c9b6f5bec2d79a5c6e87f154acad2302e", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "666a570e1c8cb77b4354b293fd6ee51dc17bfccff1e2ee4dbe83c208a8d68fdde48da131ebcfc7d33fa592c67141104977a9398ea75aee950ff1d64120a2461d46cc93a3bd253b2110f2027b68d96c73"}, 0xd8)
shutdown(r0, 0x1)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)
syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$eJzs2b9qFUEUB+Df7F5NupW1XwJaWEhIuD6AKRRua6uNSEAwVS4Iiq/hG/gWvoKmsg/ptQhYCis3e9f8IaCSG0H4Ptids2dn9uyUMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYmCRfS3K7StoxVyUpSdcdzI6SdGP+1qe6SsmT3dn80f708TxJfdK9PE02TrqUJO32nfV22k7b7fbBw527n+dv3r56vre3u7/8TEmXw+OVzqKMt/psrqy0BgAAAPy3+itr8v71n1S6eU31AQAAgN9Z9X4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN/qm9O4HYMqSUm67mB2lKS7ZNyNf/R/AAAAwNWVVHnWXJYftgFO3c+XpvzKL9rvZRFv5UNzYSAAAABwzsuP5x77tWVw9nz9Rz9YrLvvZTKsy9eHdxuZZHNziJdNvu0kdZKtC7UOj9+9GK/S18na9cwJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfrIDByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAXBQAA//+XOeFM")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r4 = dup(0xffffffffffffffff)
ftruncate(r4, 0x3f4000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000007200a143000000000000000007000000", @ANYRES32, @ANYBLOB="0800010002"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff)
r5 = socket$inet6(0xa, 0x6, 0x0)
listen(r5, 0x0)

899.848835ms ago: executing program 4 (id=965):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x160, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc}, @encap={0x1c, 0x4, {0x2}}]}, 0x160}}, 0x0)

815.755407ms ago: executing program 3 (id=966):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x16}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240))
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x0})
r4 = dup(r2)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r4})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r5, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff4328, 0x52}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040}, 0x20001011)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0x8}}})

814.733474ms ago: executing program 4 (id=967):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0))
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0)
pipe2(0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8, 0x2}, [@l2cap_conf_req={{0x4, 0x0, 0x4}}]}}, 0x11)
dup(0xffffffffffffffff)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xfffff000}], 0x2)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = dup(r3)
r5 = fcntl$dupfd(r0, 0x0, r3)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x74, 0x93, 0x1d, 0x40, 0xc45, 0x614a, 0xe6af, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x80, 0xf4}}]}}]}}, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r6, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000d, 0x80010, r1, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080)={0x0, r4})
syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000300)={0x14, &(0x7f0000000380)={0x0, 0xb, 0x4c, {0x4c, 0x30, "da2c26b034eb01477ff43ec5c9c331eba9a4224d0b884dfb278595c0e4b117f7e2f0c854cdb0fefdaffbaf3e4acc60dcc88aa2c84006a042e71dbc985f479a5d9e375c40f2a016e8adf2"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000500)={0x20, 0xe, 0xed, "77104f62a1c9ab3fc6ac42c576cd3a28437ed4b94ec5973939b5b1abc7f3c1e08123bd74401486ccbbe32628e4d0eb803355a95aa492759ed76ddc46a0e6709f464a27ca5981d4b65e89414f405a6a0fc5e11fee1214a33c8b94e4c82954490d963931bf4bc9d81299fdc93494f2c84266c54c4a0e070394b0240b223edbec6a7a488feb81f41689a19a852a15fff1993a40bb3981513a4ea1cbb70298cdf832aa0e0fb9bb47cd51516bb6424de84e4fae59423582a188bc4dc679addfa04f4b5bc5fa383b025700c00f53e66717fc13117cc5dd22c1730eef5e7da0c58793dbd6a2fea6d8ef584318df6d8a9a"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}})
r7 = eventfd2(0x8001, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f0000000140)={0x281})
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000000c0)={0x0, r7})
waitid$P_PIDFD(0x3, r5, &(0x7f0000000000), 0x80000000, &(0x7f0000000080))
syz_usb_connect(0x0, 0x2d, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x6, 0x4a, 0xd9, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4c081)

0s ago: executing program 5 (id=968):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000ac0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="fb", 0x1}, {&(0x7f0000000000)="7df96d9198953cb7bf2bc0a3b28751a17667747bf62dafef6c44dea0dced0e08e913609f0855b08d40dce3dab2b4dba3e7968c75bd8e836f872d7e7e9b7d649d812081f4501010ac1699d51e3d309adebcfe6e3b5a5ac334596e74bc2ef9c906ce5e02091d98ec5ed07633f375d5bbdbb1a4a8c65b21ef637563fde190b36b4f", 0x80}], 0x2}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

164] netlink: 'syz.2.542': attribute type 10 has an invalid length.
[  234.642338][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  234.653225][ T7164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.542'.
[  234.663799][ T7164] bridge0: port 3(dummy0) entered blocking state
[  234.670251][ T4484] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  234.678936][ T7164] bridge0: port 3(dummy0) entered disabled state
[  234.686168][   T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  234.687026][ T4484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  234.704138][ T4484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  234.717118][ T7164] dummy0: entered allmulticast mode
[  234.722702][ T5147] usb 4-1: USB disconnect, device number 13
[  234.724472][ T7164] dummy0: entered promiscuous mode
[  234.734884][ T7164] bridge0: port 3(dummy0) entered blocking state
[  234.741698][ T7164] bridge0: port 3(dummy0) entered forwarding state
[  234.749672][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  234.756982][   T45] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xC, skipping
[  234.789328][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  234.801180][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  234.821163][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  234.827315][   T45] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  234.838220][ T7169] loop2: detected capacity change from 0 to 128
[  234.856143][ T5108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  234.870393][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  234.960751][   T12] bridge_slave_1: left allmulticast mode
[  234.980399][   T12] bridge_slave_1: left promiscuous mode
[  235.027844][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.068862][   T12] bridge_slave_0: left allmulticast mode
[  235.098280][   T12] bridge_slave_0: left promiscuous mode
[  235.139455][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.394312][   T45] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=fc.67
[  236.001561][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.009598][   T45] usb 6-1: Product: syz
[  236.029114][ T7179] loop0: detected capacity change from 0 to 1024
[  236.050902][   T45] usb 6-1: Manufacturer: syz
[  236.070931][   T45] usb 6-1: SerialNumber: syz
[  236.098206][   T45] usb 6-1: config 0 descriptor??
[  236.118415][   T45] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  236.323833][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.342410][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.404852][ T5191] usb 6-1: USB disconnect, device number 23
[  236.704556][   T12] gretap0 (unregistering): left promiscuous mode
[  236.791249][ T5191] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  236.959914][ T7194] loop5: detected capacity change from 0 to 256
[  236.986995][ T5191] usb 3-1: Using ep0 maxpacket: 32
[  236.995288][ T5191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.006414][ T5191] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  237.010036][ T7194] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001023f, chksum : 0x5c87467f, utbl_chksum : 0xe619d30d)
[  237.025708][ T5191] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  237.044959][ T4484] Bluetooth: hci3: command tx timeout
[  237.048562][ T7194] exFAT-fs (loop5): failed to load alloc-bitmap
[  237.059799][ T7194] exFAT-fs (loop5): failed to recognize exfat type
[  237.064635][ T5191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.081309][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.127118][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.133220][ T5191] usb 3-1: config 0 descriptor??
[  237.164230][ T5191] hub 3-1:0.0: bad descriptor, ignoring hub
[  237.170566][ T5191] hub 3-1:0.0: probe with driver hub failed with error -5
[  237.184727][ T5191] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  237.187647][   T12] bond0 (unregistering): Released all slaves
[  237.279331][ T5149] ip6gretap0 speed is unknown, defaulting to 1000
[  237.374652][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.411468][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.564092][ T5147] usb 3-1: USB disconnect, device number 22
[  237.931348][ T5147] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  238.128789][ T5147] usb 3-1: Using ep0 maxpacket: 8
[  238.157903][ T5147] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  238.171019][ T5147] usb 3-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  238.189835][ T5147] usb 3-1: config 179 has no interface number 0
[  238.205156][ T5147] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid wMaxPacketSize 0
[  238.230109][   T12] hsr_slave_0: left promiscuous mode
[  238.244539][ T5147] usb 3-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  238.264709][   T12] hsr_slave_1: left promiscuous mode
[  238.275808][ T5147] usb 3-1: config 179 interface 65 has no altsetting 0
[  238.291722][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.306403][ T5147] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  238.331157][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.344157][ T5147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.412989][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.429447][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.465731][ T7200] loop5: detected capacity change from 0 to 32768
[  238.486466][   T12] veth1_macvtap: left promiscuous mode
[  238.534809][   T12] veth0_macvtap: left promiscuous mode
[  238.557191][   T12] veth1_vlan: left promiscuous mode
[  238.557721][ T7200] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.573995][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.583105][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.592381][   T12] veth0_vlan: left promiscuous mode
[  238.596007][ T5147] usb 3-1: USB disconnect, device number 23
[  238.782415][ T7200] XFS (loop5): Ending clean mount
[  239.101034][ T4484] Bluetooth: hci3: command tx timeout
[  239.186026][ T5091] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.390035][ T7232] loop1: detected capacity change from 0 to 32768
[  239.405716][ T7232] XFS: noikeep mount option is deprecated.
[  239.467695][ T7232] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  239.683604][ T7266] loop5: detected capacity change from 0 to 128
[  239.684132][ T7232] XFS (loop1): Ending clean mount
[  239.711181][ T7266] VFS: Found a Xenix FS (block size = 512) on device loop5
[  239.756634][ T7266] syz.5.567: attempt to access beyond end of device
[  239.756634][ T7266] loop5: rw=0, sector=8767744, nr_sectors = 1 limit=128
[  239.760690][ T7232] XFS (loop1): Quotacheck needed: Please wait.
[  239.800707][ T7266] Buffer I/O error on dev loop5, logical block 8767744, async page read
[  239.845542][ T7266] syz.5.567: attempt to access beyond end of device
[  239.845542][ T7266] loop5: rw=0, sector=13269809, nr_sectors = 1 limit=128
[  239.891866][ T7266] Buffer I/O error on dev loop5, logical block 13269809, async page read
[  239.900603][ T7266] syz.5.567: attempt to access beyond end of device
[  239.900603][ T7266] loop5: rw=0, sector=1157, nr_sectors = 1 limit=128
[  239.917960][ T7232] XFS (loop1): Quotacheck: Done.
[  239.973994][ T7266] Buffer I/O error on dev loop5, logical block 1157, async page read
[  240.011141][ T7266] syz.5.567: attempt to access beyond end of device
[  240.011141][ T7266] loop5: rw=0, sector=3211264, nr_sectors = 1 limit=128
[  240.047434][ T7266] Buffer I/O error on dev loop5, logical block 3211264, async page read
[  240.058524][ T5086] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  240.079141][ T7266] syz.5.567: attempt to access beyond end of device
[  240.079141][ T7266] loop5: rw=0, sector=8768635, nr_sectors = 1 limit=128
[  240.112216][ T7266] Buffer I/O error on dev loop5, logical block 8768635, async page read
[  240.131135][ T7266] syz.5.567: attempt to access beyond end of device
[  240.131135][ T7266] loop5: rw=0, sector=13466417, nr_sectors = 1 limit=128
[  240.189801][ T7266] Buffer I/O error on dev loop5, logical block 13466417, async page read
[  240.212655][ T7266] syz.5.567: attempt to access beyond end of device
[  240.212655][ T7266] loop5: rw=0, sector=209285, nr_sectors = 1 limit=128
[  240.264554][ T7266] Buffer I/O error on dev loop5, logical block 209285, async page read
[  240.316613][ T7266] syz.5.567: attempt to access beyond end of device
[  240.316613][ T7266] loop5: rw=0, sector=8767744, nr_sectors = 1 limit=128
[  240.383687][   T12] team0 (unregistering): Port device team_slave_1 removed
[  240.411118][ T7266] Buffer I/O error on dev loop5, logical block 8767744, async page read
[  240.419744][ T7266] syz.5.567: attempt to access beyond end of device
[  240.419744][ T7266] loop5: rw=0, sector=13269809, nr_sectors = 1 limit=128
[  240.485313][ T7266] Buffer I/O error on dev loop5, logical block 13269809, async page read
[  240.511143][ T7266] syz.5.567: attempt to access beyond end of device
[  240.511143][ T7266] loop5: rw=0, sector=1157, nr_sectors = 1 limit=128
[  240.576665][ T7266] Buffer I/O error on dev loop5, logical block 1157, async page read
[  240.601342][   T29] kauditd_printk_skb: 54 callbacks suppressed
[  240.601361][   T29] audit: type=1800 audit(1719558997.938:208): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.567" name="/" dev="loop5" ino=2 res=0 errno=0
[  240.676115][   T12] team0 (unregistering): Port device team_slave_0 removed
[  240.687830][ T5091] sysv_free_block: trying to free block not in datazone
[  240.717239][ T5091] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  241.185961][ T4484] Bluetooth: hci3: command tx timeout
[  241.276871][ T7301] netlink: 32 bytes leftover after parsing attributes in process `syz.1.582'.
[  242.267652][ T7297] loop0: detected capacity change from 0 to 32768
[  242.561202][ T7297] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  243.026038][ T7160] chnl_net:caif_netlink_parms(): no params data found
[  243.261462][ T4484] Bluetooth: hci3: command tx timeout
[  243.319845][ T7297] XFS (loop0): Ending clean mount
[  243.656259][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.670991][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.699037][ T7160] bridge_slave_0: entered allmulticast mode
[  243.717675][ T7160] bridge_slave_0: entered promiscuous mode
[  243.789645][ T5088] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  243.789846][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.864586][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.895813][ T7160] bridge_slave_1: entered allmulticast mode
[  243.926698][ T7160] bridge_slave_1: entered promiscuous mode
[  244.179825][ T7160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.232320][ T7160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.415196][ T7160] team0: Port device team_slave_0 added
[  244.437326][ T7160] team0: Port device team_slave_1 added
[  245.490637][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.514364][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.630929][ T7160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.659760][ T7346] loop1: detected capacity change from 0 to 32768
[  245.681233][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.688186][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.778829][ T7363] loop0: detected capacity change from 0 to 512
[  245.797949][ T7160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.886400][ T7363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.901285][ T7363] ext4 filesystem being mounted at /root/syzkaller.viUwii/103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.107538][ T7366] bio_check_eod: 4 callbacks suppressed
[  246.107563][ T7366] syz.1.588: attempt to access beyond end of device
[  246.107563][ T7366] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  246.141151][ T7366] lbmIODone: I/O error in JFS log
[  246.146374][ T7366] *** Log Format Error ! ***
[  246.166194][ T7366] lmLogInit: exit(-22)
[  246.170553][ T7366] lmLogOpen: exit(-22)
[  246.194297][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.280011][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.291045][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.309780][ T7374] loop5: detected capacity change from 0 to 64
[  246.316618][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.339653][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.378017][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.414157][ T7376] loop3: detected capacity change from 0 to 1024
[  246.433824][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.446253][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.459091][ T7160] hsr_slave_0: entered promiscuous mode
[  246.464302][ T7376] hfsplus: invalid btree extent records (0 size)
[  246.490033][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.497299][ T5088] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /root/syzkaller.viUwii/103/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  246.533913][ T7160] hsr_slave_1: entered promiscuous mode
[  246.566252][ T7356] loop2: detected capacity change from 0 to 32768
[  246.568298][ T7376] hfsplus: failed to load attributes file
[  246.578013][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.590122][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.590162][ T7160] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  246.624363][ T7160] Cannot create hsr debugfs directory
[  246.625254][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.649071][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.785194][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.810342][ T7356] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names
[  246.825196][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.831186][ T7356] bcachefs (loop2): recovering from clean shutdown, journal seq 8
[  246.901380][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.926370][ T7356] bcachefs (loop2): alloc_read... done
[  246.933517][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.937911][ T7356] bcachefs (loop2): stripes_read... done
[  246.964911][ T7356] bcachefs (loop2): snapshots_read... done
[  246.970981][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.003539][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.021009][ T7356] bcachefs (loop2): journal_replay... done
[  247.040374][ T7356] bcachefs (loop2): resume_logged_ops... done
[  247.041112][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.060619][ T7356] bcachefs (loop2): going read-write
[  247.094606][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.119902][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.129199][ T7356] bcachefs (loop2): done starting filesystem
[  247.140207][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.159539][ T7388] Illegal XDP return value 7388 on prog  (id 101) dev N/A, expect packet loss!
[  247.198756][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.213381][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.224208][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.232021][ T7356] bcachefs (loop2): going read-only
[  247.232035][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.237243][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.237273][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.237300][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.237326][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.275629][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.283421][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.314165][ T7356] bcachefs (loop2): finished waiting for writes to stop
[  247.337471][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.407325][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.408736][ T7356] bcachefs (loop2): flushing journal and stopping allocators, journal seq 9
[  247.414892][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.414922][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.414949][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.414976][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.415003][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.415029][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.415056][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.415082][ T5149] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  247.449205][ T7394] bond0: entered promiscuous mode
[  247.461306][ T7386] bch-copygc/loop (7386) used greatest stack depth: 11088 bytes left
[  247.498312][ T5149] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  247.509342][ T7394] bond_slave_0: entered promiscuous mode
[  247.516822][ T7394] bond_slave_1: entered promiscuous mode
[  247.522886][ T7394] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode
[  247.530256][ T7394] batadv0: entered promiscuous mode
[  247.537574][ T7394] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  247.553508][ T7394] bond0: left promiscuous mode
[  247.559304][ T7394] bond_slave_0: left promiscuous mode
[  247.565083][ T7394] bond_slave_1: left promiscuous mode
[  247.577919][ T7394] mac80211_hwsim hwsim13 wlan1: left promiscuous mode
[  247.589559][ T7394] batadv0: left promiscuous mode
[  247.603638][ T7356] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12
[  247.633487][ T7356] bcachefs (loop2): shutdown complete, journal seq 13
[  247.657842][ T7356] bcachefs (loop2): marking filesystem clean
[  247.763860][ T5089] bcachefs (loop2): shutting down
[  247.868444][ T5089] bcachefs (loop2): shutdown complete
[  248.018323][ T7396] loop5: detected capacity change from 0 to 16
[  248.066113][ T7396] erofs: (device loop5): mounted with root inode @ nid 36.
[  248.090412][ T7160] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  248.140547][ T7160] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  248.201886][ T7160] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  248.312115][ T7160] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  248.834110][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.993012][ T7160] 8021q: adding VLAN 0 to HW filter on device team0
[  249.029221][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.036499][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.099666][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.107663][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.304665][   T29] audit: type=1326 audit(1719559006.638:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7406 comm="syz.5.605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23b4375b29 code=0x0
[  249.521157][ T5191] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  249.724647][ T5191] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af
[  249.761067][ T5191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.832662][ T5191] usb 2-1: config 0 descriptor??
[  249.893578][ T5191] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  250.575914][ T7160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.072463][ T7433] netlink: 'syz.3.611': attribute type 10 has an invalid length.
[  251.106929][ T7412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.146000][ T7412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.146841][ T7433] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  251.287006][ T5191] usb 2-1: USB disconnect, device number 16
[  251.459704][ T7441] loop3: detected capacity change from 0 to 256
[  251.472426][ T7441] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  251.528793][ T7425] loop2: detected capacity change from 0 to 32768
[  251.622148][ T7160] veth0_vlan: entered promiscuous mode
[  251.675713][ T7160] veth1_vlan: entered promiscuous mode
[  251.734573][ T7442] syz.2.609: attempt to access beyond end of device
[  251.734573][ T7442] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  251.798368][ T7442] lbmIODone: I/O error in JFS log
[  251.825597][ T7442] *** Log Format Error ! ***
[  251.856681][ T7442] lmLogInit: exit(-22)
[  251.862752][ T7160] veth0_macvtap: entered promiscuous mode
[  251.890420][ T7442] lmLogOpen: exit(-22)
[  251.909310][ T7160] veth1_macvtap: entered promiscuous mode
[  252.077366][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.170397][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.440668][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.554354][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.694946][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.211622][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.223031][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.233879][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.244114][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.255068][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.274092][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.319138][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.332983][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.343609][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.354365][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.411987][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.422718][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.432774][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.443369][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.454352][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.466063][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.477827][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.489333][ T7160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.498141][ T7160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.507081][ T7160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.517254][ T7160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.544712][ T7436] loop5: detected capacity change from 0 to 32768
[  254.380070][ T7436] syz.5.612: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz5,mems_allowed=0-1
[  254.431212][ T7436] CPU: 0 PID: 7436 Comm: syz.5.612 Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0
[  254.441236][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  254.451329][ T7436] Call Trace:
[  254.454623][ T7436]  <TASK>
[  254.457565][ T7436]  dump_stack_lvl+0x241/0x360
[  254.462280][ T7436]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.467549][ T7436]  ? __pfx__printk+0x10/0x10
[  254.472178][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.477829][ T7436]  ? __rcu_read_unlock+0xa1/0x110
[  254.482905][ T7436]  warn_alloc+0x278/0x410
[  254.487269][ T7436]  ? __pfx_warn_alloc+0x10/0x10
[  254.492157][ T7436]  ? __bch2_darray_resize+0xb5/0x1d0
[  254.497467][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.503117][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.508764][ T7436]  ? __get_vm_area_node+0x23d/0x270
[  254.513979][ T7436]  __vmalloc_node_range_noprof+0x69f/0x1460
[  254.519881][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.525541][ T7436]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  254.531874][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.537507][ T7436]  ? rcu_is_watching+0x15/0xb0
[  254.542280][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.547918][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.553554][ T7436]  ? __kmalloc_node_noprof+0x247/0x440
[  254.559029][ T7436]  ? kvmalloc_node_noprof+0x72/0x190
[  254.564345][ T7436]  kvmalloc_node_noprof+0x142/0x190
[  254.569570][ T7436]  ? __bch2_darray_resize+0xb5/0x1d0
[  254.574983][ T7436]  __bch2_darray_resize+0xb5/0x1d0
[  254.580112][ T7436]  bch2_fs_btree_write_buffer_init+0x28f/0x2e0
[  254.586282][ T7436]  bch2_fs_alloc+0x1ce6/0x20a0
[  254.591079][ T7436]  ? __pfx_bch2_fs_alloc+0x10/0x10
[  254.596216][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.601858][ T7436]  ? __bch2_darray_resize+0x12f/0x1d0
[  254.607239][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.612874][ T7436]  ? rcu_is_watching+0x15/0xb0
[  254.617653][ T7436]  ? bch2_fs_open+0x330/0xdf0
[  254.622340][ T7436]  bch2_fs_open+0x8cc/0xdf0
[  254.626877][ T7436]  ? __pfx_bch2_fs_open+0x10/0x10
[  254.631923][ T7436]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  254.638266][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.643915][ T7436]  ? __pfx_bch2_test_super+0x10/0x10
[  254.649214][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.654854][ T7436]  ? sget+0x2b8/0x620
[  254.658845][ T7436]  ? __pfx_bch2_noset_super+0x10/0x10
[  254.664229][ T7436]  bch2_mount+0x6b0/0x13a0
[  254.668680][ T7436]  ? __pfx_bch2_mount+0x10/0x10
[  254.673559][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.679193][ T7436]  ? aa_get_newest_label+0xff/0x6f0
[  254.684405][ T7436]  ? vfs_parse_fs_string+0x190/0x230
[  254.689695][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.695332][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.700974][ T7436]  ? kfree+0x4e/0x360
[  254.704968][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.710607][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.716243][ T7436]  ? vfs_parse_fs_string+0x190/0x230
[  254.721548][ T7436]  legacy_get_tree+0xf0/0x190
[  254.726233][ T7436]  ? __pfx_bch2_mount+0x10/0x10
[  254.731093][ T7436]  vfs_get_tree+0x92/0x2a0
[  254.735561][ T7436]  do_new_mount+0x2be/0xb40
[  254.740098][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.745759][ T7436]  ? __pfx_do_new_mount+0x10/0x10
[  254.750815][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.756467][ T7436]  __se_sys_mount+0x2d9/0x3c0
[  254.761165][ T7436]  ? __pfx___se_sys_mount+0x10/0x10
[  254.766377][ T7436]  ? exc_page_fault+0x590/0x8c0
[  254.771241][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.776977][ T7436]  ? srso_alias_return_thunk+0x5/0xfbef5
[  254.782614][ T7436]  ? __x64_sys_mount+0x20/0xc0
[  254.787397][ T7436]  do_syscall_64+0xf3/0x230
[  254.791964][ T7436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.797887][ T7436] RIP: 0033:0x7f23b437722a
[  254.802307][ T7436] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  254.821918][ T7436] RSP: 002b:00007f23b3dfee78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  254.830339][ T7436] RAX: ffffffffffffffda RBX: 00007f23b3dfef00 RCX: 00007f23b437722a
[  254.838314][ T7436] RDX: 0000000020002040 RSI: 00000000200000c0 RDI: 00007f23b3dfeec0
[  254.846288][ T7436] RBP: 0000000020002040 R08: 00007f23b3dfef00 R09: 0000000000810080
[  254.854268][ T7436] R10: 0000000000810080 R11: 0000000000000206 R12: 00000000200000c0
[  254.862242][ T7436] R13: 00007f23b3dfeec0 R14: 0000000000005b41 R15: 0000000020000240
[  254.870232][ T7436]  </TASK>
[  254.873329][    C0] vkms_vblank_simulate: vblank timer overrun
[  254.952453][ T7436] Mem-Info:
[  255.021506][ T7436] active_anon:8767 inactive_anon:0 isolated_anon:0
[  255.021506][ T7436]  active_file:6563 inactive_file:39119 isolated_file:0
[  255.021506][ T7436]  unevictable:768 dirty:292 writeback:0
[  255.021506][ T7436]  slab_reclaimable:9803 slab_unreclaimable:99168
[  255.021506][ T7436]  mapped:15979 shmem:6711 pagetables:727
[  255.021506][ T7436]  sec_pagetables:0 bounce:0
[  255.021506][ T7436]  kernel_misc_reclaimable:0
[  255.021506][ T7436]  free:1377924 free_pcp:3621 free_cma:0
[  255.114999][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.162171][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.170132][ T7436] Node 0 active_anon:36968kB inactive_anon:0kB active_file:26252kB inactive_file:156396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:68816kB dirty:1164kB writeback:0kB shmem:27408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10556kB pagetables:2908kB sec_pagetables:0kB all_unreclaimable? no
[  255.281973][ T1238] ieee802154 phy0 wpan0: encryption failed: -22
[  255.313360][ T7436] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  255.345007][ T7436] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  255.865245][ T7436] lowmem_reserve[]: 0 2571 2571 0 0
[  256.157855][ T7436] Node 0 DMA32 free:1549360kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:41256kB inactive_anon:0kB active_file:26252kB inactive_file:156080kB unevictable:1536kB writepending:1184kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:9216kB local_pcp:8660kB free_cma:0kB
[  256.192929][ T1289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.202090][ T7436] lowmem_reserve[]: 0 0 0 0 0
[  256.206871][ T7436] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:8kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  256.221195][ T1289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.251350][ T7436] lowmem_reserve[]: 0 0 0 0 0
[  256.256172][ T7436] Node 1 Normal free:3935420kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:10052kB local_pcp:744kB free_cma:0kB
[  256.306047][ T7436] lowmem_reserve[]: 0 0 0 0 0
[  256.315645][ T7436] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  256.339923][ T7436] Node 0 DMA32: 67*4kB (ME) 361*8kB (ME) 286*16kB (UME) 33*32kB (ME) 17*64kB (UE) 46*128kB (UME) 53*256kB (UME) 33*512kB (UME) 23*1024kB (UM) 6*2048kB (UME) 357*4096kB (M) = 1544340kB
[  256.429537][ T7436] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  256.529343][ T7436] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 2*16kB (UM) 2*32kB (U) 4*64kB (UM) 7*128kB (UM) 2*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 959*4096kB (M) = 3935472kB
[  256.598116][ T7436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  256.685034][ T7436] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  256.753317][ T7436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  256.814323][ T7436] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  256.877579][ T7436] 58026 total pagecache pages
[  256.900110][   T45] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  256.907973][ T7436] 0 pages in swap cache
[  256.913359][ T7436] Free swap  = 124472kB
[  256.917593][ T7436] Total swap = 124996kB
[  257.001048][ T7436] 2097051 pages RAM
[  257.020813][ T7436] 0 pages HighMem/MovableOnly
[  257.045829][ T7436] 400871 pages reserved
[  257.075184][ T7436] 0 pages cma reserved
[  257.146651][ T7436] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[  257.230928][   T45] usb 2-1: device descriptor read/64, error -71
[  258.503037][   T45] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  258.949826][   T29] audit: type=1326 audit(1719559016.268:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7492 comm="syz.4.623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc594975b29 code=0x0
[  258.996020][ T7504] warning: `syz.3.627' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  259.067303][ T5108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  259.097918][ T5088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.116482][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  259.126888][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  259.138336][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  259.141639][ T5147] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  259.154577][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  259.173941][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  259.339470][ T1054] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.366399][ T1054] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.432303][ T5147] usb 3-1: Using ep0 maxpacket: 8
[  259.446501][ T5147] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  259.476742][ T5147] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  259.509901][ T5147] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  259.525888][ T5147] usb 3-1: config 1 interface 0 has no altsetting 0
[  259.539633][ T5147] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  259.552105][ T1054] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.567525][ T5147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.576846][ T1054] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.597466][ T5147] usb 3-1: Product: syz
[  259.602305][ T5147] usb 3-1: Manufacturer: syz
[  259.607004][ T5147] usb 3-1: SerialNumber: syz
[  259.785805][ T1054] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  259.835601][ T1054] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.837565][ T5147] cdc_mbim 3-1:1.0: probe with driver cdc_mbim failed with error -71
[  259.901472][ T5147] usb 3-1: USB disconnect, device number 24
[  260.172764][ T1054] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  260.208097][ T1054] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.062451][ T5108] Bluetooth: hci2: command tx timeout
[  262.491140][ T5203] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  262.539711][ T1054] bridge_slave_1: left allmulticast mode
[  262.559333][ T1054] bridge_slave_1: left promiscuous mode
[  262.588059][ T1054] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.619147][ T1054] bridge_slave_0: left allmulticast mode
[  262.640698][ T1054] bridge_slave_0: left promiscuous mode
[  262.658766][ T1054] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.697228][ T5203] usb 4-1: Using ep0 maxpacket: 16
[  262.737074][ T5203] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  262.807554][ T5203] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  262.840967][ T5203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.887104][ T5203] usb 4-1: config 0 descriptor??
[  263.111811][ T7534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.636'.
[  263.141410][ T5152] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  263.366683][ T5152] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  263.428510][ T5152] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  263.457502][ T5152] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  263.491281][ T5152] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  263.520629][ T5152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.641564][ T7534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.674443][ T7534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.729001][ T7534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.778175][ T7534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.848494][ T5152] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12
[  263.876353][ T5203] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1
[  263.922661][ T5152] usb 6-1: USB disconnect, device number 24
[  263.939463][ T5203] hid-generic 0003:0158:0100.0009: unexpected long global item
[  263.974143][ T5203] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22
[  264.067449][ T7539] loop1: detected capacity change from 0 to 32768
[  264.085285][ T5203] usb 4-1: USB disconnect, device number 14
[  264.144924][ T5108] Bluetooth: hci2: command tx timeout
[  264.421761][ T7539] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names
[  264.477413][ T1054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  264.492158][ T7539] bcachefs (loop1): recovering from clean shutdown, journal seq 8
[  264.514411][ T1054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  264.541690][ T7539] bcachefs (loop1): alloc_read... done
[  264.547228][ T7539] bcachefs (loop1): stripes_read... done
[  264.564577][ T1054] bond0 (unregistering): Released all slaves
[  264.579715][ T7539] bcachefs (loop1): snapshots_read... done
[  264.597962][ T7539] bcachefs (loop1): journal_replay... done
[  264.620703][ T7539] bcachefs (loop1): resume_logged_ops... done
[  264.647844][ T7539] bcachefs (loop1): going read-write
[  264.707186][ T7539] bcachefs (loop1): done starting filesystem
[  264.755203][ T1054] IPVS: stopping backup sync thread 5641 ...
[  264.787864][ T7506] chnl_net:caif_netlink_parms(): no params data found
[  264.846268][ T7539] bcachefs (loop1): going read-only
[  264.850906][ T4484] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  264.890298][ T7539] bcachefs (loop1): finished waiting for writes to stop
[  264.906567][ T4484] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  264.917009][ T4484] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  264.926816][ T4484] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  264.942360][ T4484] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  264.950455][ T4484] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  264.966831][ T7539] bcachefs (loop1): flushing journal and stopping allocators, journal seq 9
[  265.077536][ T7539] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  265.131963][ T7539] bcachefs (loop1): shutdown complete, journal seq 11
[  265.139708][ T7539] bcachefs (loop1): marking filesystem clean
[  265.281496][ T5086] bcachefs (loop1): shutting down
[  265.294580][ T1054] hsr_slave_0: left promiscuous mode
[  265.325966][ T1054] hsr_slave_1: left promiscuous mode
[  265.368633][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  265.376554][ T5149] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  265.390962][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  265.407804][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  265.419492][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  265.439206][ T1054] batman_adv: batadv0: Removing interface: virt_wifi0
[  265.449613][ T5086] bcachefs (loop1): shutdown complete
[  265.516004][ T1054] veth1_macvtap: left promiscuous mode
[  265.549593][ T1054] veth0_macvtap: left promiscuous mode
[  265.566000][ T1054] veth1_vlan: left promiscuous mode
[  265.571335][ T5149] usb 4-1: Using ep0 maxpacket: 16
[  265.591124][ T1054] veth0_vlan: left promiscuous mode
[  265.610789][ T5149] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  265.655388][ T5149] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  265.689834][ T5149] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.723383][ T5149] usb 4-1: config 0 descriptor??
[  265.765314][ T7584] loop2: detected capacity change from 0 to 256
[  265.820693][ T7584] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  265.964643][ T7577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.647'.
[  266.221194][ T5108] Bluetooth: hci2: command tx timeout
[  266.532651][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.573359][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.601589][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.651245][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.092124][ T5108] Bluetooth: hci3: command tx timeout
[  267.405255][ T5149] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1
[  267.416236][ T5149] hid-generic 0003:0158:0100.000A: unexpected long global item
[  267.425768][ T5149] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22
[  267.444183][ T5149] usb 4-1: USB disconnect, device number 15
[  267.813334][ T7596] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  268.142999][ T7603] 9pnet_fd: Insufficient options for proto=fd
[  268.164037][ T7603] 9pnet_fd: Insufficient options for proto=fd
[  268.224665][ T7607] loop1: detected capacity change from 0 to 256
[  268.301467][ T5108] Bluetooth: hci2: command tx timeout
[  268.530933][ T5191] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  268.570036][ T1054] team0 (unregistering): Port device team_slave_1 removed
[  268.646605][ T1054] team0 (unregistering): Port device team_slave_0 removed
[  269.181089][ T5108] Bluetooth: hci3: command tx timeout
[  269.348725][ T5191] usb 4-1: Using ep0 maxpacket: 16
[  269.365186][ T5191] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  269.374989][ T5191] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  269.388763][ T5191] usb 4-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88
[  269.405324][ T5191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.427026][ T5191] usb 4-1: Product: syz
[  269.445369][ T5191] usb 4-1: Manufacturer: syz
[  269.455811][ T5191] usb 4-1: SerialNumber: syz
[  269.468678][ T5191] usb 4-1: config 0 descriptor??
[  269.673909][ T7506] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.696018][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.713928][ T7506] bridge_slave_0: entered allmulticast mode
[  269.734143][ T7506] bridge_slave_0: entered promiscuous mode
[  269.753104][ T7506] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.769094][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.787459][ T7506] bridge_slave_1: entered allmulticast mode
[  269.807221][ T7506] bridge_slave_1: entered promiscuous mode
[  269.981507][ T5149] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  270.028255][ T7506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.109250][ T7506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.181087][ T5149] usb 3-1: Using ep0 maxpacket: 16
[  270.195165][ T5149] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  270.225656][ T5149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  270.256323][ T5191] kaweth 4-1:0.0: Firmware present in device.
[  270.257134][ T5149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  270.297420][ T5149] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  270.310989][ T5191] kaweth 4-1:0.0: Error reading configuration (-71), no net device created
[  270.320711][ T5191] kaweth 4-1:0.0: probe with driver kaweth failed with error -5
[  270.327615][ T5149] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  270.345839][ T5191] usb 4-1: USB disconnect, device number 16
[  270.368222][ T5149] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  270.400976][ T5149] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  270.429373][ T5149] usb 3-1: Manufacturer: syz
[  270.443090][ T5149] usb 3-1: config 0 descriptor??
[  270.458471][ T7506] team0: Port device team_slave_0 added
[  270.498604][ T7506] team0: Port device team_slave_1 added
[  270.560911][ T7624] loop5: detected capacity change from 0 to 32768
[  270.617514][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.639615][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.686356][ T7506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.722933][ T7506] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.738054][ T7506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.823971][ T7506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.849718][ T5149] rc_core: IR keymap rc-hauppauge not found
[  270.860936][ T5149] Registered IR keymap rc-empty
[  270.867208][ T7631] syz.5.662: attempt to access beyond end of device
[  270.867208][ T7631] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  270.889360][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  270.906048][ T7567] chnl_net:caif_netlink_parms(): no params data found
[  270.930904][ T7631] lbmIODone: I/O error in JFS log
[  270.935964][ T7631] *** Log Format Error ! ***
[  270.943011][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  270.971382][ T7631] lmLogInit: exit(-22)
[  270.976112][ T7631] lmLogOpen: exit(-22)
[  271.001984][ T5149] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  271.049825][ T5149] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17
[  271.099049][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.141265][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.181044][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.211107][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.251157][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.261385][ T5108] Bluetooth: hci3: command tx timeout
[  271.282311][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.321088][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.361048][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.405458][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.451430][ T5149] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  271.466428][ T1054] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.489116][ T5149] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  271.518004][ T5149] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  271.559497][ T5149] usb 3-1: USB disconnect, device number 25
[  271.637843][ T7644] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  271.671851][ T1054] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.889222][ T1054] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.939939][ T7506] hsr_slave_0: entered promiscuous mode
[  271.974517][ T7506] hsr_slave_1: entered promiscuous mode
[  272.003169][ T7506] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  272.030053][ T7506] Cannot create hsr debugfs directory
[  272.193716][ T7567] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.221095][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.250200][ T7567] bridge_slave_0: entered allmulticast mode
[  272.263401][ T7567] bridge_slave_0: entered promiscuous mode
[  272.365721][ T1054] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.379813][ T7660] loop2: detected capacity change from 0 to 1024
[  272.399863][ T7660] EXT4-fs: Ignoring removed nomblk_io_submit option
[  272.436622][ T7660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.502500][ T7567] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.524069][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.621723][ T7567] bridge_slave_1: entered allmulticast mode
[  272.654933][ T7567] bridge_slave_1: entered promiscuous mode
[  272.707878][ T5089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.341167][ T5108] Bluetooth: hci3: command tx timeout
[  273.426217][ T7567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.524710][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.675'.
[  273.536624][ T7567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.608963][ T7681] netlink: 60 bytes leftover after parsing attributes in process `syz.1.675'.
[  274.061180][ T7686] loop2: detected capacity change from 0 to 256
[  274.118034][ T7686] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  274.868981][ T7567] team0: Port device team_slave_0 added
[  274.923566][ T7690] loop5: detected capacity change from 0 to 1024
[  274.932679][ T7690] EXT4-fs: Ignoring removed nomblk_io_submit option
[  274.943161][ T7567] team0: Port device team_slave_1 added
[  274.983169][ T7690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.097458][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.111335][   T45] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  275.127837][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.171667][ T7567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.173942][ T5091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.255793][ T7567] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.257584][   T29] audit: type=1326 audit(1719559032.588:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7695 comm="syz.2.680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94e2f75b29 code=0x0
[  275.264057][ T7567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.311816][ T7567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.324247][ T1054] bridge_slave_1: left allmulticast mode
[  275.329904][ T1054] bridge_slave_1: left promiscuous mode
[  275.351059][   T45] usb 2-1: Using ep0 maxpacket: 16
[  275.351415][ T1054] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.362851][   T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  275.376768][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  275.389646][ T1054] bridge_slave_0: left allmulticast mode
[  275.391871][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  275.396820][ T1054] bridge_slave_0: left promiscuous mode
[  275.415196][   T45] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  275.419910][ T1054] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.435195][   T45] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  275.452177][   T45] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  275.463412][   T45] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  275.471685][   T45] usb 2-1: Manufacturer: syz
[  275.479189][   T45] usb 2-1: config 0 descriptor??
[  275.794942][   T45] rc_core: IR keymap rc-hauppauge not found
[  275.801446][   T45] Registered IR keymap rc-empty
[  275.810128][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  275.865137][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  275.915215][   T45] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  275.929892][   T45] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18
[  275.947981][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  275.984060][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  276.040993][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  276.041496][ T1054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.075124][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  276.091564][ T1054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.122620][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  276.128822][ T1054] bond0 (unregistering): Released all slaves
[  276.153706][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  276.221149][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  276.261107][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  276.321135][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  276.335881][ T7695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.366206][ T7567] hsr_slave_0: entered promiscuous mode
[  276.462705][ T7567] hsr_slave_1: entered promiscuous mode
[  276.488005][ T7567] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.506061][ T7567] Cannot create hsr debugfs directory
[  276.510998][   T45] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  276.544230][   T45] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  276.560894][   T45] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  276.584024][   T45] usb 2-1: USB disconnect, device number 19
[  277.040981][ T1054] hsr_slave_0: left promiscuous mode
[  277.062445][ T1054] hsr_slave_1: left promiscuous mode
[  277.085241][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  277.094339][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'.
[  277.100897][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  277.113898][ T7717] netlink: 60 bytes leftover after parsing attributes in process `syz.2.687'.
[  277.299060][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  277.340729][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  277.425519][ T1054] veth1_macvtap: left promiscuous mode
[  277.491742][ T7730] loop1: detected capacity change from 0 to 256
[  277.622242][ T7730] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  278.347195][ T1054] veth0_macvtap: left promiscuous mode
[  278.370224][ T1054] veth1_vlan: left promiscuous mode
[  278.384211][ T1054] veth0_vlan: left promiscuous mode
[  278.815889][ T7736] loop1: detected capacity change from 0 to 256
[  278.929847][ T7736] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  279.471072][ T7739] loop2: detected capacity change from 0 to 256
[  279.481879][ T7739] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  280.704878][ T5152] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  280.866489][ T1054] team0 (unregistering): Port device team_slave_1 removed
[  280.902135][ T5152] usb 3-1: Using ep0 maxpacket: 16
[  280.912754][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  280.924158][ T5152] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  280.933409][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.942305][ T1054] team0 (unregistering): Port device team_slave_0 removed
[  280.944288][ T5152] usb 3-1: config 0 descriptor??
[  281.478593][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.487763][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.740765][ T5152] hid (null): report_id 0 is invalid
[  281.755627][ T5152] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1
[  281.763590][   T29] audit: type=1326 audit(1719559039.088:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57e5b75b29 code=0x0
[  281.793375][ T5152] hid-generic 0003:0158:0100.000B: unexpected long global item
[  281.815782][ T5152] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22
[  281.842401][ T7506] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  281.875179][ T7506] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  281.933826][ T7506] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  281.956097][ T7506] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  282.039131][ T5152] usb 3-1: USB disconnect, device number 26
[  282.171363][ T5191] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  282.241551][ T7506] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.279175][ T7506] 8021q: adding VLAN 0 to HW filter on device team0
[  282.294688][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.301904][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.333823][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.341036][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.393359][ T5191] usb 6-1: Using ep0 maxpacket: 16
[  282.414143][ T7756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  282.440044][ T5191] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.480710][ T5191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  282.506647][ T5191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  282.517908][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'.
[  282.534904][ T5191] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  282.564971][ T5191] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  282.616855][ T5191] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  282.646679][ T5191] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  282.664254][ T5191] usb 6-1: Manufacturer: syz
[  282.691019][ T5191] usb 6-1: config 0 descriptor??
[  282.838654][ T7567] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  282.902925][ T7567] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  282.939460][ T7567] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  282.978579][ T7567] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  283.052000][ T5191] rc_core: IR keymap rc-hauppauge not found
[  283.067890][ T5191] Registered IR keymap rc-empty
[  283.088949][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  283.109497][ T7506] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.151728][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  283.183643][ T5191] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  283.218826][ T5191] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input19
[  283.289076][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  283.343518][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  283.405233][ T7506] veth0_vlan: entered promiscuous mode
[  283.421377][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  283.460757][ T7771] infiniband syz1: set active
[  283.475005][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  283.482035][ T7771] infiniband syz1: added bond0
[  283.496322][ T7506] veth1_vlan: entered promiscuous mode
[  283.520173][ T7771] syz1: rxe_create_cq: returned err = -12
[  283.532023][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  283.542409][ T7771] infiniband syz1: Couldn't create ib_mad CQ
[  283.548705][ T7771] infiniband syz1: Couldn't open port 1
[  283.601095][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  283.648738][ T7567] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.692118][ T7506] veth0_macvtap: entered promiscuous mode
[  283.729704][ T7771] RDS/IB: syz1: added
[  283.800655][ T7771] smc: adding ib device syz1 with port count 1
[  283.856031][ T7771] smc:    ib device syz1 port 1 has pnetid 
[  283.867775][ T7506] veth1_macvtap: entered promiscuous mode
[  283.960719][ T7567] 8021q: adding VLAN 0 to HW filter on device team0
[  284.069857][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.077132][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.185071][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.193519][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.241008][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  284.271615][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  284.288113][ T7778] loop2: detected capacity change from 0 to 32768
[  284.298014][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.318409][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.324200][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  284.338744][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.349418][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.368580][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.391443][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.405732][ T5191] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  284.415052][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  284.436230][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.455781][ T5191] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  284.475138][ T5191] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  284.478011][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_0
[  284.507278][ T5191] usb 6-1: USB disconnect, device number 25
[  284.589808][ T7791] syz.2.701: attempt to access beyond end of device
[  284.589808][ T7791] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  284.605629][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.636578][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.637690][ T7791] lbmIODone: I/O error in JFS log
[  284.660533][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.687455][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.707546][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.721360][ T7791] *** Log Format Error ! ***
[  284.726596][ T7791] lmLogInit: exit(-22)
[  284.745339][ T7791] lmLogOpen: exit(-22)
[  284.749492][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.769617][ T7506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  284.808786][ T7506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  284.835146][ T7506] batman_adv: batadv0: Interface activated: batadv_slave_1
[  284.895792][ T7506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  284.947008][ T7506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  284.976592][ T7506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  284.995346][ T7506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.449954][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.483694][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.634926][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.664872][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.784561][ T7807] loop1: detected capacity change from 0 to 1024
[  285.802597][ T7807] EXT4-fs: Ignoring removed nomblk_io_submit option
[  285.862433][ T7567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.878924][ T7807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.043817][ T7814] netlink: 32 bytes leftover after parsing attributes in process `syz.0.622'.
[  286.093322][ T5086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.155444][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'.
[  287.422334][   T29] audit: type=1326 audit(1719559044.728:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.1.709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2039b75b29 code=0x0
[  287.707178][ T7567] veth0_vlan: entered promiscuous mode
[  287.725373][ T7567] veth1_vlan: entered promiscuous mode
[  287.807178][ T7567] veth0_macvtap: entered promiscuous mode
[  287.856565][ T7567] veth1_macvtap: entered promiscuous mode
[  287.898058][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.916227][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.932623][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.948979][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  287.959376][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  287.983051][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.020877][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.047872][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.071791][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.090922][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.113309][ T7567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.154518][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.184640][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.196171][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.207429][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.217961][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.229912][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.240483][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.254758][ T5152] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  288.264380][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.276242][ T7567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.287384][ T7567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.300556][ T7567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  288.320164][ T7567] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.330262][ T7828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  288.342473][ T7567] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.353756][ T7567] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.366657][ T7567] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.451937][ T5153] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  288.460037][ T5152] usb 1-1: Using ep0 maxpacket: 16
[  288.469053][ T5152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  288.488807][ T5152] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  288.508629][ T5152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.531647][ T5152] usb 1-1: config 0 descriptor??
[  288.538239][  T949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.564191][  T949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.618351][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  288.630956][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  288.661010][ T5153] usb 6-1: Using ep0 maxpacket: 16
[  288.669133][ T5153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.690634][ T5153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  288.731066][ T5153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  288.770567][ T5153] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  288.790964][ T5153] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  288.826726][ T5153] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  289.088839][ T7842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.172306][ T5153] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  289.182401][ T5153] usb 6-1: Manufacturer: syz
[  289.189025][ T7842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.199071][ T5153] usb 6-1: config 0 descriptor??
[  289.455833][ T5152] hid (null): report_id 0 is invalid
[  289.481621][ T5152] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1
[  289.499438][ T5152] hid-generic 0003:0158:0100.000C: unexpected long global item
[  289.531385][ T5152] hid-generic 0003:0158:0100.000C: probe with driver hid-generic failed with error -22
[  289.641164][ T5153] rc_core: IR keymap rc-hauppauge not found
[  289.657383][ T5153] Registered IR keymap rc-empty
[  289.680439][ T5150] usb 1-1: USB disconnect, device number 16
[  289.687537][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  289.896342][   T29] audit: type=1326 audit(1719559047.218:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.4.719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07d9775b29 code=0x0
[  290.667606][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  290.726852][ T5153] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  290.750745][ T7871] loop1: detected capacity change from 0 to 1024
[  290.793744][ T5153] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input20
[  290.857528][ T7871] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  290.905316][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  291.032251][ T7883] loop2: detected capacity change from 0 to 256
[  291.060259][ T7883] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  291.192919][ T7871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.651644][ T7871] netlink: 'syz.1.721': attribute type 1 has an invalid length.
[  291.722246][ T7871] netlink: 224 bytes leftover after parsing attributes in process `syz.1.721'.
[  291.861039][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  291.901155][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  291.931707][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  291.967165][ T5086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.981074][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  292.041212][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  292.089183][   T29] audit: type=1326 audit(1719559049.418:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.3.728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57e5b75b29 code=0x0
[  292.121067][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  292.160434][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  292.207790][ T7909] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.731'.
[  292.223358][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  292.271157][ T5153] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  292.341594][ T5153] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  292.388713][ T5153] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  292.456649][ T5153] usb 6-1: USB disconnect, device number 26
[  292.853951][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  293.039475][ T7924] loop5: detected capacity change from 0 to 256
[  293.072029][ T7924] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  294.322014][ T7933] team0: entered promiscuous mode
[  294.327106][ T7933] team_slave_0: entered promiscuous mode
[  294.354370][ T7933] team_slave_1: entered promiscuous mode
[  294.387213][ T7933] dummy0: entered promiscuous mode
[  294.618366][ T7946] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.747'.
[  294.964060][ T1790] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  296.052693][   T29] audit: type=1326 audit(1719559053.368:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.0.751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb047f75b29 code=0x0
[  296.151501][ T1790] usb 5-1: Using ep0 maxpacket: 16
[  296.159170][ T1790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.177324][ T1790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  296.196636][ T1790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  296.210477][ T1790] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  296.220368][ T1790] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  296.260434][ T1790] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  296.299464][ T1790] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  296.327000][ T1790] usb 5-1: Manufacturer: syz
[  296.596395][ T1790] usb 5-1: config 0 descriptor??
[  296.761089][ T7966] loop3: detected capacity change from 0 to 256
[  296.829077][ T7966] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  297.586375][ T1790] rc_core: IR keymap rc-hauppauge not found
[  297.601333][ T1790] Registered IR keymap rc-empty
[  297.626734][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  299.523472][   T29] audit: type=1326 audit(1719559056.848:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7977 comm="syz.1.758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2039b75b29 code=0x0
[  299.622794][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  299.668236][ T1790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  299.689697][ T1790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input21
[  299.845248][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  299.898493][ T7997] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.761'.
[  299.918598][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  299.955045][ T7977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.001415][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  300.069781][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  300.130611][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  300.181013][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  300.218067][ T8008] loop0: detected capacity change from 0 to 7
[  300.231102][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  300.241087][ T5203] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  300.254298][ T8008] Dev loop0: unable to read RDB block 7
[  300.278396][ T8008]  loop0: unable to read partition table
[  300.284491][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  300.298735][ T8008] loop0: partition table beyond EOD, truncated
[  300.320389][ T8008] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  300.320389][ T8008] 
) failed (rc=-5)
[  300.334307][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  300.380998][ T1790] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  300.416848][ T1790] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  300.430947][ T5203] usb 6-1: device descriptor read/64, error -71
[  300.437799][ T1790] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  300.468333][ T1790] usb 5-1: USB disconnect, device number 12
[  300.766209][   T29] audit: type=1326 audit(1719559058.078:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8010 comm="syz.3.767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57e5b75b29 code=0x0
[  301.529082][ T5203] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  301.642363][ T8003] loop4: detected capacity change from 0 to 32768
[  301.680978][ T5203] usb 6-1: device descriptor read/64, error -71
[  301.889789][ T5203] usb usb6-port1: attempt power cycle
[  301.910008][ T8030] loop2: detected capacity change from 0 to 1024
[  301.919615][ T8030] EXT4-fs: Ignoring removed nomblk_io_submit option
[  302.003841][ T8030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.196222][ T8029] syz.4.764: attempt to access beyond end of device
[  302.196222][ T8029] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  302.209370][ T8029] lbmIODone: I/O error in JFS log
[  302.214567][ T8029] *** Log Format Error ! ***
[  302.220524][ T8029] lmLogInit: exit(-22)
[  302.259943][ T8029] lmLogOpen: exit(-22)
[  302.322174][ T5203] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  302.363098][ T5203] usb 6-1: device descriptor read/8, error -71
[  302.369314][ T8030] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 236 with max blocks 8 with error 28
[  302.434772][ T8030] EXT4-fs (loop2): This should not happen!! Data will be lost
[  302.434772][ T8030] 
[  302.446182][ T8030] EXT4-fs (loop2): Total free blocks count 0
[  302.453462][ T8030] EXT4-fs (loop2): Free/Dirty block details
[  302.459838][ T8030] EXT4-fs (loop2): free_blocks=0
[  302.535405][ T8030] EXT4-fs (loop2): dirty_blocks=0
[  302.555605][ T8030] EXT4-fs (loop2): Block reservation details
[  302.591150][ T8030] EXT4-fs (loop2): i_reserved_data_blocks=0
[  302.670504][ T8043] netlink: 'syz.3.777': attribute type 1 has an invalid length.
[  302.681002][ T8043] netlink: 'syz.3.777': attribute type 1 has an invalid length.
[  302.688748][ T8043] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.777'.
[  302.734625][ T5089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.741470][ T5203] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  302.761106][ T8043] netlink: 'syz.3.777': attribute type 1 has an invalid length.
[  302.807236][ T5203] usb 6-1: device descriptor read/8, error -71
[  303.139968][   T29] audit: type=1326 audit(1719559060.468:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8045 comm="syz.1.779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2039b75b29 code=0x0
[  303.927422][ T5203] usb usb6-port1: unable to enumerate USB device
[  303.960332][ T8054] team0: entered promiscuous mode
[  303.987426][ T8054] team_slave_0: entered promiscuous mode
[  304.005729][ T8054] team_slave_1: entered promiscuous mode
[  304.039734][ T8054] team0: left promiscuous mode
[  304.049146][ T8054] team_slave_0: left promiscuous mode
[  304.061328][ T8054] team_slave_1: left promiscuous mode
[  304.310709][ T5155] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  304.586200][ T5155] usb 4-1: Using ep0 maxpacket: 8
[  304.815930][ T5155] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  305.095801][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.363772][ T5155] usb 4-1: config 0 descriptor??
[  305.692933][ T5155] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  305.716374][ T5155] asix 4-1:0.0: probe with driver asix failed with error -32
[  306.042294][ T8084] loop5: detected capacity change from 0 to 256
[  306.175362][ T4484] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  306.185257][ T4484] Bluetooth: hci3: Injecting HCI hardware error event
[  306.194675][ T4484] Bluetooth: hci3: hardware error 0x00
[  306.789764][ T8084] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  306.984086][ T5150] usb 4-1: USB disconnect, device number 17
[  307.178388][ T8088] 9pnet_fd: Insufficient options for proto=fd
[  307.209869][ T8094] netlink: 'syz.3.792': attribute type 1 has an invalid length.
[  307.221392][ T8094] netlink: 'syz.3.792': attribute type 1 has an invalid length.
[  307.257328][ T8094] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.792'.
[  307.281741][ T8094] netlink: 'syz.3.792': attribute type 1 has an invalid length.
[  307.773381][ T5203] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  308.031018][ T5203] usb 2-1: Using ep0 maxpacket: 16
[  308.395470][ T5203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  308.450948][ T5203] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  308.548213][ T5203] usb 2-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88
[  308.594861][ T5203] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.630160][ T5203] usb 2-1: Product: syz
[  308.654893][ T5203] usb 2-1: Manufacturer: syz
[  308.659558][ T5203] usb 2-1: SerialNumber: syz
[  308.873945][ T5203] usb 2-1: config 0 descriptor??
[  309.315015][ T4484] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  310.718185][ T5203] kaweth 2-1:0.0: Firmware present in device.
[  310.804716][ T5203] kaweth 2-1:0.0: Error reading configuration (-71), no net device created
[  310.865463][ T5203] kaweth 2-1:0.0: probe with driver kaweth failed with error -5
[  310.904598][ T5203] usb 2-1: USB disconnect, device number 20
[  311.395510][ T5158] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  311.519529][ T8152] loop4: detected capacity change from 0 to 256
[  313.123139][ T8152] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  313.430992][ T5158] usb 3-1: Using ep0 maxpacket: 8
[  313.450341][ T5158] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  313.472738][ T5158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.493731][ T5158] usb 3-1: config 0 descriptor??
[  313.727014][ T5158] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  313.745077][ T8158] netlink: 'syz.4.809': attribute type 1 has an invalid length.
[  313.769068][ T5158] asix 3-1:0.0: probe with driver asix failed with error -32
[  313.781737][ T8158] netlink: 'syz.4.809': attribute type 1 has an invalid length.
[  313.794350][ T8161] loop0: detected capacity change from 0 to 7
[  313.801009][ T8158] netlink: 9328 bytes leftover after parsing attributes in process `syz.4.809'.
[  313.841180][ T8158] netlink: 'syz.4.809': attribute type 1 has an invalid length.
[  313.952715][ T8161] Dev loop0: unable to read RDB block 7
[  313.958634][ T8161]  loop0: unable to read partition table
[  314.009812][ T8161] loop0: partition table beyond EOD, truncated
[  314.048900][ T8161] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  314.048900][ T8161] 
) failed (rc=-5)
[  314.310951][ T5203] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  314.490914][ T5203] usb 5-1: Using ep0 maxpacket: 16
[  314.499710][ T5203] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  314.567656][ T5203] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  314.641267][ T5203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.489046][ T1790] usb 3-1: USB disconnect, device number 27
[  315.542683][ T5203] usb 5-1: config 0 descriptor??
[  315.612375][ T8183] 9pnet_fd: Insufficient options for proto=fd
[  315.693897][ T8183] 9pnet_fd: Insufficient options for proto=fd
[  315.753413][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.791259][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.040618][ T8199] loop0: detected capacity change from 0 to 256
[  316.081551][ T8199] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  316.321448][ T1790] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  316.709400][ T1238] ieee802154 phy0 wpan0: encryption failed: -22
[  316.795054][ T5150] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  316.802910][ T5203] usbhid 5-1:0.0: can't add hid device: -71
[  316.810126][ T5203] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  316.823044][ T5203] usb 5-1: USB disconnect, device number 13
[  316.921067][ T1790] usb 3-1: Using ep0 maxpacket: 16
[  316.961537][ T1790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  316.993683][ T5150] usb 2-1: Using ep0 maxpacket: 16
[  316.997236][ T1790] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  317.002351][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  317.010484][ T1790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.053536][ T5150] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  317.055412][ T1790] usb 3-1: config 0 descriptor??
[  317.093897][ T5150] usb 2-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88
[  317.137659][ T5150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.156862][ T5150] usb 2-1: Product: syz
[  317.176225][ T5150] usb 2-1: Manufacturer: syz
[  317.208016][ T5150] usb 2-1: SerialNumber: syz
[  317.250712][ T5150] usb 2-1: config 0 descriptor??
[  317.313707][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.818'.
[  317.384051][ T8213] loop0: detected capacity change from 0 to 7
[  317.418715][ T8215] netlink: 'syz.5.826': attribute type 1 has an invalid length.
[  317.442142][ T8215] netlink: 'syz.5.826': attribute type 1 has an invalid length.
[  317.462829][ T8213] Dev loop0: unable to read RDB block 7
[  317.474620][ T8213]  loop0: unable to read partition table
[  317.496485][ T8215] netlink: 9328 bytes leftover after parsing attributes in process `syz.5.826'.
[  317.511359][ T8213] loop0: partition table beyond EOD, truncated
[  317.534399][ T8215] netlink: 'syz.5.826': attribute type 1 has an invalid length.
[  317.545953][ T8213] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  317.545953][ T8213] 
) failed (rc=-5)
[  317.573391][ T5150] kaweth 2-1:0.0: Firmware present in device.
[  317.619901][ T5150] kaweth 2-1:0.0: Error reading configuration (-71), no net device created
[  317.646022][ T5150] kaweth 2-1:0.0: probe with driver kaweth failed with error -5
[  317.703123][ T5150] usb 2-1: USB disconnect, device number 21
[  317.738076][ T8222] loop0: detected capacity change from 0 to 7
[  317.740465][ T8220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'.
[  317.754926][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.795852][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.801640][ T8222] Dev loop0: unable to read RDB block 7
[  317.818167][ T8222]  loop0: unable to read partition table
[  317.836667][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  317.839589][ T8222] loop0: partition table beyond EOD, truncated
[  317.865457][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  317.922576][ T8222] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  317.922576][ T8222] 
) failed (rc=-5)
[  318.166272][ T1790] hid-generic 0003:0158:0100.000D: unknown main item tag 0x1
[  318.191646][ T1790] hid-generic 0003:0158:0100.000D: unexpected long global item
[  318.201362][ T1790] hid-generic 0003:0158:0100.000D: probe with driver hid-generic failed with error -22
[  318.349695][ T1790] usb 3-1: USB disconnect, device number 28
[  318.440920][ T5158] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  318.661391][ T5158] usb 1-1: Using ep0 maxpacket: 8
[  318.680313][ T5158] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  318.700205][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.724696][ T5158] usb 1-1: config 0 descriptor??
[  318.971551][ T5158] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  318.995233][ T5158] asix 1-1:0.0: probe with driver asix failed with error -32
[  319.314604][ T5158] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  319.437883][ T8237] loop3: detected capacity change from 0 to 32768
[  319.488682][ T8237] XFS: attr2 mount option is deprecated.
[  319.518663][ T8237] XFS: ikeep mount option is deprecated.
[  319.531169][ T5158] usb 5-1: Using ep0 maxpacket: 16
[  319.546043][ T5158] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  319.579405][ T5158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  319.587811][ T8237] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  319.599998][ T5158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  319.611278][ T5158] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  319.872138][ T5150] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  320.126242][ T8237] XFS (loop3): Ending clean mount
[  320.241192][ T5150] usb 2-1: Using ep0 maxpacket: 16
[  320.264495][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  320.292753][ T8237] XFS (loop3): Quotacheck needed: Please wait.
[  320.316249][ T5150] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  320.356180][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.400401][ T8237] XFS (loop3): Quotacheck: Done.
[  320.463022][ T5150] usb 2-1: config 0 descriptor??
[  320.488213][ T5158] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  320.502793][ T5158] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  320.514346][ T5158] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  320.523699][ T5158] usb 5-1: Manufacturer: syz
[  320.524858][ T5087] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  320.532842][ T5158] usb 5-1: config 0 descriptor??
[  320.618854][ T8265] netlink: 'syz.5.840': attribute type 1 has an invalid length.
[  320.628599][ T8265] netlink: 'syz.5.840': attribute type 1 has an invalid length.
[  320.643548][ T8265] netlink: 9328 bytes leftover after parsing attributes in process `syz.5.840'.
[  320.661112][ T8265] netlink: 'syz.5.840': attribute type 1 has an invalid length.
[  320.719598][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.759388][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.797998][ T5150] usbhid 2-1:0.0: can't add hid device: -71
[  321.811157][ T5150] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  321.811220][ T5158] rc_core: IR keymap rc-hauppauge not found
[  321.836620][ T5150] usb 2-1: USB disconnect, device number 22
[  321.878539][ T5147] usb 1-1: USB disconnect, device number 17
[  321.902650][ T5158] Registered IR keymap rc-empty
[  321.928131][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  321.989756][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  322.028143][ T8284] loop0: detected capacity change from 0 to 7
[  322.052858][ T5158] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  322.084394][ T8284] Dev loop0: unable to read RDB block 7
[  322.094953][ T8284]  loop0: unable to read partition table
[  322.112752][ T5158] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22
[  322.129207][ T8284] loop0: partition table beyond EOD, truncated
[  322.152056][ T8284] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  322.152056][ T8284] 
) failed (rc=-5)
[  322.195436][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  322.247667][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'.
[  322.296690][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  322.362362][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  322.651094][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  323.371041][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  323.412323][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  323.571236][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  323.614521][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  323.651097][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  323.680968][ T5158] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  323.785130][ T5150] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  324.033011][ T5150] usb 4-1: Using ep0 maxpacket: 16
[  324.120572][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  324.278457][ T5150] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  324.447575][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.567364][ T5191] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  324.602869][ T5158] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  324.627483][ T5150] usb 4-1: config 0 descriptor??
[  324.640336][ T5158] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  324.674285][ T8315] netlink: 'syz.0.855': attribute type 1 has an invalid length.
[  324.691977][ T8315] netlink: 'syz.0.855': attribute type 1 has an invalid length.
[  324.700029][ T8315] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.855'.
[  324.702329][ T5158] usb 5-1: USB disconnect, device number 14
[  324.720206][ T8315] netlink: 'syz.0.855': attribute type 1 has an invalid length.
[  324.766018][ T5191] usb 2-1: Using ep0 maxpacket: 16
[  324.788320][ T5191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  324.830973][ T5191] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  324.848679][ T5191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.857129][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.3.849'.
[  324.944870][ T5191] usb 2-1: config 0 descriptor??
[  325.311746][ T5203] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  325.660386][ T8300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.693346][ T8297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.848'.
[  325.721386][ T8300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.760398][ T8300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.790266][ T8300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.844743][ T5150] hid-generic 0003:0158:0100.000E: unknown main item tag 0x1
[  325.871796][ T5150] hid-generic 0003:0158:0100.000E: unexpected long global item
[  325.921899][ T5150] hid-generic 0003:0158:0100.000E: probe with driver hid-generic failed with error -22
[  325.943504][ T5203] usb 1-1: Using ep0 maxpacket: 8
[  325.951381][ T5203] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  325.960909][ T5203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.002358][ T5203] usb 1-1: config 0 descriptor??
[  326.039771][ T1790] usb 4-1: USB disconnect, device number 18
[  326.127896][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.175500][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.198504][ T8316] loop4: detected capacity change from 0 to 32768
[  326.207301][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.223692][ T8316] XFS: attr2 mount option is deprecated.
[  326.225909][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.237610][ T8316] XFS: ikeep mount option is deprecated.
[  326.249452][ T8334] loop0: detected capacity change from 0 to 7
[  326.264192][ T8334] Dev loop0: unable to read RDB block 7
[  326.271170][ T8334]  loop0: unable to read partition table
[  326.271808][ T5191] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1
[  326.277314][ T8334] loop0: partition table beyond EOD, truncated
[  326.292979][ T5191] hid-generic 0003:0158:0100.000F: unexpected long global item
[  326.298149][ T8334] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  326.298149][ T8334] 
) failed (rc=-5)
[  326.318880][ T5191] hid-generic 0003:0158:0100.000F: probe with driver hid-generic failed with error -22
[  326.319979][ T5150] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  326.340953][ T8316] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.420410][ T5203] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  326.439377][ T5203] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  326.447704][ T8316] XFS (loop4): Ending clean mount
[  326.452029][ T5203] asix 1-1:0.0: probe with driver asix failed with error -61
[  326.469613][ T5152] usb 2-1: USB disconnect, device number 23
[  326.482931][ T8316] XFS (loop4): Quotacheck needed: Please wait.
[  326.521190][ T5150] usb 6-1: device descriptor read/64, error -71
[  326.554892][ T8316] XFS (loop4): Quotacheck: Done.
[  326.565546][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'.
[  326.608303][ T7567] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.791732][ T5150] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  326.961054][ T5150] usb 6-1: device descriptor read/64, error -71
[  327.180995][ T5150] usb usb6-port1: attempt power cycle
[  327.452478][ T8367] loop4: detected capacity change from 0 to 256
[  327.501198][ T5152] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  329.317037][ T8367] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  329.357652][ T5150] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  329.442489][ T5150] usb 6-1: device descriptor read/8, error -71
[  329.514051][ T5203] usb 1-1: USB disconnect, device number 18
[  329.570931][ T5152] usb 3-1: Using ep0 maxpacket: 16
[  329.609473][ T5152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  329.698627][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  329.739626][ T8373] netlink: 9412 bytes leftover after parsing attributes in process `syz.5.869'.
[  329.769731][ T5152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  329.814315][ T5152] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  329.846275][ T5152] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  329.887269][ T5152] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  329.897644][ T8379] loop0: detected capacity change from 0 to 7
[  329.909453][ T5152] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  329.928163][ T5152] usb 3-1: Manufacturer: syz
[  329.933026][ T8379] Dev loop0: unable to read RDB block 7
[  329.939102][ T8379]  loop0: unable to read partition table
[  329.954434][ T5152] usb 3-1: config 0 descriptor??
[  329.965776][ T8379] loop0: partition table beyond EOD, truncated
[  329.989698][ T8379] loop_reread_partitions: partition scan of loop0 (�被x������ڬ��dƤ����ݡ�����
[  329.989698][ T8379] 
) failed (rc=-5)
[  330.224807][ T8389] loop1: detected capacity change from 0 to 1024
[  330.254084][ T8389] EXT4-fs: Ignoring removed nomblk_io_submit option
[  330.290997][ T5152] rc_core: IR keymap rc-hauppauge not found
[  330.296963][ T5152] Registered IR keymap rc-empty
[  330.309232][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  330.339556][ T8389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.391357][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  330.473987][ T5152] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  330.553225][ T5152] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23
[  330.601163][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  330.642668][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  330.657197][ T5086] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.712044][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  330.771122][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  330.790932][ T5150] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  330.816446][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  330.841649][ T5150] usb 6-1: Using ep0 maxpacket: 16
[  330.849117][ T5150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  330.871549][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  330.887623][ T5150] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  330.901096][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  330.920927][ T5150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.942282][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  330.950470][ T5150] usb 6-1: config 0 descriptor??
[  330.981085][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  331.010987][ T5152] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  331.064464][ T5152] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  331.080851][ T5152] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  331.121081][ T5152] usb 3-1: USB disconnect, device number 29
[  331.173300][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz.5.876'.
[  331.223717][ T5153] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  331.235473][ T8386] loop0: detected capacity change from 0 to 32768
[  331.252986][ T8386] XFS: attr2 mount option is deprecated.
[  331.258680][ T8386] XFS: ikeep mount option is deprecated.
[  331.342739][ T8386] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  331.403419][ T5153] usb 2-1: device descriptor read/64, error -71
[  331.519491][ T5152] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  331.546202][ T8386] XFS (loop0): Ending clean mount
[  331.569787][ T8386] XFS (loop0): Quotacheck needed: Please wait.
[  331.591039][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.620552][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.645262][ T8391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.650504][ T8386] XFS (loop0): Quotacheck: Done.
[  331.674631][ T5153] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  331.683230][ T8391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.723307][ T5152] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  331.740984][ T5152] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  331.758527][ T5150] hid-generic 0003:0158:0100.0010: unknown main item tag 0x1
[  331.766691][ T5152] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  331.778641][ T5150] hid-generic 0003:0158:0100.0010: unexpected long global item
[  331.787303][ T5152] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  331.798672][ T5150] hid-generic 0003:0158:0100.0010: probe with driver hid-generic failed with error -22
[  331.808111][ T7506] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  331.829006][ T5152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.861084][ T5153] usb 2-1: device descriptor read/64, error -71
[  331.956703][ T5158] usb 6-1: USB disconnect, device number 34
[  332.002708][ T5153] usb usb2-port1: attempt power cycle
[  332.054452][ T5152] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12
[  332.159695][ T5152] usb 3-1: USB disconnect, device number 30
[  332.426145][ T8426] fuse: Bad value for 'fd'
[  332.951183][ T5191] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  333.166338][ T5191] usb 1-1: Using ep0 maxpacket: 8
[  333.199676][ T5191] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  333.319786][ T5153] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  333.341374][ T5191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.353941][ T5191] usb 1-1: config 0 descriptor??
[  333.513652][ T8434] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.885'.
[  333.776505][ T5191] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  333.802332][ T5153] usb 2-1: device descriptor read/8, error -71
[  333.843989][ T5191] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  333.921392][ T5191] asix 1-1:0.0: probe with driver asix failed with error -61
[  335.467978][ T5155] usb 1-1: USB disconnect, device number 19
[  335.686518][ T8479] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.900'.
[  335.734220][ T5150] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  335.961150][ T5150] usb 5-1: Using ep0 maxpacket: 16
[  335.982546][ T5150] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  336.018769][ T5150] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  336.048906][ T5150] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  336.072984][ T5150] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  336.094346][ T5150] usb 5-1: language id specifier not provided by device, defaulting to English
[  336.126935][ T5150] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  336.138955][ T5153] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  336.161634][ T5150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.190512][ T5150] usb 5-1: Product:  
[  336.210983][ T5150] usb 5-1: Manufacturer: 㪅渦ᾙ䉔鯕␎뷷텝휢꿍瞧➽賕愀戧杈ꋥꖭ≜ꕳ錌㮘ꂖ究騩܆㡠뾬坅隫䟿ᑉ㛊轘哖迨躢ꯒ틅
[  336.252768][ T5150] usb 5-1: SerialNumber: 、
[  336.511922][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.514721][ T5153] usb 2-1: device descriptor read/64, error -71
[  336.554913][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.049202][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.058658][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.881016][ T5153] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  338.040938][ T5153] usb 2-1: device descriptor read/64, error -71
[  338.181734][ T5153] usb usb2-port1: attempt power cycle
[  338.362425][ T8513] loop2: detected capacity change from 0 to 256
[  338.407911][ T8513] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  338.631153][ T5153] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  338.722128][ T5153] usb 2-1: device descriptor read/8, error -71
[  339.068035][ T5150] usb 5-1: 0:2 : does not exist
[  339.431439][ T5153] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  339.444218][ T5150] usb 5-1: USB disconnect, device number 15
[  339.691720][ T5153] usb 2-1: device not accepting address 31, error -71
[  339.755867][ T5153] usb usb2-port1: unable to enumerate USB device
[  340.921178][ T5191] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  341.440072][ T5150] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  341.611627][ T8539] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.915'.
[  341.672896][ T5150] usb 6-1: Using ep0 maxpacket: 8
[  341.681469][ T8540] 9pnet_fd: Insufficient options for proto=fd
[  341.697640][ T5150] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  341.700956][ T5191] usb 5-1: Using ep0 maxpacket: 16
[  341.721878][ T5150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.743514][ T8540] 9pnet_fd: Insufficient options for proto=fd
[  341.759893][ T5150] usb 6-1: config 0 descriptor??
[  341.765142][ T5191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  341.796882][ T5191] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  341.820926][ T5191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.854755][ T5191] usb 5-1: config 0 descriptor??
[  342.135907][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.913'.
[  342.163426][ T5149] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  342.229608][ T5150] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  342.259101][ T5150] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[  342.288341][ T5150] asix 6-1:0.0: probe with driver asix failed with error -61
[  342.401366][ T5149] usb 1-1: Using ep0 maxpacket: 16
[  342.416109][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  342.437311][ T5149] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  342.470214][ T5149] usb 1-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88
[  342.480273][ T5149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.489360][ T5149] usb 1-1: Product: syz
[  342.519466][ T5149] usb 1-1: Manufacturer: syz
[  342.538697][ T5149] usb 1-1: SerialNumber: syz
[  342.572349][ T5149] usb 1-1: config 0 descriptor??
[  342.830733][ T8531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.851874][ T8531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.880531][ T5191] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1
[  342.897859][ T5191] hid-generic 0003:0158:0100.0011: unexpected long global item
[  342.911943][ T5191] hid-generic 0003:0158:0100.0011: probe with driver hid-generic failed with error -22
[  343.086455][ T5155] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  343.093394][ T5150] usb 5-1: USB disconnect, device number 16
[  343.271127][ T5155] usb 4-1: Using ep0 maxpacket: 16
[  343.294246][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  343.304906][ T5155] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  343.329239][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.351997][ T5155] usb 4-1: config 0 descriptor??
[  343.361991][ T5155] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  343.673769][ T5155] usb 6-1: USB disconnect, device number 35
[  344.504957][ T5149] kaweth 1-1:0.0: Firmware present in device.
[  344.514370][ T5149] kaweth 1-1:0.0: Error reading configuration (-71), no net device created
[  344.523400][ T5149] kaweth 1-1:0.0: probe with driver kaweth failed with error -5
[  344.535421][ T5149] usb 1-1: USB disconnect, device number 20
[  344.535486][ T8582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.558948][ T8582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.634981][ T8586] netlink: 9412 bytes leftover after parsing attributes in process `syz.5.929'.
[  345.474202][ T8604] loop2: detected capacity change from 0 to 256
[  345.518872][   T29] audit: type=1326 audit(1719559102.848:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.4.933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07d9775b29 code=0x0
[  345.575707][ T8604] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  345.862425][ T8591] loop5: detected capacity change from 0 to 32768
[  345.876553][ T1790] usb 4-1: USB disconnect, device number 19
[  346.094473][ T8610] syz.5.932: attempt to access beyond end of device
[  346.094473][ T8610] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  346.136099][ T8610] lbmIODone: I/O error in JFS log
[  346.165304][ T8610] *** Log Format Error ! ***
[  346.184535][ T8610] lmLogInit: exit(-22)
[  346.188823][ T8610] lmLogOpen: exit(-22)
[  346.742325][ T5149] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  346.971866][ T5149] usb 1-1: Using ep0 maxpacket: 8
[  348.122239][ T5149] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  348.132089][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.148418][ T5149] usb 1-1: config 0 descriptor??
[  348.489454][ T8627] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.944'.
[  348.608149][ T5149] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  348.643210][ T5149] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  348.697482][ T5149] asix 1-1:0.0: probe with driver asix failed with error -32
[  350.462280][ T1790] usb 1-1: USB disconnect, device number 21
[  351.200093][ T8661] loop4: detected capacity change from 0 to 256
[  351.401060][ T8661] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  351.751814][ T8663] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.952'.
[  352.121146][ T5150] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  352.500699][   T29] audit: type=1326 audit(1719559109.828:221): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=8670 comm="syz.5.956" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23b4375b29 code=0x0
[  353.210893][ T5150] usb 2-1: Using ep0 maxpacket: 16
[  353.226332][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  353.241506][ T5150] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  353.252322][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.263133][ T5150] usb 2-1: config 0 descriptor??
[  353.271944][ T8680] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.957'.
[  353.272053][ T5150] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  354.475723][ T5158] usb 2-1: USB disconnect, device number 32
[  354.991161][ T1790] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  355.053575][   T29] audit: type=1326 audit(1719559112.248:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4375b29 code=0x7ffc0000
[  355.326975][ T1790] usb 3-1: Using ep0 maxpacket: 16
[  355.473265][ T1790] usb 3-1: unable to get BOS descriptor or descriptor too short
[  355.528646][   T29] audit: type=1326 audit(1719559112.248:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4375b29 code=0x7ffc0000
[  355.551134][ T1790] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  355.559834][ T1790] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  355.674322][   T29] audit: type=1326 audit(1719559112.258:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f23b4375b29 code=0x7ffc0000
[  355.703582][ T1790] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.709807][   T29] audit: type=1326 audit(1719559112.258:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4375b29 code=0x7ffc0000
[  355.737297][ T1790] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  355.757437][ T1790] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  355.789845][ T1790] usb 3-1: string descriptor 0 read error: -22
[  355.796419][ T1790] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  355.810598][ T1790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.822655][ T8697] loop1: detected capacity change from 0 to 8192
[  355.872261][   T29] audit: type=1326 audit(1719559112.258:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4375b29 code=0x7ffc0000
[  355.880057][ T1790] usb 3-1: 0:2 : does not exist
[  355.895642][   T29] audit: type=1326 audit(1719559112.258:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23b4375b29 code=0x7ffc0000
[  355.933245][   T29] audit: type=1326 audit(1719559112.258:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4375b29 code=0x7ffc0000
[  355.943758][ T8697] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  355.990649][ T1790] usb 3-1: unit 0 not found!
[  356.003611][ T8697] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  356.061103][   T29] audit: type=1326 audit(1719559112.258:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23b4375b29 code=0x7ffc0000
[  356.084479][ T8697] REISERFS (device loop1): using ordered data mode
[  356.151319][ T5149] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  461.150756][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  461.150783][    C0] rcu: 	1-...!: (1 GPs behind) idle=47cc/1/0x4000000000000000 softirq=23296/23297 fqs=1
[  461.151755][    C0] rcu: 	(detected by 0, t=10506 jiffies, g=33197, q=146 ncpus=2)
[  461.151782][    C0] Sending NMI from CPU 0 to CPUs 1:
[  461.151816][    C1] NMI backtrace for cpu 1
[  461.151828][    C1] CPU: 1 PID: 8697 Comm: syz.1.963 Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0
[  461.151851][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  461.151863][    C1] RIP: 0010:advance_sched+0x42c/0xca0
[  461.151903][    C1] Code: 88 6c f8 48 8b 04 24 48 8b 98 28 01 00 00 48 8d a8 30 01 00 00 48 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 ef e8 ea 87 6c f8 48 03 5d 00 49 89 1e eb 05 e8 7c d2
[  461.151922][    C1] RSP: 0018:ffffc90000a18c90 EFLAGS: 00000046
[  461.151942][    C1] RAX: 1ffff1100225e826 RBX: 17e23d68ac000000 RCX: dffffc0000000000
[  461.151960][    C1] RDX: 0000000080010002 RSI: 0000000000000000 RDI: 17e23d68ac000000
[  461.151976][    C1] RBP: ffff8880112f4130 R08: ffffffff898f5620 R09: fffff52000143180
[  461.151992][    C1] R10: dffffc0000000000 R11: fffff52000143180 R12: 0000000000000001
[  461.152007][    C1] R13: 17e23d68ac000000 R14: ffff8880112f4128 R15: ffff888063a2d340
[  461.152028][    C1] FS:  00007f203a9be6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  461.152048][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  461.152063][    C1] CR2: 0000001b31a10ff8 CR3: 00000000734ba000 CR4: 0000000000350ef0
[  461.152085][    C1] Call Trace:
[  461.152093][    C1]  <NMI>
[  461.152103][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  461.152128][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  461.152156][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  461.152179][    C1]  ? nmi_handle+0x2a/0x5a0
[  461.152226][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  461.152252][    C1]  ? nmi_handle+0x151/0x5a0
[  461.152286][    C1]  ? nmi_handle+0x2a/0x5a0
[  461.152321][    C1]  ? advance_sched+0x42c/0xca0
[  461.152354][    C1]  ? default_do_nmi+0x63/0x160
[  461.152379][    C1]  ? exc_nmi+0x123/0x1f0
[  461.152403][    C1]  ? end_repeat_nmi+0xf/0x53
[  461.152442][    C1]  ? advance_sched+0x2a0/0xca0
[  461.152477][    C1]  ? advance_sched+0x42c/0xca0
[  461.152511][    C1]  ? advance_sched+0x42c/0xca0
[  461.152546][    C1]  ? advance_sched+0x42c/0xca0
[  461.152580][    C1]  </NMI>
[  461.152587][    C1]  <IRQ>
[  461.152597][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  461.152620][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  461.152649][    C1]  ? __pfx_advance_sched+0x10/0x10
[  461.152682][    C1]  __hrtimer_run_queues+0x59d/0xd50
[  461.152715][    C1]  ? ktime_get_update_offsets_now+0x3c/0x250
[  461.152753][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  461.152786][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.152808][    C1]  ? ktime_get_update_offsets_now+0x22d/0x250
[  461.152839][    C1]  hrtimer_interrupt+0x396/0x990
[  461.152889][    C1]  __sysvec_apic_timer_interrupt+0x112/0x3f0
[  461.152926][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  461.152956][    C1]  </IRQ>
[  461.152963][    C1]  <TASK>
[  461.152971][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  461.153012][    C1] RIP: 0010:console_flush_all+0xaad/0xfd0
[  461.153048][    C1] Code: ff ff e8 76 d1 1f 00 90 0f 0b 90 e9 d8 f8 ff ff e8 68 d1 1f 00 e8 d3 9d 0f 0a 4d 85 f6 74 b6 e8 59 d1 1f 00 fb 48 8b 44 24 70 <42> 0f b6 04 38 84 c0 48 8b 7c 24 30 0f 85 22 02 00 00 0f b6 1f 31
[  461.153065][    C1] RSP: 0018:ffffc9001478f3c0 EFLAGS: 00000246
[  461.153090][    C1] RAX: 1ffff920028f1ec4 RBX: 0000000000000000 RCX: 0000000000040000
[  461.153105][    C1] RDX: ffffc900096b9000 RSI: 000000000003ffff RDI: 0000000000040000
[  461.153120][    C1] RBP: ffffc9001478f570 R08: ffffffff81765884 R09: 1ffffffff25f50b0
[  461.153136][    C1] R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: ffffffff8eb22278
[  461.153153][    C1] R13: ffffffff8eb22220 R14: 0000000000000200 R15: dffffc0000000000
[  461.153174][    C1]  ? console_flush_all+0xa44/0xfd0
[  461.153217][    C1]  ? console_flush_all+0x152/0xfd0
[  461.153258][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  461.153292][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  461.153318][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.153339][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  461.153362][    C1]  ? __lock_acquire+0x1346/0x1fd0
[  461.153390][    C1]  console_unlock+0x13b/0x4d0
[  461.153424][    C1]  ? __pfx_console_unlock+0x10/0x10
[  461.153452][    C1]  ? _printk+0xd5/0x120
[  461.153480][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.153502][    C1]  ? _printk+0xd5/0x120
[  461.153531][    C1]  ? __pfx___down_trylock_console_sem+0x10/0x10
[  461.153574][    C1]  vprintk_emit+0x5a6/0x770
[  461.153605][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  461.153636][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.153657][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  461.153699][    C1]  _printk+0xd5/0x120
[  461.153733][    C1]  ? __pfx__printk+0x10/0x10
[  461.153772][    C1]  reiserfs_info+0x113/0x160
[  461.153797][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  461.153822][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.153845][    C1]  ? reiserfs_fill_super+0xf80/0x2620
[  461.153880][    C1]  ? __pfx_reiserfs_info+0x10/0x10
[  461.153901][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.153926][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.153949][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.153971][    C1]  ? reiserfs_init_bitmap_cache+0xf1/0x180
[  461.153995][    C1]  reiserfs_fill_super+0xf90/0x2620
[  461.154043][    C1]  ? __pfx_reiserfs_fill_super+0x10/0x10
[  461.154084][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  461.154120][    C1]  ? __pfx_snprintf+0x10/0x10
[  461.154143][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.154165][    C1]  ? set_blocksize+0x229/0x390
[  461.154197][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.154218][    C1]  ? sb_set_blocksize+0x98/0xf0
[  461.154248][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.154269][    C1]  ? setup_bdev_super+0x4ad/0x570
[  461.154300][    C1]  mount_bdev+0x20c/0x2d0
[  461.154327][    C1]  ? __pfx_reiserfs_fill_super+0x10/0x10
[  461.154362][    C1]  ? __pfx_mount_bdev+0x10/0x10
[  461.154388][    C1]  ? vfs_parse_fs_string+0x190/0x230
[  461.154422][    C1]  legacy_get_tree+0xf0/0x190
[  461.154449][    C1]  ? __pfx_get_super_block+0x10/0x10
[  461.154484][    C1]  vfs_get_tree+0x92/0x2a0
[  461.154514][    C1]  do_new_mount+0x2be/0xb40
[  461.154542][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.154568][    C1]  ? __pfx_do_new_mount+0x10/0x10
[  461.154598][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.154624][    C1]  __se_sys_mount+0x2d9/0x3c0
[  461.154657][    C1]  ? __pfx___se_sys_mount+0x10/0x10
[  461.154686][    C1]  ? do_syscall_64+0x100/0x230
[  461.154720][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.154742][    C1]  ? __x64_sys_mount+0x20/0xc0
[  461.154772][    C1]  do_syscall_64+0xf3/0x230
[  461.154804][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.154830][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.154863][    C1] RIP: 0033:0x7f2039b7722a
[  461.154882][    C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  461.154900][    C1] RSP: 002b:00007f203a9bde78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  461.154921][    C1] RAX: ffffffffffffffda RBX: 00007f203a9bdf00 RCX: 00007f2039b7722a
[  461.154938][    C1] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 00007f203a9bdec0
[  461.154954][    C1] RBP: 0000000020000540 R08: 00007f203a9bdf00 R09: 0000000000000010
[  461.154969][    C1] R10: 0000000000000010 R11: 0000000000000206 R12: 0000000020000140
[  461.154983][    C1] R13: 00007f203a9bdec0 R14: 0000000000001119 R15: 00000000200001c0
[  461.155011][    C1]  </TASK>
[  461.155808][    C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g33197 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  461.155843][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  461.155857][    C0] rcu: RCU grace-period kthread stack dump:
[  461.155868][    C0] task:rcu_preempt     state:R  running task     stack:25168 pid:17    tgid:17    ppid:2      flags:0x00004000
[  461.155915][    C0] Call Trace:
[  461.155926][    C0]  <TASK>
[  461.155941][    C0]  __schedule+0x17e8/0x4a20
[  461.155987][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.156019][    C0]  ? __pfx___schedule+0x10/0x10
[  461.156050][    C0]  ? __pfx_lock_release+0x10/0x10
[  461.156076][    C0]  ? __asan_memset+0x23/0x50
[  461.156110][    C0]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  461.156139][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  461.156171][    C0]  ? schedule+0x90/0x320
[  461.156197][    C0]  schedule+0x14b/0x320
[  461.156227][    C0]  schedule_timeout+0x1be/0x310
[  461.156266][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  461.156306][    C0]  ? __pfx_process_timeout+0x10/0x10
[  461.156343][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.156369][    C0]  ? prepare_to_swait_event+0x32e/0x350
[  461.156404][    C0]  rcu_gp_fqs_loop+0x2df/0x1330
[  461.156447][    C0]  ? __pfx_dyntick_save_progress_counter+0x10/0x10
[  461.156478][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  461.156503][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  461.156537][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.156563][    C0]  ? finish_swait+0xd4/0x1e0
[  461.156593][    C0]  rcu_gp_kthread+0xa7/0x3b0
[  461.156623][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  461.156648][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  461.156679][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.156705][    C0]  ? __kthread_parkme+0x169/0x1d0
[  461.156740][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  461.156767][    C0]  kthread+0x2f2/0x390
[  461.156799][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  461.156830][    C0]  ? __pfx_kthread+0x10/0x10
[  461.156864][    C0]  ret_from_fork+0x4d/0x80
[  461.156899][    C0]  ? __pfx_kthread+0x10/0x10
[  461.156931][    C0]  ret_from_fork_asm+0x1a/0x30
[  461.156986][    C0]  </TASK>
[  461.156996][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  461.157007][    C0] CPU: 0 PID: 1054 Comm: kworker/u8:7 Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0
[  461.157033][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  461.157050][    C0] Workqueue: events_unbound toggle_allocation_gate
[  461.157084][    C0] RIP: 0010:srso_alias_safe_ret+0x0/0x7
[  461.157111][    C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc
[  461.157132][    C0] RSP: 0018:ffffc900041376f0 EFLAGS: 00000293
[  461.157155][    C0] RAX: ffffffff818a21e8 RBX: 1ffff110172a8899 RCX: ffff888021f19e00
[  461.157175][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  461.157192][    C0] RBP: ffffc900041378e0 R08: ffffffff818a21b7 R09: 1ffffffff25f50b0
[  461.157212][    C0] R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: dffffc0000000000
[  461.157233][    C0] R13: ffff8880b95444c8 R14: ffff8880b943f8c0 R15: 0000000000000001
[  461.157255][    C0] FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  461.157277][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  461.157296][    C0] CR2: 00000000206c0000 CR3: 000000000e132000 CR4: 0000000000350ef0
[  461.157317][    C0] Call Trace:
[  461.157327][    C0]  <IRQ>
[  461.157337][    C0]  ? rcu_check_gp_kthread_starvation+0x278/0x310
[  461.157373][    C0]  ? print_other_cpu_stall+0x1470/0x15a0
[  461.157397][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.157422][    C0]  ? __lock_acquire+0x1346/0x1fd0
[  461.157466][    C0]  ? __pfx_print_other_cpu_stall+0x10/0x10
[  461.157505][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.157532][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.157557][    C0]  ? kvm_check_and_clear_guest_paused+0x6a/0xd0
[  461.157591][    C0]  ? rcu_sched_clock_irq+0x9f4/0x10a0
[  461.157622][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.157657][    C0]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[  461.157690][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.157715][    C0]  ? hrtimer_run_queues+0x16c/0x460
[  461.157751][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.157777][    C0]  ? acct_account_cputime+0x207/0x210
[  461.157810][    C0]  ? update_process_times+0x1ce/0x230
[  461.157848][    C0]  ? tick_nohz_handler+0x37c/0x500
[  461.157892][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[  461.157933][    C0]  ? __hrtimer_run_queues+0x553/0xd50
[  461.157988][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  461.158037][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  461.158074][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.158099][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  461.158137][    C0]  ? hrtimer_interrupt+0x396/0x990
[  461.158199][    C0]  ? __sysvec_apic_timer_interrupt+0x112/0x3f0
[  461.158240][    C0]  ? sysvec_apic_timer_interrupt+0xa1/0xc0
[  461.158275][    C0]  </IRQ>
[  461.158285][    C0]  <TASK>
[  461.158296][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  461.158342][    C0]  ? smp_call_function_many_cond+0x1847/0x29d0
[  461.158379][    C0]  ? smp_call_function_many_cond+0x1878/0x29d0
[  461.158417][    C0]  ? __entry_text_end+0x1020c9/0x1020c9
[  461.158446][    C0]  srso_alias_return_thunk+0x5/0xfbef5
[  461.158472][    C0]  smp_call_function_many_cond+0x1878/0x29d0
[  461.158512][    C0]  ? kmem_cache_alloc_bulk_noprof+0x146/0x770
[  461.158544][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  461.158573][    C0]  ? kmem_cache_alloc_bulk_noprof+0x146/0x770
[  461.158611][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.158643][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  461.158681][    C0]  ? __pfx___might_resched+0x10/0x10
[  461.158711][    C0]  ? __mutex_trylock_common+0x183/0x2e0
[  461.158746][    C0]  ? __pfx___might_resched+0x10/0x10
[  461.158783][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  461.158814][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  461.158861][    C0]  text_poke_bp_batch+0x352/0xb30
[  461.158891][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.158930][    C0]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  461.158960][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  461.158989][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.159020][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.159045][    C0]  ? arch_jump_label_transform_queue+0x9b/0x100
[  461.159080][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  461.159113][    C0]  text_poke_finish+0x30/0x50
[  461.159141][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  461.159173][    C0]  static_key_enable_cpuslocked+0x136/0x260
[  461.159217][    C0]  static_key_enable+0x1a/0x20
[  461.159254][    C0]  toggle_allocation_gate+0xb5/0x250
[  461.159289][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  461.159323][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  461.159366][    C0]  ? process_scheduled_works+0x945/0x1830
[  461.159392][    C0]  process_scheduled_works+0xa2e/0x1830
[  461.159451][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  461.159489][    C0]  ? assign_work+0x364/0x3d0
[  461.159522][    C0]  worker_thread+0x86d/0xd50
[  461.159559][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  461.159591][    C0]  ? __kthread_parkme+0x169/0x1d0
[  461.159625][    C0]  ? __pfx_worker_thread+0x10/0x10
[  461.159653][    C0]  kthread+0x2f2/0x390
[  461.159685][    C0]  ? __pfx_worker_thread+0x10/0x10
[  461.159713][    C0]  ? __pfx_kthread+0x10/0x10
[  461.159746][    C0]  ret_from_fork+0x4d/0x80
[  461.159779][    C0]  ? __pfx_kthread+0x10/0x10
[  461.159811][    C0]  ret_from_fork_asm+0x1a/0x30
[  461.159870][    C0]  </TASK>
[  595.967344][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 226s! [kworker/u8:7:1054]
[  595.967378][    C0] Modules linked in:
[  595.967396][    C0] irq event stamp: 10387152
[  595.967407][    C0] hardirqs last  enabled at (10387151): [<ffffffff8b860663>] irqentry_exit+0x63/0x90
[  595.967454][    C0] hardirqs last disabled at (10387152): [<ffffffff8b85e22e>] sysvec_apic_timer_interrupt+0xe/0xc0
[  595.967494][    C0] softirqs last  enabled at (10386906): [<ffffffff815a0c04>] __irq_exit_rcu+0xf4/0x1c0
[  595.967527][    C0] softirqs last disabled at (10386855): [<ffffffff815a0c04>] __irq_exit_rcu+0xf4/0x1c0
[  595.967559][    C0] CPU: 0 PID: 1054 Comm: kworker/u8:7 Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0
[  595.967586][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  595.967604][    C0] Workqueue: events_unbound toggle_allocation_gate
[  595.967639][    C0] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0
[  595.967678][    C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 c9 0c 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 74 08 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 58 08
[  595.967700][    C0] RSP: 0018:ffffc90004137700 EFLAGS: 00000293
[  595.967723][    C0] RAX: ffffffff818a21e8 RBX: 1ffff110172a8899 RCX: ffff888021f19e00
[  595.967744][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  595.967761][    C0] RBP: ffffc900041378e0 R08: ffffffff818a21b7 R09: 1ffffffff25f50b0
[  595.967782][    C0] R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: dffffc0000000000
[  595.967802][    C0] R13: ffff8880b95444c8 R14: ffff8880b943f8c0 R15: 0000000000000001
[  595.967825][    C0] FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  595.967847][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  595.967866][    C0] CR2: 00000000206c0000 CR3: 000000000e132000 CR4: 0000000000350ef0
[  595.967888][    C0] Call Trace:
[  595.967900][    C0]  <IRQ>
[  595.967912][    C0]  ? watchdog_timer_fn+0x75b/0x960
[  595.967954][    C0]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  595.967989][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.968015][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  595.968043][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  595.968079][    C0]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  595.968113][    C0]  ? __hrtimer_run_queues+0x553/0xd50
[  595.968150][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  595.968198][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  595.968236][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.968261][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  595.968298][    C0]  ? hrtimer_interrupt+0x396/0x990
[  595.968361][    C0]  ? __sysvec_apic_timer_interrupt+0x112/0x3f0
[  595.968404][    C0]  ? sysvec_apic_timer_interrupt+0xa1/0xc0
[  595.968437][    C0]  </IRQ>
[  595.968447][    C0]  <TASK>
[  595.968458][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  595.968504][    C0]  ? smp_call_function_many_cond+0x1847/0x29d0
[  595.968539][    C0]  ? smp_call_function_many_cond+0x1878/0x29d0
[  595.968578][    C0]  ? smp_call_function_many_cond+0x1860/0x29d0
[  595.968621][    C0]  ? kmem_cache_alloc_bulk_noprof+0x146/0x770
[  595.968652][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  595.968681][    C0]  ? kmem_cache_alloc_bulk_noprof+0x146/0x770
[  595.968718][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.968750][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  595.968787][    C0]  ? __pfx___might_resched+0x10/0x10
[  595.968818][    C0]  ? __mutex_trylock_common+0x183/0x2e0
[  595.968853][    C0]  ? __pfx___might_resched+0x10/0x10
[  595.968889][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  595.968919][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  595.968963][    C0]  text_poke_bp_batch+0x352/0xb30
[  595.968993][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.969031][    C0]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  595.969064][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  595.969094][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.969125][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.969150][    C0]  ? arch_jump_label_transform_queue+0x9b/0x100
[  595.969185][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.969218][    C0]  text_poke_finish+0x30/0x50
[  595.969246][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  595.969278][    C0]  static_key_enable_cpuslocked+0x136/0x260
[  595.969322][    C0]  static_key_enable+0x1a/0x20
[  595.969360][    C0]  toggle_allocation_gate+0xb5/0x250
[  595.969395][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  595.969429][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  595.969472][    C0]  ? process_scheduled_works+0x945/0x1830
[  595.969498][    C0]  process_scheduled_works+0xa2e/0x1830
[  595.969557][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  595.969595][    C0]  ? assign_work+0x364/0x3d0
[  595.969628][    C0]  worker_thread+0x86d/0xd50
[  595.969666][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  595.969697][    C0]  ? __kthread_parkme+0x169/0x1d0
[  595.969731][    C0]  ? __pfx_worker_thread+0x10/0x10
[  595.969759][    C0]  kthread+0x2f2/0x390
[  595.969792][    C0]  ? __pfx_worker_thread+0x10/0x10
[  595.969819][    C0]  ? __pfx_kthread+0x10/0x10
[  595.969852][    C0]  ret_from_fork+0x4d/0x80
[  595.969886][    C0]  ? __pfx_kthread+0x10/0x10
[  595.969919][    C0]  ret_from_fork_asm+0x1a/0x30
[  595.969977][    C0]  </TASK>
[  595.969988][    C0] Sending NMI from CPU 0 to CPUs 1:
[  595.970021][    C1] NMI backtrace for cpu 1
[  595.970031][    C1] CPU: 1 PID: 8697 Comm: syz.1.963 Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0
[  595.970053][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  595.970065][    C1] RIP: 0010:do_raw_spin_unlock+0x45/0x8b0
[  595.970101][    C1] Code: 00 fc ff df 48 8d 57 04 48 89 d0 48 c1 e8 03 48 89 44 24 10 0f b6 04 18 84 c0 48 89 14 24 0f 85 34 04 00 00 81 3a ad 4e ad de <0f> 85 05 01 00 00 4c 89 ff be 04 00 00 00 e8 a8 11 88 00 4c 89 f8
[  595.970119][    C1] RSP: 0018:ffffc90000a18c60 EFLAGS: 00000046
[  595.970137][    C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc90000a18c03
[  595.970153][    C1] RDX: ffff8880b952c884 RSI: ffffffff8bcaccc0 RDI: ffff8880b952c880
[  595.970170][    C1] RBP: ffffc90000a18d50 R08: ffffffff8fad506f R09: 1ffffffff1f5aa0d
[  595.970190][    C1] R10: dffffc0000000000 R11: fffffbfff1f5aa0e R12: dffffc0000000000
[  595.970207][    C1] R13: 1ffff92000143198 R14: ffffc90000a18ce0 R15: ffff8880b952c880
[  595.970227][    C1] FS:  00007f203a9be6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  595.970247][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  595.970262][    C1] CR2: 0000001b31a10ff8 CR3: 00000000734ba000 CR4: 0000000000350ef0
[  595.970279][    C1] Call Trace:
[  595.970287][    C1]  <NMI>
[  595.970295][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  595.970320][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  595.970345][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  595.970369][    C1]  ? nmi_handle+0x2a/0x5a0
[  595.970415][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  595.970441][    C1]  ? nmi_handle+0x151/0x5a0
[  595.970475][    C1]  ? nmi_handle+0x2a/0x5a0
[  595.970510][    C1]  ? do_raw_spin_unlock+0x45/0x8b0
[  595.970542][    C1]  ? advance_sched+0x42c/0xca0
[  595.970576][    C1]  ? default_do_nmi+0x63/0x160
[  595.970601][    C1]  ? exc_nmi+0x123/0x1f0
[  595.970625][    C1]  ? end_repeat_nmi+0xf/0x53
[  595.970667][    C1]  ? do_raw_spin_unlock+0x45/0x8b0
[  595.970701][    C1]  ? do_raw_spin_unlock+0x45/0x8b0
[  595.970736][    C1]  ? do_raw_spin_unlock+0x45/0x8b0
[  595.970770][    C1]  </NMI>
[  595.970777][    C1]  <IRQ>
[  595.970791][    C1]  _raw_spin_unlock_irqrestore+0x81/0x140
[  595.970814][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  595.970841][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.970863][    C1]  ? timerqueue_del+0xac/0x100
[  595.970884][    C1]  ? __pfx_advance_sched+0x10/0x10
[  595.970917][    C1]  __hrtimer_run_queues+0x477/0xd50
[  595.970951][    C1]  ? ktime_get_update_offsets_now+0x3c/0x250
[  595.970989][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  595.971022][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.971044][    C1]  ? ktime_get_update_offsets_now+0x22d/0x250
[  595.971074][    C1]  hrtimer_interrupt+0x396/0x990
[  595.971124][    C1]  __sysvec_apic_timer_interrupt+0x112/0x3f0
[  595.971194][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  595.971225][    C1]  </IRQ>
[  595.971232][    C1]  <TASK>
[  595.971241][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  595.971275][    C1] RIP: 0010:console_flush_all+0xaad/0xfd0
[  595.971308][    C1] Code: ff ff e8 76 d1 1f 00 90 0f 0b 90 e9 d8 f8 ff ff e8 68 d1 1f 00 e8 d3 9d 0f 0a 4d 85 f6 74 b6 e8 59 d1 1f 00 fb 48 8b 44 24 70 <42> 0f b6 04 38 84 c0 48 8b 7c 24 30 0f 85 22 02 00 00 0f b6 1f 31
[  595.971326][    C1] RSP: 0018:ffffc9001478f3c0 EFLAGS: 00000246
[  595.971345][    C1] RAX: 1ffff920028f1ec4 RBX: 0000000000000000 RCX: 0000000000040000
[  595.971361][    C1] RDX: ffffc900096b9000 RSI: 000000000003ffff RDI: 0000000000040000
[  595.971398][    C1] RBP: ffffc9001478f570 R08: ffffffff81765884 R09: 1ffffffff25f50b0
[  595.971418][    C1] R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: ffffffff8eb22278
[  595.971434][    C1] R13: ffffffff8eb22220 R14: 0000000000000200 R15: dffffc0000000000
[  595.971456][    C1]  ? console_flush_all+0xa44/0xfd0
[  595.971500][    C1]  ? console_flush_all+0x152/0xfd0
[  595.971539][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  595.971574][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  595.971600][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.971622][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  595.971646][    C1]  ? __lock_acquire+0x1346/0x1fd0
[  595.971673][    C1]  console_unlock+0x13b/0x4d0
[  595.971707][    C1]  ? __pfx_console_unlock+0x10/0x10
[  595.971736][    C1]  ? _printk+0xd5/0x120
[  595.971764][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.971787][    C1]  ? _printk+0xd5/0x120
[  595.971815][    C1]  ? __pfx___down_trylock_console_sem+0x10/0x10
[  595.971859][    C1]  vprintk_emit+0x5a6/0x770
[  595.971890][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  595.971922][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.971944][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  595.971985][    C1]  _printk+0xd5/0x120
[  595.972020][    C1]  ? __pfx__printk+0x10/0x10
[  595.972060][    C1]  reiserfs_info+0x113/0x160
[  595.972085][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  595.972109][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.972132][    C1]  ? reiserfs_fill_super+0xf80/0x2620
[  595.972167][    C1]  ? __pfx_reiserfs_info+0x10/0x10
[  595.972193][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.972219][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.972242][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.972264][    C1]  ? reiserfs_init_bitmap_cache+0xf1/0x180
[  595.972288][    C1]  reiserfs_fill_super+0xf90/0x2620
[  595.972337][    C1]  ? __pfx_reiserfs_fill_super+0x10/0x10
[  595.972374][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  595.972410][    C1]  ? __pfx_snprintf+0x10/0x10
[  595.972433][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.972454][    C1]  ? set_blocksize+0x229/0x390
[  595.972488][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.972509][    C1]  ? sb_set_blocksize+0x98/0xf0
[  595.972539][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.972561][    C1]  ? setup_bdev_super+0x4ad/0x570
[  595.972592][    C1]  mount_bdev+0x20c/0x2d0
[  595.972619][    C1]  ? __pfx_reiserfs_fill_super+0x10/0x10
[  595.972653][    C1]  ? __pfx_mount_bdev+0x10/0x10
[  595.972679][    C1]  ? vfs_parse_fs_string+0x190/0x230
[  595.972713][    C1]  legacy_get_tree+0xf0/0x190
[  595.972740][    C1]  ? __pfx_get_super_block+0x10/0x10
[  595.972775][    C1]  vfs_get_tree+0x92/0x2a0
[  595.972805][    C1]  do_new_mount+0x2be/0xb40
[  595.972833][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.972859][    C1]  ? __pfx_do_new_mount+0x10/0x10
[  595.972890][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.972915][    C1]  __se_sys_mount+0x2d9/0x3c0
[  595.972949][    C1]  ? __pfx___se_sys_mount+0x10/0x10
[  595.972979][    C1]  ? do_syscall_64+0x100/0x230
[  595.973013][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.973035][    C1]  ? __x64_sys_mount+0x20/0xc0
[  595.973065][    C1]  do_syscall_64+0xf3/0x230
[  595.973098][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.973123][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.973155][    C1] RIP: 0033:0x7f2039b7722a
[  595.973174][    C1] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  595.973196][    C1] RSP: 002b:00007f203a9bde78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  595.973217][    C1] RAX: ffffffffffffffda RBX: 00007f203a9bdf00 RCX: 00007f2039b7722a
[  595.973234][    C1] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 00007f203a9bdec0
[  595.973249][    C1] RBP: 0000000020000540 R08: 00007f203a9bdf00 R09: 0000000000000010
[  595.973264][    C1] R10: 0000000000000010 R11: 0000000000000206 R12: 0000000020000140
[  595.973278][    C1] R13: 00007f203a9bdec0 R14: 0000000000001119 R15: 00000000200001c0
[  595.973305][    C1]  </TASK>
[  595.974016][    C0] Kernel panic - not syncing: softlockup: hung tasks
[  595.974030][    C0] CPU: 0 PID: 1054 Comm: kworker/u8:7 Tainted: G             L     6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0
[  595.974057][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  595.974074][    C0] Workqueue: events_unbound toggle_allocation_gate
[  595.974107][    C0] Call Trace:
[  595.974118][    C0]  <IRQ>
[  595.974128][    C0]  dump_stack_lvl+0x241/0x360
[  595.974169][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  595.974206][    C0]  ? __pfx__printk+0x10/0x10
[  595.974249][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.974274][    C0]  ? vscnprintf+0x5d/0x90
[  595.974303][    C0]  panic+0x349/0x860
[  595.974336][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.974364][    C0]  ? watchdog_timer_fn+0x914/0x960
[  595.974398][    C0]  ? __pfx_panic+0x10/0x10
[  595.974429][    C0]  ? tick_nohz_tick_stopped+0x82/0xb0
[  595.974467][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.974492][    C0]  ? __irq_work_queue_local+0x137/0x410
[  595.974522][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.974548][    C0]  ? irq_work_queue+0xca/0x150
[  595.974573][    C0]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  595.974605][    C0]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  595.974643][    C0]  watchdog_timer_fn+0x957/0x960
[  595.974679][    C0]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  595.974713][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.974738][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  595.974766][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  595.974801][    C0]  ? __pfx_watchdog_timer_fn+0x10/0x10
[  595.974835][    C0]  __hrtimer_run_queues+0x553/0xd50
[  595.974872][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  595.974920][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  595.974961][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.974987][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  595.975024][    C0]  hrtimer_interrupt+0x396/0x990
[  595.975086][    C0]  __sysvec_apic_timer_interrupt+0x112/0x3f0
[  595.975128][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  595.975163][    C0]  </IRQ>
[  595.975172][    C0]  <TASK>
[  595.975183][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  595.975222][    C0] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0
[  595.975260][    C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 c9 0c 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 74 08 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 58 08
[  595.975281][    C0] RSP: 0018:ffffc90004137700 EFLAGS: 00000293
[  595.975302][    C0] RAX: ffffffff818a21e8 RBX: 1ffff110172a8899 RCX: ffff888021f19e00
[  595.975323][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  595.975339][    C0] RBP: ffffc900041378e0 R08: ffffffff818a21b7 R09: 1ffffffff25f50b0
[  595.975359][    C0] R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: dffffc0000000000
[  595.975379][    C0] R13: ffff8880b95444c8 R14: ffff8880b943f8c0 R15: 0000000000000001
[  595.975406][    C0]  ? smp_call_function_many_cond+0x1847/0x29d0
[  595.975440][    C0]  ? smp_call_function_many_cond+0x1878/0x29d0
[  595.975487][    C0]  ? kmem_cache_alloc_bulk_noprof+0x146/0x770
[  595.975518][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  595.975547][    C0]  ? kmem_cache_alloc_bulk_noprof+0x146/0x770
[  595.975584][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.975615][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  595.975653][    C0]  ? __pfx___might_resched+0x10/0x10
[  595.975683][    C0]  ? __mutex_trylock_common+0x183/0x2e0
[  595.975718][    C0]  ? __pfx___might_resched+0x10/0x10
[  595.975754][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  595.975784][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  595.975822][    C0]  text_poke_bp_batch+0x352/0xb30
[  595.975851][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.975889][    C0]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  595.975919][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  595.975953][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.975983][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.976008][    C0]  ? arch_jump_label_transform_queue+0x9b/0x100
[  595.976043][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  595.976076][    C0]  text_poke_finish+0x30/0x50
[  595.976104][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  595.976136][    C0]  static_key_enable_cpuslocked+0x136/0x260
[  595.976180][    C0]  static_key_enable+0x1a/0x20
[  595.976217][    C0]  toggle_allocation_gate+0xb5/0x250
[  595.976251][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  595.976286][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  595.976328][    C0]  ? process_scheduled_works+0x945/0x1830
[  595.976355][    C0]  process_scheduled_works+0xa2e/0x1830
[  595.976413][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  595.976450][    C0]  ? assign_work+0x364/0x3d0
[  595.976482][    C0]  worker_thread+0x86d/0xd50
[  595.976520][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  595.976551][    C0]  ? __kthread_parkme+0x169/0x1d0
[  595.976584][    C0]  ? __pfx_worker_thread+0x10/0x10
[  595.976612][    C0]  kthread+0x2f2/0x390
[  595.976645][    C0]  ? __pfx_worker_thread+0x10/0x10
[  595.976672][    C0]  ? __pfx_kthread+0x10/0x10
[  595.976704][    C0]  ret_from_fork+0x4d/0x80
[  595.976739][    C0]  ? __pfx_kthread+0x10/0x10
[  595.976770][    C0]  ret_from_fork_asm+0x1a/0x30
[  595.976825][    C0]  </TASK>
[  597.136831][    C0] Shutting down cpus with NMI
[  597.137059][    C0] Kernel Offset: disabled