last executing test programs:

3m44.177920187s ago: executing program 2 (id=3):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x34, 0x0, [{0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/133}, {0x0, 0xfffffffffffffdd3, &(0x7f0000000500)=""/10}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000000014000000000000000071323f3202cba36b33103ea59d2dfcfa6037dd58560d7067447a32daa122e553b51a6597d3ef88d8ec0278086b6909"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24040040)
getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000800)=0x14)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={<r2=>0x0, @rand_addr, @loopback}, &(0x7f0000000880)=0xc)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe4, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x32c1f48535e40922}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x80)
socket(0x29, 0x2, 0x6)
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000240)="ed9815e1dcada78176de1511"})
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000280)={@host})
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2)
write$binfmt_elf64(r4, &(0x7f0000000200)=ANY=[], 0x1cb)
close(r4)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
close(r0)

3m43.77056877s ago: executing program 2 (id=8):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000005300000085000000230000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e1f59f18f845f82e9a7cde9e8f1b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8d91633a8b9c70e804744dc081ac69cfea08e4e5a06f70c6792f2888d6fd95f202028070000003771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f439547bcdac15e52a4b6a2981eb4afadbbdf9157fa588f475c4cd2e44e2129dc6b93993909613e8d95f5610c067d9b97c524c210af077707d71e8512e"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xffffffff, 0x6, 0x0, 0x1, 0x200000000000, 0x2, 0x10000, 0x87a, 0x8000000000000, 0x80040000000000, 0x0, 0x9, 0x1, 0x5, 0x10000100000008ca, 0x400008005], 0x80a0000, 0x100c02})
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = open$dir(&(0x7f0000000200)='./file0\x00', 0xc1, 0x4)
mknodat$loop(r4, &(0x7f0000000280)='./file0\x00', 0x80, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))

3m42.386567011s ago: executing program 2 (id=11):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000380)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier}, {@dax_inode}, {@nobarrier}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x501, &(0x7f0000001240)="$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")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x844}, 0x4040004)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000300))

3m39.238203746s ago: executing program 2 (id=18):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x12, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x5, 0xa5a, &(0x7f0000000a80)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20000c4, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000001600)="$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")
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="000319f3c02a624ee9ddcf"], 0x1, 0x18e, &(0x7f0000002740)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
r1 = fanotify_init(0x2, 0x1000)
fanotify_mark(r1, 0x541, 0x40001019, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3)
io_setup(0x3, &(0x7f0000000600))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b0f, &(0x7f0000000000)={'wlan0\x00'})
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0x80186e82, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="5ce1c426cb16c48b"}})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)

3m37.889799765s ago: executing program 2 (id=21):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1})
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f00000004c0)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=")
io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x1)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00'], 0x200000)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f0000000300))
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000240))

3m37.003065717s ago: executing program 32 (id=21):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1})
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f00000004c0)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000})
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=")
io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x1)
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00'], 0x200000)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f0000000300))
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000240))

3m27.462734958s ago: executing program 0 (id=50):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b000000000"], 0xb0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0xee01, @ANYBLOB="2c6e6f657876686e642c00a678425296336d2d8cacf5ec"])
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020)

3m27.07005753s ago: executing program 0 (id=51):
pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84880)
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
mmap(&(0x7f0000076000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
open(0x0, 0x108242, 0x186)
syz_emit_ethernet(0x1a2, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x2084006, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYBLOB="5dcca56245dabfbbbcc9279f429972d57b16a0e06fe06860ca5ee9cf807e0ce6335b8724f4653c4816a05bcfbfbe42f5f04315caac9fd75442ed6ec055521527cb9bd287b3e91aaec0adc3373e4fd5e4706899f2686e96fbb057be3afcc5a7dbf98b97f6dc0b632f5d9fe16306099b3153ab2f5b1a97c337a4786beb9d35fcda016ece555f11bd902ccd3e91175380863029d14a0954b467e103df2928cfdfb3b5cfdce7df0f2c2c72edb145d7a85606370b5afc1bab5463b099a057f57a", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRESDEC], 0x1, 0x9ec3, &(0x7f000000c3c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
write$binfmt_format(r2, &(0x7f0000000ac0)='1\x00', 0xe950)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
r6 = socket(0x1e, 0x80004, 0x0)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r8 = dup3(r7, r6, 0x0)
recvmmsg(r8, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x0, 0x9, 0x800005, 0x6a], 0x1, 0x1000d6})
ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x3)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3m25.855917088s ago: executing program 0 (id=54):
pipe2$9p(&(0x7f0000000100), 0x80)
syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000076000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
open(0x0, 0x108242, 0x186)
syz_emit_ethernet(0x1a2, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x0, 0x9, 0x800005, 0x6a], 0x1, 0x1000d6})
ioctl$KVM_RUN(r3, 0xae80, 0x8000000)

3m25.406540774s ago: executing program 0 (id=56):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000380)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier}, {@dax_inode}, {@nobarrier}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x501, &(0x7f0000001240)="$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")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x206e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x844}, 0x4040004)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000300))

3m24.681980693s ago: executing program 0 (id=58):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x3})
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

3m23.841177371s ago: executing program 0 (id=60):
syz_open_dev$rtc(&(0x7f0000000600), 0x0, 0x240000)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00')
r1 = fanotify_init(0x0, 0x2)
fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0xf44, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xffffffc0, 0x6, {r2}, {<r4=>0xee01}, 0xfffffffffffffffe, 0x7})
setresuid(0xee01, r4, 0x0)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@cache_fscache}, {@sq={'sq', 0x3d, 0x4}}, {@rq={'rq', 0x3d, 0xffffffffcff8ff10}}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@euid_gt={'euid>', r3}}, {@subj_user={'subj_user', 0x3d, 'keyring\x00'}}, {@euid_gt={'euid>', r4}}, {@flag='ro'}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_appraise}]}})

3m23.590732671s ago: executing program 33 (id=60):
syz_open_dev$rtc(&(0x7f0000000600), 0x0, 0x240000)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00')
r1 = fanotify_init(0x0, 0x2)
fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0xf44, 0x2)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xffffffc0, 0x6, {r2}, {<r4=>0xee01}, 0xfffffffffffffffe, 0x7})
setresuid(0xee01, r4, 0x0)
add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb)
mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@cache_fscache}, {@sq={'sq', 0x3d, 0x4}}, {@rq={'rq', 0x3d, 0xffffffffcff8ff10}}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_measure}, {@euid_gt={'euid>', r3}}, {@subj_user={'subj_user', 0x3d, 'keyring\x00'}}, {@euid_gt={'euid>', r4}}, {@flag='ro'}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_appraise}]}})

22.353168944s ago: executing program 3 (id=604):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x420, 0x0)

22.091882355s ago: executing program 3 (id=606):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000018010040"])
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_NESTED_STATE(r6, 0xc048aeca, &(0x7f0000003680)={{0x4, 0x0, 0x80, {0xeeee0000, 0x1000, 0x1}}, "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", "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"})

19.542755101s ago: executing program 3 (id=611):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4a)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r1, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeff2051a4eceb54e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
r5 = socket(0x8, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000)
syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000186dd6002adf700383a00fe880000000000000000f9ffffffffffffff"], 0x0)
listen(r4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04132e01c8"], 0x8)

18.451604599s ago: executing program 3 (id=613):
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$kcm(0x29, 0x5, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef)

13.704532013s ago: executing program 5 (id=625):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x4, 0x1000086}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x3ffe)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
splice(r0, &(0x7f0000000040)=0x4, r2, 0x0, 0x3, 0xe)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet(0x2, 0xa, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x10, 0xffffffffffffffff, 0xffffa000)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f000063b000/0x3000)=nil, 0xdc, 0x0, 0x0, 0xffffffffffffdffd, 0x20, 0x2c, 0x60, 0x5c})
sendto$inet6(r4, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2", 0xa5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r4, 0x0, 0x0, 0x40000040, 0x0)
close(r1)
socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, 0x0, 0x0)

12.789322767s ago: executing program 5 (id=627):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7ff, 0x6, 0xc, 0x0, 0x40000})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = dup2(r1, r1)
sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x20}, &(0x7f0000002380)=0x18)
flock(0xffffffffffffffff, 0x6)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8000)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000)
getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f0000000080))

11.521413669s ago: executing program 5 (id=631):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80"], 0xf0}, 0x1, 0xe}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

11.296964697s ago: executing program 1 (id=632):
socket$unix(0x1, 0x5, 0x0)
prlimit64(0xffffffffffffffff, 0xa, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x84, 0xfc}, 'port1\x00', 0x80, 0x60044, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x4})
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
read$sequencer(0xffffffffffffffff, &(0x7f0000000780)=""/35, 0x23)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x81}, 'port0\x00', 0x25, 0x171414, 0x7ff9, 0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x9})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port1\x00', 0x89, 0x14, 0x4, 0x400, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d})
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

10.902580929s ago: executing program 5 (id=633):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x21a8f5, 0x0)

8.494904724s ago: executing program 3 (id=636):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_open_dev$sndmidi(0x0, 0x5, 0x141101)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x2)
close(r2)

8.327626778s ago: executing program 1 (id=638):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, 0x0, 0x0, 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
socket(0x21, 0x3, 0x0)
r2 = fsopen(&(0x7f0000000200)='pstore\x00', 0x0)
fsmount(r2, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0)
link(0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r3, 0x4b45, 0x0)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}})

7.934483639s ago: executing program 4 (id=639):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24004000)
syz_open_dev$loop(0x0, 0x75f, 0xa382)
openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
socket$nl_generic(0x10, 0x3, 0x10)
getcwd(0x0, 0xfffffffffffffe7d)

7.1848773s ago: executing program 4 (id=641):
sysfs$1(0x1, &(0x7f0000000040)='&\x00\x00\x00\x00\x00')

6.474802727s ago: executing program 4 (id=642):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000006900)=""/102400, 0x19000)
socket$inet_udp(0x2, 0x2, 0x0)
memfd_create(&(0x7f0000000180)='-&:\n\x03\x00\x00\x00\x00\x00\x00\x00V$&\xb8=\x94Z}~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m,\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xd0^\x00\x00\x00\x00\x00\x00\x00\xc3\xaa\x9a\x9be\xed\xf2\xde\xccx\x1f\x0fne\xe8G\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\bn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a\xf7\x94\xc0rk\x88r\x94\xb6e\x98\xdf\xf36\x82\x8b\x9a\xb9\x10\xa0q\xd8n\x15\x02\xc2@\xa5\xbe\xab\x83\xf9-\x9f\x19\x05\x12*!>\xde\x18L#8\xa5\b^\x19\xeb\xba\xd7\xbdV\x02\xf2\xcf6w\x86\x01\x81\xe4E\v\xd4\xd9\xe7_\xc2\x80\xea\xf9A\xf0\xef\xde\xe3)\xa8\n\f\xb1\f\x159pV2\xf6FCw\xf3r:y\xb1\xee\xc4!\xbaW\xb8\xb1 \x8e\x98!\xd0LL\xec)N\xa1\xa0\x15\xea\xf8kZ\xca\x1eMU\xf6\xfb\xbd\xb2\xc3\a\xc9\xea\x1db\x9b\xd6\x94\x8em\x1b\xd3T\xef*\x1cI\x17:yu8\xb5\x04\xb4\x9e$\xf0\ruS\xee\t3\xeeUb\x10\xfeP\xb3GQ\xc3\xbfA1\atU\xc1\xd6a\x9f1\xe0\xf8.b\a\xe8v\xf7=\x8e\xf5\xfe\xd8Y\xf8\x99_\xe4%\xc54\x96\xf4\xe9\x80:\x8erg\xd8L\xd1\xe0\xc3\xf5\xfe\xa0Dm\xd8_\xf1\xca\x03\xdc\xad\x91\xa6\x18\t\x00'/450, 0x3)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0xfffffff8})
r2 = syz_open_pts(r1, 0x101000)
r3 = dup3(r2, r1, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17)

5.845388558s ago: executing program 6 (id=644):
fcntl$getown(0xffffffffffffffff, 0x9)
gettid()
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
socket$can_j1939(0x1d, 0x2, 0x7)
socket(0xa, 0x3, 0x3a)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1)

5.180144802s ago: executing program 6 (id=645):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x4a)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r1, 0x100)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeff2051a4eceb54e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
r5 = socket(0x8, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000)
syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000186dd6002adf700383a00fe880000000000000000f9ffffffffffffff"], 0x0)
listen(r4, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_AIE_ON(r9, 0x7001)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04132e01c8"], 0x8)

4.906986864s ago: executing program 5 (id=646):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)="580000001400192340834b80040d8c560a1174177153db30edb128a38e63cec8f7a958000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd20d2655a4362a5000010000100030c10000000", 0x5c}], 0x1)

4.553015113s ago: executing program 5 (id=647):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
socket(0x2a, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000140)={@default, @default, 0x2, 0x20})
socket$kcm(0x10, 0x2, 0x4)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0xe05, 0x6, 0x0, 0x7, 0x9, <r3=>0x0})
getpgrp(r3)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0)
io_uring_enter(r5, 0x6dd, 0x26f7, 0x0, &(0x7f0000000000)={[0x800001]}, 0x8)
r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x3, 0x4}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x7, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

4.471090439s ago: executing program 1 (id=648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x29, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000500), 0x8, 0x23, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x6, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0x9b, &(0x7f0000000440)=""/155, 0x40f00, 0x10, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000700)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x6, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780), &(0x7f00000007c0)=[{0x5, 0x4, 0xc, 0x2}, {0x2, 0x4, 0x2, 0xb}, {0x2, 0x1, 0x8, 0x1}, {0x1, 0x3, 0x8, 0xb}, {0x5, 0x1, 0xf}], 0x10, 0x6}, 0x94)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sched_getscheduler(0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), r2)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000325bd7000fcdbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="1400020053cb31fe0911a22e0000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8004)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r7=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {'\x00\a\x00'}, 0x0, 0x40000000, 0x8}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r7, 0x4734}}, 0x10)
close(r6)

3.782530915s ago: executing program 4 (id=649):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000180))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000010401010000000000000000010000050a00020000000005e4ffffff0500010001000000"], 0x28}, 0x1, 0x2000000, 0x0, 0x4040000}, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000})
r6 = io_uring_setup(0x4577, &(0x7f0000000540)={0x0, 0x988d, 0x8000, 0x2, 0x148})
io_uring_setup(0x7fd2, &(0x7f00000004c0)={0x0, 0x3edc, 0x4, 0x1, 0x2fa, 0x0, r6})
keyctl$unlink(0x9, 0x0, 0x0)

3.727217599s ago: executing program 1 (id=650):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r4}, 0x18)
symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r5 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002})
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r5, 0x0)
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000)
r6 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000100)={0x3, 0x5, 0x2})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000340)={'vxcan0\x00'})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

1.49401039s ago: executing program 1 (id=651):
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4)

1.286807477s ago: executing program 4 (id=652):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa)

1.269269518s ago: executing program 1 (id=653):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.226050581s ago: executing program 6 (id=654):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

239.049391ms ago: executing program 4 (id=655):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000180)={0x2ac5, 0x3, 0x8, 0x2})
mremap(&(0x7f0000cbe000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000b49000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xa5, 0xf4, 0x3, 0x8, 0x1a0a, 0x102, 0x930, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x17, 0x0, 0xe0, 0x8, [{{0x9, 0x4, 0x47, 0x0, 0x0, 0x77, 0x92, 0x3d}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})

238.311192ms ago: executing program 6 (id=656):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KDENABIO(0xffffffffffffffff, 0x4b36)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)

147.035549ms ago: executing program 3 (id=657):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x2000000)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0)

81.672884ms ago: executing program 6 (id=658):
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff60, 0x0, 0x0, 0x9}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff, 0x1400})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 6 (id=659):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001c00010300000000000000", @ANYRES32=r1, @ANYBLOB="4000a6080a000200ff"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8)
socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000014000100c43b00000000000000000000237f3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001000000000000000000001ada0a"], 0x64}}, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

kernel console output (not intermixed with test programs):

im netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.629023][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.644887][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.659444][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.673591][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   68.682116][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   68.725266][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   68.737392][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.748446][ T4184] device veth1_vlan entered promiscuous mode
[   68.785485][ T4185] device veth0_macvtap entered promiscuous mode
[   68.793213][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.801549][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.811430][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.821292][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.831117][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.858868][ T4185] device veth1_macvtap entered promiscuous mode
[   68.906006][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.919151][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.928641][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.964918][ T4184] device veth0_macvtap entered promiscuous mode
[   69.010412][ T4184] device veth1_macvtap entered promiscuous mode
[   69.032195][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.046481][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.059312][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.074927][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.087031][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.113354][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   69.121574][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   69.130320][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.139561][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.150767][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.153815][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.168120][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.176344][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.180452][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.200722][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.212454][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.238448][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.248154][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.257474][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.266300][ T4229] Bluetooth: hci3: command 0x040f tx timeout
[   69.272767][ T4229] Bluetooth: hci0: command 0x040f tx timeout
[   69.278998][ T4229] Bluetooth: hci1: command 0x040f tx timeout
[   69.283559][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.293185][ T4229] Bluetooth: hci4: command 0x040f tx timeout
[   69.299930][ T4229] Bluetooth: hci2: command 0x040f tx timeout
[   69.301388][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.315459][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.324608][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.347509][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.348281][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.358524][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.367110][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.383985][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.394592][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.404523][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.416089][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.428722][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.456611][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   69.465537][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   69.475769][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.484370][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.495162][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.506511][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.517534][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.527670][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.538455][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.548741][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.559810][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.571625][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.603829][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.612966][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.624995][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.637478][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.646489][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.655845][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.686808][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.697919][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.709107][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.751858][ T4187] device veth0_vlan entered promiscuous mode
[   69.771540][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.775866][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   69.790666][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.801931][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   69.854507][ T4187] device veth1_vlan entered promiscuous mode
[   69.862091][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.879622][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   69.891466][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   69.899930][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   69.938442][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.980666][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.000841][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   70.010684][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   70.026934][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   70.041507][ T4187] device veth0_macvtap entered promiscuous mode
[   70.056668][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.074418][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   70.106368][ T4296] xt_recent: Unsupported userspace flags (000000de)
[   70.310575][ T4187] device veth1_macvtap entered promiscuous mode
[   70.318721][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.334906][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.359632][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.450347][ T4287] Process accounting resumed
[   70.477198][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.564075][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   70.642935][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.969593][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.028947][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.075780][ T4304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   71.092755][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.110533][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.122848][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.132812][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.143394][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.153295][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.163842][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.175760][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.205286][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   71.215905][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   71.232019][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.247820][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.284223][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.302525][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.318169][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.337555][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.344157][ T4250] Bluetooth: hci2: command 0x0419 tx timeout
[   71.349793][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.362841][ T4250] Bluetooth: hci4: command 0x0419 tx timeout
[   71.373077][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.396826][ T4250] Bluetooth: hci1: command 0x0419 tx timeout
[   71.405820][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.410277][ T4250] Bluetooth: hci0: command 0x0419 tx timeout
[   71.428439][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[   71.435474][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[   71.456224][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.462882][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   71.465560][ T4250] Bluetooth: hci3: command 0x0419 tx timeout
[   71.479490][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.493423][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   71.504323][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.515621][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.518279][ T4291] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   71.547391][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.568314][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.591158][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.735599][ T4315] loop3: detected capacity change from 0 to 4096
[   71.774713][ T4291] usb 2-1: Invalid ep0 maxpacket: 64
[   71.790929][ T4315] =======================================================
[   71.790929][ T4315] WARNING: The mand mount option has been deprecated and
[   71.790929][ T4315]          and is ignored by this kernel. Remove the mand
[   71.790929][ T4315]          option from the mount to silence this warning.
[   71.790929][ T4315] =======================================================
[   71.794980][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.895004][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.922838][ T4291] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[   71.941981][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.953389][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.956797][ T4318] binder: 4317:4318 ioctl 4008af60 200000000280 returned -22
[   71.976010][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   71.997970][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   72.020479][ T4318] process 'syz.2.3' launched './binderfs/binder0' with NULL argv: empty string added
[   72.163537][ T4291] usb 2-1: Invalid ep0 maxpacket: 64
[   72.169096][ T4291] usb usb2-port1: attempt power cycle
[   73.282732][ T4291] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[   73.430920][ T4291] usb 2-1: Invalid ep0 maxpacket: 64
[   73.562054][ T4338] loop2: detected capacity change from 0 to 512
[   73.583581][ T4291] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[   73.917219][ T4291] usb 2-1: device descriptor read/8, error -71
[   74.795293][ T4338] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   75.046988][ T4338] EXT4-fs (loop2): orphan cleanup on readonly fs
[   75.333638][ T4338] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters
[   75.363266][ T4338] Quota error (device loop2): write_blk: dquota write failed
[   75.365055][ T4291] usb usb2-port1: unable to enumerate USB device
[   75.371082][ T4338] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   75.439785][ T4338] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.11: Failed to acquire dquot type 0
[   75.524124][ T4338] EXT4-fs (loop2): 1 truncate cleaned up
[   75.565021][ T4338] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier,dax=inode,nobarrier,noinit_itable,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback.
[   76.565109][ T4291] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   76.669922][ T4184] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   76.701968][ T4184] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   76.718192][ T4369] loop4: detected capacity change from 0 to 4096
[   76.763808][ T4369] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[   76.796957][ T4369] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   76.827432][ T4369] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   76.843726][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   76.860447][ T4369] ntfs: volume version 3.1.
[   77.077440][ T4187] ntfs: (device loop4): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[   77.766471][ T4291] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[   77.779355][ T4291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.787589][ T4291] usb 2-1: Product: syz
[   77.792007][ T4291] usb 2-1: Manufacturer: syz
[   77.797321][ T4291] usb 2-1: SerialNumber: syz
[   77.816210][ T4291] usb 2-1: config 0 descriptor??
[   77.853032][ T1108] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   77.870927][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.889630][ T1108] usb 4-1: config 0 descriptor??
[   77.908460][ T4291] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 006
[   77.973582][ T1108] cp210x 4-1:0.0: cp210x converter detected
[   78.065028][ T4374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.900459][ T4380] udc-core: couldn't find an available UDC or it's busy
[   78.926775][ T4374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.942759][ T4380] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   79.031032][ T4291]  (null): failure setting delay to 10us
[   79.037483][ T4291] i2c-tiny-usb: probe of 2-1:0.0 failed with error -5
[   79.076791][ T4291] usb 2-1: USB disconnect, device number 6
[   79.155575][ T4374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.250427][ T1108] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[   79.270817][ T1108] cp210x 4-1:0.0: GPIO initialisation failed: -71
[   79.281151][ T4386] loop4: detected capacity change from 0 to 128
[   79.307856][ T1108] usb 4-1: cp210x converter now attached to ttyUSB0
[   79.308918][ T4374] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.342113][ T1108] usb 4-1: USB disconnect, device number 2
[   79.356099][ T4386] FAT-fs (loop4): bogus number of FAT structure
[   79.377805][ T1108] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   79.392284][ T4386] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   79.411570][ T4386] FAT-fs (loop4): Can't find a valid FAT filesystem
[   79.414814][ T1108] cp210x 4-1:0.0: device disconnected
[   79.728759][ T4392] loop4: detected capacity change from 0 to 4096
[   79.823086][ T4392] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[   79.842987][ T4392] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   79.887308][ T4392] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   79.950907][ T4392] ntfs: volume version 3.1.
[   81.192665][    C0] sched: RT throttling activated
[   81.204144][ T4388] chnl_net:caif_netlink_parms(): no params data found
[   81.263506][ T4291] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   81.328441][ T4385] loop1: detected capacity change from 0 to 40427
[   81.414933][ T4385] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   81.424567][ T4385] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   81.497890][ T4385] F2FS-fs (loop1): Found nat_bits in checkpoint
[   81.512880][ T1108] Bluetooth: hci2: command 0x0409 tx timeout
[   81.585736][ T4187] ntfs: (device loop4): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[   81.690013][ T4388] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.703654][ T4291] usb 4-1: unable to get BOS descriptor or descriptor too short
[   81.772785][ T4388] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.781086][ T4388] device bridge_slave_0 entered promiscuous mode
[   81.802993][ T4291] usb 4-1: config 7 has an invalid interface number: 177 but max is 0
[   81.820514][ T4291] usb 4-1: config 7 has no interface number 0
[   81.844933][ T4291] usb 4-1: config 7 interface 177 has no altsetting 0
[   81.938707][ T4385] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   81.966809][ T4385] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   82.034919][ T4388] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.042128][ T4388] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.053128][ T4291] usb 4-1: New USB device found, idVendor=16d8, idProduct=7003, bcdDevice=42.3f
[   82.062310][ T4291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.284418][ T4388] device bridge_slave_1 entered promiscuous mode
[   82.852707][ T4291] usb 4-1: Product: syz
[   82.856939][ T4291] usb 4-1: Manufacturer: syz
[   82.861663][ T4291] usb 4-1: SerialNumber: syz
[   83.130712][ T4388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.134419][ T4291] option 4-1:7.177: GSM modem (1-port) converter detected
[   83.161315][ T4388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.170178][ T4291] usb 4-1: USB disconnect, device number 3
[   83.187084][ T4291] option 4-1:7.177: device disconnected
[   83.546992][ T4448] loop4: detected capacity change from 0 to 128
[   83.580434][ T4445] netlink: 'syz.0.35': attribute type 5 has an invalid length.
[   83.596931][ T4291] Bluetooth: hci2: command 0x041b tx timeout
[   83.605655][ T4448] ADFS-fs (loop4): unrecognised mount option "ftsuffix=000000000000000495" or missing value
[   83.731493][ T4388] team0: Port device team_slave_0 added
[   83.929410][ T4388] team0: Port device team_slave_1 added
[   84.724625][ T4458] loop0: detected capacity change from 0 to 128
[   84.827193][ T4388] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.845485][ T4460] loop1: detected capacity change from 0 to 2048
[   84.851836][ T4388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.881611][ T4388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.893264][ T4458] FAT-fs (loop0): bogus number of FAT structure
[   84.900152][ T4458] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code
[   84.929188][ T4460] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   84.969655][ T4458] FAT-fs (loop0): Can't find a valid FAT filesystem
[   84.997628][ T4203] udevd[4203]: incorrect nilfs2 checksum on /dev/loop1
[   85.027019][ T4466] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.043172][ T4388] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.057711][ T4388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.210621][ T4388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.247447][ T4471] Option '                              ' to dns_resolver key: bad/missing value
[   85.342293][ T4388] device hsr_slave_0 entered promiscuous mode
[   85.349726][ T4388] device hsr_slave_1 entered promiscuous mode
[   85.357921][ T4388] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   85.366035][ T4388] Cannot create hsr debugfs directory
[   85.465133][ T4374] device hsr_slave_0 left promiscuous mode
[   85.482182][ T4374] device hsr_slave_1 left promiscuous mode
[   85.496696][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.531575][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.553153][ T4249] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   85.558441][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.585021][ T4333] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   85.599257][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.607390][ T4374] device bridge_slave_1 left promiscuous mode
[   85.617575][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.646628][ T4374] device bridge_slave_0 left promiscuous mode
[   85.660559][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.702377][ T4374] device veth1_macvtap left promiscuous mode
[   85.709053][ T4374] device veth0_macvtap left promiscuous mode
[   85.716487][ T4374] device veth1_vlan left promiscuous mode
[   85.723106][ T4374] device veth0_vlan left promiscuous mode
[   85.768589][ T4480] loop3: detected capacity change from 0 to 4096
[   85.817914][ T4480] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[   85.838263][ T4333] usb 2-1: Using ep0 maxpacket: 8
[   85.840224][ T4480] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   85.883335][ T4480] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   85.905119][ T4480] ntfs: volume version 3.1.
[   85.934552][ T4249] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[   85.944022][ T4249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   85.956839][ T4249] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   85.963225][ T4333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.970104][ T4249] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   85.992911][ T4249] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   85.999825][ T4333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.002493][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.032342][ T4249] usb 1-1: config 0 descriptor??
[   86.041236][ T4333] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   86.063514][ T4333] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[   86.063720][ T4471] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   86.080808][ T4333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.092573][ T4333] usb 2-1: config 0 descriptor??
[   86.234042][ T4374] team0 (unregistering): Port device team_slave_1 removed
[   86.252357][ T4374] team0 (unregistering): Port device team_slave_0 removed
[   86.287527][ T4374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.324469][ T4374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.465661][ T4250] Bluetooth: hci2: command 0x040f tx timeout
[   86.483431][ T4374] bond0 (unregistering): Released all slaves
[   86.710989][ T4249] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd
[   86.723319][ T4185] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[   86.740100][ T4249] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   86.759270][ T4333] sony 0003:1345:3008.0001: hiddev0,hidraw0: USB HID v80.04 Device [HID 1345:3008] on usb-dummy_hcd.1-1/input0
[   86.794851][ T4249] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   86.815018][ T1335] cfg80211: failed to load regulatory.db
[   86.832854][ T4333] sony 0003:1345:3008.0001: failed to claim input
[   86.972891][ T4333] usb 2-1: USB disconnect, device number 7
[   87.015339][ T4388] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   87.056904][ T1335] usb 1-1: USB disconnect, device number 2
[   87.108843][ T4388] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   87.128575][ T4487] loop3: detected capacity change from 0 to 4096
[   87.168287][ T4485] fido_id[4485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[   87.173748][ T4489] fido_id[4489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[   87.194038][ T4388] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   87.214751][ T4487] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[   87.255308][ T4487] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   87.261305][ T4388] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   87.312842][ T4487] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   87.362178][ T4487] ntfs: volume version 3.1.
[   87.486767][ T4460] syz.1.31 (4460) used greatest stack depth: 19552 bytes left
[   87.683673][ T4249] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   87.840916][ T4513] loop0: detected capacity change from 0 to 1024
[   87.881423][ T4185] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[   87.967136][ T4513] EXT4-fs (loop0): unable to read superblock
[   88.146620][ T4388] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.221641][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   88.229415][ T4249] usb 5-1: unable to get BOS descriptor or descriptor too short
[   88.245299][ T4528] Zero length message leads to an empty skb
[   88.265221][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   88.296543][ T4388] 8021q: adding VLAN 0 to HW filter on device team0
[   88.297479][ T4535] loop3: detected capacity change from 0 to 512
[   88.332978][ T4249] usb 5-1: config 7 has an invalid interface number: 177 but max is 0
[   88.341256][ T4249] usb 5-1: config 7 has no interface number 0
[   88.355752][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   88.374922][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   88.386498][ T4249] usb 5-1: config 7 interface 177 has no altsetting 0
[   88.405156][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.412402][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.451427][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.487399][ T4535] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[   88.499038][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   88.511344][ T4535] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[   88.537213][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   88.542827][ T1335] Bluetooth: hci2: command 0x0419 tx timeout
[   88.552964][ T4535] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   88.561157][ T4535] EXT4-fs (loop3): DAX unsupported by block device.
[   88.580745][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.588012][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.595866][ T4249] usb 5-1: New USB device found, idVendor=16d8, idProduct=7003, bcdDevice=42.3f
[   88.615329][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.643099][ T4249] usb 5-1: Product: syz
[   88.647466][ T4249] usb 5-1: Manufacturer: syz
[   88.652169][ T4249] usb 5-1: SerialNumber: syz
[   88.816194][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   88.847213][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   88.909372][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   88.969852][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   88.995507][ T4535] loop3: detected capacity change from 0 to 256
[   89.044620][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   89.100731][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   89.123963][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   89.138741][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   89.162368][ T4535] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   89.174088][ T4535] exFAT-fs (loop3): unable to read boot sector
[   89.174620][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   89.180493][ T4535] exFAT-fs (loop3): failed to read boot sector
[   89.195017][ T4535] exFAT-fs (loop3): failed to recognize exfat type
[   89.264336][ T4551] loop0: detected capacity change from 0 to 128
[   89.278665][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   89.305012][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   89.340969][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   89.385512][ T4249] option 5-1:7.177: GSM modem (1-port) converter detected
[   89.415657][ T4249] usb 5-1: USB disconnect, device number 2
[   89.422401][ T4249] option 5-1:7.177: device disconnected
[   90.100147][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   90.154928][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   90.231129][ T4388] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.254627][ T4573] loop4: detected capacity change from 0 to 1024
[   90.319553][ T4573] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   90.380136][ T4573] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   90.517427][ T4582] loop0: detected capacity change from 0 to 512
[   90.554424][ T4573] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,norecovery,acl,max_batch_time=0x0000000000000007,mblk_io_submit,delalloc,dioread_nolock,,errors=continue. Quota mode: none.
[   90.662510][ T4582] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   90.764051][ T4582] EXT4-fs (loop0): orphan cleanup on readonly fs
[   90.788917][ T4582] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters
[   90.864251][ T4582] Quota error (device loop0): write_blk: dquota write failed
[   90.871870][ T4582] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[   90.883021][ T4582] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.56: Failed to acquire dquot type 0
[   90.904249][ T4582] EXT4-fs (loop0): 1 truncate cleaned up
[   90.963842][ T4582] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier,dax=inode,nobarrier,noinit_itable,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback.
[   91.037243][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   91.074822][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   91.173240][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   91.214378][ T4186] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   91.226988][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   91.288805][ T4186] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   91.295974][ T4598] loop4: detected capacity change from 0 to 4096
[   91.320627][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   91.369610][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   91.405229][ T4388] device veth0_vlan entered promiscuous mode
[   91.410577][ T4598] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[   91.441904][ T4388] device veth1_vlan entered promiscuous mode
[   91.456490][ T4598] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   91.522916][ T4598] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   91.589354][ T4598] ntfs: volume version 3.1.
[   91.719963][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   91.729293][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   91.764822][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   91.807936][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   91.840880][ T4388] device veth0_macvtap entered promiscuous mode
[   91.880588][ T4388] device veth1_macvtap entered promiscuous mode
[   91.973509][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.057664][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.097172][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.111466][ T4608] loop1: detected capacity change from 0 to 256
[   92.180448][ T4608] FAT-fs (loop1): Unrecognized mount option "uni_xlate=0^$øêg�2Á " or missing value
[   92.194281][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.238939][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.280340][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.310511][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.362744][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.386088][ T4388] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.417274][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   92.434889][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   92.473792][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   92.511192][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   92.533567][ T4608] loop1: detected capacity change from 0 to 4096
[   92.575735][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.601120][ T4608] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   92.607989][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.672687][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.738645][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.773218][ T4608] ntfs3: loop1: Failed to load $Extend.
[   92.792686][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.843949][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.899541][ T4388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.922034][ T4388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.942875][ T4388] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.950323][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   92.968254][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   93.043794][ T4388] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.052594][ T4388] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.084877][ T4388] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.099497][ T4388] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.112856][ T1335] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   93.154428][ T4187] ntfs: (device loop4): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[   93.341104][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.373171][ T1335] usb 2-1: Using ep0 maxpacket: 32
[   93.373230][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.431752][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   93.486736][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.495169][ T1335] usb 2-1: config 0 has an invalid interface number: 110 but max is 0
[   93.503657][ T1335] usb 2-1: config 0 has no interface number 0
[   93.520024][ T1335] usb 2-1: config 0 interface 110 has no altsetting 0
[   93.531147][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.631346][ T4624] loop4: detected capacity change from 0 to 4096
[   93.660159][ T4624] ntfs: (device loop4): parse_ntfs_boot_sector(): Mft record size (32768) exceeds the PAGE_SIZE on your system (4096).  This is not supported.  Sorry.
[   93.690262][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   93.693072][ T1335] usb 2-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=d7.20
[   93.713935][ T4618] loop3: detected capacity change from 0 to 32768
[   93.722730][ T1335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.741043][ T4624] ntfs: (device loop4): ntfs_fill_super(): Unsupported NTFS filesystem.
[   93.772695][ T1335] usb 2-1: Product: syz
[   93.785915][ T4618] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.62 (4618)
[   93.802800][ T1335] usb 2-1: Manufacturer: syz
[   93.807693][ T1335] usb 2-1: SerialNumber: syz
[   93.845996][ T1335] usb 2-1: config 0 descriptor??
[   93.859044][ T4624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.63'.
[   93.884869][ T4613] chnl_net:caif_netlink_parms(): no params data found
[   93.945838][ T4618] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   94.015166][ T4618] BTRFS info (device loop3): force clearing of disk cache
[   94.022364][ T4618] BTRFS info (device loop3): turning on sync discard
[   94.060353][ T4618] BTRFS info (device loop3): enabling auto defrag
[   94.080757][ T4618] BTRFS info (device loop3): max_inline at 0
[   94.090986][ T4618] BTRFS info (device loop3): enabling disk space caching
[   94.118725][ T4618] BTRFS info (device loop3): disk space caching is enabled
[   94.146863][ T4618] BTRFS info (device loop3): has skinny extents
[   94.195105][ T1335] keyspan 2-1:0.110: Keyspan 1 port adapter converter detected
[   94.234994][ T1335] keyspan 2-1:0.110: found no endpoint descriptor for endpoint 84
[   94.990090][ T1335] keyspan 2-1:0.110: found no endpoint descriptor for endpoint 81
[   94.998127][ T1335] keyspan 2-1:0.110: found no endpoint descriptor for endpoint 1
[   95.005995][ T1335] keyspan 2-1:0.110: found no endpoint descriptor for endpoint 2
[   95.013902][ T1335] keyspan 2-1:0.110: found no endpoint descriptor for endpoint 83
[   95.021798][ T1335] keyspan 2-1:0.110: found no endpoint descriptor for endpoint 3
[   95.038529][ T4333] Bluetooth: hci3: command 0x0409 tx timeout
[   95.053033][ T1335] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[   95.151093][ T4654] netlink: 'syz.4.64': attribute type 11 has an invalid length.
[   95.152889][ T4655] netlink: 'syz.4.64': attribute type 11 has an invalid length.
[   95.160475][ T1335] usb 2-1: USB disconnect, device number 8
[   95.280060][ T1335] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[   95.384049][ T1335] keyspan 2-1:0.110: device disconnected
[   95.471311][ T4618] BTRFS info (device loop3): enabling ssd optimizations
[   95.493255][ T4673] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[   95.500114][ T4673] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[   95.521422][ T4618] BTRFS info (device loop3): clearing free space tree
[   95.593701][ T4618] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   95.617608][ T4673] vhci_hcd vhci_hcd.0: Device attached
[   95.667958][ T4618] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   95.696898][ T4687] loop1: detected capacity change from 0 to 256
[   95.773243][ T4374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.921986][ T4687] exfat: Deprecated parameter 'utf8'
[   95.976755][ T4687] exfat: Deprecated parameter 'namecase'
[   96.034523][ T4613] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.041783][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.067981][ T4687] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   96.089383][ T4613] device bridge_slave_0 entered promiscuous mode
[   96.107352][ T4291] vhci_hcd: vhci_device speed not set
[   96.119155][ T4687] exFAT-fs (loop1): unable to read boot sector
[   96.125458][ T4687] exFAT-fs (loop1): failed to read boot sector
[   96.131867][ T4687] exFAT-fs (loop1): failed to recognize exfat type
[   96.178618][ T4374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.182956][ T4291] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[   96.196493][ T1335] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[   96.250690][ T4613] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.265952][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.302335][ T4613] device bridge_slave_1 entered promiscuous mode
[   96.562962][ T1335] usb 6-1: config 0 has no interfaces?
[   96.568509][ T4706] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   96.568739][ T1335] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   96.632902][ T1335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.663955][ T1335] usb 6-1: config 0 descriptor??
[   96.849762][ T4374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.901270][ T4720] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   96.910598][ T4674] vhci_hcd: unknown pdu 2
[   96.967538][    T9] vhci_hcd: stop threads
[   96.971944][    T9] vhci_hcd: release socket
[   96.983464][ T4708] device sit0 entered promiscuous mode
[   97.002804][ T4291] vhci_hcd: vhci_device speed not set
[   97.025130][    T9] vhci_hcd: disconnect device
[   97.041097][ T4673] udc-core: couldn't find an available UDC or it's busy
[   97.047113][ T4708] netlink: 'syz.1.72': attribute type 1 has an invalid length.
[   97.072787][ T4291] usb 43-1: device descriptor read/64, error -71
[   97.112889][ T4708] netlink: 9 bytes leftover after parsing attributes in process `syz.1.72'.
[   97.131492][ T4673] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   97.198134][ T4374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.199866][ T4717] Bluetooth: hci3: command 0x041b tx timeout
[   97.275508][ T4717] usb 6-1: USB disconnect, device number 2
[   97.292807][ T4291] vhci_hcd: vhci_device speed not set
[   97.367118][ T4613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.441688][ T4613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.558034][ T4613] team0: Port device team_slave_0 added
[   97.600800][ T4613] team0: Port device team_slave_1 added
[   97.705864][ T4740] FAULT_INJECTION: forcing a failure.
[   97.705864][ T4740] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   97.719494][ T4740] CPU: 1 PID: 4740 Comm: syz.1.77 Not tainted 5.15.189-syzkaller #0
[   97.727677][ T4740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   97.737946][ T4740] Call Trace:
[   97.741250][ T4740]  <TASK>
[   97.744285][ T4740]  dump_stack_lvl+0x168/0x230
[   97.749157][ T4740]  ? show_regs_print_info+0x20/0x20
[   97.754505][ T4740]  ? load_image+0x3b0/0x3b0
[   97.759214][ T4740]  ? __lock_acquire+0x7c60/0x7c60
[   97.764269][ T4740]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[   97.770034][ T4740]  should_fail+0x38c/0x4c0
[   97.774480][ T4740]  _copy_from_user+0x2e/0x170
[   97.779187][ T4740]  ____sys_sendmsg+0x305/0x8c0
[   97.784065][ T4740]  ? __sys_sendmsg_sock+0x30/0x30
[   97.789119][ T4740]  ? import_iovec+0x6f/0xa0
[   97.793661][ T4740]  ___sys_sendmsg+0x1f0/0x260
[   97.798541][ T4740]  ? __sys_sendmsg+0x250/0x250
[   97.803433][ T4740]  ? __fdget+0x18b/0x210
[   97.807715][ T4740]  __se_sys_sendmsg+0x190/0x250
[   97.812689][ T4740]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[   97.818519][ T4740]  ? __x64_sys_sendmsg+0x80/0x80
[   97.823587][ T4740]  ? syscall_enter_from_user_mode+0x2a/0x70
[   97.829766][ T4740]  do_syscall_64+0x4c/0xa0
[   97.834348][ T4740]  ? clear_bhb_loop+0x30/0x80
[   97.839128][ T4740]  ? clear_bhb_loop+0x30/0x80
[   97.844021][ T4740]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   97.849956][ T4740] RIP: 0033:0x7f490196bbe9
[   97.854481][ T4740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.874566][ T4740] RSP: 002b:00007f48ffb91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   97.883018][ T4740] RAX: ffffffffffffffda RBX: 00007f4901b93180 RCX: 00007f490196bbe9
[   97.891049][ T4740] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009
[   97.899228][ T4740] RBP: 00007f48ffb91090 R08: 0000000000000000 R09: 0000000000000000
[   97.907406][ T4740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   97.915393][ T4740] R13: 00007f4901b93218 R14: 00007f4901b93180 R15: 00007ffdccd4d278
[   97.923490][ T4740]  </TASK>
[   98.179424][ T4613] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.189948][ T4613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.237242][ T4613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.282850][ T4742] loop5: detected capacity change from 0 to 2048
[   98.351902][ T4613] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.359396][ T4613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.394729][ T4613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.489180][ T4613] device hsr_slave_0 entered promiscuous mode
[   98.511284][ T4613] device hsr_slave_1 entered promiscuous mode
[   98.519433][ T4613] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.534560][ T4613] Cannot create hsr debugfs directory
[   98.702768][ T4716] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[   98.902841][ T4716] usb 2-1: device descriptor read/64, error -71
[   99.172836][ T4716] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   99.262882][ T4714] Bluetooth: hci3: command 0x040f tx timeout
[   99.363676][ T4716] usb 2-1: device descriptor read/64, error -71
[  100.202387][ T4716] usb usb2-port1: attempt power cycle
[  100.265370][ T4763] tipc: Started in network mode
[  100.270567][ T4763] tipc: Node identity , cluster identity 4711
[  100.297542][ T4763] tipc: Failed to obtain node identity
[  100.353142][ T4763] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  100.410123][ T4613] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  100.460600][ T4613] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  100.473256][ T4613] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  100.483494][ T4769] loop5: detected capacity change from 0 to 4096
[  100.501569][ T4613] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  100.545777][ T4769] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  100.612773][ T4716] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  100.620491][ T4291] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  100.632250][ T4769] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  100.686290][ T4769] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  100.722936][ T4716] usb 2-1: device descriptor read/8, error -71
[  100.788459][ T4769] ntfs: volume version 3.1.
[  100.984961][ T4388] ntfs: (device loop5): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  100.996781][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.012969][ T4716] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  101.092606][ T4794] FAULT_INJECTION: forcing a failure.
[  101.092606][ T4794] name failslab, interval 1, probability 0, space 0, times 1
[  101.106166][ T4794] CPU: 1 PID: 4794 Comm: syz.3.88 Not tainted 5.15.189-syzkaller #0
[  101.114314][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  101.124489][ T4794] Call Trace:
[  101.127798][ T4794]  <TASK>
[  101.130766][ T4794]  dump_stack_lvl+0x168/0x230
[  101.135488][ T4794]  ? show_regs_print_info+0x20/0x20
[  101.140716][ T4794]  ? load_image+0x3b0/0x3b0
[  101.145262][ T4794]  ? __might_sleep+0xf0/0xf0
[  101.149879][ T4794]  ? __lock_acquire+0x7c60/0x7c60
[  101.154946][ T4794]  should_fail+0x38c/0x4c0
[  101.159405][ T4794]  should_failslab+0x5/0x20
[  101.164223][ T4794]  slab_pre_alloc_hook+0x51/0xc0
[  101.169192][ T4794]  kmem_cache_alloc_trace+0x47/0x2a0
[  101.174607][ T4794]  ? rxrpc_lookup_local+0x707/0x1520
[  101.180397][ T4794]  rxrpc_lookup_local+0x707/0x1520
[  101.185559][ T4794]  ? rxrpc_process_local_events+0x880/0x880
[  101.191494][ T4794]  ? preempt_schedule_thunk+0x16/0x18
[  101.196930][ T4794]  ? __local_bh_enable_ip+0x13b/0x1b0
[  101.202333][ T4794]  ? _local_bh_enable+0xa0/0xa0
[  101.207232][ T4794]  rxrpc_sendmsg+0x3f1/0x890
[  101.211865][ T4794]  ? rxrpc_getsockopt+0x150/0x150
[  101.216929][ T4794]  ____sys_sendmsg+0x5a2/0x8c0
[  101.221826][ T4794]  ? __sys_sendmsg_sock+0x30/0x30
[  101.226994][ T4794]  ? import_iovec+0x6f/0xa0
[  101.231626][ T4794]  ___sys_sendmsg+0x1f0/0x260
[  101.236430][ T4794]  ? __sys_sendmsg+0x250/0x250
[  101.241260][ T4794]  ? __fdget+0x18b/0x210
[  101.245538][ T4794]  __se_sys_sendmsg+0x190/0x250
[  101.250427][ T4794]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  101.256085][ T4794]  ? __x64_sys_sendmsg+0x80/0x80
[  101.261064][ T4794]  ? syscall_enter_from_user_mode+0x2a/0x70
[  101.266996][ T4794]  do_syscall_64+0x4c/0xa0
[  101.271534][ T4794]  ? clear_bhb_loop+0x30/0x80
[  101.276338][ T4794]  ? clear_bhb_loop+0x30/0x80
[  101.281043][ T4794]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  101.286968][ T4794] RIP: 0033:0x7f334e128be9
[  101.291508][ T4794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.311317][ T4794] RSP: 002b:00007f334c34e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  101.319862][ T4794] RAX: ffffffffffffffda RBX: 00007f334e350180 RCX: 00007f334e128be9
[  101.327953][ T4794] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009
[  101.336136][ T4794] RBP: 00007f334c34e090 R08: 0000000000000000 R09: 0000000000000000
[  101.344241][ T4794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  101.352306][ T4794] R13: 00007f334e350218 R14: 00007f334e350180 R15: 00007ffe84b933f8
[  101.360411][ T4794]  </TASK>
[  101.568736][ T4613] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.584685][ T4291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.603774][ T4291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  101.622560][ T4291] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  101.659735][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.660347][ T4291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.684468][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.734854][ T4613] 8021q: adding VLAN 0 to HW filter on device team0
[  101.798754][ T4291] usb 5-1: config 0 descriptor??
[  101.810858][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.812937][ T4716] usb 2-1: device not accepting address 12, error -71
[  101.830128][ T4716] usb usb2-port1: unable to enumerate USB device
[  101.841805][ T4714] Bluetooth: hci3: command 0x0419 tx timeout
[  101.871438][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.912420][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.920060][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.947990][ T4808] loop1: detected capacity change from 0 to 8
[  101.960068][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  101.979303][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.003628][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.010876][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.038875][ T4808] SQUASHFS error: lzo decompression failed, data probably corrupt
[  102.056646][ T4808] SQUASHFS error: Failed to read block 0x1dd: -5
[  102.066675][ T4808] SQUASHFS error: Unable to read metadata cache entry [1db]
[  102.081307][ T4808] SQUASHFS error: Unable to read inode 0xa7
[  102.106777][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.112889][ T4717] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  102.121388][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.167134][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.206588][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.224748][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.236580][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.279692][ T4817] loop1: detected capacity change from 0 to 128
[  102.309713][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.337114][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.346609][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.354885][ T4717] usb 6-1: Using ep0 maxpacket: 16
[  102.361175][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.369976][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.379122][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.419135][   T26] audit: type=1326 audit(1756127511.205:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4767 comm="syz.4.84" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73fa2febe9 code=0x0
[  102.515664][ T4613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.577307][ T4821] loop3: detected capacity change from 0 to 256
[  102.603299][ T4821] exfat: Deprecated parameter 'namecase'
[  102.609119][ T4821] exfat: Bad value for 'allow_utime'
[  102.633029][ T4717] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  102.665979][ T4821] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  102.671145][ T4717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.746496][ T4717] usb 6-1: Product: syz
[  102.772072][ T4717] usb 6-1: Manufacturer: syz
[  102.790003][ T4717] usb 6-1: SerialNumber: syz
[  102.797845][ T4828] loop1: detected capacity change from 0 to 8
[  102.822085][ T4717] usb 6-1: config 0 descriptor??
[  102.881384][ T4717] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  102.894439][ T4717] usb 6-1: Detected FT-X
[  102.921399][ T4374] device hsr_slave_0 left promiscuous mode
[  102.945683][ T4374] device hsr_slave_1 left promiscuous mode
[  102.959487][ T4828] SQUASHFS error: Unable to read directory block [631:72]
[  102.986912][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.989568][ T4828] SQUASHFS error: Unable to read directory block [631:72]
[  103.004122][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.020637][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.039023][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.042746][ T4834] fuse: Bad value for 'fd'
[  103.051522][ T4374] device bridge_slave_1 left promiscuous mode
[  103.072272][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.091922][ T4374] device bridge_slave_0 left promiscuous mode
[  103.115417][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.140245][ T4374] device veth1_macvtap left promiscuous mode
[  103.147088][ T4374] device veth0_macvtap left promiscuous mode
[  103.153522][ T4374] device veth1_vlan left promiscuous mode
[  103.201110][ T4374] device veth0_vlan left promiscuous mode
[  103.373028][ T4717] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  103.402981][ T4717] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  103.416337][ T4717] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  103.446045][ T4717] usb 6-1: USB disconnect, device number 3
[  103.475366][ T4717] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  103.494358][ T4717] ftdi_sio 6-1:0.0: device disconnected
[  103.638835][ T4291] usbhid 5-1:0.0: can't add hid device: -71
[  103.653562][ T4291] usbhid: probe of 5-1:0.0 failed with error -71
[  103.702760][ T4291] usb 5-1: USB disconnect, device number 3
[  103.957029][ T4854] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  103.963611][ T4854] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  103.971203][ T4854] vhci_hcd vhci_hcd.0: Device attached
[  104.017940][ T4374] team0 (unregistering): Port device team_slave_1 removed
[  104.049943][ T4374] team0 (unregistering): Port device team_slave_0 removed
[  104.071494][ T4374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.079571][ T4844] loop1: detected capacity change from 0 to 32768
[  104.112508][ T4374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.172897][ T4717] vhci_hcd: vhci_device speed not set
[  104.224534][ T4374] bond0 (unregistering): Released all slaves
[  104.249014][ T4717] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  104.262819][ T4251] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  104.317941][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  104.335395][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.367684][ T4613] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.457995][ T4291] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  104.642006][ T4871] loop7: detected capacity change from 0 to 7
[  104.672382][ T4203] Dev loop7: unable to read RDB block 7
[  104.683100][ T4251] usb 4-1: config 0 has no interfaces?
[  104.688631][ T4251] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  104.704057][ T4203]  loop7: unable to read partition table
[  104.713036][ T4291] usb 2-1: Using ep0 maxpacket: 32
[  104.741749][ T4203] loop7: partition table beyond EOD, truncated
[  104.748697][ T4251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.790892][ T4871] Dev loop7: unable to read RDB block 7
[  104.816805][ T4251] usb 4-1: config 0 descriptor??
[  104.832117][ T4871]  loop7: unable to read partition table
[  104.874287][ T4871] loop7: partition table beyond EOD, truncated
[  104.913036][ T4291] usb 2-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config
[  104.923688][ T4871] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  104.954870][ T4291] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.065451][ T4856] vhci_hcd: connection reset by peer
[  105.072585][   T13] usb 4-1: USB disconnect, device number 4
[  105.086496][ T1397] vhci_hcd: stop threads
[  105.097916][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.110915][ T1397] vhci_hcd: release socket
[  105.125821][ T4291] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.137190][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.145275][ T1397] vhci_hcd: disconnect device
[  105.160316][ T4291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.193627][ T4291] usb 2-1: Product: ᶹ趛Թଇℋ�ﰯ圇ወ㞔ώ之삊쿘⢔�셬薔妙ꂥ塽ᓘ먼켫�懴��⦓멈诉ړ矧⡈�⾀를㉔竢ର�䤻棉�ᙿ찱�ᅛﰸ㠲ꉵꙿ퓈⩄��鉉助�ᴡ
[  105.230534][ T4291] usb 2-1: SerialNumber: syz
[  105.267539][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.293954][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.312393][ T3562] Dev loop7: unable to read RDB block 7
[  105.324909][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.332299][ T3562]  loop7: unable to read partition table
[  105.338697][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.352209][ T4613] device veth0_vlan entered promiscuous mode
[  105.358291][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  105.358488][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  105.376255][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  105.385365][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  105.394673][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  105.403685][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  105.412842][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!!
[  105.430050][ T3562] loop7: partition table beyond EOD, truncated
[  105.548318][ T4613] device veth1_vlan entered promiscuous mode
[  105.834073][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.852031][ T1397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.934820][ T4613] device veth0_macvtap entered promiscuous mode
[  105.952995][ T4291] usb 2-1: 0:2 : does not exist
[  105.992098][ T4613] device veth1_macvtap entered promiscuous mode
[  106.080826][ T4895] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  106.135058][ T4291] usb 2-1: USB disconnect, device number 13
[  106.141606][ T4895] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  106.146598][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.216696][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.249693][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.265695][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.279874][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.297127][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.310708][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.326023][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.349005][ T4613] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.408227][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.427411][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.478587][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.523623][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.578338][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.603571][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.617429][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.630737][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.641504][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.652906][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[  106.668225][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.668438][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.668502][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.677359][ T4613] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.831867][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.863507][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.006334][ T4613] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.036937][ T4613] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.064788][ T4613] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.079384][ T4904] tmpfs: Bad value for 'mpol'
[  107.568936][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[  107.635057][ T4613] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.256673][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.552765][ T4188] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  108.646375][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.753221][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  108.903304][ T4927] netlink: 'syz.3.110': attribute type 1 has an invalid length.
[  108.912770][ T4188] usb 5-1: Using ep0 maxpacket: 16
[  109.002512][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[  109.353159][ T4717] vhci_hcd: vhci_device speed not set
[  109.612740][ T4716] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  110.332806][ T4188] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.116981][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.167252][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.216595][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  111.252960][ T4188] usb 5-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  111.272319][ T4188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.315176][ T4188] usb 5-1: Product: syz
[  111.352947][ T4188] usb 5-1: Manufacturer: syz
[  111.383136][ T4188] usb 5-1: SerialNumber: syz
[  111.416069][ T4188] usb 5-1: config 0 descriptor??
[  111.462915][ T4188] usb 5-1: can't set config #0, error -71
[  111.469218][ T4716] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[  111.498590][ T4188] usb 5-1: USB disconnect, device number 4
[  111.504840][ T4716] usb 6-1: config 1 has no interface number 0
[  111.532595][ T4716] usb 6-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  111.589974][ T4716] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.783108][ T4717] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  111.852869][ T4716] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  111.866901][ T4716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.883679][ T4716] usb 6-1: Product: syz
[  111.905509][ T4716] usb 6-1: Manufacturer: syz
[  111.975140][ T4716] usb 6-1: can't set config #1, error -71
[  112.033323][ T4716] usb 6-1: USB disconnect, device number 4
[  112.062926][ T4717] usb 4-1: Using ep0 maxpacket: 32
[  112.213086][ T4717] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  112.213119][ T4717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.215087][ T4717] usb 4-1: config 0 descriptor??
[  112.482903][ T4717] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  112.716559][ T4717] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  112.821389][ T4717] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  112.850337][ T4717] usb 4-1: media controller created
[  112.915852][ T4717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  113.052903][ T4717] az6027: usb out operation failed. (-71)
[  113.082870][ T4717] az6027: usb out operation failed. (-71)
[  113.102736][ T4717] stb0899_attach: Driver disabled by Kconfig
[  113.141967][ T4717] az6027: no front-end attached
[  113.141967][ T4717] 
[  113.202914][ T4717] az6027: usb out operation failed. (-71)
[  113.225438][ T4717] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  113.303026][ T4717] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[  113.394286][ T4717] dvb-usb: schedule remote query interval to 400 msecs.
[  113.426378][ T4717] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  113.555257][ T4717] usb 4-1: USB disconnect, device number 5
[  113.746111][ T4717] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  114.062770][ T4188] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  114.562981][ T4188] usb 2-1: Using ep0 maxpacket: 16
[  114.923116][ T4188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.235850][ T4188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.297239][ T4188] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  115.350966][ T4188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.507864][ T4188] usb 2-1: config 0 descriptor??
[  116.546316][ T4188] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  116.560667][ T4188] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  116.596522][ T4188] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0
[  116.616520][ T4188] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  116.750480][ T4983] i2c i2c-1: unsupported multi-msg i2c transaction
[  116.811488][ T4188] usb 2-1: USB disconnect, device number 14
[  117.180520][ T5018] netlink: 36 bytes leftover after parsing attributes in process `syz.6.129'.
[  117.363629][ T5017] netlink: 'syz.6.129': attribute type 1 has an invalid length.
[  120.356566][ T5052] syz.1.133 uses obsolete (PF_INET,SOCK_PACKET)
[  120.377114][ T1092] block nbd1: Attempted send on invalid socket
[  120.390092][ T1092] blk_update_request: I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  120.404575][ T1092] block nbd1: Attempted send on invalid socket
[  120.410830][ T1092] blk_update_request: I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  120.481398][ T5052] Mount JFS Failure: -5
[  122.823995][ T5024] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.833331][ T5024] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.854666][ T5024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.926141][ T5024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.499111][ T5024] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.508302][ T5024] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.523662][ T5024] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.533080][ T5024] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.592880][    T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  124.693519][ T5048] netlink: 68 bytes leftover after parsing attributes in process `syz.6.134'.
[  124.930935][ T5088] netlink: 5376 bytes leftover after parsing attributes in process `syz.6.143'.
[  124.948898][    T7] usb 4-1: Using ep0 maxpacket: 8
[  125.413022][ T4287] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  125.732872][    T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.762987][    T7] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  126.043205][ T4287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  126.399560][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.426554][ T4287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.437305][ T4287] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  126.451950][    T7] usb 4-1: config 0 descriptor??
[  126.470922][ T4287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.510836][    T7] gspca_main: vc032x-2.14.0 probing 046d:0892
[  126.520201][ T4287] usb 5-1: config 0 descriptor??
[  126.864850][ T5123] netlink: 'syz.6.153': attribute type 16 has an invalid length.
[  126.883629][ T5123] netlink: 'syz.6.153': attribute type 17 has an invalid length.
[  126.959228][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  126.977692][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  127.228137][ T4287] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0
[  127.750891][    T7] gspca_vc032x: reg_w err -71
[  127.756070][    T7] vc032x: probe of 4-1:0.0 failed with error -71
[  127.765859][    T7] usb 4-1: USB disconnect, device number 6
[  127.880863][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  127.890807][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  128.038390][ T4287] usb 5-1: USB disconnect, device number 5
[  128.172906][ T5138] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  128.179671][ T5138] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  128.187406][ T5138] vhci_hcd vhci_hcd.0: Device attached
[  128.224020][ T5145] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer.
[  128.266770][ T5135] fido_id[5135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  128.412927][ T4333] vhci_hcd: vhci_device speed not set
[  128.452924][ T2288] usb 2-1: new low-speed USB device number 15 using dummy_hcd
[  128.656073][ T4333] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  128.882929][ T2288] usb 2-1: config 0 has no interfaces?
[  128.889528][ T2288] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  128.990444][ T2288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.226457][ T2288] usb 2-1: config 0 descriptor??
[  130.119116][ T5142] vhci_hcd: unknown pdu 2
[  130.147831][ T1397] vhci_hcd: stop threads
[  130.182969][ T1397] vhci_hcd: release socket
[  130.212893][ T4333] vhci_hcd: vhci_device speed not set
[  130.370167][ T2288] usb 2-1: USB disconnect, device number 15
[  130.439485][ T1397] vhci_hcd: disconnect device
[  131.222778][ T4188] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  131.687326][ T5208] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  131.718701][ T5208] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  132.093176][ T4188] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.159623][ T4188] usb 7-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  132.199734][ T4188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.426817][ T4188] usb 7-1: config 0 descriptor??
[  132.793017][ T4188] usbhid 7-1:0.0: can't add hid device: -71
[  132.819565][ T4188] usbhid: probe of 7-1:0.0 failed with error -71
[  132.852171][ T4188] usb 7-1: USB disconnect, device number 2
[  132.867294][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  132.873880][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  132.895492][ T5237] netlink: 32 bytes leftover after parsing attributes in process `syz.6.176'.
[  138.505888][ T4188] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  138.966792][ T4188] usb 2-1: Using ep0 maxpacket: 32
[  139.123632][ T5312] netlink: 'syz.3.192': attribute type 10 has an invalid length.
[  139.358218][ T5312] team0: Port device wlan1 added
[  139.572990][ T4188] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  139.589901][ T4188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.620415][ T4188] usb 2-1: Product: syz
[  139.653197][ T4188] usb 2-1: Manufacturer: syz
[  139.658036][ T4188] usb 2-1: SerialNumber: syz
[  139.735256][ T4188] usb 2-1: config 0 descriptor??
[  139.788600][ T4188] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  140.543015][ T4188] gspca_ov534_9: reg_w failed -110
[  140.956568][ T4333] Bluetooth: hci3: command 0x0405 tx timeout
[  141.218453][ T4188] gspca_ov534_9: Unknown sensor 0000
[  141.218513][ T4188] ov534_9: probe of 2-1:0.0 failed with error -22
[  141.922764][ T4188] usb 2-1: USB disconnect, device number 16
[  142.133944][ T5360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.204'.
[  142.210509][ T5361] netlink: 'syz.1.204': attribute type 2 has an invalid length.
[  142.257635][ T5361] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.204'.
[  142.436126][ T5365] input: syz1 as /devices/virtual/input/input7
[  142.732997][ T4333] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  143.453003][ T4333] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  143.462128][ T4333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.492335][ T4333] usb 2-1: Product: syz
[  143.543219][ T4333] usb 2-1: Manufacturer: syz
[  143.550693][ T4333] usb 2-1: SerialNumber: syz
[  143.710183][ T5384] tipc: Started in network mode
[  144.068948][ T5384] tipc: Node identity e270e67bd132, cluster identity 4711
[  144.103076][ T5384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  144.114129][ T5393] device syzkaller0 entered promiscuous mode
[  144.125653][ T4333] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  144.265817][ T5393] tipc: Resetting bearer <eth:syzkaller0>
[  144.775120][ T5382] tipc: Resetting bearer <eth:syzkaller0>
[  144.845037][ T5382] tipc: Disabling bearer <eth:syzkaller0>
[  145.183026][ T4717] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  146.528512][ T4717] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  147.430424][ T4717] ath9k_htc: Failed to initialize the device
[  147.569570][ T4188] usb 2-1: USB disconnect, device number 17
[  147.598075][ T4188] usb 2-1: ath9k_htc: USB layer deinitialized
[  147.712884][ T4333] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  148.123118][ T4333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.143483][ T4333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.171772][ T4333] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  148.198832][ T5419] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  148.212918][ T5419] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  148.252545][ T4333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.286971][ T5422] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  148.306958][ T4333] usb 5-1: config 0 descriptor??
[  148.313082][ T5422] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  148.329489][ T5433] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  148.357539][ T4333] usb 5-1: can't set config #0, error -71
[  148.379157][ T4333] usb 5-1: USB disconnect, device number 6
[  148.452804][ T5056] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  148.983040][ T5056] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  149.013011][ T5056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.021251][ T5056] usb 4-1: Product: syz
[  149.036537][ T5056] usb 4-1: Manufacturer: syz
[  149.082795][ T5056] usb 4-1: SerialNumber: syz
[  149.118245][ T5056] usb 4-1: config 0 descriptor??
[  149.452915][ T4333] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  149.679692][ T5470] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  149.698955][ T5470] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  150.263383][ T4333] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  150.412955][ T4287] usb 4-1: USB disconnect, device number 7
[  150.600968][ T4333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.473572][ T4333] usb 2-1: Product: syz
[  151.477802][ T4333] usb 2-1: Manufacturer: syz
[  151.483364][ T4333] usb 2-1: SerialNumber: syz
[  152.533194][ T4333] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32
[  152.582488][ T4333] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  152.647155][ T5511] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  152.658772][ T4333] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  153.323521][ T4333] lan78xx: probe of 2-1:1.0 failed with error -32
[  154.873091][   T26] audit: type=1326 audit(1756127563.665:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73fa2febe9 code=0x7ffc0000
[  154.942092][ T4188] usb 2-1: USB disconnect, device number 18
[  155.070924][   T26] audit: type=1326 audit(1756127563.715:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f73fa2febe9 code=0x7ffc0000
[  156.369399][ T5556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.244'.
[  156.407279][   T26] audit: type=1326 audit(1756127563.715:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73fa2febe9 code=0x7ffc0000
[  156.481210][   T26] audit: type=1326 audit(1756127563.715:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5527 comm="syz.4.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73fa2febe9 code=0x7ffc0000
[  157.978868][ T5587] tmpfs: Unknown parameter 'usrquota'
[  158.097927][ T5589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.251'.
[  159.034336][ T5602] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  160.182084][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.5.260'.
[  160.278049][ T4188] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  160.420325][ T4188] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  161.161023][ T5621] fido_id[5621]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  163.872744][ T4188] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  163.972902][ T4333] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  164.223146][ T4333] usb 2-1: Using ep0 maxpacket: 8
[  164.404479][ T4188] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  164.432694][ T4188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.455663][ T4188] usb 6-1: Product: syz
[  164.471256][ T4188] usb 6-1: Manufacturer: syz
[  164.476634][ T4188] usb 6-1: SerialNumber: syz
[  164.495261][ T4188] usb 6-1: config 0 descriptor??
[  164.509044][ T4333] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  164.544414][ T4333] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.555136][ T5674] netlink: 64 bytes leftover after parsing attributes in process `syz.6.273'.
[  164.566170][ T4333] usb 2-1: Product: syz
[  164.570401][ T4333] usb 2-1: Manufacturer: syz
[  164.591944][ T4333] usb 2-1: SerialNumber: syz
[  164.602475][ T4333] usb 2-1: config 0 descriptor??
[  164.873036][ T4333] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  164.913754][ T1111] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  165.272979][ T1111] usb 4-1: Using ep0 maxpacket: 16
[  165.429382][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.539139][   T26] audit: type=1326 audit(1756127574.325:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.5.268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d5f314be9 code=0x0
[  165.638624][ T1111] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=72.aa
[  165.652962][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.677582][ T1111] usb 4-1: Product: syz
[  165.686524][ T1111] usb 4-1: Manufacturer: syz
[  165.702519][ T1111] usb 4-1: SerialNumber: syz
[  165.721778][ T1111] usb 4-1: config 0 descriptor??
[  165.999235][ T4251] usb 4-1: USB disconnect, device number 8
[  166.584027][ T4188] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  166.596733][ T4188] asix: probe of 6-1:0.0 failed with error -32
[  166.623165][ T4333] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  166.667617][ T4333] usb 2-1: USB disconnect, device number 19
[  167.149735][ T5734] nfs: Unknown parameter ''
[  167.769541][ T4251] usb 6-1: USB disconnect, device number 5
[  168.054572][ T5740] Disabled LAPIC found during irq injection
[  170.854820][ T5793] netlink: 'syz.6.291': attribute type 1 has an invalid length.
[  170.952698][ T4287] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  171.193531][ T4287] usb 5-1: Using ep0 maxpacket: 32
[  171.333221][ T4287] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  171.349889][ T4287] usb 5-1: config 0 has no interface number 0
[  171.372959][ T4287] usb 5-1: config 0 interface 89 has no altsetting 0
[  171.574394][ T4287] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  171.600307][ T4287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.668528][ T4287] usb 5-1: Product: syz
[  171.691372][ T4287] usb 5-1: Manufacturer: syz
[  171.714063][ T4287] usb 5-1: SerialNumber: syz
[  171.778215][ T4287] usb 5-1: config 0 descriptor??
[  171.834275][ T4287] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  171.844060][ T4287] em28xx 5-1:0.89: Video interface 89 found: bulk
[  173.012250][ T5819] capability: warning: `syz.1.300' uses deprecated v2 capabilities in a way that may be insecure
[  173.142780][ T4287] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  173.292923][ T4287] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  173.317152][ T4287] em28xx 5-1:0.89: board has no eeprom
[  173.472858][ T4287] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  173.485649][ T4287] em28xx 5-1:0.89: analog set to bulk mode.
[  173.526205][ T4287] em28xx 5-1:0.89: Registering V4L2 extension
[  173.762833][ T4287] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  173.803060][ T4287] em28xx 5-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[  173.843819][ T4287] em28xx 5-1:0.89: reading from i2c device at 0x42 failed (error=-5)
[  173.872817][ T4287] em28xx 5-1:0.89: reading from i2c device at 0x40 failed (error=-5)
[  173.912911][ T4287] em28xx 5-1:0.89: Config register raw data: 0xfffffffb
[  173.942868][ T4287] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  173.950350][ T4287] em28xx 5-1:0.89: No AC97 audio processor
[  174.087490][ T4251] usb 5-1: USB disconnect, device number 7
[  174.099128][ T4287] usb 5-1: Decoder not found
[  174.113013][ T4287] em28xx 5-1:0.89: failed to create media graph
[  174.120008][ T4251] em28xx 5-1:0.89: Disconnecting em28xx
[  174.138203][ T4287] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  174.224101][ T4287] em28xx 5-1:0.89: Registering snapshot button...
[  174.309572][ T4287] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input8
[  174.384792][ T4287] em28xx 5-1:0.89: Remote control support is not available for this card.
[  174.543607][ T4251] em28xx 5-1:0.89: Closing input extension
[  174.551138][ T4251] em28xx 5-1:0.89: Deregistering snapshot button
[  174.593228][ T5852] device pim6reg1 entered promiscuous mode
[  175.273907][ T4251] em28xx 5-1:0.89: Freeing device
[  175.772860][ T4333] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  175.961333][ T4251] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  177.472860][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.554957][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.564670][ T4333] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  178.622859][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.695641][ T4333] usb 4-1: config 0 descriptor??
[  178.712698][ T4251] usb 5-1: device not accepting address 8, error -71
[  178.742841][ T4333] usb 4-1: can't set config #0, error -71
[  178.768369][ T4333] usb 4-1: USB disconnect, device number 9
[  180.818253][ T5919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.319'.
[  180.872732][ T4251] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  181.852754][ T4251] usb 5-1: Using ep0 maxpacket: 16
[  181.975301][ T4251] usb 5-1: config 0 has an invalid interface number: 237 but max is 0
[  182.015791][ T4251] usb 5-1: config 0 has no interface number 0
[  182.022146][ T4251] usb 5-1: config 0 interface 237 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[  182.128924][ T5939] netlink: 'syz.5.325': attribute type 1 has an invalid length.
[  182.172790][ T4251] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid maxpacket 943, setting to 64
[  182.184410][ T5939] device bond1 entered promiscuous mode
[  182.200606][ T5939] 8021q: adding VLAN 0 to HW filter on device bond1
[  182.392898][ T4251] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice=72.aa
[  182.437660][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.501519][ T4251] usb 5-1: Product: syz
[  182.523615][ T4251] usb 5-1: Manufacturer: syz
[  182.552440][ T4251] usb 5-1: SerialNumber: syz
[  182.604358][ T4251] usb 5-1: config 0 descriptor??
[  183.072867][ T4251] usb 5-1: can't set config #0, error -71
[  183.102962][ T4251] usb 5-1: USB disconnect, device number 10
[  186.145755][ T4333] Bluetooth: hci0: command 0x0406 tx timeout
[  186.153727][ T4251] Bluetooth: hci4: command 0x0406 tx timeout
[  186.172422][ T4251] Bluetooth: hci1: command 0x0406 tx timeout
[  186.486546][ T5983] syz.4.334[5983] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  186.486654][ T5983] syz.4.334[5983] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  189.567747][ T5994] tipc: Started in network mode
[  189.717451][ T5994] tipc: Node identity c, cluster identity 4711
[  189.760845][ T5994] tipc: Node number set to 12
[  189.800206][ T6002] netlink: 'syz.5.338': attribute type 6 has an invalid length.
[  189.825675][ T6002] netlink: 32 bytes leftover after parsing attributes in process `syz.5.338'.
[  193.172506][ T6050] o2cb: This node has not been configured.
[  193.179582][ T6050] o2cb: Cluster check failed. Fix errors before retrying.
[  193.187441][ T6050] (syz.6.349,6050,1):user_dlm_register:675 ERROR: status = -22
[  193.195138][ T6050] (syz.6.349,6050,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1"
[  193.882915][ T4229] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  193.976002][ T6054] device bridge_slave_0 left promiscuous mode
[  194.023393][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.057334][ T6054] device bridge_slave_1 left promiscuous mode
[  194.071718][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.123233][ T6054] bond0: (slave bond_slave_0): Releasing backup interface
[  194.139809][ T6054] bond0: (slave bond_slave_1): Releasing backup interface
[  194.189335][ T6054] team0: Port device team_slave_0 removed
[  194.220986][ T6054] team0: Port device team_slave_1 removed
[  194.310592][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  194.317518][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  194.370766][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.409802][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.417680][ T4229] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  194.447119][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.491312][ T4229] usb 2-1: Product: syz
[  194.502991][ T4229] usb 2-1: Manufacturer: syz
[  194.513443][ T4229] usb 2-1: SerialNumber: syz
[  194.540489][ T6057] team0: Mode changed to "loadbalance"
[  194.549812][ T4229] usb 2-1: config 0 descriptor??
[  194.570818][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'.
[  194.812917][ T4229] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  195.152828][ T6073] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  195.200476][ T6073] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  195.712965][ T4250] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  195.992723][ T4250] usb 7-1: Using ep0 maxpacket: 32
[  196.112981][ T4250] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  196.138957][ T4250] usb 7-1: config 0 has no interface number 0
[  196.173148][ T4250] usb 7-1: config 0 interface 12 has no altsetting 0
[  196.393203][ T4250] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  196.416804][ T4250] usb 7-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  196.488160][ T4250] usb 7-1: Product: syz
[  196.492396][ T4250] usb 7-1: Manufacturer: syz
[  196.517947][ T4250] usb 7-1: SerialNumber: syz
[  196.559235][ T4250] usb 7-1: config 0 descriptor??
[  196.803672][ T4333] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  197.049349][ T6129] tmpfs: Unknown parameter 'usrquota'
[  197.330737][ T4229] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32)
[  197.352944][ T4333] usb 4-1: Using ep0 maxpacket: 16
[  197.373000][ T4229] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick)
[  197.415982][ T4229] usb 2-1: media controller created
[  197.435264][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  197.493486][ T4229] dvb_usb_rtl28xxu 2-1:0.0: unknown tuner TDA18272
[  197.533317][ T4229] usb 2-1: USB disconnect, device number 20
[  197.805156][ T4333] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  197.815112][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.825242][ T4333] usb 4-1: Product: syz
[  197.829461][ T4333] usb 4-1: Manufacturer: syz
[  197.843460][ T4333] usb 4-1: SerialNumber: syz
[  197.857568][ T4333] usb 4-1: config 0 descriptor??
[  198.955804][ T4333] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  198.991476][ T6151] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  199.042709][ T4229] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  199.520831][ T4333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  199.627438][ T4333] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  199.652728][ T4333] usb 4-1: media controller created
[  199.905657][ T4250] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  200.053253][ T4229] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  200.170130][ T4250] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  200.178449][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.189491][ T4333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  200.198516][ T4250] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  200.209458][ T4229] usb 5-1: config 0 descriptor??
[  200.217177][ T4250] f81534: probe of 7-1:0.12 failed with error -71
[  200.254760][ T4250] usb 7-1: USB disconnect, device number 3
[  200.372272][ T4333] zl10353_read_register: readreg error (reg=127, ret==0)
[  200.380570][ T4229] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  200.393266][ T4333] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  200.569913][ T6174] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present
[  200.763944][ T4333] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  200.795989][ T4333] usb 4-1: USB disconnect, device number 10
[  201.108468][ T4333] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  201.602850][ T1111] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  201.716628][ T4229] usb 5-1: USB disconnect, device number 11
[  201.862803][ T1111] usb 2-1: Using ep0 maxpacket: 32
[  202.617703][ T1111] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  202.713640][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.942225][ T1111] usb 2-1: Product: syz
[  203.141993][ T1111] usb 2-1: Manufacturer: syz
[  203.168393][ T1111] usb 2-1: SerialNumber: syz
[  204.270614][ T6233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  204.645213][ T1111] usb 2-1: config 0 descriptor??
[  204.663963][ T1111] usb 2-1: can't set config #0, error -71
[  204.672961][ T1111] usb 2-1: USB disconnect, device number 21
[  205.426319][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'.
[  205.466637][ T6256] netlink: 56 bytes leftover after parsing attributes in process `syz.6.394'.
[  205.549619][ T6256] netlink: 56 bytes leftover after parsing attributes in process `syz.6.394'.
[  205.778782][ T2288] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  205.796895][ T2288] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  206.162890][ T2288] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  206.432740][ T2288] usb 2-1: Using ep0 maxpacket: 8
[  206.515630][ T6278] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  206.525485][ T6278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  206.533136][ T6278] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.556492][ T6278] device bond1 left promiscuous mode
[  206.703407][ T5056] Bluetooth: hci2: command 0x0406 tx timeout
[  206.804774][ T2288] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  206.848024][ T2288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.937190][ T2288] usb 2-1: Product: syz
[  206.941591][ T2288] usb 2-1: Manufacturer: syz
[  207.139209][ T2288] usb 2-1: SerialNumber: syz
[  207.142710][ T4333] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  207.501013][ T2288] usb 2-1: config 0 descriptor??
[  208.112846][ T4333] usb 4-1: Using ep0 maxpacket: 16
[  208.203576][ T2288] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  208.302929][ T4333] usb 4-1: config 0 has no interfaces?
[  208.683722][ T4250] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  208.783408][ T4333] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  208.959701][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.022826][ T4333] usb 4-1: Product: syz
[  209.027052][ T4333] usb 4-1: Manufacturer: syz
[  209.069695][ T4333] usb 4-1: SerialNumber: syz
[  209.095809][ T4333] usb 4-1: config 0 descriptor??
[  209.253012][ T4250] usb 6-1: config 0 has an invalid interface number: 129 but max is 0
[  209.261702][ T4250] usb 6-1: config 0 has no interface number 0
[  209.288718][ T4250] usb 6-1: New USB device found, idVendor=0644, idProduct=8020, bcdDevice=4e.90
[  209.318911][ T4250] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.343307][ T4250] usb 6-1: config 0 descriptor??
[  209.503808][ T4333] usb 4-1: USB disconnect, device number 11
[  210.372948][ T4250] usb 6-1: string descriptor 0 read error: -71
[  210.401300][ T4250] disable ehci-hcd to run US-144
[  210.442124][ T4250] usb 6-1: USB disconnect, device number 6
[  210.562816][ T2288] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  210.610790][ T2288] usb 2-1: USB disconnect, device number 22
[  212.122718][ T2288] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  212.372696][ T2288] usb 6-1: Using ep0 maxpacket: 16
[  212.652928][ T2288] usb 6-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  212.683030][ T2288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.730246][ T2288] usb 6-1: Product: syz
[  212.764157][ T2288] usb 6-1: Manufacturer: syz
[  212.782133][ T2288] usb 6-1: SerialNumber: syz
[  212.820642][ T2288] usb 6-1: config 0 descriptor??
[  213.144299][ T2288] hub 6-1:0.0: bad descriptor, ignoring hub
[  213.150348][ T2288] hub: probe of 6-1:0.0 failed with error -5
[  213.303534][ T2288] usb 6-1: USB disconnect, device number 7
[  214.253944][ T6385] sg_write: data in/out 91/14 bytes for SCSI command 0x0-- guessing data in;
[  214.253944][ T6385]    program syz.3.433 not setting count and/or reply_len properly
[  217.902739][ T4250] Bluetooth: hci3: command 0x0406 tx timeout
[  217.991322][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'.
[  218.140067][ T6414] netlink: 16 bytes leftover after parsing attributes in process `syz.5.444'.
[  218.963160][ T6426] device veth0_to_bridge entered promiscuous mode
[  218.990101][ T6425] device veth0_to_bridge left promiscuous mode
[  219.115004][ T4250] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  220.685782][ T4250] usb 4-1: Using ep0 maxpacket: 32
[  221.423158][ T4250] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  221.432383][ T4250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.499634][ T4250] usb 4-1: config 0 descriptor??
[  221.763428][ T4250] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  222.452715][ T4188] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  222.493218][ T4250] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  222.923377][ T4250] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  222.930734][ T4250] usb 4-1: media controller created
[  222.951397][ T4250] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  223.052801][ T4188] usb 7-1: Using ep0 maxpacket: 32
[  223.092884][ T4250] az6027: usb out operation failed. (-71)
[  223.134955][ T4250] az6027: usb out operation failed. (-71)
[  223.161399][ T4250] stb0899_attach: Driver disabled by Kconfig
[  223.196428][ T4250] az6027: no front-end attached
[  223.196428][ T4250] 
[  223.233000][ T4250] az6027: usb out operation failed. (-71)
[  223.241293][ T4250] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  223.272346][ T4250] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10
[  223.356376][ T4250] dvb-usb: schedule remote query interval to 400 msecs.
[  223.363696][ T4188] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  223.379488][ T4188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.392694][ T4250] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  223.402686][ T4188] usb 7-1: Product: syz
[  223.406895][ T4188] usb 7-1: Manufacturer: syz
[  223.439102][ T4250] usb 4-1: USB disconnect, device number 12
[  223.453118][ T4188] usb 7-1: SerialNumber: syz
[  223.504904][ T4188] usb 7-1: config 0 descriptor??
[  223.555666][ T4188] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  223.647779][ T4250] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  226.583229][ T4188] gspca_ov534_9: reg_r err -110
[  226.872743][ T4188] gspca_ov534_9: Unknown sensor 0000
[  226.872795][ T4188] ov534_9: probe of 7-1:0.0 failed with error -22
[  227.190426][ T4188] usb 7-1: USB disconnect, device number 4
[  227.842775][ T5056] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  227.922082][ T6509] netlink: 64 bytes leftover after parsing attributes in process `syz.5.475'.
[  228.252753][ T5056] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.903058][ T5056] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.914953][ T5056] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  228.939552][ T5056] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  228.949382][ T5056] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.968796][ T5056] usb 7-1: config 0 descriptor??
[  229.714401][ T5056] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd
[  229.733792][ T5056] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  229.925920][ T5056] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  231.825813][ T4229] usb 7-1: USB disconnect, device number 5
[  233.913061][ T5056] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  235.773160][ T5056] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  236.044522][ T5056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.062912][ T5056] usb 4-1: Product: syz
[  236.067226][ T5056] usb 4-1: Manufacturer: syz
[  236.072022][ T5056] usb 4-1: SerialNumber: syz
[  236.141623][ T5056] usb 4-1: config 0 descriptor??
[  237.272787][ T5056] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  237.290681][ T5056] asix: probe of 4-1:0.0 failed with error -32
[  237.661250][   T26] audit: type=1326 audit(1756127646.445:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6558 comm="syz.3.486" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f334e128be9 code=0x0
[  238.881415][ T6605] device syzkaller1 entered promiscuous mode
[  239.652512][ T4188] usb 4-1: USB disconnect, device number 13
[  242.918505][ T6649] binder_alloc: 6644: binder_alloc_buf, no vma
[  243.634797][ T6655] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  246.902696][ T4333] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  247.352988][ T4333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.367794][ T4333] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.376485][ T4251] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  247.378681][ T4333] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  247.397057][ T4333] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.418123][ T4333] usb 7-1: config 0 descriptor??
[  247.422872][ T2288] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  247.752939][ T4251] usb 5-1: config 0 has an invalid interface number: 3 but max is 0
[  247.946961][ T4333] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  248.082691][ T2288] usb 2-1: Using ep0 maxpacket: 16
[  248.258414][ T4251] usb 5-1: config 0 has no interface number 0
[  248.265370][ T4333] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0
[  248.341223][ T6704] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  248.362812][ T4333] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected
[  248.403256][ T2288] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.412103][ T4333] usb 7-1: USB disconnect, device number 6
[  248.429026][ T2288] usb 2-1: config 0 has no interfaces?
[  248.452960][ T4251] usb 5-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84
[  248.468609][ T6701] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  248.479460][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.497860][ T4333] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected
[  248.501423][ T4251] usb 5-1: Product: syz
[  248.510183][ T6701] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  248.527910][ T4251] usb 5-1: Manufacturer: syz
[  248.549155][ T4251] usb 5-1: SerialNumber: syz
[  248.570538][ T4251] usb 5-1: config 0 descriptor??
[  248.603115][ T2288] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  248.618592][ T2288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.647264][ T2288] usb 2-1: Product: syz
[  248.656536][ T6709] fido_id[6709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  248.671085][ T2288] usb 2-1: Manufacturer: syz
[  248.680493][ T2288] usb 2-1: SerialNumber: syz
[  248.695375][ T2288] usb 2-1: config 0 descriptor??
[  248.932859][ T4251] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware
[  249.849579][ T4251] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  249.859110][ T4251] dib0700: firmware download failed at 7 with -22
[  249.866037][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.534'.
[  249.870649][ T4251] usb 5-1: USB disconnect, device number 12
[  251.286643][ T2288] usb 2-1: USB disconnect, device number 23
[  251.543211][ T6747] o2cb: This node has not been configured.
[  251.549237][ T6747] o2cb: Cluster check failed. Fix errors before retrying.
[  251.556747][ T6747] (syz.3.540,6747,0):user_dlm_register:675 ERROR: status = -22
[  251.564424][ T6747] (syz.3.540,6747,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1"
[  253.442900][ T2288] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  253.714690][ T2288] usb 4-1: Using ep0 maxpacket: 32
[  254.182922][ T2288] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  254.318980][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'.
[  255.063052][ T2288] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  255.147436][ T2288] usb 4-1: config 1 has no interface number 1
[  255.188258][ T6774] netlink: zone id is out of range
[  255.199002][ T6774] netlink: zone id is out of range
[  255.204538][ T6774] netlink: zone id is out of range
[  255.216775][ T6774] netlink: set zone limit has 4 unknown bytes
[  255.378371][ T2288] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  255.412387][ T2288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.432008][ T2288] usb 4-1: Product: syz
[  255.459013][ T2288] usb 4-1: Manufacturer: syz
[  255.509140][ T2288] usb 4-1: SerialNumber: syz
[  255.746501][ T1429] ieee802154 phy0 wpan0: encryption failed: -22
[  255.753027][ T1429] ieee802154 phy1 wpan1: encryption failed: -22
[  255.783031][ T2288] usb 4-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  255.791521][ T2288] usb 4-1: found format II with max.bitrate = 8, frame size=0
[  255.881527][ T2288] usb 4-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  255.958150][ T2288] usb 4-1: found format II with max.bitrate = 8, frame size=0
[  256.652858][ T2288] usb 4-1: failed to enable PITCH for EP 0x82
[  256.709326][ T2288] usb 4-1: 2:1: cannot set freq 8722535 to ep 0x82
[  256.991820][ T2288] usb 4-1: USB disconnect, device number 14
[  257.136885][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.412897][ T1111] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  258.282686][ T1111] usb 6-1: Using ep0 maxpacket: 16
[  259.183369][ T1111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.679628][ T1111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.697634][ T1111] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  259.717578][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.755740][ T1111] usb 6-1: config 0 descriptor??
[  259.866743][ T6823] kvm: apic: phys broadcast and lowest prio
[  260.235454][ T1111] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  260.281322][ T1111] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  260.307326][ T1111] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  260.328617][ T1111] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  260.473526][ T6797] i2c i2c-1: unsupported multi-msg i2c transaction
[  260.499586][ T1111] usb 6-1: USB disconnect, device number 8
[  262.602741][ T4717] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  262.790796][ T6851] fuse: Bad value for 'fd'
[  262.875857][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'.
[  262.885455][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'.
[  263.811187][ T6863] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  263.820601][ T6863] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  263.829533][ T6863] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  263.838480][ T6863] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  263.862768][ T4717] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  263.897267][ T4717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.923979][ T4717] usb 6-1: Product: syz
[  263.938545][ T4717] usb 6-1: Manufacturer: syz
[  263.956051][ T4717] usb 6-1: SerialNumber: syz
[  264.386788][ T4717] usb 6-1: config 0 descriptor??
[  264.444024][ T4717] ch341 6-1:0.0: ch341-uart converter detected
[  265.352702][ T1111] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  265.612682][ T1111] usb 4-1: Using ep0 maxpacket: 16
[  265.732906][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.752824][ T4717] ch341-uart ttyUSB0: failed to read break control: -71
[  265.761110][ T1111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.798129][ T1111] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  265.798172][ T4717] ch341-uart: probe of ttyUSB0 failed with error -71
[  265.841487][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.889729][ T1111] usb 4-1: config 0 descriptor??
[  266.080980][ T4717] usb 6-1: USB disconnect, device number 9
[  266.110867][ T4717] ch341 6-1:0.0: device disconnected
[  266.395791][ T1111] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  266.427243][ T1111] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  266.488135][ T1111] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  267.017984][ T1111] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  267.150353][ T1111] usb 4-1: USB disconnect, device number 15
[  267.312807][ T4229] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  267.320627][ T4717] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  267.572816][ T4717] usb 7-1: Using ep0 maxpacket: 8
[  268.488589][ T4717] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  268.497258][ T4717] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  268.507568][ T4717] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  268.517541][ T4717] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  268.529807][ T4717] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  268.559430][ T4717] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  268.570375][ T4229] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  268.592862][ T4229] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  268.976573][ T4717] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.984442][ T6915] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.587'.
[  268.995503][ T4229] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3
[  269.006327][ T4229] usb 6-1: config 220 has no interface number 1
[  269.013789][ T4229] usb 6-1: config 220 interface 0 has no altsetting 0
[  269.020803][ T4229] usb 6-1: config 220 interface 76 has no altsetting 0
[  269.183474][ T4229] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  269.200632][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.236843][ T4229] usb 6-1: Product: syz
[  269.241272][ T4229] usb 6-1: Manufacturer: syz
[  269.252034][ T4229] usb 6-1: SerialNumber: syz
[  269.292846][ T4717] usb 7-1: GET_CAPABILITIES returned 0
[  269.298480][ T4717] usbtmc 7-1:16.0: can't read capabilities
[  269.554560][ T4717] usb 7-1: USB disconnect, device number 7
[  269.626286][ T4229] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  269.636159][ T4229] usb 6-1: No valid video chain found.
[  269.700452][ T4229] usb 6-1: USB disconnect, device number 10
[  271.224533][ T6946] 9pnet: Insufficient options for proto=fd
[  271.251613][ T6946] netlink: 'syz.1.595': attribute type 10 has an invalid length.
[  271.282216][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.595'.
[  271.357597][ T6946] team0: Port device geneve0 added
[  271.822858][ T4287] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  272.393621][ T4287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.436594][ T4287] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  272.498955][ T4287] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  272.560819][ T4287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.642414][ T4287] usb 2-1: config 0 descriptor??
[  273.586126][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.602'.
[  273.719661][ T6952] syz.1.596 (6952): drop_caches: 4
[  273.751324][ T4287] usb 2-1: USB disconnect, device number 24
[  277.966175][ T7029] netlink: 192 bytes leftover after parsing attributes in process `syz.6.615'.
[  280.666882][ T4717] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  281.086581][ T4717] usb 7-1: Using ep0 maxpacket: 16
[  281.872950][ T4717] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  281.922675][ T4717] usb 7-1: config 1 has no interface number 1
[  281.943578][ T4717] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  282.126867][ T4717] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  282.154025][ T4717] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.208115][ T4717] usb 7-1: Product: syz
[  282.260307][ T4717] usb 7-1: Manufacturer: syz
[  282.282718][ T4717] usb 7-1: SerialNumber: syz
[  283.023174][ T4717] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  283.105908][ T4717] usb 7-1: USB disconnect, device number 8
[  283.574524][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  287.468084][ T7100] ODEBUG: Out of memory. ODEBUG disabled
[  295.920625][ T7193] netlink: 56 bytes leftover after parsing attributes in process `syz.6.659'.
[  295.932698][ T2288] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  296.025862][ T4200] Bluetooth: hci3: Unknown advertising packet type: 0xffff
[  296.027565][ T4200] ==================================================================
[  296.043418][ T4200] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12db/0x3b80
[  296.051371][ T4200] Read of size 1 at addr ffff888075260401 by task kworker/u5:7/4200
[  296.059477][ T4200] 
[  296.061833][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:7 Not tainted 5.15.189-syzkaller #0
[  296.070184][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  296.080444][ T4200] Workqueue: hci3 hci_rx_work
[  296.085174][ T4200] Call Trace:
[  296.088552][ T4200]  <TASK>
[  296.091525][ T4200]  dump_stack_lvl+0x168/0x230
[  296.096235][ T4200]  ? show_regs_print_info+0x20/0x20
[  296.101463][ T4200]  ? load_image+0x3b0/0x3b0
[  296.105989][ T4200]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  296.111488][ T4200]  print_address_description+0x60/0x2d0
[  296.117075][ T4200]  ? hci_le_meta_evt+0x12db/0x3b80
[  296.122220][ T4200]  kasan_report+0xdf/0x130
[  296.126667][ T4200]  ? hci_le_meta_evt+0x12db/0x3b80
[  296.131810][ T4200]  hci_le_meta_evt+0x12db/0x3b80
[  296.136779][ T4200]  ? hci_event_packet+0x1f0/0x12f0
[  296.141929][ T4200]  ? hci_remote_host_features_evt+0x280/0x280
[  296.148155][ T4200]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  296.153827][ T4200]  ? mark_lock+0x94/0x320
[  296.158187][ T4200]  ? mutex_unlock+0x10/0x10
[  296.162716][ T4200]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  296.168724][ T4200]  ? lock_chain_count+0x20/0x20
[  296.173604][ T4200]  ? __rwlock_init+0x140/0x140
[  296.178397][ T4200]  hci_event_packet+0xe05/0x12f0
[  296.182881][ T4717] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  296.183362][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  296.196205][ T4200]  ? rcu_lock_release+0x20/0x20
[  296.201195][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  296.206428][ T4200]  hci_rx_work+0x255/0xa10
[  296.210902][ T4200]  process_one_work+0x863/0x1000
[  296.215891][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  296.221641][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  296.226956][ T4200]  ? _raw_spin_lock_irq+0xab/0xe0
[  296.232004][ T4200]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  296.237408][ T4200]  ? wq_worker_running+0x97/0x170
[  296.242474][ T4200]  worker_thread+0xaa8/0x12a0
[  296.247300][ T4200]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  296.253309][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  296.258626][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  296.263938][ T4200]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  296.269871][ T4200]  kthread+0x436/0x520
[  296.273961][ T4200]  ? rcu_lock_release+0x20/0x20
[  296.278841][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  296.283576][ T4200]  ret_from_fork+0x1f/0x30
[  296.288030][ T4200]  </TASK>
[  296.291062][ T4200] 
[  296.293399][ T4200] Allocated by task 7194:
[  296.297738][ T4200]  __kasan_kmalloc+0xb5/0xf0
[  296.302402][ T4200]  __alloc_skb+0x22c/0x750
[  296.306839][ T4200]  vhci_write+0xbc/0x450
[  296.311102][ T4200]  vfs_write+0x712/0xd00
[  296.315368][ T4200]  ksys_write+0x14d/0x250
[  296.319715][ T4200]  do_syscall_64+0x4c/0xa0
[  296.324152][ T4200]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  296.330072][ T4200] 
[  296.332410][ T4200] The buggy address belongs to the object at ffff888075260000
[  296.332410][ T4200]  which belongs to the cache kmalloc-1k of size 1024
[  296.346481][ T4200] The buggy address is located 1 bytes to the right of
[  296.346481][ T4200]  1024-byte region [ffff888075260000, ffff888075260400)
[  296.360303][ T4200] The buggy address belongs to the page:
[  296.365960][ T4200] page:ffffea0001d49800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75260
[  296.376391][ T4200] head:ffffea0001d49800 order:3 compound_mapcount:0 compound_pincount:0
[  296.384745][ T4200] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  296.392758][ T4200] raw: 00fff00000010200 ffffea0005319e00 0000000500000002 ffff888016841dc0
[  296.401362][ T4200] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  296.409972][ T4200] page dumped because: kasan: bad access detected
[  296.416409][ T4200] page_owner tracks the page as allocated
[  296.422174][ T4200] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3551, ts 68068774362, free_ts 68042203840
[  296.441479][ T4200]  get_page_from_freelist+0x1b77/0x1c60
[  296.447161][ T4200]  __alloc_pages+0x1e1/0x470
[  296.451774][ T4200]  new_slab+0xc0/0x4b0
[  296.455868][ T4200]  ___slab_alloc+0x81e/0xdf0
[  296.460588][ T4200]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  296.465990][ T4200]  syslog_print+0xd6/0x840
[  296.470476][ T4200]  do_syslog+0x7f2/0x8f0
[  296.474772][ T4200]  __x64_sys_syslog+0x78/0x90
[  296.479591][ T4200]  do_syscall_64+0x4c/0xa0
[  296.484037][ T4200]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  296.489958][ T4200] page last free stack trace:
[  296.494647][ T4200]  free_unref_page_prepare+0x637/0x6c0
[  296.500131][ T4200]  free_unref_page+0x94/0x280
[  296.504830][ T4200]  __unfreeze_partials+0x1a5/0x200
[  296.509960][ T4200]  put_cpu_partial+0x12d/0x190
[  296.514743][ T4200]  qlist_free_all+0x35/0x90
[  296.519270][ T4200]  kasan_quarantine_reduce+0x150/0x160
[  296.524757][ T4200]  __kasan_slab_alloc+0x2f/0xd0
[  296.529629][ T4200]  slab_post_alloc_hook+0x4c/0x380
[  296.534757][ T4200]  kmem_cache_alloc_node+0x12d/0x2d0
[  296.540244][ T4200]  __alloc_skb+0xf4/0x750
[  296.544598][ T4200]  mld_newpack+0x12a/0xb90
[  296.549074][ T4200]  add_grhead+0x5a/0x240
[  296.553418][ T4200]  add_grec+0x1341/0x15d0
[  296.557766][ T4200]  mld_ifc_work+0x6e7/0xb40
[  296.562286][ T4200]  process_one_work+0x863/0x1000
[  296.567337][ T4200]  worker_thread+0xaa8/0x12a0
[  296.572037][ T4200] 
[  296.574402][ T4200] Memory state around the buggy address:
[  296.580051][ T4200]  ffff888075260300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  296.588138][ T4200]  ffff888075260380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  296.596221][ T4200] >ffff888075260400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  296.604302][ T4200]                    ^
[  296.608571][ T4200]  ffff888075260480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  296.616658][ T4200]  ffff888075260500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  296.624735][ T4200] ==================================================================
[  296.632823][ T4200] Disabling lock debugging due to kernel taint
[  296.642971][ T4287] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  296.698654][ T4200] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  296.705925][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:7 Tainted: G    B             5.15.189-syzkaller #0
[  296.715759][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  296.725964][ T4200] Workqueue: hci3 hci_rx_work
[  296.730784][ T4200] Call Trace:
[  296.734074][ T4200]  <TASK>
[  296.737019][ T4200]  dump_stack_lvl+0x168/0x230
[  296.741720][ T4200]  ? show_regs_print_info+0x20/0x20
[  296.746967][ T4200]  ? load_image+0x3b0/0x3b0
[  296.751501][ T4200]  panic+0x2c9/0x7f0
[  296.755416][ T4200]  ? bpf_jit_dump+0xd0/0xd0
[  296.759950][ T4200]  ? hci_le_meta_evt+0x12db/0x3b80
[  296.765081][ T4200]  ? check_panic_on_warn+0x6c/0xa0
[  296.770209][ T4200]  ? hci_le_meta_evt+0x12db/0x3b80
[  296.775345][ T4200]  check_panic_on_warn+0x80/0xa0
[  296.780314][ T4200]  ? hci_le_meta_evt+0x12db/0x3b80
[  296.785477][ T4200]  end_report+0x6d/0xf0
[  296.789657][ T4200]  kasan_report+0x102/0x130
[  296.794257][ T4200]  ? hci_le_meta_evt+0x12db/0x3b80
[  296.799411][ T4200]  hci_le_meta_evt+0x12db/0x3b80
[  296.804464][ T4200]  ? hci_event_packet+0x1f0/0x12f0
[  296.809618][ T4200]  ? hci_remote_host_features_evt+0x280/0x280
[  296.815711][ T4200]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  296.821497][ T4200]  ? mark_lock+0x94/0x320
[  296.826024][ T4200]  ? mutex_unlock+0x10/0x10
[  296.830554][ T4200]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  296.836687][ T4200]  ? lock_chain_count+0x20/0x20
[  296.841659][ T4200]  ? __rwlock_init+0x140/0x140
[  296.846487][ T4200]  hci_event_packet+0xe05/0x12f0
[  296.851634][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  296.857036][ T4200]  ? rcu_lock_release+0x20/0x20
[  296.862062][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  296.867287][ T4200]  hci_rx_work+0x255/0xa10
[  296.871826][ T4200]  process_one_work+0x863/0x1000
[  296.876883][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  296.882632][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  296.888028][ T4200]  ? _raw_spin_lock_irq+0xab/0xe0
[  296.893080][ T4200]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  296.898475][ T4200]  ? wq_worker_running+0x97/0x170
[  296.903533][ T4200]  worker_thread+0xaa8/0x12a0
[  296.908227][ T4200]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  296.914162][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  296.919642][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  296.924863][ T4200]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  296.930779][ T4200]  kthread+0x436/0x520
[  296.934869][ T4200]  ? rcu_lock_release+0x20/0x20
[  296.939748][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  296.944368][ T4200]  ret_from_fork+0x1f/0x30
[  296.948814][ T4200]  </TASK>
[  296.951968][ T4200] Kernel Offset: disabled
[  296.956358][ T4200] Rebooting in 86400 seconds..