last executing test programs:

15.647387597s ago: executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0)
sendmmsg$sock(r0, &(0x7f0000003bc0)=[{{&(0x7f00000005c0)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}}, {{&(0x7f00000002c0)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}], 0x2, 0x0)

15.503249969s ago: executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="010000001000"})

15.370509369s ago: executing program 0:
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000140), 0x12)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x4, 0x7}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f00000002c0)="249f1d5dc6ff223aed4da7eed6601fdee7abcbcacd22f6c11549c14db40ad7205dc38442a5e17c1788c6d790461efffd464322dde50cc1c8dc4b70c3b3907d2b22de20d6b27b2c11875fc7f5c71e5db940172c55d7717ed6b5cc7d318821684956a7c7f2d05ccddd419ede58bd8fd0d1a63c98dd4077c47ece9a1c43828e7e5782d6971faa44fe66a34f2c08e17b0807a9d5f7e9e3f7ca05ff675edcbac0587c6d66ea4d42fc7281101a3752a738c3e1785c289364c64dce805689063f63372d241ad912", 0x20000000}, 0x20)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000200)="390e82d036a8de1a4fadf43e4b5e883a77d1e7aa8909038c11bed6445872fc9ff6f19d66bf44db2ffb98d283f706aa286a6733db208d1d3aaf372e5f70", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfd18)
write$binfmt_script(r0, &(0x7f0000000080), 0xffffff85)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "a8f46877"}]}}, 0x0}, 0x0)
io_setup(0x5, &(0x7f0000002100))
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[], 0x0)

12.431447001s ago: executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x5, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0)

5.252156723s ago: executing program 3:
syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCRMFF(r1, 0x4004550e, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r4, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
write$char_usb(r3, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r5, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0xbce9abe})
syz_open_dev$evdev(0x0, 0x0, 0x0)

5.089540468s ago: executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="010000001000"})

4.736333442s ago: executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)

4.653020976s ago: executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="0000000100000009"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x0, 0x1])

4.594443234s ago: executing program 1:
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d69736f383835392d362c696e746567726974792c6572726f72733d72656d6f756e742d726f2c6e6f646973636172642c67727071756f74612c67727071756f7461006e6f71756f74612c6572726f72733d63612297e375d3f66f6e74696e75652c756d61736b3d30783030303030303030303030303062fe78ddf30ffefff4ac7aa80df8d01d61b9e725256adec93aec6e89bfd090cfa8412cc716e10a0136247338e0909723773ad2e4b40e96d3ed8a0498cc0cdf859f6d675c279e2b91000000000c00000000", @ANYRESHEX, @ANYBLOB="2c726573697a653d3078303030303030303030303030303030332c6e6f696e746567726974792c696f636861727365743d61736369692c7581f54d99737271756f74612c66756e633d4d4d41505f434845434b2c7063723d30303030303030303030303030303030303030342c666f77", @ANYRESDEC=0x0, @ANYRES32=0x0], 0x41, 0x618c, &(0x7f0000006a80)="$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")

3.77654435s ago: executing program 2:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38)

3.416790415s ago: executing program 2:
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
rt_sigreturn()
syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=")
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1}, 0x6e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004080)={<r0=>0xffffffffffffffff})
write$binfmt_elf32(r0, &(0x7f0000000240)=ANY=[], 0xfffffdb6)

3.262598429s ago: executing program 2:
io_uring_setup(0x3c92, &(0x7f0000000100))
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0xbcff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), 0xc)
sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x10, 0x2, 0x4)

2.99226862s ago: executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
poll(0x0, 0x0, 0x485)
rt_sigreturn()
poll(0x0, 0x0, 0x0)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$unix(0x1, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r1 = openat$null(0xffffffffffffff9c, &(0x7f000000bac0), 0x0, 0x0)
fcntl$notify(r1, 0x5, 0x0)

2.887553936s ago: executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000003bc0)=[{{&(0x7f00000005c0)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}}, {{&(0x7f00000002c0)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}], 0x2, 0x0)

2.804413599s ago: executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r1}, 0x5e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)="94", 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0)
splice(r3, 0x0, r2, 0x0, 0x7f, 0x0)

2.675576999s ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f00000001c0)='./bus\x00', 0x2008412, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
memfd_create(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lsetxattr$security_ima(&(0x7f0000000400)='./bus\x00', &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB="0440"], 0x2, 0x0)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[], 0xfe3c)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000002c0)={0x20000008})
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001eb0000000008000200ac1e00010c0002800500010000000000060003400000000008000740000000010a0cfcd83c721f2cd1a575e02df76eaa1187415b06a72f16f5ad9c2dcbf2c4c320a904a8378d5635b22b2db35609c2e9157e6a9eab39f22f89acb4c8d5347ad93fe027"], 0x6c}}, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61)
fallocate(0xffffffffffffffff, 0x3, 0x0, 0x404042bbe)

2.376365545s ago: executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
poll(0x0, 0x0, 0x485)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
rt_sigreturn()
poll(0x0, 0x0, 0x64)
rt_sigreturn()
rt_sigtimedwait(&(0x7f0000000180), 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0)
getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000100)=0x80)
close(r3)
ioctl$sock_inet_SIOCRTMSG(r1, 0x5450, 0x0)

2.361353067s ago: executing program 3:
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
rt_sigreturn()
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r0 = msgget$private(0x0, 0x0)
msgctl$MSG_STAT_ANY(r0, 0xd, 0x0)

2.298177417s ago: executing program 1:
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x138, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:', @ANYRESOCT], 0xa)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1})
r4 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r4, 0x9, &(0x7f0000000580)="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")
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12)
write$cgroup_freezer_state(r6, &(0x7f0000000400)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7)
socket$isdn(0x22, 0x3, 0x21)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffddd)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0)
sendfile(r8, r8, 0x0, 0x9)

2.165299587s ago: executing program 4:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000002380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000080)=""/44, 0x2c)
getdents(r1, 0x0, 0x58)
listen(r0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='fdinfo/3\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000740)=""/123, 0x7b}], 0x1, 0x80020000, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000480)="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", 0x5d5}], 0x1}}], 0x1, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r7, 0xee00)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0)

2.1491109s ago: executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000800)='ts|\x00', &(0x7f0000000840), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4}, 0x48)
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000001340), 0x2931b90f}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10)
remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xcb)
stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000740))
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x140}}, 0x0)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
pwritev2(r6, &(0x7f0000000540)=[{&(0x7f0000000140)="0175214dd82a2109d22d37acfff1099ef27eb8b23693fc3350597209c2358a09cf71ab3e935c04f818c17a7ac8a1ae4bda80f3e8062a15f5bc5e4ccb254a00ae7a876e91cb20901e7376ba12ba231c66c23c4a92a2fa942547d3df10064d5942520fb92fa6e03411a361da6f9f2c3a39aaaa8aff1384581eed4fda6c16487258b66950dfc5e3e2ed21d8e7044f68454db744769291", 0x95}, {&(0x7f0000000200)="000797827c4fef3717aa2da57f92ae10d3448340a22986c4", 0x18}, {&(0x7f0000000240)="0907c726c77c6eebf568c85ea798f435b0681ce7b5fc6017b4ea7ca95a5efdaaed21098c53d601fe76a24dffe3c40e02b8c958a4881080ca8bfc0bd6080214fe09c1bf", 0x43}, {&(0x7f00000002c0)="430f5c6273e5196bb5f8a3962e2a119a53f645faaa2641b7af541d57598aa5c54779f4c4403dc88d48849c6b04", 0x2d}, {&(0x7f0000000300)="82ae4882119b7455697f3f9536f32898f96adacb89b76632001c559f5e6bfc26d675530b07d48da887c10549bf807d115d9b184ff4c2dbb3282219c10923b817b05f3d876f9ba1a90fde9e1e379c5ec23075ee55aacc656b44af43f42fc716e16b03a8a3628add49cb3c4e2c8d229aa6efcf29e7a2757d9ff28fcf1b9f38c6f9f27432378034c145552d29", 0x8b}, {&(0x7f00000003c0)="5a802e69ad3edece6239ef718f53a85045a510e6bd07055364b8de7f2ecc2d01404dd627d6f3f49f4e5453498f4740648a90691def4283fd4e34143b6ec7d4803e09f7e2be468784d314d703457c2800c6b279f3c9bd44d5c26d68ac902569eae61ff222e6656119ee", 0x69}, {&(0x7f0000000440)}], 0x7, 0x4d000000, 0x8e, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x0)
r8 = fanotify_init(0x200, 0x0)
fanotify_mark(r8, 0x1, 0x4800003e, r6, 0x0)

776.537241ms ago: executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$rds(0x15, 0x5, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001100)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]})
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01)
r1 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000400))
read$hiddev(r1, &(0x7f0000000080)=""/102, 0x66)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

434.535193ms ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0x0, 0x0, 0xa9}, {0x0, 0x2}}}]}}]}, 0x45c}}, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x0, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000005c0)={&(0x7f0000000400)="965f317916ee632d9c743669956041bdf0b0f104ba91eb25331534ca00b8895b8612224520fbc93d0f091897d73a16c9fe89f01c059f5eaf9efa848ca1cef800a42c3e0d29e6bc10e553239d0c54bf5d6856f230937d4ebec1f86c3a615284a46ee1831d33632a641f42f5843442c3730029cc2e4799f5e4a0621726ee3025d42b9b55cbed09a645c5b090fae143083675574b606a1fd5472c6b5c889e335434662d20ab466b66adb289b0cbb87d173b020e5882ce0995d0ae9d3a91f4e8ba290c7c0742a9395210cd0fb1debfdff4b0cc26bdf26b3e", &(0x7f0000000300)=""/85, &(0x7f0000000500)="6e3d961782891a19c3ea4df37d41027d0d0344f147325734e7f86788902469b37de4cd99396cc7", 0x0, 0x7, r5, 0x4}, 0x38)
r6 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r4, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, 0x0, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0x101, 0x4)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss={0x2, 0xfff}, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendmmsg$inet(r7, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c00)="bd3b388a2e7a070bfa14b7b5f8ad915eb50bf58087b2b0accb7fba1496c0b4b38b1d5229cb4cf26d67ea82fa0476b3f4a086dffb33af1c1b6712e2df980574d285168eedda225ad52c6ee3191b11cadb2d6836238d29c9981962a0420d235f9856d06df074dbca04bf3099d302cf626bf6a06fa44cc771c650ed2454b39765f2844a2a750eeb6f95a1d09f507e2f972289dbb2ed3f5c7105037c27de87470ee1b87738b8f36f2dfeceaed6220bbfffbf6d35de4c2ba38978d2070f50137d723499e244b4e88cbd1492afa4c2b667742bddb0ced013972131a91cfbf1762742b9", 0xe0}], 0x1}}], 0x1, 0x15)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001"], 0x54}}, 0x0)

407.221197ms ago: executing program 2:
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000000780)={[], [{@uid_lt}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, 'vlan0\x00'}}, {@euid_eq}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x9, 0x765, &(0x7f0000001940)="$eJzs3c9rHOUbAPBnNknTpv1+E0HQegoIGijdmBpbBQ8VDyJYKOjZumy2oWaTLdlNaUJARQQvgooHQS89V603b+KPq/4XHqSlalqseJDIbGbTbbPbZNMkS93PByY878xs3nl2Zt733Z1hJ4CeNZr+yUUcjogPk4jhbH4SEQP1qD/i5Np6t1aWi+mUxOrqq78n9XVuriwXo+k1qYNZ4dGI+OG9iCO5jfVWF5dmCuVyaT4rj9dmz49XF5eOnpstTJemS3PHJyYnj5145sTxncv1z5+XDl376KUnvzr597uPXPngxyROxqFsWXMeO2U0RrP3ZCB9C+/w4k5X1mVJtzeAbUlPzb61szwOx3D01SMA4L/srYhYBQB6TKL/B4Ae0/ge4ObKcrExdfcbib11/YWI2L+Wf+P65tqS/uya3f76ddChm8kdV0aSiBjZgfpHI+Lzb17/Ip1il65DArTy9rdZsKH9Tzbcs9Cpp7awzuhdZe0f7J3v0vHPs63Gf7n18U+0GP8Mtjh3t2Pz8z93dQeqaSsd/z3fdG/brab8MyN9Wel/9THfQHL2XLmUtm3/j4ixGBhMyxP3qGPsxj832i1rGv8lScTltP4/Pn7z8u01clf7B+98zVShVrifnJtdfyfisf5W+Sfr+z9pM/49vcU6Xn7u/c/aLUvzT/NtTBvz312rlyKeaLn/b9/Rltzz/sTx+uEw3jgoWvj6l0+H2tXfPP5Pp7T+xmeBvZDu/6F75z+SNN+vWe28jp8uDX/fbtnm+bc+/vclr9Xjfdm8i4VabX4iYl/yysb5x26/tlFurJ/mP/Z4Pf8D2Sob2r9Wx3/6mfCNzRLPNqL/2m9fbj//3ZXmP9XR/u88uHJrpq9d/Vvb/5P1aCybs5X2b6sbeD/vHQAAAAAAAAAAAAAAAAAAAAAAAABsVS4iDkWSy6/HuVw+v/YM74djKFeuVGtHzlYW5qai/qzskRjINX7qcrjp91Anst/Db5SP3VV+OiIeiohPBg/Uy/lipTzV7eQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHOwzfP/U78OdnvrAIBds7/bGwAA7Dn9PwD0nk77f+MFAHjw6c8BoPfo/wGg9+j/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2GWnT51Kp9W/VpaLaXnqwuLCTOXC0alSdSY/u1DMFyvz5/PTlcp0uZQvVmY3+3/lSuX8ZMwtXByvlaq18eri0pnZysJc7cy52cJ06UxpYE+yAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDOVBeXZgrlcmleIBAI1oNut0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Z/AwAA//8kXiDe")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r0, 0x7fff, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
fallocate(r1, 0x3, 0x1b02, 0x7000)
write$FUSE_ATTR(r0, &(0x7f0000000280)={0x78}, 0x78)

307.808353ms ago: executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000003bc0)=[{{&(0x7f00000005c0)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}}, {{&(0x7f00000002c0)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}], 0x2, 0x0)

288.363716ms ago: executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="0000000100000009"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x0, 0x1])

152.300166ms ago: executing program 0:
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file1\x00')
ftruncate(0xffffffffffffffff, 0x2000009)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffff000)
splice(r1, 0x0, r0, 0x0, 0x3, 0x0)

112.647393ms ago: executing program 3:
syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff9909", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
ioctl$EVIOCRMFF(r1, 0x4004550e, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
read$char_usb(r2, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r4, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
write$char_usb(r3, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r5, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0xbce9abe})
syz_open_dev$evdev(0x0, 0x0, 0x0)

77.496778ms ago: executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r1}, 0x5e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)="94", 0x1)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0)
splice(r3, 0x0, r2, 0x0, 0x7f, 0x0)

0s ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x28011, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @fwd={0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000700)=""/4096, 0x40, 0x1000, 0x1}, 0x20)

kernel console output (not intermixed with test programs):

[  230.611133][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.782270][   T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  230.805733][   T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  230.814559][   T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  230.825400][   T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  230.838058][   T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  230.849548][   T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  230.997046][ T3679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.005471][ T3679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.054061][ T4010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  231.163124][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.178604][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.241645][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  231.435588][ T6080] loop0: detected capacity change from 0 to 512
[  231.443534][ T6080] EXT4-fs: Ignoring removed i_version option
[  231.449994][ T6080] EXT4-fs: Ignoring removed nobh option
[  231.469593][ T6080] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  231.580688][ T6080] EXT4-fs (loop0): 1 truncate cleaned up
[  231.616474][ T6080] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  231.693941][ T6076] chnl_net:caif_netlink_parms(): no params data found
[  232.145827][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.180230][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.233068][ T6076] device bridge_slave_0 entered promiscuous mode
[  232.282857][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.301646][ T5901] EXT4-fs (loop0): unmounting filesystem.
[  232.315068][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.385463][ T6076] device bridge_slave_1 entered promiscuous mode
[  232.541959][ T6076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.593766][ T6076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.772181][ T6092] fuse: Bad value for 'fd'
[  232.802537][ T6076] team0: Port device team_slave_0 added
[  232.817954][ T5631] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  232.850742][ T5631] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  232.857897][ T6076] team0: Port device team_slave_1 added
[  232.895030][ T5631] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  232.910088][   T47] Bluetooth: hci4: command tx timeout
[  232.945337][ T5631] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  232.959206][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.976210][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.991070][ T5631] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  233.034867][ T6076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  233.077574][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  233.086754][ T5631] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  233.116597][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.160228][ T5631] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  233.195042][ T5631] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  233.233399][ T5631] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  233.234668][ T6076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  233.287052][ T5631] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  233.491058][ T6076] device hsr_slave_0 entered promiscuous mode
[  233.513103][ T6076] device hsr_slave_1 entered promiscuous mode
[  233.530746][ T6076] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  233.556554][ T6076] Cannot create hsr debugfs directory
[  233.731332][ T6094] loop0: detected capacity change from 0 to 32768
[  233.770252][ T6094] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6094)
[  233.772767][ T5631] EXT4-fs (loop1): unmounting filesystem.
[  233.813629][ T6094] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  233.846913][ T6094] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  233.875973][ T6094] BTRFS info (device loop0): using free space tree
[  233.947089][ T6076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.008834][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.081680][ T6076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.125278][ T6094] BTRFS info (device loop0): enabling ssd optimizations
[  234.217663][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.264673][ T6076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.750284][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.860926][ T6076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.996393][   T47] Bluetooth: hci4: command tx timeout
[  235.054454][ T5901] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  235.113412][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.188138][ T3587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.208838][ T3587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.221784][ T3587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.232024][ T3587] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  235.248312][ T3587] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  235.256402][ T3587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.650927][ T6076] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  235.739343][ T6076] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  235.887533][ T6076] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  235.905858][ T6143] loop0: detected capacity change from 0 to 1024
[  236.012461][ T6143] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  236.065128][ T6076] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  236.379945][ T6135] chnl_net:caif_netlink_parms(): no params data found
[  236.515359][ T6076] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.602392][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  236.610719][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  236.779720][ T6076] 8021q: adding VLAN 0 to HW filter on device team0
[  236.806760][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.823639][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.854254][ T6135] device bridge_slave_0 entered promiscuous mode
[  236.895742][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  236.908269][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  236.948898][ T5307] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.956205][ T5307] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.067009][   T47] Bluetooth: hci4: command tx timeout
[  237.074863][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.082785][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.122152][ T6135] device bridge_slave_1 entered promiscuous mode
[  237.169458][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  237.195669][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  237.218925][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  237.258023][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.265375][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.306398][ T3587] Bluetooth: hci2: command tx timeout
[  237.428903][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  237.445384][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  237.471873][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  237.495048][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  237.544188][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.573893][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  237.594347][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  237.607029][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  237.619878][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  237.631775][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  237.643625][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  237.657839][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  237.675333][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.702972][ T6076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  237.840073][ T6135] team0: Port device team_slave_0 added
[  237.896934][ T6135] team0: Port device team_slave_1 added
[  238.080373][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.099658][ T5901] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor.0: invalid size
[  238.111509][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.153158][ T6135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.167805][ T5901] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor.0: invalid size
[  238.188107][ T5901] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor.0: invalid size
[  238.202323][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.216174][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.255048][ T6135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.257053][ T5901] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor.0: invalid size
[  238.325625][ T5901] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor.0: invalid size
[  238.340739][   T11] device hsr_slave_0 left promiscuous mode
[  238.358050][ T5901] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor.0: invalid size
[  238.391902][ T5901] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor.0: invalid size
[  238.396795][   T11] device hsr_slave_1 left promiscuous mode
[  238.424061][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.437006][ T5901] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor.0: invalid size
[  238.457598][ T5901] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor.0: invalid size
[  238.461242][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.505512][ T5901] EXT4-fs error (device loop0): ext4_empty_dir:3087: inode #11: comm syz-executor.0: invalid size
[  238.509387][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.534245][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.547973][   T11] device bridge_slave_1 left promiscuous mode
[  238.561056][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.586025][   T11] device bridge_slave_0 left promiscuous mode
[  238.596648][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.617897][   T11] device hsr_slave_0 left promiscuous mode
[  238.625134][   T11] device hsr_slave_1 left promiscuous mode
[  238.640242][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.654007][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.665772][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.683361][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.693233][   T11] device bridge_slave_1 left promiscuous mode
[  238.708306][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.731998][   T11] device bridge_slave_0 left promiscuous mode
[  238.748685][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.795423][   T11] device veth1_macvtap left promiscuous mode
[  238.824401][   T11] device veth0_macvtap left promiscuous mode
[  238.831177][   T11] device veth1_vlan left promiscuous mode
[  238.845190][   T11] device veth0_vlan left promiscuous mode
[  238.870041][   T11] device veth1_macvtap left promiscuous mode
[  238.884827][   T11] device veth0_macvtap left promiscuous mode
[  238.891304][   T11] device veth1_vlan left promiscuous mode
[  238.906418][   T11] device veth0_vlan left promiscuous mode
[  239.146227][   T47] Bluetooth: hci4: command tx timeout
[  239.387933][ T3587] Bluetooth: hci2: command tx timeout
[  239.701394][   T11] team0 (unregistering): Port device team_slave_1 removed
[  239.736745][   T11] team0 (unregistering): Port device team_slave_0 removed
[  239.785827][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  239.821901][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  240.083206][   T11] bond0 (unregistering): Released all slaves
[  240.482137][   T11] team0 (unregistering): Port device team_slave_1 removed
[  240.505543][   T11] team0 (unregistering): Port device team_slave_0 removed
[  240.520616][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  240.534924][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  240.625370][   T11] bond0 (unregistering): Released all slaves
[  240.777425][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  240.784919][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  240.842225][ T6076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.890154][ T6135] device hsr_slave_0 entered promiscuous mode
[  240.905156][ T6135] device hsr_slave_1 entered promiscuous mode
[  240.913207][ T6135] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.931393][ T6135] Cannot create hsr debugfs directory
[  240.944544][ T5901] EXT4-fs (loop0): unmounting filesystem.
[  241.135990][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  241.148675][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  241.259052][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  241.289621][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  241.309750][ T6076] device veth0_vlan entered promiscuous mode
[  241.322851][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  241.338734][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  241.404398][ T6076] device veth1_vlan entered promiscuous mode
[  241.467281][ T3587] Bluetooth: hci2: command tx timeout
[  241.505773][ T6076] device veth0_macvtap entered promiscuous mode
[  241.534541][ T6183] loop3: detected capacity change from 0 to 32768
[  241.538466][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  241.556743][ T6183] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6183)
[  241.565386][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  241.585276][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  241.593927][ T6183] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  241.595818][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  241.610062][ T6183] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  241.628149][ T6076] device veth1_macvtap entered promiscuous mode
[  241.649875][ T6183] BTRFS info (device loop3): disabling tree log
[  241.666652][ T6183] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  241.678845][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  241.687536][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  241.698594][ T6183] BTRFS info (device loop3): trying to use backup root at mount time
[  241.715570][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.735870][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.746234][ T6183] BTRFS info (device loop3): setting nodatacow, compression disabled
[  241.750657][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.754340][ T6183] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  241.771970][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.790807][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.813526][ T6183] BTRFS info (device loop3): use lzo compression, level 0
[  241.813897][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.821169][ T6183] BTRFS info (device loop3): using free space tree
[  241.849737][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.874172][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  241.900906][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  241.918800][   T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  241.929265][   T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  241.939627][   T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  241.951257][   T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  241.964288][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.981104][   T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  241.989199][   T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  241.999804][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.011726][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.022712][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.033351][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.047430][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.073790][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.081858][ T6183] BTRFS info (device loop3): enabling ssd optimizations
[  242.087075][ T6076] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.106353][ T6076] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.115548][ T6076] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.138294][ T6076] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.159999][   T26] audit: type=1800 audit(1719031246.232:44): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0
[  242.202108][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  242.218198][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  242.450281][ T5682] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  242.638138][ T3699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.657776][ T3699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.736641][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  242.744603][ T6135] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  242.793866][ T6135] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  242.796472][ T3678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.825607][ T6187] chnl_net:caif_netlink_parms(): no params data found
[  242.840249][ T3678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.868028][ T6135] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  242.892551][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  242.920634][ T6135] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  243.027192][ T6217] loop3: detected capacity change from 0 to 64
[  243.292685][ T6218] loop2: detected capacity change from 0 to 40427
[  243.300502][ T6218] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  243.308339][ T6218] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  243.375573][ T6225] fuse: Unknown parameter 'f0x000000000000000700000000000000000000'
[  243.396412][ T6218] F2FS-fs (loop2): Found nat_bits in checkpoint
[  243.465662][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.490014][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.501666][ T6218] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  243.508876][ T6218] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  243.526346][ T6218] syz-executor.2: attempt to access beyond end of device
[  243.526346][ T6218] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  243.542946][   T26] audit: type=1804 audit(1719031247.612:45): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir999547186/syzkaller.Y9SiTU/0/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  243.568197][   T47] Bluetooth: hci2: command tx timeout
[  243.625326][ T6187] device bridge_slave_0 entered promiscuous mode
[  243.708848][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.742032][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.770220][ T6187] device bridge_slave_1 entered promiscuous mode
[  243.934124][ T6187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.999013][ T6187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.107851][   T47] Bluetooth: hci3: command tx timeout
[  244.128643][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.189340][ T6187] team0: Port device team_slave_0 added
[  244.243412][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  244.274698][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  244.290864][ T6135] 8021q: adding VLAN 0 to HW filter on device team0
[  244.308270][ T6187] team0: Port device team_slave_1 added
[  244.365944][ T6231] loop3: detected capacity change from 0 to 1024
[  244.375097][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  244.384951][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  244.396014][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.403192][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.459425][ T6231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  244.476755][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  244.485894][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  244.497809][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  244.502792][ T6231] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  244.507171][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.519976][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.528676][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  244.538380][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  244.547522][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  244.557220][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  244.567119][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.574097][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.742640][ T6187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.912840][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  244.962916][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.083070][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.456276][ T6187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.613446][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  245.643382][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  245.731064][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  245.746776][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  245.795586][ T5682] EXT4-fs (loop3): unmounting filesystem.
[  245.947656][ T6245] device syzkaller0 entered promiscuous mode
[  246.002343][ T6135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  246.052432][ T6135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  246.081804][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  246.099311][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  246.186416][   T47] Bluetooth: hci3: command tx timeout
[  246.234995][ T6252] device vlan2 entered promiscuous mode
[  246.323260][ T6187] device hsr_slave_0 entered promiscuous mode
[  246.363182][ T6187] device hsr_slave_1 entered promiscuous mode
[  246.394158][ T6187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  246.416228][ T6187] Cannot create hsr debugfs directory
[  246.921573][ T6187] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.020126][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  247.029582][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  247.062314][ T6187] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.116036][ T6135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  247.180422][ T6187] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.252243][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  247.272248][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  247.387849][ T6187] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.636539][ T6267] loop3: detected capacity change from 0 to 40427
[  247.645249][ T6267] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  247.653210][ T6267] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  247.700541][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  247.710897][ T6267] F2FS-fs (loop3): Found nat_bits in checkpoint
[  247.764755][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  247.767731][ T6267] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  247.779977][ T6267] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  247.796978][ T6267] syz-executor.3: attempt to access beyond end of device
[  247.796978][ T6267] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  247.813556][   T26] audit: type=1804 audit(1719031251.882:46): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir200202435/syzkaller.U9Pnpl/40/bus/bus" dev="loop3" ino=10 res=1 errno=0
[  247.869934][ T6135] device veth0_vlan entered promiscuous mode
[  247.892016][ T6264] loop2: detected capacity change from 0 to 32768
[  247.910738][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  247.924270][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  247.945411][ T6264] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6264)
[  247.980739][ T6264] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  248.013149][ T6135] device veth1_vlan entered promiscuous mode
[  248.052905][ T6264] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  248.107320][ T6264] BTRFS info (device loop2): disabling tree log
[  248.113919][ T6264] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  248.138291][ T6264] BTRFS info (device loop2): trying to use backup root at mount time
[  248.153033][ T6264] BTRFS info (device loop2): setting nodatacow, compression disabled
[  248.161813][ T6264] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  248.182651][ T6264] BTRFS info (device loop2): use lzo compression, level 0
[  248.209942][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  248.215454][ T6264] BTRFS info (device loop2): using free space tree
[  248.226330][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  248.244711][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  248.266318][   T47] Bluetooth: hci3: command tx timeout
[  248.273260][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  248.302431][ T6135] device veth0_macvtap entered promiscuous mode
[  248.336498][ T6264] BTRFS info (device loop2): enabling ssd optimizations
[  248.366703][ T6135] device veth1_macvtap entered promiscuous mode
[  248.399323][   T26] audit: type=1800 audit(1719031252.472:47): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=263 res=0 errno=0
[  248.435836][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.463954][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.490342][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.520758][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.553936][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.612364][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.632572][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.666490][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.708420][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.726586][ T6187] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  248.785164][ T6076] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  248.797298][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  248.809430][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  248.822830][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  248.845799][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  248.931895][ T6187] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  249.033090][ T6187] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  249.070418][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.093769][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.132660][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.176225][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.196253][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.220532][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.247921][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.270011][ T6299] loop4: detected capacity change from 0 to 1024
[  249.278678][ T6301] loop2: detected capacity change from 0 to 64
[  249.284065][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.312452][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.340652][ T6299] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  249.349851][ T6187] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  249.369862][ T6304] fuse: Unknown parameter 'f0x000000000000000700000000000000000000'
[  249.389001][ T6291] loop3: detected capacity change from 0 to 32768
[  249.389775][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  249.404386][ T6291] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6291)
[  249.425406][ T6299] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  249.434487][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  249.450387][ T6291] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  249.499655][ T6291] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  249.635497][ T6135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.724826][ T6135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.745825][ T6291] BTRFS info (device loop3): use zlib compression, level 3
[  249.857789][ T6135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.994156][ T6135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.035108][ T6291] BTRFS info (device loop3): enabling ssd optimizations
[  250.070512][ T6291] BTRFS info (device loop3): turning on sync discard
[  250.086634][ T6291] BTRFS info (device loop3): disabling tree log
[  250.093946][ T5843] EXT4-fs (loop4): unmounting filesystem.
[  250.107664][ T6291] BTRFS info (device loop3): turning off barriers
[  250.114249][ T6291] BTRFS info (device loop3): using spread ssd allocation scheme
[  250.156570][ T6291] BTRFS info (device loop3): using free space tree
[  250.346830][   T47] Bluetooth: hci3: command tx timeout
[  250.362656][ T6313] device syzkaller0 entered promiscuous mode
[  250.474081][ T6307] loop2: detected capacity change from 0 to 32768
[  250.489217][ T6307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6307)
[  250.536405][ T6307] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.572482][ T6307] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  250.589215][ T6307] BTRFS info (device loop2): using free space tree
[  250.590565][ T6328] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  250.626031][ T3678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.635768][ T3678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.650277][   T26] audit: type=1804 audit(1719031254.722:48): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir200202435/syzkaller.U9Pnpl/41/file0/bus" dev="loop3" ino=263 res=1 errno=0
[  250.655991][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  250.776300][   T26] audit: type=1804 audit(1719031254.812:49): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir200202435/syzkaller.U9Pnpl/41/file0/bus" dev="loop3" ino=263 res=1 errno=0
[  250.826128][ T6307] BTRFS info (device loop2): enabling ssd optimizations
[  250.851462][ T6348] device vlan2 entered promiscuous mode
[  251.060385][   T11] device hsr_slave_0 left promiscuous mode
[  251.075010][   T11] device hsr_slave_1 left promiscuous mode
[  251.086578][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  251.516414][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  251.967399][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.983896][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.022619][ T6076] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  252.047045][   T11] device bridge_slave_1 left promiscuous mode
[  252.057138][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.180843][   T11] device bridge_slave_0 left promiscuous mode
[  252.208844][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.258637][   T11] device veth1_macvtap left promiscuous mode
[  252.264732][   T11] device veth0_macvtap left promiscuous mode
[  252.282045][   T11] device veth1_vlan left promiscuous mode
[  252.294565][   T11] device veth0_vlan left promiscuous mode
[  252.356568][ T6357] block device autoloading is deprecated and will be removed.
[  252.816960][ T3613] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  253.023109][ T5682] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  253.188336][   T11] team0 (unregistering): Port device team_slave_1 removed
[  253.209380][   T11] team0 (unregistering): Port device team_slave_0 removed
[  253.226587][ T3613] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  253.245562][ T3613] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  253.270137][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.278888][ T3613] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  253.303004][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.306295][ T3613] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  253.333241][ T3613] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  253.345911][ T6364] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.375781][ T6364] F2FS-fs (loop5): Unable to read 1th superblock
[  253.385999][ T6364] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  253.416239][ T6364] F2FS-fs (loop5): Unable to read 2th superblock
[  253.462191][   T11] bond0 (unregistering): Released all slaves
[  253.486402][ T3613] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  253.500629][ T3613] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  253.516185][ T3613] usb 5-1: Product: syz
[  253.526230][ T3613] usb 5-1: Manufacturer: syz
[  253.562001][ T6187] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.575096][ T5321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.596760][ T6362] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  253.617457][ T3613] cdc_wdm 5-1:1.0: skipping garbage
[  253.622718][ T3613] cdc_wdm 5-1:1.0: skipping garbage
[  253.644652][ T6187] 8021q: adding VLAN 0 to HW filter on device team0
[  253.652208][ T5321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.700494][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  253.714846][ T3613] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  253.731522][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  253.746396][ T3613] cdc_wdm 5-1:1.0: Unknown control protocol
[  253.756398][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  253.765742][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  253.776729][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  253.788964][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.796200][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.819445][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.841619][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  253.862690][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  253.875653][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.913169][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  253.930454][ T3859] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.937672][ T3859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.960885][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  254.118883][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  254.128082][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  254.138876][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  254.381772][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.706650][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  254.806771][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.825078][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  254.837418][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  254.882828][ T3859] usb 5-1: USB disconnect, device number 5
[  254.912460][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  254.964378][ T3854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  254.999935][ T5981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  255.040963][ T5981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  255.073615][ T6187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  255.115854][ T6366] loop3: detected capacity change from 0 to 32768
[  255.198770][ T6366] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6366)
[  255.232203][ T6366] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  255.255196][ T6366] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  255.280706][ T6366] BTRFS info (device loop3): disabling tree log
[  255.340740][ T6366] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  255.378844][ T6366] BTRFS info (device loop3): trying to use backup root at mount time
[  255.405242][ T6366] BTRFS info (device loop3): setting nodatacow, compression disabled
[  255.430040][ T6366] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  255.453366][ T6366] BTRFS info (device loop3): use lzo compression, level 0
[  255.478971][ T6366] BTRFS info (device loop3): using free space tree
[  255.486351][ T3859] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  255.622388][ T6366] BTRFS info (device loop3): enabling ssd optimizations
[  255.631235][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  255.640641][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  255.679452][   T26] audit: type=1800 audit(1719031259.752:50): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0
[  255.871267][ T5682] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  255.886511][ T3859] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  255.905474][ T3859] usb 5-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  255.919166][ T6404] loop1: detected capacity change from 0 to 64
[  255.941381][ T3859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  256.143194][ T6404] fuse: Unknown parameter 'f0x000000000000000700000000000000000000'
[  256.151600][ T3859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  256.176734][ T3859] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  256.246279][ T3859] usb 5-1: string descriptor 0 read error: -71
[  256.252589][ T3859] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  256.271179][ T3859] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  256.306320][ T3859] usb 5-1: can't set config #1, error -71
[  256.329142][ T3859] usb 5-1: USB disconnect, device number 6
[  256.355571][ T6409] device vlan2 entered promiscuous mode
[  256.434457][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  256.445621][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  256.484999][ T6187] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.603177][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  256.632457][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  256.717590][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  256.730708][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  256.759523][ T6187] device veth0_vlan entered promiscuous mode
[  256.803226][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  256.827013][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  256.880816][ T6187] device veth1_vlan entered promiscuous mode
[  257.054479][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  257.067499][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  257.099618][ T6187] device veth0_macvtap entered promiscuous mode
[  257.130725][ T6187] device veth1_macvtap entered promiscuous mode
[  257.209868][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.321249][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.342464][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.429251][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.472367][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.904929][ T6429] loop2: detected capacity change from 0 to 40427
[  257.958356][ T6429] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  257.966254][ T6429] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  258.204286][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.250112][ T6412] loop1: detected capacity change from 0 to 32768
[  258.276337][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.297665][ T6429] F2FS-fs (loop2): Found nat_bits in checkpoint
[  258.337893][ T6412] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6412)
[  258.359829][ T6429] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  258.367046][ T6429] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  258.376002][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.389374][ T6412] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  258.401777][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.424000][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.440689][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.452645][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.559856][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.577581][ T6412] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  258.584234][ T6437] syz-executor.2: attempt to access beyond end of device
[  258.584234][ T6437] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  258.596145][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.617528][   T26] audit: type=1804 audit(1719031262.672:51): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir999547186/syzkaller.Y9SiTU/12/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  258.760674][ T6412] BTRFS info (device loop1): using free space tree
[  258.789216][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.810785][ T6187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.838679][ T6187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.852005][ T6419] loop4: detected capacity change from 0 to 32768
[  258.860855][ T6419] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6419)
[  258.879603][ T6187] batman_adv: batadv0: Interface activated: batadv_slave_1
[  258.907428][ T6419] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  258.946219][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  258.948128][ T6419] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  258.955516][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  258.991023][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  259.001792][ T6419] BTRFS info (device loop4): use zlib compression, level 3
[  259.040099][ T6419] BTRFS info (device loop4): enabling ssd optimizations
[  259.053475][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  259.072222][ T6419] BTRFS info (device loop4): turning on sync discard
[  259.072223][ T6412] BTRFS info (device loop1): enabling ssd optimizations
[  259.072254][ T6419] BTRFS info (device loop4): disabling tree log
[  259.127102][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  259.150736][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  259.156310][ T6419] BTRFS info (device loop4): turning off barriers
[  259.165452][ T6419] BTRFS info (device loop4): using spread ssd allocation scheme
[  259.175606][ T6419] BTRFS info (device loop4): using free space tree
[  259.214445][ T6187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.274505][ T6187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.387265][ T6187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.425560][ T6187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.030334][ T6482] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  260.070094][ T6135] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  260.093145][   T26] audit: type=1804 audit(1719031264.162:52): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir755713203/syzkaller.heTaH1/16/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  260.157101][ T5307] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  260.189306][ T3699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.205096][   T26] audit: type=1804 audit(1719031264.202:53): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir755713203/syzkaller.heTaH1/16/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  260.237391][ T3699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.449739][ T6486] device syzkaller0 entered promiscuous mode
[  260.566336][ T5307] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  260.582854][ T5307] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  260.597608][ T5307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  260.609101][ T5307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  260.624942][ T5307] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  260.665669][ T3860] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  260.734376][ T3699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.755337][ T3699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.796440][ T5307] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  260.818760][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  260.818943][ T5307] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  260.869980][ T5307] usb 4-1: Product: syz
[  260.892858][ T5307] usb 4-1: Manufacturer: syz
[  260.908718][ T6492] device vlan2 entered promiscuous mode
[  260.946460][ T6471] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  260.967127][ T5307] cdc_wdm 4-1:1.0: skipping garbage
[  260.972518][ T5307] cdc_wdm 4-1:1.0: skipping garbage
[  261.020636][ T5307] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  261.042078][ T5307] cdc_wdm 4-1:1.0: Unknown control protocol
[  261.169954][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.199470][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.451162][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.472569][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.516622][ T6487] usb 4-1: USB disconnect, device number 6
[  261.871551][ T6490] loop1: detected capacity change from 0 to 32768
[  261.941349][ T6490] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor.1 (6490)
[  262.023062][ T5843] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  262.088751][ T6487] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  262.444851][   T26] audit: type=1800 audit(1719031266.512:54): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1941 res=0 errno=0
[  262.486268][ T6487] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  262.499579][ T6487] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  262.532703][ T6487] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  262.560829][ T6487] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  262.586745][ T6487] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  263.077264][ T6513] loop4: detected capacity change from 0 to 40427
[  263.105561][ T6513] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  263.113486][ T6513] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  263.309001][ T6487] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  263.828360][ T6487] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  263.872298][ T6487] usb 4-1: can't set config #1, error -71
[  263.961256][ T6487] usb 4-1: USB disconnect, device number 7
[  263.995653][ T6513] F2FS-fs (loop4): Found nat_bits in checkpoint
[  264.073457][ T6513] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  264.080637][ T6513] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  264.398254][ T6531] syz-executor.4: attempt to access beyond end of device
[  264.398254][ T6531] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  264.571007][   T26] audit: type=1804 audit(1719031268.482:55): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir755713203/syzkaller.heTaH1/17/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  264.744620][ T6533] device syzkaller0 entered promiscuous mode
[  264.930400][ T6539] device vlan2 entered promiscuous mode
[  266.136959][ T6547] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.186567][ T6547] F2FS-fs (loop7): Unable to read 1th superblock
[  266.220930][ T6547] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  266.279546][ T6547] F2FS-fs (loop7): Unable to read 2th superblock
[  266.857612][ T6487] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  267.286851][ T6487] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  267.318145][ T6487] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  267.426137][ T6487] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  267.435259][ T6487] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  267.495378][ T6487] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  267.747802][ T6487] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  267.773136][ T6487] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  267.791624][ T6487] usb 1-1: Product: syz
[  267.795921][ T6487] usb 1-1: Manufacturer: syz
[  267.896497][ T6555] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  267.927384][ T6487] cdc_wdm 1-1:1.0: skipping garbage
[  267.932669][ T6487] cdc_wdm 1-1:1.0: skipping garbage
[  267.942288][ T6568] loop1: detected capacity change from 0 to 40427
[  267.950490][ T6568] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  267.954099][ T6487] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  267.958450][ T6568] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  268.090037][ T6568] F2FS-fs (loop1): Found nat_bits in checkpoint
[  268.103481][ T6487] cdc_wdm 1-1:1.0: Unknown control protocol
[  268.131443][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.155706][ T6568] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  268.161105][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.162863][ T6568] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  268.448897][ T6575] syz-executor.1: attempt to access beyond end of device
[  268.448897][ T6575] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  268.621828][   T26] audit: type=1804 audit(1719031272.532:56): pid=6575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2596731986/syzkaller.i9bUQb/12/bus/bus" dev="loop1" ino=10 res=1 errno=0
[  268.651693][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.691705][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.716357][ T6578] device vlan2 entered promiscuous mode
[  268.951476][ T6582] loop4: detected capacity change from 0 to 40427
[  268.959370][ T6582] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  268.967192][ T6582] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  268.981669][ T5307] usb 1-1: USB disconnect, device number 5
[  269.022461][ T6582] F2FS-fs (loop4): Found nat_bits in checkpoint
[  269.116842][ T6582] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  269.124020][ T6582] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  269.636240][ T5307] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  269.642573][ T6590] device syzkaller0 entered promiscuous mode
[  269.947202][ T6594] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  269.966332][ T6594] F2FS-fs (loop5): Unable to read 1th superblock
[  269.972950][ T6594] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  270.008434][ T6594] F2FS-fs (loop5): Unable to read 2th superblock
[  270.056441][ T5307] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  270.084358][ T5307] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  270.110405][ T5307] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  270.139835][ T5307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  270.176170][ T5307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  270.266357][ T5307] usb 1-1: string descriptor 0 read error: -71
[  270.272627][ T5307] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  270.342723][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  270.417984][ T5307] usb 1-1: can't set config #1, error -71
[  270.456163][ T5307] usb 1-1: USB disconnect, device number 6
[  272.540562][ T6624] loop2: detected capacity change from 0 to 40427
[  272.556483][ T6624] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  272.564285][ T6624] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  272.596897][ T6624] F2FS-fs (loop2): Found nat_bits in checkpoint
[  272.643996][ T6624] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  272.651179][ T6624] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  272.787722][ T6629] syz-executor.2: attempt to access beyond end of device
[  272.787722][ T6629] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  272.805197][   T26] audit: type=1804 audit(1719031276.882:57): pid=6629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir999547186/syzkaller.Y9SiTU/23/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  273.570618][ T6634] device syzkaller0 entered promiscuous mode
[  273.948624][ T6639] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  274.003716][ T6639] F2FS-fs (loop3): Unable to read 1th superblock
[  274.092216][ T6639] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  274.241188][ T6641] loop2: detected capacity change from 0 to 40427
[  274.255320][ T6641] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  274.263260][ T6641] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  274.284732][ T6639] F2FS-fs (loop3): Unable to read 2th superblock
[  274.316221][ T5307] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  274.337520][ T6641] F2FS-fs (loop2): Found nat_bits in checkpoint
[  274.402821][ T6641] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  274.410415][ T6641] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  274.549381][   T26] audit: type=1804 audit(1719031278.622:58): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir999547186/syzkaller.Y9SiTU/24/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  274.846332][ T5307] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  274.854973][ T5307] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  274.916497][ T5307] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  274.942568][   T26] audit: type=1804 audit(1719031278.672:59): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir999547186/syzkaller.Y9SiTU/24/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  274.981351][ T5307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  274.998651][ T5307] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  275.126285][ T5307] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  275.140311][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  275.188592][ T5307] usb 1-1: Product: syz
[  275.192954][ T5307] usb 1-1: Manufacturer: syz
[  275.236426][ T6637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  275.266947][ T5307] cdc_wdm 1-1:1.0: skipping garbage
[  275.272169][ T5307] cdc_wdm 1-1:1.0: skipping garbage
[  275.307138][ T5307] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  275.330780][ T5307] cdc_wdm 1-1:1.0: Unknown control protocol
[  275.470821][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.511144][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.758409][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.786634][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.836560][   T22] usb 1-1: USB disconnect, device number 7
[  275.866351][ T6647] loop1: detected capacity change from 0 to 32768
[  275.977724][ T6647] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6647)
[  275.998221][ T6647] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  276.011647][ T6656] loop4: detected capacity change from 0 to 1024
[  276.018249][ T6647] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  276.127283][ T6647] BTRFS info (device loop1): use zlib compression, level 3
[  276.167688][ T6647] BTRFS info (device loop1): enabling ssd optimizations
[  276.249811][ T6647] BTRFS info (device loop1): turning on sync discard
[  276.280058][ T6656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  276.344412][ T6647] BTRFS info (device loop1): disabling tree log
[  276.427377][   T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  276.443925][ T6647] BTRFS info (device loop1): turning off barriers
[  276.587736][ T6647] BTRFS info (device loop1): using spread ssd allocation scheme
[  276.739639][ T6647] BTRFS info (device loop1): using free space tree
[  276.752509][ T6656] overlayfs: failed to resolve './file0': -2
[  276.826299][   T22] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  276.835058][   T22] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  276.852674][ T6667] loop2: detected capacity change from 0 to 1024
[  276.884917][ T6667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  276.898377][   T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  276.910090][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  276.923502][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  276.955030][ T6667] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  277.086350][   T22] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  277.138349][   T22] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  277.329671][   T22] usb 1-1: Product: syz
[  277.533173][   T22] usb 1-1: can't set config #1, error -71
[  277.695937][   T22] usb 1-1: USB disconnect, device number 8
[  277.834407][ T6684] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  277.939521][ T6076] EXT4-fs (loop2): unmounting filesystem.
[  278.159540][ T6689] loop0: detected capacity change from 0 to 40427
[  278.181261][ T6689] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  278.189180][ T6689] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  278.202353][   T26] audit: type=1804 audit(1719031281.972:60): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2596731986/syzkaller.i9bUQb/19/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  278.275963][ T6689] F2FS-fs (loop0): Found nat_bits in checkpoint
[  278.331447][ T6689] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  278.338713][ T6689] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  278.588310][   T26] audit: type=1804 audit(1719031282.312:61): pid=6687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2596731986/syzkaller.i9bUQb/19/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  278.591777][ T5843] EXT4-fs (loop4): unmounting filesystem.
[  278.696167][ T6696] syz-executor.0: attempt to access beyond end of device
[  278.696167][ T6696] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  278.968061][   T26] audit: type=1800 audit(1719031283.042:62): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0
[  279.109405][ T6701] device syzkaller0 entered promiscuous mode
[  279.319553][ T6708] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.367059][ T6708] F2FS-fs (loop9): Unable to read 1th superblock
[  279.407435][ T6708] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.463232][ T6708] F2FS-fs (loop9): Unable to read 2th superblock
[  281.184733][ T6135] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  281.330862][ T3863] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  281.653522][ T6727] loop2: detected capacity change from 0 to 1024
[  281.756266][ T3863] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  281.769644][ T3863] usb 1-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  281.785407][ T6727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  281.797382][ T3863] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  281.806280][ T6727] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  281.812454][ T3863] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  281.830574][ T3863] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  281.997370][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.076391][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.461168][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.727431][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.965124][ T6076] EXT4-fs (loop2): unmounting filesystem.
[  283.009570][ T6741] loop1: detected capacity change from 0 to 1024
[  283.083027][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.102294][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.148206][ T6741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  283.279892][ T6743] loop4: detected capacity change from 0 to 40427
[  283.294970][ T6743] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  283.302771][ T6743] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  283.326947][ T6743] F2FS-fs (loop4): Found nat_bits in checkpoint
[  283.380484][ T3863] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  283.392404][ T3863] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  283.418747][ T6743] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  283.426624][ T6743] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  283.552569][ T3863] usb 1-1: can't set config #1, error -71
[  283.666539][ T3863] usb 1-1: USB disconnect, device number 9
[  283.678734][ T6753] syz-executor.4: attempt to access beyond end of device
[  283.678734][ T6753] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  283.696619][   T26] audit: type=1804 audit(1719031287.762:63): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir755713203/syzkaller.heTaH1/29/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  284.069682][ T6758] device syzkaller0 entered promiscuous mode
[  284.218651][ T6135] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  284.325174][ T6135] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  284.344899][ T6135] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  284.364419][ T6135] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  284.376250][ T6135] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  284.393923][ T6135] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  284.405748][ T6135] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  284.423227][ T6135] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  284.437475][ T6135] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  284.457474][ T6135] EXT4-fs error (device loop1): ext4_empty_dir:3087: inode #11: comm syz-executor.1: invalid size
[  284.544461][ T6765] loop0: detected capacity change from 0 to 40427
[  284.557770][ T6765] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  284.565557][ T6765] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  284.616835][ T6765] F2FS-fs (loop0): Found nat_bits in checkpoint
[  284.673235][ T6765] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  284.680423][ T6765] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  284.912637][ T6772] syz-executor.0: attempt to access beyond end of device
[  284.912637][ T6772] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  284.930225][   T26] audit: type=1804 audit(1719031289.002:64): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1693618035/syzkaller.fUbyjg/15/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  285.407041][ T6782] loop2: detected capacity change from 0 to 1024
[  285.423196][ T6135] EXT4-fs (loop1): unmounting filesystem.
[  285.460518][ T3678] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.515258][ T6782] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  285.569676][ T3678] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.615578][ T6782] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  285.933010][ T3678] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.991116][ T6076] EXT4-fs (loop2): unmounting filesystem.
[  286.184319][ T6802] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  286.278467][ T6802] F2FS-fs (loop9): Unable to read 1th superblock
[  286.292620][ T3678] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.327567][ T6802] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  286.367232][ T6802] F2FS-fs (loop9): Unable to read 2th superblock
[  286.368853][ T6798] loop2: detected capacity change from 0 to 40427
[  286.384097][ T6798] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  286.392275][ T6798] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  286.459280][ T6798] F2FS-fs (loop2): Found nat_bits in checkpoint
[  286.506739][ T6798] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  286.513997][ T6798] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  288.625825][   T26] audit: type=1804 audit(1719031292.692:65): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir999547186/syzkaller.Y9SiTU/38/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  290.917499][ T6818] device syzkaller0 entered promiscuous mode
[  290.929889][ T3587] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.939978][ T3587] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.949841][ T3587] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.958681][ T3580] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.967860][ T3580] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  290.975177][ T3580] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  291.885729][ T3678] device hsr_slave_0 left promiscuous mode
[  291.930033][ T6840] loop4: detected capacity change from 0 to 1024
[  291.946489][ T3678] device hsr_slave_1 left promiscuous mode
[  291.969548][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.003386][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.012720][ T6840] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  292.045729][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.074024][ T6840] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  292.085251][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.099971][ T6838] loop2: detected capacity change from 0 to 40427
[  292.108839][ T6838] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  292.116696][ T6838] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  292.131856][ T3678] device bridge_slave_1 left promiscuous mode
[  292.183885][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.206795][ T6838] F2FS-fs (loop2): Found nat_bits in checkpoint
[  292.245202][ T3678] device bridge_slave_0 left promiscuous mode
[  292.259559][ T6838] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  292.266774][ T6838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  292.289350][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.401055][ T6838] syz-executor.2: attempt to access beyond end of device
[  292.401055][ T6838] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  292.424892][   T26] audit: type=1804 audit(1719031296.492:66): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir999547186/syzkaller.Y9SiTU/39/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  292.469125][ T3678] device veth1_macvtap left promiscuous mode
[  292.475167][ T3678] device veth0_macvtap left promiscuous mode
[  292.524452][ T3678] device veth1_vlan left promiscuous mode
[  292.553635][ T3678] device veth0_vlan left promiscuous mode
[  292.889106][ T5843] EXT4-fs (loop4): unmounting filesystem.
[  293.066640][ T3580] Bluetooth: hci2: command tx timeout
[  293.104110][ T6855] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  293.123875][ T6855] F2FS-fs (loop1): Unable to read 1th superblock
[  293.147776][ T6855] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  293.187625][ T6855] F2FS-fs (loop1): Unable to read 2th superblock
[  293.287591][ T3678] team0 (unregistering): Port device team_slave_1 removed
[  293.320904][ T3678] team0 (unregistering): Port device team_slave_0 removed
[  293.358334][ T3678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.397622][ T3678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.647029][ T6859] loop0: detected capacity change from 0 to 40427
[  293.662435][ T6859] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  293.670339][ T6859] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  293.683634][ T6859] F2FS-fs (loop0): Found nat_bits in checkpoint
[  293.712747][ T3678] bond0 (unregistering): Released all slaves
[  293.753182][ T6859] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  293.760564][ T6859] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  293.941636][ T6868] syz-executor.0: attempt to access beyond end of device
[  293.941636][ T6868] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  293.971733][ T6823] chnl_net:caif_netlink_parms(): no params data found
[  294.031751][   T26] audit: type=1804 audit(1719031298.102:67): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1693618035/syzkaller.fUbyjg/18/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  294.333373][ T6871] device syzkaller0 entered promiscuous mode
[  294.399829][ T6867] loop2: detected capacity change from 0 to 32768
[  294.418627][ T6867] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6867)
[  294.441781][ T6867] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  294.463185][ T6867] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  294.485576][ T6867] BTRFS info (device loop2): use zlib compression, level 3
[  294.503376][ T6867] BTRFS info (device loop2): enabling ssd optimizations
[  294.523765][ T6867] BTRFS info (device loop2): turning on sync discard
[  294.530579][ T6867] BTRFS info (device loop2): disabling tree log
[  294.537043][ T6867] BTRFS info (device loop2): turning off barriers
[  294.543497][ T6867] BTRFS info (device loop2): using spread ssd allocation scheme
[  294.557827][ T6867] BTRFS info (device loop2): using free space tree
[  294.607126][ T6823] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.614722][ T6823] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.638876][ T6823] device bridge_slave_0 entered promiscuous mode
[  294.654179][ T6823] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.662581][ T6823] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.671203][ T6823] device bridge_slave_1 entered promiscuous mode
[  294.734615][ T6823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.783035][ T6823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.851539][ T6903] loop0: detected capacity change from 0 to 512
[  294.870321][ T6903] EXT4-fs: Ignoring removed mblk_io_submit option
[  294.905060][ T6903] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  294.919506][ T6906] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  294.943112][   T26] audit: type=1804 audit(1719031299.012:68): pid=6908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir999547186/syzkaller.Y9SiTU/41/file0/bus" dev="loop2" ino=263 res=1 errno=0
[  294.972557][ T6823] team0: Port device team_slave_0 added
[  294.998178][ T6903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002]
[  295.019532][ T6823] team0: Port device team_slave_1 added
[  295.034575][   T26] audit: type=1804 audit(1719031299.082:69): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir999547186/syzkaller.Y9SiTU/41/file0/bus" dev="loop2" ino=263 res=1 errno=0
[  295.063296][ T6903] System zones: 1-12
[  295.071890][ T6903] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz-executor.0: casefold flag without casefold feature
[  295.094509][ T6903] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.0: missing EA_INODE flag
[  295.109405][ T6903] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 12 err=-117
[  295.304807][ T6910] loop4: detected capacity change from 0 to 40427
[  295.312726][ T3580] Bluetooth: hci2: command tx timeout
[  295.322894][ T6910] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  295.330943][ T6910] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  295.354419][ T6903] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.0: missing EA_INODE flag
[  295.377305][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.385336][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.424656][ T6903] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 12 err=-117
[  295.439026][ T6910] F2FS-fs (loop4): Found nat_bits in checkpoint
[  295.488829][ T6910] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  295.495930][ T6910] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  295.619545][ T6903] EXT4-fs (loop0): 1 orphan inode deleted
[  295.655156][ T6915] syz-executor.4: attempt to access beyond end of device
[  295.655156][ T6915] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  295.673586][   T26] audit: type=1804 audit(1719031299.742:70): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir755713203/syzkaller.heTaH1/42/bus/bus" dev="loop4" ino=10 res=1 errno=0
[  295.705599][ T6903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  296.016018][ T6823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.073310][ T6823] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.103135][ T6823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.291983][ T6823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.699032][ T6823] device hsr_slave_0 entered promiscuous mode
[  296.721152][ T6823] device hsr_slave_1 entered promiscuous mode
[  296.762389][ T6823] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  296.794751][ T6823] Cannot create hsr debugfs directory
[  297.171689][ T6187] EXT4-fs (loop0): unmounting filesystem.
[  297.381499][ T6931] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  297.391203][ T3580] Bluetooth: hci2: command tx timeout
[  297.409016][ T6931] F2FS-fs (loop9): Unable to read 1th superblock
[  297.416696][ T6931] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  297.464313][ T6931] F2FS-fs (loop9): Unable to read 2th superblock
[  297.753378][ T6076] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  298.029822][ T6938] loop4: detected capacity change from 0 to 40427
[  298.044211][ T6938] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  298.052157][ T6938] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  298.218759][ T6941] hub 9-0:1.0: USB hub found
[  298.223745][ T6941] hub 9-0:1.0: 8 ports detected
[  298.233871][ T6938] F2FS-fs (loop4): Found nat_bits in checkpoint
[  298.300312][ T6938] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  298.307529][ T6938] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  299.467315][ T3580] Bluetooth: hci2: command tx timeout
[  301.749698][ T6949] device syzkaller0 entered promiscuous mode
[  302.061936][ T6823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  302.128030][ T6823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  302.180993][ T6823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  302.238210][ T6823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  302.602160][ T6823] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.639577][ T6968] loop0: detected capacity change from 0 to 128
[  302.665665][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  302.683090][ T6968] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  302.687500][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  302.739881][ T6823] 8021q: adding VLAN 0 to HW filter on device team0
[  302.827503][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  302.851663][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  302.884652][ T4557] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.891967][ T4557] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.967411][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  302.983912][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  303.027278][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  303.066859][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.074028][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.115951][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  303.172469][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  303.181724][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  303.186277][ T3615] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  303.207555][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  303.244735][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  303.264001][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  303.319291][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  303.328283][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  303.337165][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  303.345912][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  303.354605][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  303.366797][ T6823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  303.776367][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.796506][ T3615] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.826228][ T3615] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  303.844514][ T3615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.877285][ T3615] usb 1-1: config 0 descriptor??
[  303.961350][ T6979] loop3: detected capacity change from 0 to 32768
[  303.967237][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  303.976450][ T6979] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6979)
[  303.982325][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  304.011214][ T6823] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.021887][ T6979] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  304.035858][ T6979] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  304.043963][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  304.046023][ T6979] BTRFS info (device loop3): use zlib compression, level 3
[  304.060609][ T6979] BTRFS info (device loop3): enabling ssd optimizations
[  304.061754][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  304.067703][ T6979] BTRFS info (device loop3): turning on sync discard
[  304.067730][ T6979] BTRFS info (device loop3): disabling tree log
[  304.067750][ T6979] BTRFS info (device loop3): turning off barriers
[  304.067772][ T6979] BTRFS info (device loop3): using spread ssd allocation scheme
[  304.067792][ T6979] BTRFS info (device loop3): using free space tree
[  304.177906][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  304.189204][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  304.201572][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  304.211978][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  304.234198][ T6823] device veth0_vlan entered promiscuous mode
[  304.250474][ T7023] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  304.374731][ T6823] device veth1_vlan entered promiscuous mode
[  304.393397][ T3615] logitech-djreceiver 0003:046D:C534.0005: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.0-1/input0
[  304.446944][   T26] audit: type=1804 audit(1719031308.522:71): pid=7027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir200202435/syzkaller.U9Pnpl/61/file0/bus" dev="loop3" ino=263 res=1 errno=0
[  304.522505][   T26] audit: type=1804 audit(1719031308.522:72): pid=7023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir200202435/syzkaller.U9Pnpl/61/file0/bus" dev="loop3" ino=263 res=1 errno=0
[  304.560808][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  304.570862][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  304.593777][ T6823] device veth0_macvtap entered promiscuous mode
[  304.620149][ T6823] device veth1_macvtap entered promiscuous mode
[  304.715867][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.754381][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.837616][ T3615] usb 1-1: USB disconnect, device number 10
[  304.866921][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.996950][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.060900][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.113233][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.150162][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.194597][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.238695][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.262214][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  305.340428][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  305.366452][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  305.390141][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  305.419197][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.472749][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.490696][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.513686][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.538016][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.566125][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.592576][ T6823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.606305][ T6823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.639957][ T3677] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  305.653133][ T6823] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.675641][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  305.828916][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  305.929655][ T6823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.964041][ T6823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.993223][ T6823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.009550][ T6823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.104600][ T5682] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  306.126337][ T3619] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  306.260239][ T3679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.384488][ T3679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.428248][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  306.449332][ T3679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.481205][ T3679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.533226][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  306.553435][ T3619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.598191][ T3619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.630484][ T3619] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  306.660182][ T3619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.717794][ T3619] usb 5-1: config 0 descriptor??
[  307.045081][ T3580] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  307.057084][ T3580] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  307.068750][ T3580] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  307.079246][ T3580] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  307.088539][ T3580] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  307.095849][ T3580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  307.106642][ T4631] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  307.193201][ T3678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.348128][ T3619] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  307.366205][ T3619] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  307.375720][ T3619] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  307.423919][ T3619] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  307.439581][ T3619] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[  307.449065][ T3619] cm6533_jd 0003:0D8C:0022.0006: No inputs registered, leaving
[  307.460498][ T3619] cm6533_jd 0003:0D8C:0022.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[  307.507029][ T3678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.586607][ T4631] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  307.602767][ T4631] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  307.614793][ T4631] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  307.627821][ T4631] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  307.639458][ T4631] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  307.654428][ T3863] usb 5-1: USB disconnect, device number 7
[  307.659853][ T3678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.755343][ T3678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.776475][ T4631] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  307.788792][ T4631] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  307.798754][ T4631] usb 2-1: Product: syz
[  307.802960][ T4631] usb 2-1: Manufacturer: syz
[  307.837116][ T7051] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  307.867099][ T4631] cdc_wdm 2-1:1.0: skipping garbage
[  307.872392][ T4631] cdc_wdm 2-1:1.0: skipping garbage
[  307.895634][ T4631] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  307.901796][ T4631] cdc_wdm 2-1:1.0: Unknown control protocol
[  307.907287][ T7057] chnl_net:caif_netlink_parms(): no params data found
[  308.005541][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.012843][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.026878][ T7057] device bridge_slave_0 entered promiscuous mode
[  308.055476][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.069784][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.078415][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.086436][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.095573][ T7057] device bridge_slave_1 entered promiscuous mode
[  308.189200][ T7057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  308.203749][ T7057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  308.307760][ T7057] team0: Port device team_slave_0 added
[  308.314701][ T7051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.338312][ T7051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.357224][ T7057] team0: Port device team_slave_1 added
[  308.365607][ T3859] usb 2-1: USB disconnect, device number 4
[  308.462621][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.474533][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.511114][ T7057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.549818][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.557133][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.581448][ T7092] loop3: detected capacity change from 0 to 1024
[  308.585355][ T7057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.683832][ T7086] loop4: detected capacity change from 0 to 32768
[  308.709195][ T7086] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7086)
[  308.711877][ T7057] device hsr_slave_0 entered promiscuous mode
[  308.747101][ T7086] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  308.761346][ T7057] device hsr_slave_1 entered promiscuous mode
[  308.774281][ T7057] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  308.776669][ T7086] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  308.784773][ T7057] Cannot create hsr debugfs directory
[  308.794874][ T7086] BTRFS info (device loop4): use zlib compression, level 3
[  308.817207][ T7086] BTRFS info (device loop4): enabling ssd optimizations
[  308.824404][ T7086] BTRFS info (device loop4): turning on sync discard
[  308.841183][ T7086] BTRFS info (device loop4): disabling tree log
[  308.842631][   T56] hfsplus: b-tree write err: -5, ino 4
[  308.847518][ T7086] BTRFS info (device loop4): turning off barriers
[  308.847548][ T7086] BTRFS info (device loop4): using spread ssd allocation scheme
[  308.868247][ T7086] BTRFS info (device loop4): using free space tree
[  308.956674][ T3859] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  309.102214][ T3678] device hsr_slave_0 left promiscuous mode
[  309.140027][ T3678] device hsr_slave_1 left promiscuous mode
[  309.148265][   T47] Bluetooth: hci3: command tx timeout
[  309.181623][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.193059][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.207243][   T26] audit: type=1804 audit(1719031313.282:73): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir755713203/syzkaller.heTaH1/57/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  309.245202][ T3678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.302728][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.321283][   T26] audit: type=1804 audit(1719031313.342:74): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir755713203/syzkaller.heTaH1/57/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  309.326245][ T3859] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  309.405097][ T3678] device bridge_slave_1 left promiscuous mode
[  309.417871][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.426369][ T3859] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  309.437356][ T3859] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  309.447416][ T3859] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  309.465647][ T3859] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  309.491766][ T3678] device bridge_slave_0 left promiscuous mode
[  309.506449][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.560300][ T3678] device veth1_macvtap left promiscuous mode
[  309.577184][ T3678] device veth0_macvtap left promiscuous mode
[  309.596347][ T3859] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  309.620642][ T3678] device veth1_vlan left promiscuous mode
[  309.633042][ T3859] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  309.640400][ T3678] device veth0_vlan left promiscuous mode
[  309.690772][ T3859] usb 2-1: Product: syz
[  309.707700][ T3859] usb 2-1: Manufacturer: syz
[  309.756689][ T7051] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  309.796849][ T3859] cdc_wdm 2-1:1.0: skipping garbage
[  309.802072][ T3859] cdc_wdm 2-1:1.0: skipping garbage
[  309.854380][ T3859] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  309.876181][ T3621] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  309.895351][ T3859] cdc_wdm 2-1:1.0: Unknown control protocol
[  309.919032][ T3859] usb 2-1: USB disconnect, device number 5
[  310.246281][ T3621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.316187][ T3621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  310.349972][ T3621] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  310.380575][ T3621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.412764][ T3621] usb 3-1: config 0 descriptor??
[  310.816785][ T3678] team0 (unregistering): Port device team_slave_1 removed
[  310.848723][ T3678] team0 (unregistering): Port device team_slave_0 removed
[  310.879340][ T3678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.917501][ T3621] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  310.933312][ T3678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.942450][ T3621] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  310.952067][ T3621] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  310.959981][ T3621] cm6533_jd 0003:0D8C:0022.0007: No inputs registered, leaving
[  310.985354][ T3621] cm6533_jd 0003:0D8C:0022.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  311.052054][ T7128] loop1: detected capacity change from 0 to 32768
[  311.123511][ T7128] syz-executor.1: attempt to access beyond end of device
[  311.123511][ T7128] loop1: rw=0, sector=161944, nr_sectors = 8 limit=32768
[  311.140744][ T7128] lbmIODone: I/O error in JFS log
[  311.147340][ T7128] syz-executor.1: attempt to access beyond end of device
[  311.147340][ T7128] loop1: rw=2049, sector=161944, nr_sectors = 8 limit=32768
[  311.162054][ T7128] lbmIODone: I/O error in JFS log
[  311.168206][ T7128] lmLogInit: exit(-5)
[  311.173379][ T7128] lmLogOpen: exit(-5)
[  311.184801][ T7128] jfs_mount_rw failed, return code = -5
[  311.198936][ T3863] usb 3-1: USB disconnect, device number 3
[  311.200883][ T3678] bond0 (unregistering): Released all slaves
[  311.226594][   T47] Bluetooth: hci3: command tx timeout
[  311.287255][ T7117] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  311.434251][ T5843] BTRFS info (device loop4): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  311.912991][   T26] audit: type=1326 audit(1719031315.982:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd8e7d0a9 code=0x7ffc0000
[  311.985867][   T26] audit: type=1326 audit(1719031315.982:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd8e7d0a9 code=0x7ffc0000
[  312.018085][   T26] audit: type=1326 audit(1719031315.982:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7efcd8e7d0a9 code=0x7ffc0000
[  312.058575][   T26] audit: type=1326 audit(1719031315.982:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd8e7d0a9 code=0x7ffc0000
[  312.175359][   T26] audit: type=1326 audit(1719031315.992:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcd8e7d0a9 code=0x7ffc0000
[  312.245714][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  312.263787][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  312.266024][ T7140] loop2: detected capacity change from 0 to 40427
[  312.275247][   T26] audit: type=1326 audit(1719031315.992:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7138 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd8e7d0a9 code=0x7ffc0000
[  312.304063][ T7140] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  312.312110][ T7140] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  312.384644][ T7140] F2FS-fs (loop2): Found nat_bits in checkpoint
[  312.405916][ T7057] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  312.443771][ T7140] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  312.450942][ T7140] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  312.659190][ T7057] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  312.830850][ T7057] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  312.845758][ T7154] syz-executor.2: attempt to access beyond end of device
[  312.845758][ T7154] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  312.868191][   T26] audit: type=1804 audit(1719031316.932:81): pid=7154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir999547186/syzkaller.Y9SiTU/56/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  313.070981][ T7057] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  313.306523][   T47] Bluetooth: hci3: command tx timeout
[  313.376178][ T4557] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  313.378019][ T7057] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.456375][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  313.465039][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  313.506378][ T7057] 8021q: adding VLAN 0 to HW filter on device team0
[  313.534394][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  313.550766][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  313.569355][ T3648] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  313.586731][ T3615] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.593941][ T3615] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.630913][ T3863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  313.660749][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  313.677505][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  313.706651][ T3859] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.713802][ T3859] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.736479][ T4557] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  313.755378][ T4557] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config
[  313.776566][ T3859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  313.786606][ T4557] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  313.795630][ T4557] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10
[  313.842388][ T7057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  313.863239][ T4557] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024
[  313.884903][ T7057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  313.912421][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  313.922489][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  313.934502][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  313.944533][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  313.953932][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  313.962977][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  313.972201][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  313.981422][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  313.990710][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  314.003735][ T7169] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  314.006517][ T3648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.012480][ T4557] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  314.042382][ T7169] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[  314.050684][ T7169] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'.
[  314.063735][ T3648] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.066203][ T4557] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  314.104380][ T3648] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  314.112548][ T4557] usb 4-1: Product: syz
[  314.126331][ T4557] usb 4-1: Manufacturer: syz
[  314.145051][ T3648] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.147470][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  314.166583][ T7159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  314.180077][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  314.186694][ T3648] usb 5-1: config 0 descriptor??
[  314.188760][ T4557] cdc_wdm 4-1:1.0: skipping garbage
[  314.206340][ T4557] cdc_wdm 4-1:1.0: skipping garbage
[  314.219111][ T4557] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  314.235355][ T4557] cdc_wdm 4-1:1.0: Unknown control protocol
[  314.259516][ T7167] loop1: detected capacity change from 0 to 32768
[  314.303493][ T7167] syz-executor.1: attempt to access beyond end of device
[  314.303493][ T7167] loop1: rw=0, sector=161944, nr_sectors = 8 limit=32768
[  314.343707][ T7167] lbmIODone: I/O error in JFS log
[  314.366340][ T7167] syz-executor.1: attempt to access beyond end of device
[  314.366340][ T7167] loop1: rw=2049, sector=161944, nr_sectors = 8 limit=32768
[  314.398592][ T7167] lbmIODone: I/O error in JFS log
[  314.401698][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.409628][ T7167] lmLogInit: exit(-5)
[  314.426437][ T7167] lmLogOpen: exit(-5)
[  314.429822][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.436804][ T7167] jfs_mount_rw failed, return code = -5
[  314.537414][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  314.556866][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  314.581421][ T7057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.627538][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  314.647209][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  314.658330][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.675091][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.678494][ T3648] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  314.709436][ T7057] device veth0_vlan entered promiscuous mode
[  314.718982][ T3616] usb 4-1: USB disconnect, device number 8
[  314.726174][ T3648] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  314.733446][ T3648] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  314.759312][ T7057] device veth1_vlan entered promiscuous mode
[  314.766122][ T3648] cm6533_jd 0003:0D8C:0022.0008: No inputs registered, leaving
[  314.796555][ T3648] cm6533_jd 0003:0D8C:0022.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[  314.837418][ T7057] device veth0_macvtap entered promiscuous mode
[  314.866948][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  314.875416][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  314.894689][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  314.903092][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  314.921798][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  314.937039][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  314.955604][ T7057] device veth1_macvtap entered promiscuous mode
[  314.972705][ T4278] usb 5-1: USB disconnect, device number 8
[  314.987694][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  315.004499][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  315.013030][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  315.029475][ T3648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  315.065664][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.079227][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.095173][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.124891][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.141892][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.154207][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.162185][ T7189] loop1: detected capacity change from 0 to 1024
[  315.172969][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  315.188387][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.201026][ T7057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  315.223121][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  315.223357][ T7189] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  315.245112][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  315.267032][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.285002][ T7189] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  315.297259][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.313664][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.325714][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.386271][ T3580] Bluetooth: hci3: command tx timeout
[  315.391911][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.480449][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.556093][ T7057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  315.605695][ T7057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  315.625151][ T7193] loop2: detected capacity change from 0 to 40427
[  315.637846][ T6823] EXT4-fs (loop1): unmounting filesystem.
[  315.638363][ T7057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  315.650951][ T7193] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  315.658799][ T7193] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  315.668501][ T7057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.679200][ T7057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.688119][ T7057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.697582][ T7057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.709559][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  315.739016][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  315.763144][ T7193] F2FS-fs (loop2): Found nat_bits in checkpoint
[  315.877148][ T7193] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  315.884861][ T7193] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  316.085901][ T7212] mmap: syz-executor.3 (7212) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  317.114691][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  317.121769][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  317.220902][   T26] audit: type=1326 audit(1719031321.292:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7207 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f984607d0a9 code=0x0
[  317.260220][ T7220] syz-executor.2: attempt to access beyond end of device
[  317.260220][ T7220] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  317.467884][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.490220][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.563332][   T26] audit: type=1804 audit(1719031321.352:83): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir999547186/syzkaller.Y9SiTU/62/bus/bus" dev="loop2" ino=10 res=1 errno=0
[  317.599946][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  317.646918][ T7229] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  317.655906][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  317.682947][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.701108][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  317.723059][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  317.885074][ T7241] loop1: detected capacity change from 0 to 1024
[  317.933786][ T7241] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  317.960095][ T7241] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  318.078440][ T3616] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  318.136290][ T3863] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  423.156043][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  423.163156][    C0] 	(detected by 0, t=10502 jiffies, g=38597, q=9 ncpus=2)
[  423.170306][    C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294979441-4294968939), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  423.184150][    C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g38597 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  423.195409][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  423.205432][    C0] rcu: RCU grace-period kthread stack dump:
[  423.211350][    C0] task:rcu_preempt     state:R  running task     stack:26776 pid:16    ppid:2      flags:0x00004000
[  423.222230][    C0] Call Trace:
[  423.225540][    C0]  <TASK>
[  423.228678][    C0]  __schedule+0x142d/0x4550
[  423.233330][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  423.238486][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  423.243656][    C0]  ? __sched_text_start+0x8/0x8
[  423.248557][    C0]  ? print_irqtrace_events+0x210/0x210
[  423.254061][    C0]  ? preempt_schedule_common+0xd0/0xd0
[  423.259730][    C0]  ? preempt_schedule_irq+0xec/0x1c0
[  423.265135][    C0]  preempt_schedule_irq+0xf7/0x1c0
[  423.270280][    C0]  ? preempt_schedule_notrace+0x140/0x140
[  423.276058][    C0]  ? trace_hardirqs_off_finish+0x7b/0x1a0
[  423.281834][    C0]  irqentry_exit+0x53/0x80
[  423.286379][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  423.292430][    C0] RIP: 0010:preempt_count_add+0x2/0x180
[  423.298016][    C0] Code: 0c 24 80 e1 07 80 c1 03 38 c1 7c 97 48 8b 3c 24 e8 d3 b2 83 00 eb 8c e9 f2 fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 <41> 56 53 89 fb 48 c7 c0 60 51 c9 91 48 c1 e8 03 49 bf 00 00 00 00
[  423.317754][    C0] RSP: 0018:ffffc90000157b88 EFLAGS: 00000202
[  423.323946][    C0] RAX: 0000000000000001 RBX: 1ffff11027fd5b28 RCX: ffffffff8a939aa6
[  423.332036][    C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001
[  423.340139][    C0] RBP: ffffc90000157cb0 R08: dffffc0000000000 R09: ffffed1027fd5b29
[  423.348143][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88813fead940
[  423.356189][    C0] R13: 1ffff9200002af78 R14: ffff88813feaebb8 R15: dffffc0000000000
[  423.364204][    C0]  ? schedule+0xd6/0x180
[  423.368484][    C0]  schedule+0xb8/0x180
[  423.372585][    C0]  schedule_timeout+0x1b9/0x300
[  423.377484][    C0]  ? console_conditional_schedule+0x40/0x40
[  423.383433][    C0]  ? update_process_times+0x1b0/0x1b0
[  423.388873][    C0]  ? prepare_to_swait_event+0x329/0x350
[  423.394478][    C0]  rcu_gp_fqs_loop+0x2d2/0x1150
[  423.399388][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  423.404659][    C0]  ? rcu_gp_init+0x15f0/0x15f0
[  423.409465][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  423.415406][    C0]  ? finish_swait+0xcf/0x1e0
[  423.420053][    C0]  rcu_gp_kthread+0xa3/0x3b0
[  423.424684][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  423.429829][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  423.435765][    C0]  ? __kthread_parkme+0x168/0x1c0
[  423.440838][    C0]  kthread+0x28d/0x320
[  423.444932][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  423.450168][    C0]  ? kthread_blkcg+0xd0/0xd0
[  423.454784][    C0]  ret_from_fork+0x1f/0x30
[  423.459270][    C0]  </TASK>
[  423.462397][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  423.468761][    C0] CPU: 0 PID: 7247 Comm: syz-executor.0 Not tainted 6.1.94-syzkaller #0
[  423.477117][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  423.487200][    C0] RIP: 0010:finish_task_switch+0x1d3/0x810
[  423.493069][    C0] Code: 2e 0b 00 48 83 c4 08 4c 89 f7 e8 98 30 00 00 0f 1f 44 00 00 4c 89 f7 e8 7b 23 36 09 e8 06 1e 32 00 fb 49 8d bc 24 f8 15 00 00 <48> 89 f8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28
[  423.512711][    C0] RSP: 0018:ffffc90003a7f8a8 EFLAGS: 00000286
[  423.518816][    C0] RAX: 2bc643ca0a6b8a00 RBX: ffff8880282ad974 RCX: ffffffff91c95103
[  423.526993][    C0] RDX: dffffc0000000000 RSI: ffffffff8aec0240 RDI: ffff88802711d178
[  423.535012][    C0] RBP: ffffc90003a7f8f0 R08: dffffc0000000000 R09: ffffed1017307541
[  423.543105][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802711bb80
[  423.551102][    C0] R13: 1ffff110173076eb R14: ffff8880b983aa00 R15: ffff8880b983b758
[  423.559192][    C0] FS:  00007fbbc09106c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  423.568148][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  423.574757][    C0] CR2: 0000001b2c439000 CR3: 000000004b286000 CR4: 00000000003506f0
[  423.582844][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  423.590845][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  423.598844][    C0] Call Trace:
[  423.602144][    C0]  <IRQ>
[  423.605014][    C0]  ? rcu_check_gp_kthread_starvation+0x1b8/0x220
[  423.611380][    C0]  ? _find_next_bit+0x11b/0x120
[  423.616287][    C0]  ? print_other_cpu_stall+0x150c/0x1640
[  423.621969][    C0]  ? print_cpu_stall+0x5f0/0x5f0
[  423.626936][    C0]  ? bpf_trace_run1+0x27b/0x3d0
[  423.631930][    C0]  ? rcu_sched_clock_irq+0xaf6/0x1200
[  423.637433][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  423.642325][    C0]  ? hrtimer_run_queues+0x163/0x450
[  423.647595][    C0]  ? acct_account_cputime+0xdd/0x270
[  423.653000][    C0]  ? update_process_times+0x147/0x1b0
[  423.658407][    C0]  ? tick_sched_timer+0x386/0x550
[  423.663586][    C0]  ? tick_setup_sched_timer+0x2f0/0x2f0
[  423.669251][    C0]  ? __hrtimer_run_queues+0x5a7/0xe50
[  423.674676][    C0]  ? hrtimer_interrupt+0x980/0x980
[  423.679822][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  423.685932][    C0]  ? hrtimer_interrupt+0x392/0x980
[  423.691100][    C0]  ? __sysvec_apic_timer_interrupt+0x156/0x580
[  423.697295][    C0]  ? sysvec_apic_timer_interrupt+0x8c/0xb0
[  423.703140][    C0]  </IRQ>
[  423.706097][    C0]  <TASK>
[  423.709065][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  423.715293][    C0]  ? finish_task_switch+0x1d3/0x810
[  423.720533][    C0]  ? finish_task_switch+0x1ca/0x810
[  423.725779][    C0]  __schedule+0x1435/0x4550
[  423.730408][    C0]  ? read_lock_is_recursive+0x10/0x10
[  423.735943][    C0]  ? futex_wait_queue+0x9c/0x1d0
[  423.740924][    C0]  ? __sched_text_start+0x8/0x8
[  423.745822][    C0]  ? futex_wait_queue+0x23/0x1d0
[  423.750793][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  423.756054][    C0]  schedule+0xbf/0x180
[  423.760166][    C0]  ? futex_wait_queue+0x23/0x1d0
[  423.765189][    C0]  futex_wait_queue+0x149/0x1d0
[  423.770081][    C0]  futex_wait+0x203/0x5c0
[  423.774552][    C0]  ? futex_wait_setup+0x340/0x340
[  423.779646][    C0]  do_futex+0x3b5/0x490
[  423.783839][    C0]  ? __ia32_sys_get_robust_list+0x80/0x80
[  423.789592][    C0]  ? restore_altstack+0x107/0x150
[  423.794663][    C0]  ? __ia32_sys_sigaltstack+0x260/0x260
[  423.800250][    C0]  __se_sys_futex+0x3d7/0x460
[  423.804973][    C0]  ? __x64_sys_futex+0xf0/0xf0
[  423.809776][    C0]  ? syscall_enter_from_user_mode+0x2e/0x230
[  423.815800][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  423.821067][    C0]  ? __x64_sys_futex+0x1d/0xf0
[  423.825868][    C0]  do_syscall_64+0x3b/0xb0
[  423.830328][    C0]  ? clear_bhb_loop+0x45/0xa0
[  423.835081][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  423.841016][    C0] RIP: 0033:0x7fbbbfc7d0a9
[  423.845471][    C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  423.865205][    C0] RSP: 002b:00007fbbc0910178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  423.873653][    C0] RAX: ffffffffffffffda RBX: 00007fbbbfdb4128 RCX: 00007fbbbfc7d0a9
[  423.881655][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbbbfdb4128
[  423.889743][    C0] RBP: 00007fbbbfdb4120 R08: 00007fbbc09106c0 R09: 00007fbbc09106c0
[  423.897741][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbbbfdb412c
[  423.905739][    C0] R13: 000000000000006e R14: 00007ffe9edc4540 R15: 00007ffe9edc4628
[  423.913854][    C0]  </TASK>