last executing test programs:

8m52.38028633s ago: executing program 32 (id=149):
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40106435, &(0x7f00000000c0))
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0)

7m29.283336253s ago: executing program 33 (id=297):
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x7, 0xaf, 0x8, 0x8}, {0x7, 0x8, 0x86, 0x71edcb02}, {0x7, 0x81, 0x47, 0x4639}]})
chdir(0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}})
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)={0x2a, 0x4, 0x0, {0x1, 0x7fffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)

7m14.46785993s ago: executing program 34 (id=360):
timerfd_create(0x0, 0x800)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x4, 0x3}, 0x8)
shutdown(r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16], 0x8)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents(r2, &(0x7f00000000c0)=""/72, 0x80)
getdents(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_io_uring_setup(0x3286, &(0x7f00000000c0)={0x0, 0x5efc, 0x0, 0x3, 0x156}, &(0x7f0000000300), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f00000001c0), 0x1)

7m10.17907191s ago: executing program 35 (id=370):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
fsopen(&(0x7f0000000040)='ecryptfs\x00', 0x1)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000000)={{0x1}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)

6m46.552296981s ago: executing program 0 (id=398):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(0xffffffffffffffff, 0x0, 0xff00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x100000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x3c}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
write$UHID_INPUT(r1, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000040)=0x519c16d5, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x800)

6m45.362197896s ago: executing program 0 (id=399):
syz_open_dev$vim2m(&(0x7f0000000080), 0x200000000000000, 0x2)
socket$can_j1939(0x1d, 0x2, 0x7)
socket$inet_sctp(0x2, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141301)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
shutdown(r2, 0x2)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x8004000000000000, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x0, 0x0)

6m43.726366025s ago: executing program 0 (id=402):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000080)={[{@logbufs={'logbufs', 0x3d, 0x2}}, {@prjquota}, {@bsdgroups}, {@inode64}], [{@flag='nomand'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$eJzs2gm8pnPhuP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjS8pSUqESSgoVEe3Zt2xlCWVrJdlbKCFUskRabMP8X8ecYYyLb/36/l++dV3X63XO8zz3c9/3+Tyf972cw2wyaYOJg8Ecg2mNG8zceddOnjLm6nXvOGrz+Y9d5tR7DnjsiouOH3mcMPI4cTAYjBp5e2jasrGD004fNZj14eWPNveccw3NOxgsO/JyZD+DFac9zHvF9PWmztTMAx169Ns+074ebr7hHzH85PAD9jpiMBiMmWH7ocFgaPfHfVBpm0yYPOlRq0fchq1Gjzyf8Wu2aV/zXjwYzHvmgI+PGdcdego+0vDP3P0l545e9yn42f9xbTJh8loz+Q+fi7OMLFtx+Byf+Rw0NvNxfttim648MoUPH2+DwfAl7jHnyn9Em0yYtPbgia/zg6NWuXCfqdOum7MPpt0o5hwMBnONXF/neapd6t9rwsTlHr5nT389wj79WN6djosT3n7yQ8M36cFgsMBgMHbN6feCqqqq+s9owsTlVoP7/xxPdv8/5ZSFz+z+X1VV9Z/bWhMmLjd8r5/p/j/Pk93/d1z4oj2n/bf/8StO2+qhp/ZDVFVV1b/UpLXw/j/mye7/K6522drd/6uqqv5zW3+dh+//88x0/1/wye7/bzl5lUVG1pv+e8ODM+xyaIb/n/DADMtnmWH5/TMsHz3DfmZcf7YZlt87w/LZh9+D9ccNBmOn/3vBKY8uHjtu+L2R5ffNsHz8o/9OZ9HVZ1g+YYblk2ZYPnFkrMPLJ8+wfPIM66/5JFNdVVX1f6b1l5u02mCGf2c/snih6e/T/f+Cs65b8qkab1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVf1n9tAdZ587GAyGBoPBqMFgymDk+YyPg6lTp04dfn3K+Zdf/pQN9P9GQ+ddO3nKmKvXveOozec/dplT7zng0Vn6j+0//xPUv9Ow/xzHjxsMtt/oqR5KPQV1/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMPJ89+mPZ+3/5reOrLryxqfedfCjWy46fpuRZ+ddO3nKNk/B2J+ChoY/65ir173jqM3nP3aZU+854L/g7PnP/wT17/Sw/zZDg8HI+T1m+Fxed8L6Gy4xGAwOvuvUjVcYPPLeSsPvrTJ2lsEsD2+6xMPf11iUd7z7mtMexw9/W/CRfZzy8P7XmnrYLEMzDWKGXnXejUe9a5N7lp/5cfEn/hyjpj854voz7p46derUxywcaY4n2Hj6/qd/lpnP85GxLzE89qV22u69S71/l12X3Ga7zbbecustt19muZWWX2HZZVZY+RVLbbXNtlsuPe37E8zZuIe/r/bPzNk8M8/ZHRNmnLOZP9sTzdm4J5+zh/c4ZdehDafP2az/4pyt9uRzNm6bkR+06PjRg00fnpqhwWDR1UcPdh5+sczsg8Gia4ysu9DwuquOHTUY7P/oBx1+Nvsjx+DQ7sPrbDJpg4mPjuzxn/Bx1+nHrLjo+JHHCSOPE6cNcdzg0UNx7OC000cNz8VjpnnuOecamncwWHbk5ch+BiuPvHvo9PWmztTMAx169Ns+074ebr7hnQw/effSZ18zfC7OtP3/H/0/Xf8f57XS0CMTNTTyNbLONK8Jk9d69Gc9PA3DczfLyLIVh01mnrP/zR433nGzDsY8yXgnrTVxueHFM83/9E3w+LpzsQs/PO3YGr/itK0e+n9GofHO8yTjXWsCjneeJxvv8R+59PRpu/pfG+9M17q1H/4+/p+51g2e/Fo3C+1gy0sWmfla97onHuJjzuPpczT7TCs90bVu50OW3X14/+Of/Fq39vDYRz/mWjdqMFh0tenXuuEL36TRg/2HXyw7/GLy6MGxwy+We/jFnIPzh1+8/J07bLvF8II1p8/J0sP7HT926GH3C1e8dfGpB06duvrIWMaPfexYR46PcTPezyeMnTaZ07edvt/hVafv95ZnTntv0sh+J/wL+52+LY33rvmmvTd5ZL8TZ9rv6CfZ7/RtH3c+LDH0yIXrCa43k2a63oz8jTP9xz3ma7ZpX/NePBjMeyb5zrTu/3jNpPN3jicZ74SJy602PL6Zzt9HDkc6fy+dfPXwvWLewWCwwGAwds3pY/8XG3qi8c765OOdCOOd9cnGe+Vx263zvzDewQzjfcxxtsn6046VNUeOs8n/wvE7fduZr2OjH3532mV/zX/mOjbucdexPWYZNdNkz9AT/c62Baw/7flCj/6ee+1Jx0yf+9Ez7fd/+p1ths8yBNexMTP9PT9qzRsGQzTnux+/6mVDBz35nI8ePPZvi+lzPn3bJ5vzyf/MnD/nyef8n/09eYkXTnt/9Ezjn3HO19vv2ftOn/PZZtrv/zTnk5/83vH4OR8/GE1zvvT90+btya6nTzTn07edPufDH3GVsbMO1hi+Z43M+aR/Zs4X+t85zueC9ac93/KRReccdeobp8/5zHP8P835pH91zsc9cpwv+vB7Lxg1mG22wc6b7bTTjstM+z795bLTvvO16N5rp83zk91Ln8ho+rZPdl6s/s8YjfmnjIb+J6OFZ30io0dPrSN32PEZ/6/XotX/VaMBX4uuPmbavD3Z70VPNOfTt6X74IIzbD/z36Hrr/Pw793zzHQfnL4J3gfPOWvtvafvcmSzB2ca5vT76gMzLJ9lhuX3z7B89Az7mXH92WZYfu8My4c/wmwzrD+dddzw37wjy6c8uvrY4V+exo0sv2+G5eMf3XbR1WdYPmGG5ZNmWD7x0UNj0ckzLJ88w/prDv7Fpv836W1mvsjXP1v//ddd/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMO350MjjYPeh9W5/zfDjYDAYveKJU9d7qsf7FDd03rWTp4y5et07jtp8/mOXOfWeA/4Lzp7//E9Q/04P+28zNBiMnN9jthkMButOWH/DJQaDwXpTT1xx1OCR9xYafm/VsaMGg/2HHrOD2R9ZZ2j34XU2mbTBxMFgjpE1xj3uhz7uPHrMiouOH3mcMPI4cdr1adzg0eN17OC000cNZn14+aPNPedcQ/MOBsuOvBzZz2DFaQ/zXjF9vakzNfNAhx79ts+0r4ebb/hHDD/ZeevJzx2eq5m2/z/T9Gv1NqP+x1U7/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u/jX/jpb/thJ1l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vojrPPHTkGRg0GUwbTng/tPvI4GDr5tBePHCKjd7nq6MOe6vE+xQ2dd+3kKWOuXveOozaf/9hlTr3ngP+Cs+c//xPUv9PD/tsMDQYj5/eYbQaDwboT1t9wicFgcNjRV+0yavDIewsNv7fq2FGDwf5Dj9nB7I+sM7T78DqbTNpg4mAwx8ga4x73Qx93Hj1mxUXHjzxOGHmcOO36NG7w6PE6dnDa6aMGsz68/NHmnnOuoXkHg2VHXo7sZ7DitId5r5i+3tSZmnmgQ49+22fa18PNN/wjhp/sNc+1Jw/P1Uzb/59p+rV6m1H/46qd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uoTvOPnfkGBg1GEwZTHs+auRxaPebb9ptw+HH4dfzr7n3tU/1eJ/ihs67dvKUMVeve8dRm89/7DKn3nPAf8HZ85//Cerfadh/juPHDQbbb/RUD6Wegjr/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9xDd5x97sjTUY8uHbV7xwU2dN61k6eMuXrdO47afP5jlzn1ngOe6gH9uz2B/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf5ZB/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkP/jmnXk0eD/wvwxy/m/aP6YxX+x/DGL/4vyxyz+i+ePWfyXyB+z+L84f8zi/5L8MYv/S/PHLP4vyx+z+C+ZP2bxf3n+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf0X+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxfmT9m8V8lf8ziv2r+mMX/VfljFv9X549Z/F+TP2bxH58/ZvGfkD9m8Z+YP2bxXy1/zOK/ev6YxX+N/DGL/6T8MYv/ZJX/LP/0mhb/NVX+/3wW/7Xyxyz+r80fs/i/Ln/M4r92/pjFf538MYv/uvljFv/X549Z/NfLH7P4vyF/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP5vzB+z+G+cP2bx3yR/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4b5o/ZvHfLH/M4r95/pjF/535Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvF/V/6YxX+b/DGL/7vzxyz+78kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9788cs/u/LH7P475g/ZvF/f/6YxX+n/DGL/wfyxyz+H8wfs/h/KH/M4r9z/pjFf5f8MYv/rvljFv8P549Z/D+SP2bx/2j+mMV/t/wxi//H8scs/rvnj1n898gfs/jvmT9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/vvmj1n898sfs/h/Jn/M4v/Z/DGL/+fyxyz+++ePWfwPyB+z+H8+f8zif2D+mMX/oPwxi/8X8scs/gfnj1n8D8kfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+b+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOL/rfwxi/+388cs/qfmj1n8T8sfs/ifnj9m8T8jf8zi/538MYv/mfljFv+z8scs/mfnj1n8v5s/ZvH/Xv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/+F+WMW/4vyxyz+P80fs/hfnD9m8f9Z/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif3X+mMX/mvwxi/+v88cs/r/JH7P4X5s/ZvH/bf6Yxf+6/DGL//X5Yxb/G/LHLP6/yx+z+N+YP2bxvyl/zOJ/c/6Yxf/3+WMW/z/kj1n8/5g/ZvG/JX/M4v+n/DGL/635Yxb/2/LHLP63549Z/O/IH7P4/zl/zOJ/Z/6Yxf+u/DGL/1/yxyz+d+ePWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/5T8MYv/g/ljFv+H8scs/lPzxyT+sw7yxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5Y/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+ePWfyfkT9m8X9m/pjFf6H8MYv/s/LHLP4L549Z/J+dP2bxf07+mMV/kfwxi/9z88cs/s/LH7P4j8sfs/g/P3/M4v+C/DGL/wvzxyz+i+aPWfwXyx+z+L8of8ziv3j+mMV/ifwxi/+L88cs/i/JH7P4vzR/zOL/svwxi/+S+WMW/5fnj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/1fkj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/lfljFv9V8scs/qvmj1n8X5U/ZvF/df6Yxf81+WMW//H5Yxb/CfljFv+J+WMW/9Xyxyz+q+ePWfzXyB+z+E/KH7P4T84fs/ivmT9m8V8rf8zi/9r8MYv/6/LHLP5r549Z/NfJH7P4r5s/ZvF/ff6YxX+9/DGL/xsGl+cPWfzX7/zHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxHz3IH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxf1r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n54/ZvF/Rv6Yxf+Z+WMW/4Xyxyz+z8ofs/gvnD9m8X92/pjF/zn5Yxb/RfLHLP7PzR+z+D8vf8ziPy5/zOL//Pwxi/8L8scs/i/MH7P4L5o/ZvFfLH/M4v+i/DGL/+L5Yxb/JfLHLP4vzh+z+L8kf8zi/9L8MYv/y/LHLP5L5o9Z/F+eP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+RP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/V+aPWfxXyR+z+K+aP2bxf1X+mMX/1fljFv/X5I9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/2vzxyz+r8sfs/ivnT9m8V8nf8ziv27+mMX/9fljFv/18scs/m/IH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/G/PHLP4b549Z/DfJH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOL/9vwxi/878scs/pvmj1n8N8sfs/hvnj9m8X9n/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835U/ZvHfJn/M4v/u/DGL/3vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/3vwxi//78scs/jvmj1n8358/ZvHfKX/M4v+B/DGL/wfzxyz+H8ofs/jvnD9m8d8lf8ziv2v+mMX/w/ljFv+P5I9Z/D+aP2bx3y1/zOL/sfwxi//u+WMW/z3yxyz+e+aPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/+++WMW//3yxyz+n8kfs/h/Nn/M4v+5/DGL//75Yxb/A/LHLP6fzx+z+B+YP2bxPyh/zOL/hfwxi//B+WMW/0Pyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Zv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fyt/zOL/7fwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H8nf8zif2b+mMX/rPwxi//Z+WMW/+/mj1n8v5c/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/Yf6Yxf+i/DGL/0/zxyz+F+ePWfx/lj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+dP2bxvyZ/zOL/6/wxi/9v8scs/tfmj1n8f5s/ZvG/Ln/M4n99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/2yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/6flj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/+n5Yxb/Z+SPWfyfmT9m8V8of8zi/6z8MYv/wvljFv9n549Z/J+TP2bxXyR/zOL/3Pwxi//z8scs/uPyxyz+z88fs/i/IH/M4v/C/DGL/6L5Yxb/xfLHLP4vyh+z+C+eP2bxXyJ/zOL/4vwxi/9L8scs/i/NH7P4vyx/zOK/ZP6Yxf/l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf8V+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf2X+mMV/lfwxi/+q+WMW/1flj1n8X50/ZvF/Tf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+r5Yxb/NfLHLP6T8scs/pPzxyz+a+aPWfzXyh+z+L82f8zi/7r8MYv/2vljFv918scs/uvmj1n8X58/ZvFfL3/M4v+G/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vzF/zOK/cf6YxX+T/DGL/5vyxyz+b84fs/i/JX/M4v/W/DGL/9vyxyz+b88fs/i/I3/M4r9p/pjFf7P8MYv/5vljFv935o9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/135Yxb/bfLHLP7vzh+z+L8nf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+780fs/i/L3/M4r9j/pjF//35Yxb/nfLHLP4fyB+z+H8wf8zi/6H8MYv/zvljFv9d8scs/rvmj1n8P5w/ZvH/SP6Yxf+j+WMW/93yxyz+H8sfs/jvnj9m8d8jf8ziv2f+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/jvmz9m8d8vf8zi/5n8MYv/Z/PHLP6fyx+z+O+fP2bxPyB/zOL/+fwxi/+B+WMW/4Pyxyz+X8gfs/gfnD9m8T8kf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/b+aPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/7fyxyz+384fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/938scs/mfmj1n8z8ofs/ifnT9m8f9u/pjF/3v5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+F+aPWfwvyh+z+P80f8zif3H+mMX/Z/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi//V+WMW/2vyxyz+v84fs/j/Jn/M4n9t/pjF/7f5Yxb/6/LHLP7X549Z/G/IH7P4/y5/zOJ/Y/6Yxf+m/DGL/835Yxb/3+ePWfz/kD9m8f9j/pjF/5b8MYv/n/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4v/n/DGL/535Yxb/u/LHLP5/yR+z+N+dP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP5T8scs/g/mj1n8H8ofs/hPzR+T+M8+yB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9a/pjFf778MYv/mPwxi//8+WMW/7H5Yxb/BfLHLP4L5o9Z/J+eP2bxf0b+mMX/mfljFv+F8scs/s/KH7P4L5w/ZvF/dv6Yxf85+WMW/0Xyxyz+z80fs/g/L3/M4j8uf8zi//z8MYv/C/LHLP4vzB+z+C+aP2bxXyx/zOL/ovwxi//i+WMW/yXyxyz+L84fs/i/JH/M4v/S/DGL/8vyxyz+S+aPWfxfnj9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxfkT9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1fmj1n8V8kfs/ivmj9m8X9V/pjF/9X5Yxb/1+SPWfzH549Z/Cfkj1n8J+aPWfxXyx+z+K+eP2bxXyN/zOI/KX/M4j85f8ziv2b+mMV/rfwxi/9r88cs/q/LH7P4r50/ZvFfJ3/M4r9u/pjF//X5Yxb/9fLHLP5vyB+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/xvzxyz+G+ePWfw3yR+z+L8pf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP6b5o9Z/DfLH7P4b54/ZvF/Z/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+VP2bx3yZ/zOL/7vwxi/978scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/978MYv/+/LHLP475o9Z/N+fP2bx3yl/zOL/gfwxi/8H88cs/h/KH7P475w/ZvHfJX/M4r9r/pjF/8P5Yxb/j+SPWfw/mj9m8d8tf8zi/7H8MYv/7vljFv898scs/nvmj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/vvljFv/98scs/p/JH7P4fzZ/zOL/ufwxi//++WMW/wPyxyz+n88fs/gfmD9m8T8of8zi/4X8MYv/wfljFv9D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/2b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8rf8zi/+38MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/J3/M4n9m/pjF/6z8MYv/2fljFv/v5o9Z/L+XP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif2H+mMX/ovwxi/9P88cs/hfnj1n8f5Y/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfnT9m8b8mf8zi/+v8MYv/b/LHLP7X5o9Z/H+bP2bxvy5/zOJ/ff6Yxf+G/DGL/+/yxyz+N+aPWfxvyh+z+N+cP2bx/33+mMX/D/ljFv8/5o9Z/G/JH7P4/yl/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP5/zh+z+N+ZP2bxvyt/zOL/l/wxi//d+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOI/JX/M4v9g/pjF/6H8MYv/1Pwxif8cg/wxi/9Q/pjFf1T+mMV/lvwxi/+s+WMW/9H5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv+n5Y9Z/OfLH7P4j8kfs/jPnz9m8R+bP2bxXyB/zOK/YP6Yxf/p+WMW/2fkj1n8n5k/ZvFfKH/M4v+s/DGL/8L5Yxb/Z+ePWfyfkz9m8V8kf8zi/9z8MYv/8/LHLP7j8scs/s/PH7P4vyB/zOL/wvwxi/+i+WMW/8Xyxyz+L8ofs/gvnj9m8V8if8zi/+L8MYv/S/LHLP4vzR+z+L8sf8ziv2T+mMX/5fljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMX/FfljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X9l/pjFf5X8MYv/qvljFv9X5Y9Z/F+dP2bxf03+mMV/fP6YxX9C/pjFf2L+mMV/tfwxi//q+WMW/zXyxyz+k/LHLP6T88cs/mvmj1n818ofs/i/Nn/M4v+6/DGL/9r5Yxb/dfLHLP7r5o9Z/F+fP2bxXy9/zOL/hvwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+L8xf8ziv3H+mMV/k/wxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/m/PH7P4vyN/zOK/af6YxX+z/DGL/+b5Yxb/d+aPWfy3yB+z+G+ZP2bx3yp/zOK/df6Yxf9d+WMW/23yxyz+784fs/i/J3/M4r9t/pjFf7v8MYv/9vljFv8d8scs/u/NH7P4vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPOcgfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz/2WP/RT/Vw/v2ewP+6/DHL+X99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/1yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf+y/33+OR97K//H99/s/3Fzz5I9Z/OfNH7P4Py1/zOI/X/6YxX9M/pjFf/78MYv/2Pwxi/8C+WMW/wXzxyz+T88fs/g/I3/M4v/M/DGL/0L5Yxb/Z+WPWfwXzh+z+D87f8zi/5z8MYv/IvljFv/n5o9Z/J+XP2bxH5c/ZvF/fv6Yxf8F+WMW/xfmj1n8F80fs/gvlj9m8X9R/pjFf/H8MYv/EvljFv8X549Z/F+SP2bxf2n+mMX/ZfljFv8l88cs/i/PH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/q/IH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/K/PHLP6r5I9Z/FfNH7P4vyp/zOL/6vwxi/9r8scs/uPzxyz+E/LHLP4T88cs/qvlj1n8V88fs/ivkT9m8Z+UP2bxn5w/ZvFfM3/M4r9W/pjF/7X5Yxb/1+WPWfzXzh+z+K+TP2bxXzd/zOL/+vwxi/96+WMW/zfkj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/jfljFv+N88cs/pvkj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvF/e/6Yxf8d+WMW/03zxyz+m+WPWfw3zx+z+L8zf8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+78ofs/hvkz9m8X93/pjF/z35Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/b/6Yxf99+WMW/x3zxyz+788fs/jvlD9m8f9A/pjF/4P5Yxb/D+WPWfx3zh+z+O+SP2bx3zV/zOL/4fwxi/9H8scs/h/NH7P475Y/ZvH/WP6YxX/3/DGL/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf+5B/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkD9m8X9h/pjFf9H8MYv/YvljFv8X5Y9Z/BfPH7P4L5E/ZvF/cf6Yxf8l+WMW/5fmj1n8X5Y/ZvFfMn/M4v/y/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v+K/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzJ/zOK/Sv6YxX/V/DGL/6vyxyz+r84fs/i/Jn/M4j8+f8ziPyF/zOI/MX/M4r9a/pjFf/X8MYv/GvljFv9J+WMW/8n5Yxb/NfPHLP5r5Y9Z/F+bP2bxf13+mMV/7fwxi/86+WMW/3Xzxyz+r88fs/ivlz9m8X9D/pjFf/38MYv/BvljFv8N88cs/hvlj1n835g/ZvHfOH/M4r9J/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8d80f8ziv1n+mMV/8/wxi/8788cs/lvkj1n8t8wfs/hvlT9m8d86f8zi/678MYv/NvljFv93549Z/N+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/9+aPWfzflz9m8d8xf8zi//78MYv/TvljFv8P5I9Z/D+YP2bx/1D+mMV/5/wxi/8u+WMW/13zxyz+H84fs/h/JH/M4v/R/DGL/275Yxb/j+WPWfx3zx+z+O+RP2bx3zN/zOL/8fwxi/8n8scs/nvlj1n8P5k/ZvHfO3/M4v+p/DGL/6fzxyz+++SPWfz3zR+z+O+XP2bx/0z+mMX/s/ljFv/P5Y9Z/PfPH7P4H5A/ZvH/fP6Yxf/A/DGL/0H5Yxb/L+SPWfwPzh+z+B+SP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/N/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/1v5Yxb/b+ePWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf87+WMW/zPzxyz+Z+WPWfzPzh+z+H83f8zi/738MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/C/PHLP4X5Y9Z/H+aP2bxvzh/zOL/s/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/q/DGL/zX5Yxb/X+ePWfx/kz9m8b82f8zi/9v8MYv/dfljFv/r88cs/jfkj1n8f5c/ZvG/MX/M4n9T/pjF/+b8MYv/7/PHLP5/yB+z+P8xf8zif0v+mMX/T/ljFv9b88cs/rflj1n8b88fs/jfkT9m8f9z/pjF/878MYv/XfljFv+/5I9Z/O/OH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8p+WMW/wfzxyz+D+WPWfyn5o9J/OcZ5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8tf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/PH7P4PyN/zOL/zPwxi/9C+WMW/2flj1n8F84fs/g/O3/M4v+c/DGL/yL5Yxb/5+aPWfyflz9m8R+XP2bxf37+mMX/BfljFv8X5o9Z/BfNH7P4L5Y/ZvF/Uf6YxX/x/DGL/xL5Yxb/F+ePWfxfkj9m8X9p/pjF/2X5Yxb/JfPHLP4vzx+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP6vyB+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yvzxyz+q+SPWfxXzR+z+L8qf8zi/+r8MYv/a/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf+1+WMW/9flj1n8184fs/ivkz9m8V83f8zi//r8MYv/evljFv835I9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/435Yxb/jfPHLP6b5I9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bxf3v+mMX/HfljFv9N88cs/pvlj1n8N88fs/i/M3/M4r9F/pjFf8v8MYv/VvljFv+t88cs/u/KH7P4b5M/ZvF/d/6Yxf89+WMW/23zxyz+2+WPWfy3zx+z+O+QP/aI/1Yn/1f7vzd/zHL+vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPO8gfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz9m8b8uf8zif33+mMX/hvwxi//v8scs/jfmj1n8b8ofs/jfnD9m8f99/pjF/w/5Yxb/P+aPWfxvyR+z+P8pf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+f84fs/jfmT9m8b8rf8zi/5f8MYv/3fljFv+/5o9Z/P+WP2bx/3v+mMX/H/ljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8ziPyV/zOL/YP6Yxf+h/DGL/9T8MYn/0wb5Yxb/ofwxi/+o/DGL/yz5Yxb/WfPHLP6j88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+T8sfs/jPlz9m8R+TP2bxnz9/zOI/Nn/M4r9A/pjFf8H8MYv/0/PHLP7PyB+z+D8zf8ziv1D+mMX/WfljFv+F88cs/s/OH7P4Pyd/zOK/SP6Yxf+5+WMW/+flj1n8x+WPWfyfnz9m8X9B/pjF/4X5Yxb/RfPHLP6L5Y9Z/F+UP2bxXzx/zOK/RP6Yxf/F+WMW/5fkj1n8X5o/ZvF/Wf6YxX/J/DGL/8vzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/yvyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/yvwxi/8q+WMW/1Xzxyz+r8ofs/i/On/M4v+a/DGL//j8MYv/hPwxi//E/DGL/2r5Yxb/1UX+c/wL61r81xD5/ytZ/Cflj1n8J+ePWfzXzB+z+K+VP2bxf23+mMX/dfljFv+188cs/uvkj1n8180fs/i/Pn/M4r9e/pjF/w35Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxn2+QP2bxH8ofs/iPyh+z+M+SP2bxnzX/xzTLyKPFf3T+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6Yxf9p+WMW//nyxyz+Y/LHLP7z549Z/Mfmj1n8F8gfs/gvmD9m8X96/pjF/xn5Yxb/Z+aPWfwXyh+z+D8rf8ziv3D+mMX/2fljFv/n5I9Z/BfJH7P4Pzd/zOL/vPwxi/+4/DGL//Pzxyz+L8gfs/i/MH/M4r9o/pjFf7H8MYv/i/LHLP6L549Z/JfIH7P4vzh/zOL/kvwxi/9L88cs/i/LH7P4L5k/ZvF/ef6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvF/Rf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/F+ZP2bxXyV/zOK/av6Yxf9V+WMW/1fnj1n8X5M/ZvEfnz9m8Z+QP2bxn5g/ZvFfLX/M4r96/pjFf438MYv/pPwxi//k/DGL/5r5Yxb/tfLHLP6vzR+z+L8uf8ziv3b+mMV/nfwxi/+6+WMW/9fnj1n818sfs/i/IX/M4r9+/pjFf4P8MYv/hvljFv+N8scs/m/MH7P4b5w/ZvHfJH/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/9vzxyz+78gfs/hvmj9m8d8sf8ziv3n+mMX/nfljFv8t8scs/lvmj1n8t8ofs/hvnT9m8X9X/pjFf5v8MYv/u/PHLP7vyR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/3vzxyz+78sfs/jvmD9m8X9//pjFf6f8MYv/B/LHLP4fzB+z+H8of8ziv3P+mMV/l/wxi/+u+WMW/w/nj1n8P5I/ZvH/aP6YxX+3/DGL/8fyxyz+u+ePWfz3yB+z+O+ZP2bx///Yo6cEUAgACIDZeNm2bdu2bdv1kW3btm3btm3zAnuCduYKc6D/qOX/IP9Ry//B/qOW/0P8Ry3/h/qPWv4P8x+1/B/uP2r5P8J/1PJ/pP+o5f8o/1HL/9H+o5b/Y/xHLf/H+o9a/o/zH7X8H+8/avk/wX/U8n+i/6jl/yT/Ucv/yf6jlv9T/Ect/6f6j1r+T/Mftfyf7j9q+T/Df9Tyf6b/qOX/LP9Ry//Z/qOW/3P8Ry3/5/qPWv7P8x+1/J/vP2r5v8B/1PJ/of+o5f8i/1HL/8X+o5b/S/xHLf+X+o9a/i/zH7X8X+4/avm/wn/U8n+l/6jl/yr/Ucv/1f6jlv9r/Ect/9f6j1r+r/Mftfxf7z9q+b/Bf9Tyf6P/qOX/Jv9Ry//N/qOW/1v8Ry3/t/qPWv5v8x+1/N/uP2r5v8N/1PJ/p/+o5f8u/1HL/93+o5b/e/xHLf/3+o9a/u/zH7X83+8/avl/wH/U8v+g/6jl/yH/Ucv/w/6jlv9H/Ect/4/6j1r+H/Mftfw/7j9q+X/Cf9Ty/6T/qOX/Kf9Ry//T/qOW/2f8Ry3/z/qPWv6f8x+1/D/vP2r5f8F/1PL/ov+o5f8l/1HL/8v+o5b/V/xHLf+v+o9a/l/zH7X8v+4/avl/w3/U8v+m/6jl/y3/Ucv/2/6jlv93/Ect/+/6j1r+3/Mftfy/7z9q+f/Af9Ty/6H/qOX/I/9Ry//H/qOW/0/8Ry3/n/qPWv4/8x+1/H/uP2r5/8J/1PL/pf+o5f8r/1HL/9f+o5b/b/xHLf/f+o9a/r/zH7X8f+8/avn/wX/U8v+j/6jl/yf/Ucv/z/6jlv9f/Ect/7/6j1r+f/Mftfz/7j9q+f/Df9Ty/6f/qOX/L/9Ry//f/qOW/3/8Ry3///qPSv4HDOQ/avkf2H/U8j+I/6jlf1D/Ucv/YP6jlv/B/Uct/0P4j1r+h/QftfwP5T9q+R/af9TyP4z/qOV/WP9Ry/9w/qOW/+H9Ry3/I/iPWv5H9B+1/A/wH7X8j+Q/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+1/E/kP2r5n9h/1PI/if+o5X9S/1HL/2T+o5b/yf1HLf9T+I9a/qf0H7X8T+U/avmf2n/U8j+N/6jlf1r/Ucv/dP6jlv/p/Uct/zP4j1r+Z/QftfzP5D9q+Z/Zf9TyP4v/qOV/Vv9Ry/9s/qOW/9n9Ry3/c/iPWv7n9B+1/M/lP2r5n9t/1PI/j/+o5X9e/1HL/3z+o5b/+f1HLf8L+I9a/hf0H7X8L+Q/avlf2H/U8r+I/6jlf1H/Ucv/Yv6jlv/F/Uct/0v4j1r+l/Qftfwv5T9q+V/af9Tyv4z/qOV/Wf9Ry/9y/qOW/+X9Ry3/K/iPWv5X9B+1/K/kP2r5X9l/1PK/iv+o5X9V/1HL/2r+o5b/1f1HLf9r+I9a/tf0H7X8r+U/avlf23/U8r+O/6jlf13/Ucv/ev6jlv/1/Uct/xv4j1r+N/Qftfxv5D9q+d/Yf9Tyv4n/qOV/U/9Ry/9m/qOW/839Ry3/W/iPWv639B+1/G/lP2r539p/1PK/jf+o5X9b/1HL/3b+o5b/7f1HLf87+I9a/nf0H7X87+Q/avnf2X/U8r+L/6jlf1f/Ucv/bv6jlv/d/Uct/3v4j1r+9/Qftfzv5T9q+d/bf9Tyv4//qOV/X/9Ry/9+/qOW//39Ry3/B/iP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf+zbbWydZeHH8bvbOsb+/JMRF1yGJptcKCTCbPeQ8YKwydhWB914HgMc3dqNjXabXYddAffwYhIhPEgyyRIlypahhJnQSAwEK4ho0EVNNPgAiEIUjRMh6Ja4WHPa09Ieu8Zz1etalM/nRc+577Pfva3Jd/e9wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ns1NC48Mr5m2KnxQw8+eLil73XO0ZU3H/htz4UDr+WPl41wyXFDD3p7e3vnPDd7R/nwlKIoSj/bzvLxpMpx6fo767/Q2X8UFvS8tOT4lJ83Hjmw5vRH6rqP3l/bd7a2uGndhtaWj40rinBxbdFZOqirKYqwuLa4r3RQXzpYUls8UjqY3XdwavHt0sH5aze3NpdOLI3+nsH/iobGncX4YcUWw/40GNr/zvpv3TnwOsolB642oSj3f0XX99+q+GzACfofuH5YWNl/1b9B4ISq6/+FBQOvo1zyX+7/k59a9cpIn524/4Hrh4/rH9IZ4fl/WKOVz/0Vz/8zRrjk4P6qmq7jpf4vve3ZmeVTE/6d5/93rx8urux/3LDn/9Jz/KKB5/9TiiJcMsZvB7ynNDTuOjLa/X/0/idMr9jUDO3/jPbN+0v9P77ke0+UT9VW2f+iUe7/45ZW/FqB6jQ0frm34v5fRf/FR0a45GD/bz/x64dL/T/2+wfOHPJZNf1fUtn/rI62LbO2bu86b0Nb0/qW9S2b6mbPnzOvvm7eBXNn9T0S9H8d43cF3hvGdv8vJldsaoqiZXB/TfeBp0v9z33wwTnlU5Oq7H/xqPf/Ge7/MKIPjSsmTiw6mzo62uv6vw4c1vd/7f9hI/Rfxd//zzqn/MNqy681RTFtcH/XmXevKPX/zqFnd5dPTayy/yWj9r9g8OcFIozx/t9csRnW/8FDL/U9/y+79+AZ5VPV/v1/6aj9v+r+D2PR0FjxP/z8h5X631VcFtlpaPDf/yCdHP0/9s4NPXHr8An9Qzo5+v/d546eG7cOy/QP6eTof8LGB56PW4dL9Q/p5Oh/+dT5K+LW4TL9Qzo5+l/76rl/jluHRv1DOjn6P+dLuzvj1mG5/iGdHP0/1D5nW9w6rNA/pJOj/5+e9tBrcetwuf4hnRz9Hzt2z41x63CF/iGdHP137zn7B3HrcKX+IZ0c/V++bmGIW4er9A/p5Oh/+rQ/Ph63DlfrH9LJ0f+8P/39tLh1uEb/kE6O/u/4/Ip9cetwrf4hnRz9j7/+lRfj1mGl/iGdHP0vPXvbwrh1uE7/kE6O/pt/0twbtw6r9A/p5Oh/1td/tCFuHa7XP6STo//Dyx/dE7cON+gf0snR/566YkrcOtyof0gnR/9f++7ph+LW4ZP6h3Ry9P+bp56cH7cOq/UP6eTo/7kP3P6NuHW4Sf+QTo7+713z4llx69Ckf0gnR/8P733+i3HrsEb/kE6O/t94o+3/4tZhrf4hnRz9T5506utx69Csf0gnR/8Lb/1Ke9w6tOgf0snRf9vu7h/GrcM6/UM6Ofr/8PFpq+LWYb3+IZ0c/a+cu/f9cetws/4hnRz9v2/Zhbvi1mGD/iGdHP1f1PPRi+LWYaP+IZ0c/Xc889mvxq3DLfqHdHL0v3fma4vj1qFV/5BOjv5fXr30x3Hr0KZ/SCdH/289et2muHXYpH9IJ0f/T/7s7WNx67BZ/5BOjv7//4JFf41bhy36h3Ry9L94yZtr49bhU/qHdHL0v7H7Hy/HrUO7/iGdHP3PPHz1srh12Kp/SCdH/985r25/3Dp06B/SydH/nVfuq49bh236h3Ry9L//4F13x63DrfqHdHL0/+YvZkyPW4dP6x/SydH//VMOXRu3Dp36h3Ry9P/LTbXPxK3Ddv1DOjn6/9u+qTvi1qFL/5BOjv6ffr3nD3HrcJv+IZ0c/a+e8KuJcetwu/4hnRz9T+3acl/cOtyhf0gnR//z72k6P24dPqN/SCdH/1v/8sI349Zhh/4hna3bu25pam1taffGG2+8GXxzsv9kAlJ7N/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//+O1eBI")
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x60)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0)

6m41.72897376s ago: executing program 0 (id=404):
pipe(0x0)
timerfd_create(0x0, 0x800)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x4, 0x3}, 0x8)
shutdown(r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES16], 0x8)
r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getdents(r2, &(0x7f00000000c0)=""/72, 0x80)
getdents(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_io_uring_setup(0x3286, &(0x7f00000000c0)={0x0, 0x5efc, 0x0, 0x3, 0x156}, &(0x7f0000000300), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f00000001c0), 0x1)

6m39.84730455s ago: executing program 8 (id=371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x40000000015, 0x5, 0x40001)
connect$inet(r1, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20004000)
iopl(0x3)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x5)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket(0x200000100000011, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x40)
syz_open_dev$loop(&(0x7f0000000040), 0x47ffffa, 0x122c42)

6m38.256804364s ago: executing program 0 (id=409):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000700)="bb", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28)
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r1)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x300}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0)

6m36.086439245s ago: executing program 0 (id=413):
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$netlink(0x10, 0x3, 0x4)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40106435, &(0x7f00000000c0))
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38)
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_DO_IT(r5, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0)

6m24.265546951s ago: executing program 36 (id=371):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x40000000015, 0x5, 0x40001)
connect$inet(r1, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20004000)
iopl(0x3)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4004, 0x5)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000012c0)=@newtaction={0x84, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket(0x200000100000011, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x40)
syz_open_dev$loop(&(0x7f0000000040), 0x47ffffa, 0x122c42)

6m20.745621574s ago: executing program 37 (id=413):
openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$netlink(0x10, 0x3, 0x4)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40106435, &(0x7f00000000c0))
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, 0xffffffffffffffff, 0x0, 0x100000000000000}, 0x38)
r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
ioctl$NBD_DO_IT(r5, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x200000a)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0)

5m37.460767818s ago: executing program 9 (id=500):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

5m35.947438047s ago: executing program 9 (id=503):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
tkill(r1, 0x35)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x168, 0x198, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000280)={0x28, 0x1, 0x0, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)

5m34.413059671s ago: executing program 9 (id=504):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000bc0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5m30.705342238s ago: executing program 9 (id=510):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket$netlink(0x10, 0x3, 0xc)
fanotify_init(0x200, 0x40000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r1, 0xa, 0x12)
poll(0x0, 0x0, 0xffffffffffbffff8)
recvmsg$unix(r2, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x2)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x13)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4b0}}, 0x0)
syz_open_dev$media(&(0x7f0000000080), 0x9, 0x204100)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r3, 0x3)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x141a02, 0x0)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)='try', 0x3}, {0x0}], 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)

5m27.262586066s ago: executing program 9 (id=519):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@newtaction={0x23c, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x228, 0x1, [@m_skbmod={0x174, 0x1f, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x81}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xffff}]}, {0xd7, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317198463a26239ee99dff9479ece66ca5a638081721d7abf577a62661f2fd72b9861bd4c0ec269d5a8d476a77a8d3e900d3ab9594606b9a1193813c8fa3b6eae4487242a39bb08c3fb5efe0513a176efe7d453756955a40048b74b617760e6e0ab30fae7f4eb7e131dbd8abb4dc20c8a58b1ebd68afbb719dbdcc144b12d5e71f885"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x68, 0xe, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xa, 0x5, 0x0, 0xf115, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x25c, 0x9, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x48, 0x11, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xe, 0xffff, 0x0, 0x5, 0xc3cd}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x23c}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

5m26.575508321s ago: executing program 9 (id=523):
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
chdir(0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}})
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)={0x2a, 0x4, 0x0, {0x1, 0x7fffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)

5m11.21085169s ago: executing program 38 (id=523):
creat(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$phonet_pipe(0x23, 0x5, 0x2)
socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
chdir(0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}})
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)={0x2a, 0x4, 0x0, {0x1, 0x7fffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)

3m19.00266078s ago: executing program 7 (id=759):
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0)
r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
pselect6(0x0, 0x0, 0x0, &(0x7f00000008c0)={0x10000, 0x0, 0xa, 0x3, 0xfffffffffffffff6, 0x2, 0x800, 0xe3cd}, &(0x7f0000000900)={0x0, 0x989680}, &(0x7f0000000980)={&(0x7f0000000940)={[0x4]}, 0x8})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0xb7}}, 0xe8)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

3m18.26806193s ago: executing program 7 (id=762):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ptrace(0x10, r0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
write$vga_arbiter(r5, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
close(r3)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}}, 0x40044)

3m17.132606988s ago: executing program 7 (id=765):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0)
fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@private1}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@local, {0x0, 0x0, 0x1}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

3m16.112287778s ago: executing program 7 (id=767):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

3m15.239302914s ago: executing program 7 (id=770):
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000000d00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c259401", 0x10}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

3m11.928728532s ago: executing program 7 (id=772):
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0)
r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
pselect6(0x0, 0x0, 0x0, &(0x7f00000008c0)={0x10000, 0x0, 0xa, 0x3, 0xfffffffffffffff6, 0x2, 0x800, 0xe3cd}, &(0x7f0000000900)={0x0, 0x989680}, &(0x7f0000000980)={&(0x7f0000000940)={[0x4]}, 0x8})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0xb7}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

2m56.069420594s ago: executing program 39 (id=772):
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0)
r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
pselect6(0x0, 0x0, 0x0, &(0x7f00000008c0)={0x10000, 0x0, 0xa, 0x3, 0xfffffffffffffff6, 0x2, 0x800, 0xe3cd}, &(0x7f0000000900)={0x0, 0x989680}, &(0x7f0000000980)={&(0x7f0000000940)={[0x4]}, 0x8})
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0xb7}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)

2m9.689361445s ago: executing program 4 (id=888):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
link(0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34325241, 0x4, 0x0, [{0x0, 0x1000000}, {}, {}, {}, {0x0, 0x3}], 0x0, 0x0, 0x2}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1})

2m7.311245016s ago: executing program 4 (id=894):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x20000008c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892", 0xc)
syz_emit_ethernet(0x72, &(0x7f00000003c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fd7f2e", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "48062d", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [@dstopts={0x3c}]}}}}}}}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile={0x4}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f, 0x30]}}, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
unshare(0x60600)
setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0xfffffff8, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@local, 0x73})

2m6.275653153s ago: executing program 4 (id=895):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, 0x0, 0x0)
shutdown(r1, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]})
r6 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8)
fsetxattr$security_capability(r6, &(0x7f0000000000), &(0x7f0000000080)=@v2, 0x14, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c})

2m4.705002361s ago: executing program 4 (id=899):
socket$inet(0x2, 0x2, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x80982, 0x1da)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4cd0000000000000000000000000000000000000000000000000000000000010000000000"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0xb8}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$inet_dccp(0x2, 0x6, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)}], 0x1}], 0x1, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)

2m4.084179416s ago: executing program 4 (id=901):
open(&(0x7f00000002c0)='./file0\x00', 0x14937e, 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}})
truncate(&(0x7f0000000080)='./file0\x00', 0x101000)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)

2m3.066296619s ago: executing program 4 (id=903):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a310000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0)

1m47.978555971s ago: executing program 40 (id=903):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a310000000008004100"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r4 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r4, 0x0)

18.812079589s ago: executing program 2 (id=1105):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0x3f, 0x6e, 0x40, 0x813, 0x1, 0x3a08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x26, 0x9b}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000440)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

15.187173701s ago: executing program 6 (id=1113):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsopen(0x0, 0x0)
ppoll(&(0x7f0000000180), 0x0, &(0x7f0000000440)={0x77359400}, &(0x7f0000000480)={[0x6]}, 0x8)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYRES16=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='module_free\x00', r3}, 0x18)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
close(r6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000280)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000300)={&(0x7f0000000bc0)={{@local, 0xec}, {@local, 0x4}, 0x400, "3b84a44b3574c38e74907f8da6cc8fa48e3f718262884ddde6833337876160ee4a3a309f695b7cd3b66e2fad1646036e38768f7a09a4396caa957db941eb4a91506346264899d6ccbcfe61512d35cdc9f47816fc9be6503532c2131b42f4c1ab41534bbab876ea7d3b01c1460756ee7c16df11140a384e84741dbf46272bb8f2d3a0cf851a9354de6379c903192a7430cbb7e3aaa5446ee93f31b7b3cfae940f49918ef23efa46ba97d6d33242f2030033d65de2d0873e5c76a271542a6fae03d97e37bfef851c7293cd1cf873eec6fd3b4c5f7fb924f85930682f0b03000f6d463685d788bc8a6ba0df43e7c0c1780baaa86b53e3c677c59ad310afb3515ee62617d244daf6c7d0aadba86242d616526db41fedf59f4f24748a013b3a06ec776802090d8b7bd15197b473bbc375c3567f1eb87220feae9c47f0c97b0f7f4d39222b5ceed718a97734380fe884f99992622736bdf5b1f51090a535d72ebdd911d32a55bc5c6ce52182890765594900924f58eeb53979f0a161e0c19371db7523b96060f45141957e2e34809cb18bea6683cef8c2c44507cfe8a5174939551fe486ae3095ed27b9ab3dc9bad32382dc88e18f506ce778d26550209aa0d428325f45e02c08621096efd84e41e3e94947b1971312f781cac3ddda389926cbf14f60992cc924f543ec973d313b56c563b48ab29cef68fbdc7bc6904894570eb2c78ee5aa34a5bf0213f715e41370192f1481d128a809ba32ea5875bef5b2783cb2ea30a1966a78ad151ae518b819ab22f37809761e3d273b4cada6323d812ab9efd35c8df6b66561d43687b3bfda68007716df85a6825834130d3e1131a0708becd41607736b32b83f69a00f33dba3bd62675144acb745aa4acca4b6c08ec6b9384acc80f85810b54da60f908dd7d97449ae9948da6a998bad3f13acedc188fc1c3bc9c9f5405b9b11c3cd4af6457f0722135c9dabcb7c3e5ceb6e50e4fdc8e4461ddb2d4908e2d2f60d661167a2f7c2a4493f56f43741b1950b0c9794690fa13c1b5267992d8ad5a82657a43bb2503f211b177dd76f69642d2cc9f5e50a055a72fd1b418f2d624196129c637bd64a0b55fa64428d042cfe5f8a9986383edfc833ed0009e7978ed6a47d2691b669a13e39ee378f20508f700645821424f29bbb8f3aae8e4ea7f9b1a7ec8cea19fd42a2c49a7bc7e1d97ddc276e099863732bc6e69d2eb1ca80791f04bee9e773737687de5a8936f4680b82ddb4f4a14b6de19035cb6a5b52383316fbe181177184048910b86985f21856bf529497d80c9c5627ae6cd9f537b2824202e278239572ba218e7f62ff87eaf251aba269022224035819f53db1590838615fde7575b53e46c9767d76c9e28282d27358ed28a5d87d6ce65daa9f4b4678d62fc33f8d3446f4f908bfea4b295e7292a490cc6eed75086f23a8"}, 0x418, 0x5})
prlimit64(r0, 0xe, &(0x7f0000000100)={0x4c, 0xabb}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20)
recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0xfffffffffffffc90, 0x0, 0xfffffffffffffdbd, 0x0, 0x24}, 0x2041)
unshare(0x62040200)
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES64=r3], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa08800, 0x0)
ptrace$poke(0x5, 0x0, &(0x7f0000000540), 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)

14.834137983s ago: executing program 2 (id=1114):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
shutdown(r3, 0x1)
socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x74, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @generic="8c30b359eac7ae9fd7498c8134fe2e867411869a9b6c90c6f44175aea05417a60dd1ff08f1be10ecb7b5cf201ceeb9a104b7f98078c9958f3e4c262912a6ae073e3420eb29a3fafeb2bb8ad53be36549b39b17", @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x240048d4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44acc14474f16fbe)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()

14.83357425s ago: executing program 5 (id=1115):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_getattr(r1, &(0x7f00000001c0)={0x38}, 0x38, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="24010000160001000000000000000000ac141400000000000000000000000000fe8000"/46, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb00000000000000000000000000000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000dca1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1a000002c000b0000000000000000000000000000000000200100000000000000000000000000010000000000000000"], 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0xffffffffffffffff, &(0x7f00000002c0))
syz_open_dev$video(0x0, 0xa7, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x0, &(0x7f00005c0000/0x2000)=nil)

12.806895636s ago: executing program 3 (id=1116):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000200)=0x5, 0x4)
preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x181, 0x0)

12.785715875s ago: executing program 2 (id=1117):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
read$hiddev(r1, &(0x7f0000000140)=""/118, 0x76)
ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, 0x0)

12.617782811s ago: executing program 3 (id=1118):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000003d)
fcntl$setsig(r4, 0xa, 0x21)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0)
creat(&(0x7f0000002240)='./file1\x00', 0x804000000000040)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x1c, r5, 0x2586ad4018a3b31b, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0)

12.548738489s ago: executing program 1 (id=1119):
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000001c0)={0x1, @sdr={0x584e4f53, 0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = dup(0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x83, &(0x7f0000000000), &(0x7f00000003c0)="12a90224f5fbafdfe3202ffd864079eee299ff46d58e70838c6ad1b52bdd4b6c361b95f43404643f12505942a14b8ebbd05ffe724e61c0b924fde0f59ae76f294f1d26f2881ed1285e1408ff3a6d7267c28ce3cfa3877cc2f3374b795fb57d47311c0c1b193f42cf1e2cfec29d4c0f29a640cbcc1de825b631da1347966cebcd6b571f"}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x10, 0x0, 0x7, 0x81, {{0x8, 0x4, 0x3, 0x2f, 0x20, 0x68, 0x0, 0x8, 0x2f, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0x3, 0xb1}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @lsrr={0x83, 0x3, 0x22}]}}}}})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r7, 0x400caed0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r8, 0x29, 0x31, 0x0, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r8, &(0x7f0000000380), 0x0, 0x10102, 0x0)
getpid()

11.195156702s ago: executing program 6 (id=1120):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, 0x0, 0x0)
shutdown(r1, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]})
r6 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8)
fsetxattr$security_capability(r6, &(0x7f0000000000), &(0x7f0000000080)=@v2, 0x14, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c})

10.405439501s ago: executing program 3 (id=1121):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp], 0x4)
setresuid(0xee01, 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f00000003c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
timer_delete(0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="8002030042800000140012800b0001006c6f7770616e000004"], 0x3c}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002480)=@newsa={0x13c, 0x10, 0x1, 0xffffffff, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7, 0x3}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1-avx2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0)
clock_gettime(0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xe, 0x6, 0x11, @dev={0xfe, 0x80, '\x00', 0x2c}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x0, 0x9, 0x80000000}})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r7, @ANYBLOB="8da16f416fbb13bee64f7ea7d6da69fe6b2e643f3dd6459a000000000176bcefc85d36ae225b72e221fc6b721ea62a9de30dc2750000000054a2b6f6b207acd14f44ae0ce018ee2e4fd2a33b9c57a4b59b064b12e3d6f698b0996edf1b11ca263716ba64464e07fadce21e7db069b948d57d9e676d4d8f270695c382b1f89ac4114c94e5860915e31904db52972406cee196e50cb0ca1f17981ac5fd895f35525a9c0700"/182], 0x20}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0)

10.358480962s ago: executing program 1 (id=1122):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a"], 0x48}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x29, 0x4e, 0x76, 0x10, 0x6cd, 0x202, 0xf498, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x6, 0xd0, 0x6, [{{0x9, 0x4, 0x4f, 0x6, 0x0, 0x81, 0x6a, 0x2}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x68}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0)

10.338946757s ago: executing program 5 (id=1123):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x2], [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c)
ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11)
ioctl$UI_DEV_CREATE(r5, 0x5501)
preadv(0xffffffffffffffff, &(0x7f0000003780)=[{&(0x7f0000001300)=""/170, 0xaa}], 0x1, 0xffff, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)

8.711773997s ago: executing program 5 (id=1124):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0x3f, 0x6e, 0x40, 0x813, 0x1, 0x3a08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x26, 0x9b}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000440)={0x0, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8.035268628s ago: executing program 2 (id=1125):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8b26, 0x0)
r4 = syz_io_uring_setup(0x2a1c, 0x0, 0x0, 0x0)
creat(0x0, 0x80)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8)
r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0xc10800, 0xc8)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fc62c2436456278d5f17a45f704874fabbcbae3cd9abac457a58d8a4792010cbb85d864bf74edf6e28bd40720b16537f026fe52a3636f4413ebb05adb1faffffffffffffff1aadaa4277e7055f1b2f5616c83d71d4bb6f96f12a6c645a07c20c0d8bba3fd7b12efeac7cfb1af0805a8aa7e3db31868324538ce4b11f84377ee3b774408e27dcba9fefcd825bdc52f24f156d6f623d0cdab200"/188, @ANYRES32=0x0, @ANYRES32], 0x50)
fremovexattr(r2, 0x0)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
r7 = socket$inet(0x2, 0x3, 0x1)
sendmsg$inet(r7, 0x0, 0x4)
ioctl$SIOCAX25DELUID(r6, 0x89e2, 0x0)
socket$netlink(0x10, 0x3, 0x12)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x19, 0x0, 0x1)

7.56119398s ago: executing program 1 (id=1126):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', <r0=>0x0, 0x4, 0x81, 0x1, 0x7fffffff, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x7800, 0x700, 0xb179}})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='ext4_es_shrink_scan_exit\x00', r1, 0x0, 0x7}, 0x18)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

6.923933444s ago: executing program 6 (id=1127):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2a8001, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
unshare(0x26020280)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7fff, 0x9, 0x1}, &(0x7f0000000140)=0x10)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
getdents(r1, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x2554d000)
r3 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

6.429153632s ago: executing program 1 (id=1128):
mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB='s'], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x81b)
read$char_usb(r0, 0x0, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

6.374139319s ago: executing program 5 (id=1129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
mkdir(0x0, 0x3b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x200000000000}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xffffb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0x5)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000300)=""/79, 0x4f}], 0x6, &(0x7f0000000dc0)=""/195, 0xc3}, 0x200}, {{&(0x7f0000000a00)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000a80)=""/94, 0x5e}], 0x2, &(0x7f0000000b00)=""/238, 0xee}, 0xe}, {{&(0x7f0000000c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/144, 0x90}, 0x5}], 0x3, 0x10042, &(0x7f0000001100)={0x0, 0x3938700})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
fremovexattr(r7, &(0x7f0000001140)=@known='trusted.overlay.redirect\x00')
r8 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000480)='context\xc0\x01\xca\x9f\x98\x887\xa6tqB\xab`\x81\x85i\x16c)\xa5\x00\x00\x00\x00\xb9\xe7\x9fq\xf6\xc3\x92(\xac\x0e\x9c\x16*\xf9*H\xcb\x06\x0e\xa9 \x18y\x1692\xca\x82\xb1\xa0I\xce\xf5\xb3a:&\x0fm\xd2\x17\xd1\xb7b\xf8R\xc04\xe8', &(0x7f00000003c0)='ramfs\x18%\\b\x00\xf5c\xf8\xd2\xf2\xe4,\fq\xda\x92 \xe3X\xd8pdR\xb5\x18:\xb5\xbb\xce>H\xafVH4\xefei\x92T\x17\xeb\xea\xc7\xa7\x16\xd6\xaf\xb3h\x03\x99\x8e+\x97U\xff\xed\"\xf3\xe3\xc6zS\x19\x8e\x86\xb1&Q5\xe1z(iU\a\"\xed\xc1\xf7\xa0\xeb\xd5\xf5\xf2', 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_GET_SG_TABLESIZE(r9, 0x227f, &(0x7f0000000340))
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)

5.82799484s ago: executing program 3 (id=1130):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(r6, 0x0, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0)
fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@private1}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@local, {0x0, 0x0, 0x1}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0)

4.965211183s ago: executing program 6 (id=1131):
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x37}}], 0x30}, 0xff00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x100000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x3c}}, 0x0)

3.927770126s ago: executing program 3 (id=1132):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
mkdir(0x0, 0x3b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x200000000000}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xffffb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0x5)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000300)=""/79, 0x4f}], 0x6, &(0x7f0000000dc0)=""/195, 0xc3}, 0x200}, {{&(0x7f0000000a00)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000a80)=""/94, 0x5e}], 0x2, &(0x7f0000000b00)=""/238, 0xee}, 0xe}, {{&(0x7f0000000c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/144, 0x90}, 0x5}], 0x3, 0x10042, &(0x7f0000001100)={0x0, 0x3938700})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
fremovexattr(r7, &(0x7f0000001140)=@known='trusted.overlay.redirect\x00')
r8 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000480)='context\xc0\x01\xca\x9f\x98\x887\xa6tqB\xab`\x81\x85i\x16c)\xa5\x00\x00\x00\x00\xb9\xe7\x9fq\xf6\xc3\x92(\xac\x0e\x9c\x16*\xf9*H\xcb\x06\x0e\xa9 \x18y\x1692\xca\x82\xb1\xa0I\xce\xf5\xb3a:&\x0fm\xd2\x17\xd1\xb7b\xf8R\xc04\xe8', &(0x7f00000003c0)='ramfs\x18%\\b\x00\xf5c\xf8\xd2\xf2\xe4,\fq\xda\x92 \xe3X\xd8pdR\xb5\x18:\xb5\xbb\xce>H\xafVH4\xefei\x92T\x17\xeb\xea\xc7\xa7\x16\xd6\xaf\xb3h\x03\x99\x8e+\x97U\xff\xed\"\xf3\xe3\xc6zS\x19\x8e\x86\xb1&Q5\xe1z(iU\a\"\xed\xc1\xf7\xa0\xeb\xd5\xf5\xf2', 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
socket$inet6(0xa, 0x3, 0x5)
ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000340))
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)

3.924730258s ago: executing program 5 (id=1133):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000300)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES64], 0x0)

3.807789295s ago: executing program 6 (id=1134):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0x3f, 0x6e, 0x40, 0x813, 0x1, 0x3a08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x26, 0x9b}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000000)={0x20, 0x15, 0x2, "d05d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400d0100000001"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

3.539454869s ago: executing program 2 (id=1135):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)
mkdir(0x0, 0x3b)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x200000000000}, 0x18)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0xffffb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0x5)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
recvmmsg(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000580)=""/241, 0xf1}, {&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000300)=""/79, 0x4f}], 0x6, &(0x7f0000000dc0)=""/195, 0xc3}, 0x200}, {{&(0x7f0000000a00)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000a80)=""/94, 0x5e}], 0x2, &(0x7f0000000b00)=""/238, 0xee}, 0xe}, {{&(0x7f0000000c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000f40), 0x0, &(0x7f0000000f80)=""/144, 0x90}, 0x5}], 0x3, 0x10042, &(0x7f0000001100)={0x0, 0x3938700})
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
fremovexattr(r7, &(0x7f0000001140)=@known='trusted.overlay.redirect\x00')
r8 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000480)='context\xc0\x01\xca\x9f\x98\x887\xa6tqB\xab`\x81\x85i\x16c)\xa5\x00\x00\x00\x00\xb9\xe7\x9fq\xf6\xc3\x92(\xac\x0e\x9c\x16*\xf9*H\xcb\x06\x0e\xa9 \x18y\x1692\xca\x82\xb1\xa0I\xce\xf5\xb3a:&\x0fm\xd2\x17\xd1\xb7b\xf8R\xc04\xe8', &(0x7f00000003c0)='ramfs\x18%\\b\x00\xf5c\xf8\xd2\xf2\xe4,\fq\xda\x92 \xe3X\xd8pdR\xb5\x18:\xb5\xbb\xce>H\xafVH4\xefei\x92T\x17\xeb\xea\xc7\xa7\x16\xd6\xaf\xb3h\x03\x99\x8e+\x97U\xff\xed\"\xf3\xe3\xc6zS\x19\x8e\x86\xb1&Q5\xe1z(iU\a\"\xed\xc1\xf7\xa0\xeb\xd5\xf5\xf2', 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_GET_SG_TABLESIZE(r9, 0x227f, &(0x7f0000000340))
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)

1.455006775s ago: executing program 1 (id=1136):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x20000008c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
syz_emit_ethernet(0x72, &(0x7f00000003c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fd7f2e", 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "48062d", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [@dstopts={0x3c}]}}}}}}}, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile={0x4}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f, 0x30]}}, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)
unshare(0x60600)
setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0xfffffff8, 0x4)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000180)={@local, 0x73})

1.145538847s ago: executing program 3 (id=1137):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
shutdown(r3, 0x1)
socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x74, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @generic="8c30b359eac7ae9fd7498c8134fe2e867411869a9b6c90c6f44175aea05417a60dd1ff08f1be10ecb7b5cf201ceeb9a104b7f98078c9958f3e4c262912a6ae073e3420eb29a3fafeb2bb8ad53be36549b39b17", @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x240048d4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44acc14474f16fbe)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()

900.652689ms ago: executing program 2 (id=1138):
socket$inet(0x2, 0x2, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x80982, 0x1da)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYBLOB="000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4cd0000000000000000000000000000000000000000000000000000000000010000000000"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0xb8}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)}], 0x1}], 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)

132.869141ms ago: executing program 1 (id=1139):
fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82000)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, 0x0, 0x0)
shutdown(r1, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000200)={0x0, 0x7, 0xfffffffc, 0x8, 0x3, [], [0x2, 0x0, 0x3, 0x2b7], [0xffffffff, 0x4ea, 0x8000, 0x2], [0x4, 0x7, 0x7fffffffffffffff, 0x1]})
r6 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8)
fsetxattr$security_capability(r6, &(0x7f0000000000), &(0x7f0000000080)=@v2, 0x14, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c})

59.657527ms ago: executing program 6 (id=1140):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x8072}, &(0x7f0000000240)=0x8)

0s ago: executing program 5 (id=1141):
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x700)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[], 0x0)

kernel console output (not intermixed with test programs):

pected cc 0x0c25 length: 249 > 3
[  382.814300][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  382.841219][ T8632] lo speed is unknown, defaulting to 1000
[  382.893899][ T8638] IPVS: using max 38 ests per chain, 91200 per kthread
[  383.313935][ T5911] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  383.701020][ T5911] usb 7-1: Using ep0 maxpacket: 8
[  383.823059][ T5911] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  383.832238][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.841167][ T5911] usb 7-1: Product: syz
[  383.845712][ T5911] usb 7-1: Manufacturer: syz
[  383.867972][ T5911] usb 7-1: SerialNumber: syz
[  383.926655][ T5911] usb 7-1: config 0 descriptor??
[  383.956505][ T6107] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.095653][ T8667] random: crng reseeded on system resumption
[  384.142515][ T5911] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  384.245952][ T6107] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.226219][ T5838] Bluetooth: hci4: command tx timeout
[  385.526205][ T6107] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.710024][ T8632] chnl_net:caif_netlink_parms(): no params data found
[  385.817980][ T5911] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  385.858982][ T5911] usb 7-1: USB disconnect, device number 13
[  386.195963][ T6107] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.905184][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.363209][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.376799][ T8632] bridge_slave_0: entered allmulticast mode
[  387.469687][ T8632] bridge_slave_0: entered promiscuous mode
[  387.478358][ T5838] Bluetooth: hci4: command tx timeout
[  388.303686][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.310939][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.318401][ T8632] bridge_slave_1: entered allmulticast mode
[  388.325595][ T8632] bridge_slave_1: entered promiscuous mode
[  388.901502][ T6107] bridge_slave_1: left allmulticast mode
[  388.909432][ T6107] bridge_slave_1: left promiscuous mode
[  388.915919][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.946775][ T6107] bridge_slave_0: left allmulticast mode
[  388.966965][ T6107] bridge_slave_0: left promiscuous mode
[  388.972726][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.093857][ T5912] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  389.264159][ T5912] usb 5-1: Using ep0 maxpacket: 16
[  389.287617][ T5912] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  389.300359][ T5912] usb 5-1: config 0 has no interface number 0
[  389.322447][ T5912] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  389.357848][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.366351][ T5912] usb 5-1: Product: syz
[  389.370563][ T5912] usb 5-1: Manufacturer: syz
[  389.375263][ T5912] usb 5-1: SerialNumber: syz
[  389.406040][ T5912] usb 5-1: config 0 descriptor??
[  389.426047][ T5912] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  389.576135][ T5838] Bluetooth: hci4: command tx timeout
[  389.963270][ T5912] gspca_spca1528: reg_w err -110
[  390.084318][ T5912] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110
[  390.132381][    T8] usb 5-1: USB disconnect, device number 14
[  390.234931][ T6107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  390.247191][ T6107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  390.258450][ T6107] bond0 (unregistering): Released all slaves
[  390.273033][ T8632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.299745][ T8632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.503108][ T8632] team0: Port device team_slave_0 added
[  390.521754][ T8632] team0: Port device team_slave_1 added
[  390.639151][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.669874][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.705924][ T8632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.766089][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.773865][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.799863][ T8632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  391.644042][ T5838] Bluetooth: hci4: command tx timeout
[  393.260933][ T8632] hsr_slave_0: entered promiscuous mode
[  393.439447][ T8632] hsr_slave_1: entered promiscuous mode
[  393.497878][ T8632] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  393.713223][ T8632] Cannot create hsr debugfs directory
[  393.951201][ T6107] hsr_slave_0: left promiscuous mode
[  393.962327][ T6107] hsr_slave_1: left promiscuous mode
[  394.502786][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.998817][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  395.083436][ T6107] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  395.105527][ T6107] batman_adv: batadv0: Removing interface: batadv_slave_1
[  395.152904][ T6107] veth1_macvtap: left promiscuous mode
[  395.162912][ T6107] veth0_macvtap: left promiscuous mode
[  395.172268][ T6107] veth1_vlan: left promiscuous mode
[  395.183004][ T6107] veth0_vlan: left promiscuous mode
[  395.872557][ T8771] s
z1: rxe_newlink: already configured on lo
[  397.914296][ T6107] team0 (unregistering): Port device team_slave_1 removed
[  397.957499][ T6107] team0 (unregistering): Port device team_slave_0 removed
[  398.914864][  T977] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  399.025452][ T8791] netlink: 'syz.4.590': attribute type 4 has an invalid length.
[  399.123884][  T977] usb 7-1: Using ep0 maxpacket: 16
[  399.188044][  T977] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  399.596513][  T977] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  399.614771][  T977] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  399.624224][  T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.633241][  T977] usb 7-1: Product: syz
[  399.637968][  T977] usb 7-1: Manufacturer: syz
[  399.650301][  T977] usb 7-1: SerialNumber: syz
[  399.767683][  T977] usb 7-1: config 0 descriptor??
[  399.781284][  T977] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  399.791089][  T977] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  400.054094][ T5880] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  400.279273][ T5880] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  400.364158][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.785973][  T977] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  400.793026][  T977] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  400.833298][ T5880] usb 8-1: config 0 descriptor??
[  400.841244][ T5880] gspca_main: cpia1-2.14.0 probing 0813:0001
[  401.312007][ T5880] cpia1 8-1:0.0: unexpected state after lo power cmd: d0
[  401.371543][ T6107] IPVS: stop unused estimator thread 0...
[  402.395745][  T977] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[  402.404380][  T977] em28xx 7-1:0.0: couldn't setup AC97 register 2
[  402.411075][  T977] em28xx 7-1:0.0: couldn't setup AC97 register 4
[  402.418127][  T977] em28xx 7-1:0.0: couldn't setup AC97 register 6
[  402.434104][  T977] em28xx 7-1:0.0: couldn't setup AC97 register 54
[  402.559637][ T8810] rdma_rxe: rxe_newlink: failed to add lo
[  402.577583][ T5880] gspca_cpia1: usb_control_msg 02, error -71
[  402.611062][  T977] em28xx 7-1:0.0: couldn't setup AC97 register 56
[  402.662261][ T5880] gspca_cpia1: usb_control_msg 05, error -71
[  402.668989][ T5880] cpia1 8-1:0.0: unexpected systemstate: d0
[  402.727618][ T5880] usb 8-1: USB disconnect, device number 9
[  402.727618][  T977] usb 7-1: USB disconnect, device number 14
[  403.929109][   T29] audit: type=1800 audit(1734734721.311:18): pid=8824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.599" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  403.948170][ T8632] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  403.987194][ T8632] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  404.050298][ T8632] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  404.067019][ T8632] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  404.213876][ T8824] lo speed is unknown, defaulting to 1000
[  404.431409][ T8632] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.453446][ T8632] 8021q: adding VLAN 0 to HW filter on device team0
[  404.495137][ T8632] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  404.506263][ T8632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  404.539700][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.546929][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.567031][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.574249][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.695063][  T977] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  405.844764][  T977] usb 8-1: too many configurations: 9, using maximum allowed: 8
[  405.855044][  T977] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  405.864312][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  405.878656][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  405.888634][  T977] usb 8-1: config 0 interface 0 has no altsetting 0
[  405.984030][  T977] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  405.993266][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  406.023055][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  406.073150][  T977] usb 8-1: config 0 interface 0 has no altsetting 0
[  406.125294][  T977] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  406.167577][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  406.226873][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  406.255303][  T977] usb 8-1: config 0 interface 0 has no altsetting 0
[  406.271821][  T977] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  406.302078][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  406.318294][ T8632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.343859][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  406.357734][  T977] usb 8-1: config 0 interface 0 has no altsetting 0
[  406.376627][  T977] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  406.401956][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  406.438484][ T8632] veth0_vlan: entered promiscuous mode
[  406.445320][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  406.468375][ T8632] veth1_vlan: entered promiscuous mode
[  406.474067][  T977] usb 8-1: config 0 interface 0 has no altsetting 0
[  406.510257][  T977] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  406.529752][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  406.558560][ T8632] veth0_macvtap: entered promiscuous mode
[  406.567566][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  406.615756][  T977] usb 8-1: config 0 interface 0 has no altsetting 0
[  406.624131][ T8632] veth1_macvtap: entered promiscuous mode
[  406.640848][  T977] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  406.661702][ T8841] lo speed is unknown, defaulting to 1000
[  406.667460][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  406.667494][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  406.667517][  T977] usb 8-1: config 0 interface 0 has no altsetting 0
[  406.668824][  T977] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9
[  406.722914][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.740614][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.753189][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.786209][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  406.804213][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.814393][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.832550][  T977] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  406.834190][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.872282][  T977] usb 8-1: config 0 interface 0 has no altsetting 0
[  406.876637][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.906259][  T977] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  406.920204][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.934823][  T977] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  406.947110][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  406.962280][  T977] usb 8-1: Product: syz
[  406.978710][  T977] usb 8-1: Manufacturer: syz
[  406.988471][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  406.993539][  T977] usb 8-1: SerialNumber: syz
[  407.018683][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  407.047626][  T977] usb 8-1: config 0 descriptor??
[  407.120549][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.122788][  T977] yurex 8-1:0.0: Could not submitting URB
[  407.157577][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.189025][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.206142][  T977] yurex 8-1:0.0: probe with driver yurex failed with error -5
[  407.209090][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.237955][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.255293][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.279652][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.313062][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.350380][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  407.377503][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  407.403266][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  407.476241][ T8632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.501531][ T8632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.533190][ T8632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.551525][ T8632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.639113][  T977] usb 8-1: USB disconnect, device number 10
[  407.920352][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.946496][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  408.109349][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  408.138345][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  409.833122][ T8893] rdma_rxe: rxe_newlink: failed to add lo
[  411.214167][ T5880] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  411.226102][   T51] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  411.302947][ T8897] random: crng reseeded on system resumption
[  412.914843][ T8904] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR
[  413.521253][   T51] usb 8-1: device not accepting address 11, error -71
[  416.158455][  T977] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  417.679429][   T29] audit: type=1326 audit(1734734735.171:19): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.4.625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec97f85d29 code=0x0
[  419.044031][  T977] usb 7-1: device not accepting address 15, error -71
[  419.126100][ T8968] random: crng reseeded on system resumption
[  427.940110][   T51] IPVS: starting estimator thread 0...
[  428.033951][ T9033] IPVS: using max 25 ests per chain, 60000 per kthread
[  429.080055][ T9045] input: syz0 as /devices/virtual/input/input38
[  429.291100][   T51] libceph: connect (1)[c::]:6789 error -101
[  429.824995][ T9046] ceph: No mds server is up or the cluster is laggy
[  429.851025][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  430.443963][  T977] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  430.604311][  T977] usb 3-1: Using ep0 maxpacket: 32
[  430.652700][  T977] usb 3-1: config 0 has an invalid interface number: 219 but max is 0
[  430.713385][  T977] usb 3-1: config 0 has no interface number 0
[  430.899509][ T9062] random: crng reseeded on system resumption
[  430.920218][  T977] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  431.638502][ T9066] ceph: No mds server is up or the cluster is laggy
[  431.648755][ T5912] libceph: connect (1)[c::]:6789 error -101
[  431.724703][  T977] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  431.735730][  T977] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  431.745922][  T977] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  431.761050][  T977] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  431.830928][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.854944][ T5912] libceph: mon0 (1)[c::]:6789 connect error
[  432.136801][   T51] libceph: connect (1)[c::]:6789 error -101
[  432.155223][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  432.809008][  T977] usb 3-1: Product: syz
[  432.813348][  T977] usb 3-1: Manufacturer: syz
[  432.818132][  T977] usb 3-1: SerialNumber: syz
[  432.825468][ T5912] libceph: connect (1)[c::]:6789 error -101
[  432.827541][  T977] usb 3-1: config 0 descriptor??
[  432.839114][ T9053] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  432.839463][ T5912] libceph: mon0 (1)[c::]:6789 connect error
[  433.556759][  T977] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz)
[  433.568283][  T977] usb 3-1: USB disconnect, device number 7
[  434.062200][ T9089] warning: `syz.2.651' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  434.274850][ T9091] fuse: Bad value for 'fd'
[  435.536044][   T51] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  435.704059][   T51] usb 5-1: Using ep0 maxpacket: 16
[  435.715200][   T51] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  435.725095][   T51] usb 5-1: config 0 has no interface number 0
[  435.878422][ T9117] lo speed is unknown, defaulting to 1000
[  436.544269][   T51] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  436.553588][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.562840][   T51] usb 5-1: Product: syz
[  436.567526][   T51] usb 5-1: Manufacturer: syz
[  436.572236][   T51] usb 5-1: SerialNumber: syz
[  436.585756][   T51] usb 5-1: config 0 descriptor??
[  436.825152][  T977] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  437.548305][   T51] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  439.386516][  T977] usb 7-1: device descriptor read/all, error -71
[  439.527190][ T9129] lo speed is unknown, defaulting to 1000
[  439.590043][   T51] gspca_spca1528: reg_w err -110
[  439.613880][   T51] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110
[  439.900648][ T9141] random: crng reseeded on system resumption
[  440.125695][    T8] usb 5-1: USB disconnect, device number 15
[  440.228055][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.660'.
[  440.417288][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  440.423946][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  440.498743][ T5881] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  440.764022][ T5881] usb 4-1: Using ep0 maxpacket: 32
[  440.771547][ T5881] usb 4-1: config 0 has an invalid interface number: 219 but max is 0
[  440.788584][ T5881] usb 4-1: config 0 has no interface number 0
[  440.863348][ T9157] input: syz0 as /devices/virtual/input/input39
[  440.869826][ T9157] input: failed to attach handler leds to device input39, error: -6
[  440.958801][ T9158] netlink: 'syz.2.664': attribute type 4 has an invalid length.
[  441.633809][ T5881] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  441.685955][ T5881] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  442.399507][ T5881] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  442.409719][ T5881] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  442.442185][ T5881] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  442.464002][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.472060][ T5881] usb 4-1: Product: syz
[  442.476352][ T5881] usb 4-1: Manufacturer: syz
[  442.480995][ T5881] usb 4-1: SerialNumber: syz
[  442.487983][ T5881] usb 4-1: config 0 descriptor??
[  442.494960][ T9143] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  442.571197][   T51] libceph: connect (1)[c::]:6789 error -101
[  442.578474][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  442.596609][ T9157] ceph: No mds server is up or the cluster is laggy
[  442.724945][ T5881] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz)
[  443.034140][ T5880] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  443.042461][ T5837] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  443.052421][ T9177] fuse: Unknown parameter 'group_id00000000000000000000'
[  443.393844][ T5880] usb 3-1: Using ep0 maxpacket: 8
[  443.405323][ T5837] usb 8-1: Using ep0 maxpacket: 16
[  443.415651][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  443.443940][ T5880] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  443.465809][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.504387][ T5837] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.523804][ T5837] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  443.533241][ T5837] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.545634][ T5837] usb 8-1: config 0 descriptor??
[  443.572535][ T5880] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  443.584239][ T5880] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  443.592342][ T5880] usb 3-1: Product: syz
[  443.598577][ T5880] usb 3-1: Manufacturer: syz
[  443.603266][ T5880] usb 3-1: SerialNumber: syz
[  443.615042][ T5880] usb 3-1: config 0 descriptor??
[  443.965489][ T5837] input: HID 05ac:8241 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:05AC:8241.0007/input/input40
[  444.033625][ T9193] lo speed is unknown, defaulting to 1000
[  444.270246][ T5837] appleir 0003:05AC:8241.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0
[  444.397341][ T9202] input: syz0 as /devices/virtual/input/input41
[  444.403839][ T9202] input: failed to attach handler leds to device input41, error: -6
[  444.572028][ T5837] libceph: connect (1)[c::]:6789 error -101
[  445.038896][ T5837] libceph: mon0 (1)[c::]:6789 connect error
[  445.093419][ T9203] ceph: No mds server is up or the cluster is laggy
[  445.774532][  T977] usb 3-1: USB disconnect, device number 8
[  445.976526][ T5879] usb 8-1: USB disconnect, device number 13
[  449.102805][  T977] usb 4-1: USB disconnect, device number 4
[  449.594637][ T5880] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  449.793054][ T5880] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  449.863867][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  450.064185][ T5880] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  450.073297][ T5880] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  450.105713][ T5880] usb 7-1: Manufacturer: syz
[  450.164497][ T5880] usb 7-1: config 0 descriptor??
[  450.334143][ T5880] rc_core: IR keymap rc-hauppauge not found
[  450.340110][ T5880] Registered IR keymap rc-empty
[  450.348140][ T5880] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  450.354301][  T977] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  450.399161][ T5880] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input42
[  450.474199][    C1] igorplugusb 7-1:0.0: Error: urb status = -32
[  450.549271][  T977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  450.559988][  T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  450.595841][  T977] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  450.620288][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  450.641374][  T977] usb 4-1: SerialNumber: syz
[  450.699239][ T5837] usb 7-1: USB disconnect, device number 19
[  450.725162][    T8] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  450.793854][ T5880] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  450.955579][ T5880] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  450.970752][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.016771][  T977] usb 4-1: 0:2 : does not exist
[  451.029275][    T8] usb 8-1: config 0 has an invalid interface number: 20 but max is 0
[  451.038522][    T8] usb 8-1: config 0 has no interface number 0
[  451.044726][    T8] usb 8-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  451.060323][ T5880] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  451.072731][ T5880] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  451.082004][ T5880] usb 3-1: Manufacturer: syz
[  451.082248][    T8] usb 8-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  451.103116][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.112649][    T8] usb 8-1: Product: syz
[  451.178926][ T9283] netlink: 'syz.4.682': attribute type 4 has an invalid length.
[  451.602170][    T8] usb 8-1: Manufacturer: syz
[  451.826706][ T5880] usb 3-1: config 0 descriptor??
[  451.941597][    T8] usb 8-1: SerialNumber: syz
[  451.947574][  T977] usb 4-1: USB disconnect, device number 5
[  451.965452][    T8] usb 8-1: config 0 descriptor??
[  451.994206][ T9266] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[  452.034844][    T8] usb-storage 8-1:0.20: USB Mass Storage device detected
[  452.059787][ T5880] rc_core: IR keymap rc-hauppauge not found
[  452.074612][ T5880] Registered IR keymap rc-empty
[  452.081418][ T5880] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  452.097201][ T5880] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input43
[  452.135276][    T8] usb-storage 8-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  452.139487][    C1] igorplugusb 3-1:0.0: Error: urb status = -32
[  452.287597][ T7545] udevd[7545]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  453.532768][ T5879] usb 3-1: USB disconnect, device number 9
[  453.765700][    T8] scsi host1: usb-storage 8-1:0.20
[  455.193916][ T5837] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  455.404267][ T9306] usb 8-1: reset full-speed USB device number 14 using dummy_hcd
[  455.425944][ T5837] usb 5-1: Using ep0 maxpacket: 32
[  455.471295][ T5837] usb 5-1: config 0 has an invalid interface number: 219 but max is 0
[  455.623428][ T5837] usb 5-1: config 0 has no interface number 0
[  455.915946][ T5837] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  456.030178][ T5837] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  456.063824][ T5837] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  456.085987][ T5837] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  456.116229][ T5837] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  456.134550][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.142668][ T5837] usb 5-1: Product: syz
[  456.203900][ T5837] usb 5-1: Manufacturer: syz
[  456.214163][ T5837] usb 5-1: SerialNumber: syz
[  456.291126][ T5837] usb 5-1: config 0 descriptor??
[  456.420201][ T9321] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  456.751309][ T5911] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  456.795220][ T5837] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz)
[  457.764085][ T5911] usb 4-1: Using ep0 maxpacket: 16
[  457.902134][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  458.748361][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  459.070772][  T940] usb 8-1: USB disconnect, device number 14
[  459.424822][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  459.435877][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.463335][ T5911] usb 4-1: Product: syz
[  459.490726][ T5911] usb 4-1: config 0 descriptor??
[  459.551439][ T5911] usb 4-1: can't set config #0, error -71
[  459.631742][ T5911] usb 4-1: USB disconnect, device number 6
[  460.071248][ T9390] input: syz0 as /devices/virtual/input/input44
[  460.846999][ T5837] usb 5-1: USB disconnect, device number 16
[  461.823645][ T5880] libceph: connect (1)[c::]:6789 error -101
[  461.830151][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  462.151972][ T5880] libceph: connect (1)[c::]:6789 error -101
[  462.158329][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  462.196484][ T9392] ceph: No mds server is up or the cluster is laggy
[  463.162699][ T9408] input: syz0 as /devices/virtual/input/input45
[  463.169139][ T9408] input: failed to attach handler leds to device input45, error: -6
[  463.228075][ T5880] libceph: connect (1)[c::]:6789 error -101
[  463.234242][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  463.872357][ T5911] IPVS: starting estimator thread 0...
[  463.902232][ T5837] libceph: connect (1)[c::]:6789 error -101
[  463.912580][ T5837] libceph: mon0 (1)[c::]:6789 connect error
[  463.964837][ T9409] ceph: No mds server is up or the cluster is laggy
[  463.994920][ T9410] IPVS: using max 24 ests per chain, 57600 per kthread
[  464.894556][ T5911] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  465.783868][ T5911] usb 4-1: Using ep0 maxpacket: 16
[  465.793623][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.890482][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.947047][ T5911] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  465.975000][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.027375][ T5911] usb 4-1: config 0 descriptor??
[  466.204049][ T5880] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  466.293953][  T940] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  466.365769][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.383777][ T5880] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  466.401355][ T5880] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  466.410930][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.453851][  T940] usb 3-1: Using ep0 maxpacket: 8
[  466.477269][  T940] usb 3-1: unable to get BOS descriptor or descriptor too short
[  466.499450][  T940] usb 3-1: config 4 interface 0 has no altsetting 0
[  466.507980][ T5880] usb 8-1: config 0 descriptor??
[  466.530185][  T940] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  466.563297][ T5911] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0008/input/input46
[  466.623913][  T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.652884][  T940] usb 3-1: Product: syz
[  467.219023][  T940] usb 3-1: Manufacturer: syz
[  467.339564][ T5911] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  467.628499][  T940] usb 3-1: SerialNumber: syz
[  467.680254][ T9459] lo speed is unknown, defaulting to 1000
[  468.432724][ T5911] usb 4-1: reset high-speed USB device number 7 using dummy_hcd
[  468.818805][  T940] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  468.856710][  T940] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  468.910555][  T940] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  468.937643][  T940] usb 3-1: media controller created
[  468.993375][  T940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  469.223426][ T5880] uclogic 0003:256C:006D.0009: interface is invalid, ignoring
[  469.780690][ T5880] usb 8-1: USB disconnect, device number 15
[  470.012226][  T940] zl10353_read_register: readreg error (reg=127, ret==0)
[  471.341718][  T940] usb 3-1: USB disconnect, device number 10
[  471.788925][ T9485] netlink: 'syz.4.713': attribute type 4 has an invalid length.
[  472.183941][ T9484] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.715'.
[  472.213966][ T9484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.715'.
[  472.658329][ T9494] netlink: 28 bytes leftover after parsing attributes in process `syz.7.717'.
[  473.242714][  T977] usb 4-1: USB disconnect, device number 7
[  474.196750][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  474.206962][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/u9:4 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0
[  474.207024][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  474.207038][ T5838] Workqueue: hci2 hci_rx_work
[  474.207087][ T5838] Call Trace:
[  474.207094][ T5838]  <TASK>
[  474.207102][ T5838]  dump_stack_lvl+0x241/0x360
[  474.207129][ T5838]  ? __pfx_dump_stack_lvl+0x10/0x10
[  474.207150][ T5838]  ? __pfx__printk+0x10/0x10
[  474.207181][ T5838]  ? __kmalloc_cache_noprof+0x243/0x390
[  474.207200][ T5838]  ? sysfs_create_dir_ns+0x28a/0x3a0
[  474.207228][ T5838]  sysfs_create_dir_ns+0x2ce/0x3a0
[  474.207255][ T5838]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  474.207288][ T5838]  kobject_add_internal+0x435/0x8d0
[  474.207317][ T5838]  kobject_add+0x152/0x220
[  474.207335][ T5838]  ? do_raw_spin_unlock+0x13c/0x8b0
[  474.207364][ T5838]  ? device_add+0x3e7/0xbf0
[  474.207390][ T5838]  ? __pfx_kobject_add+0x10/0x10
[  474.207410][ T5838]  ? _raw_spin_unlock+0x28/0x50
[  474.207438][ T5838]  ? get_device_parent+0x165/0x410
[  474.207465][ T5838]  device_add+0x4e5/0xbf0
[  474.207494][ T5838]  hci_conn_add_sysfs+0xe8/0x200
[  474.207521][ T5838]  le_conn_complete_evt+0xc9f/0x12e0
[  474.207555][ T5838]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  474.207577][ T5838]  ? __mutex_unlock_slowpath+0x21e/0x790
[  474.207606][ T5838]  ? __pfx___mutex_lock+0x10/0x10
[  474.207624][ T5838]  ? skb_pull_data+0x112/0x230
[  474.207652][ T5838]  hci_le_enh_conn_complete_evt+0x185/0x420
[  474.207680][ T5838]  hci_event_packet+0xa55/0x1540
[  474.207710][ T5838]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  474.207737][ T5838]  ? __pfx_hci_event_packet+0x10/0x10
[  474.207761][ T5838]  ? do_raw_spin_unlock+0x13c/0x8b0
[  474.207789][ T5838]  ? hci_send_to_monitor+0xd8/0x7f0
[  474.207810][ T5838]  ? kcov_remote_start+0x97/0x7d0
[  474.207836][ T5838]  hci_rx_work+0x3f3/0xdb0
[  474.207869][ T5838]  ? process_scheduled_works+0x976/0x1840
[  474.207892][ T5838]  process_scheduled_works+0xa66/0x1840
[  474.207940][ T5838]  ? __pfx_process_scheduled_works+0x10/0x10
[  474.207971][ T5838]  ? assign_work+0x364/0x3d0
[  474.207997][ T5838]  worker_thread+0x870/0xd30
[  474.208033][ T5838]  ? __kthread_parkme+0x169/0x1d0
[  474.208059][ T5838]  ? __pfx_worker_thread+0x10/0x10
[  474.208080][ T5838]  kthread+0x7a9/0x920
[  474.208101][ T5838]  ? __pfx_kthread+0x10/0x10
[  474.208127][ T5838]  ? __pfx_worker_thread+0x10/0x10
[  474.208149][ T5838]  ? __pfx_kthread+0x10/0x10
[  474.208169][ T5838]  ? __pfx_kthread+0x10/0x10
[  474.208196][ T5838]  ? __pfx_kthread+0x10/0x10
[  474.208216][ T5838]  ? _raw_spin_unlock_irq+0x23/0x50
[  474.208238][ T5838]  ? lockdep_hardirqs_on+0x99/0x150
[  474.208263][ T5838]  ? __pfx_kthread+0x10/0x10
[  474.208287][ T5838]  ret_from_fork+0x4b/0x80
[  474.208308][ T5838]  ? __pfx_kthread+0x10/0x10
[  474.208331][ T5838]  ret_from_fork_asm+0x1a/0x30
[  474.208375][ T5838]  </TASK>
[  474.208402][ T5838] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  474.519663][ T5838] Bluetooth: hci2: failed to register connection device
[  480.400829][ T9568] netlink: 20 bytes leftover after parsing attributes in process `syz.6.731'.
[  481.485961][ T9575] lo speed is unknown, defaulting to 1000
[  481.588500][ T9588] netlink: 92 bytes leftover after parsing attributes in process `syz.3.739'.
[  481.597533][ T9588] openvswitch: netlink: Flow key attr not present in new flow.
[  483.205908][  T977] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  484.184881][  T977] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  484.194259][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.211593][  T977] usb 4-1: config 0 descriptor??
[  484.266665][  T977] gspca_main: cpia1-2.14.0 probing 0813:0001
[  485.295217][  T977] cpia1 4-1:0.0: unexpected state after lo power cmd: 01
[  485.653239][  T977] gspca_cpia1: usb_control_msg 02, error -71
[  485.660833][  T977] gspca_cpia1: usb_control_msg 05, error -71
[  485.667160][  T977] cpia1 4-1:0.0: unexpected systemstate: 01
[  485.676057][  T977] usb 4-1: USB disconnect, device number 8
[  486.239064][ T9636] fuse: Bad value for 'fd'
[  488.531902][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  489.606462][ T9671] input: syz0 as /devices/virtual/input/input47
[  489.612922][ T9671] input: failed to attach handler leds to device input47, error: -6
[  490.483529][ T9627] libceph: connect (1)[c::]:6789 error -101
[  490.489924][ T9627] libceph: mon0 (1)[c::]:6789 connect error
[  490.561973][ T9672] ceph: No mds server is up or the cluster is laggy
[  491.603890][   T51] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  491.866909][ T9695] fuse: Bad value for 'fd'
[  492.058872][   T51] usb 7-1: config 0 has no interfaces?
[  492.064520][ T9627] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  492.072456][   T51] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  492.083918][   T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.113335][   T51] usb 7-1: config 0 descriptor??
[  492.255406][ T9627] usb 3-1: Using ep0 maxpacket: 32
[  492.278197][ T9627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  492.293749][ T9627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  492.331411][ T9627] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  492.345116][ T9627] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  492.354237][ T9627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.364489][ T9627] usb 3-1: config 0 descriptor??
[  492.428850][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.449028][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.475652][ T9676] usb usb9: usbfs: process 9676 (syz.6.755) did not claim interface 0 before use
[  492.568487][  T977] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  492.579933][    T8] usb 7-1: USB disconnect, device number 20
[  492.726442][  T977] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  492.773919][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.805479][  T977] usb 4-1: config 0 descriptor??
[  492.825386][  T977] gspca_main: cpia1-2.14.0 probing 0813:0001
[  493.050246][ T9627] usbhid 3-1:0.0: can't add hid device: -71
[  493.062747][ T9627] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  493.091682][ T9627] usb 3-1: USB disconnect, device number 11
[  493.144354][   T51] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  493.243030][  T977] cpia1 4-1:0.0: unexpected state after lo power cmd: 01
[  493.428301][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.458242][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.470704][  T977] gspca_cpia1: usb_control_msg 01, error -71
[  493.491446][  T977] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  493.514230][   T51] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  493.523324][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.524919][  T977] usb 4-1: USB disconnect, device number 9
[  493.552302][   T51] usb 5-1: config 0 descriptor??
[  495.097402][    T8] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  495.444035][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  495.489548][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  495.720731][    T8] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  496.474145][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.643892][   T51] uclogic 0003:256C:006D.000A: interface is invalid, ignoring
[  498.241163][ T9764] lo speed is unknown, defaulting to 1000
[  498.613836][   T29] audit: type=1800 audit(1734734815.637:20): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.769" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  498.784329][    T8] usb 7-1: config 0 descriptor??
[  498.899115][ T5880] usb 5-1: USB disconnect, device number 17
[  498.963429][ T9771] fuse: Bad value for 'fd'
[  499.137796][    T8] usbhid 7-1:0.0: can't add hid device: -71
[  499.150494][    T8] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  499.541351][ T9779] input: syz0 as /devices/virtual/input/input48
[  499.547855][ T9779] input: failed to attach handler leds to device input48, error: -6
[  500.355467][    T8] usb 7-1: USB disconnect, device number 21
[  500.457376][ T5880] libceph: connect (1)[c::]:6789 error -101
[  500.463480][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  500.476087][ T9780] ceph: No mds server is up or the cluster is laggy
[  500.881695][    T8] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  501.095333][    T8] usb 7-1: config 0 has no interfaces?
[  501.912093][    T8] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  501.921270][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.944725][    T8] usb 7-1: config 0 descriptor??
[  501.954800][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  501.961096][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  502.461645][   T51] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  502.466623][ T9823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.503308][ T9823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.553927][ T5880] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  502.666605][   T51] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  502.677723][ T9778] usb usb9: usbfs: process 9778 (syz.6.775) did not claim interface 0 before use
[  502.697551][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  502.708932][ T9472] usb 7-1: USB disconnect, device number 22
[  502.716770][ T5880] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  502.726319][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.747853][   T51] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  502.757937][ T5880] usb 4-1: config 0 descriptor??
[  502.788890][   T51] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  502.817705][   T51] usb 5-1: Manufacturer: syz
[  502.856404][   T51] usb 5-1: config 0 descriptor??
[  503.080142][ T5880] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  503.103920][ T5880] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  503.179419][ T5880] [drm:udl_init] *ERROR* Selecting channel failed
[  503.191045][   T51] rc_core: IR keymap rc-hauppauge not found
[  503.197108][   T51] Registered IR keymap rc-empty
[  503.202652][   T51] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  503.214027][   T51] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input49
[  503.237599][ T5880] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  503.244726][ T5880] [drm] Initialized udl on minor 2
[  503.254565][ T5880] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  503.267732][ T5880] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  503.288949][ T9627] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  503.301688][ T9627] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  503.310754][ T9627] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  503.365093][ T5880] usb 4-1: USB disconnect, device number 10
[  503.690226][ T5911] usb 5-1: USB disconnect, device number 18
[  505.398692][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.785'.
[  505.927736][ T9863] fuse: Bad value for 'fd'
[  507.537515][ T9872] rdma_rxe: rxe_newlink: failed to add lo
[  509.564030][ T5880] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  512.748256][ T5880] usb 4-1: device descriptor read/all, error -71
[  513.077176][ T9919] input: syz0 as /devices/virtual/input/input50
[  513.083587][ T9919] input: failed to attach handler leds to device input50, error: -6
[  513.897198][ T9920] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  516.565905][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  516.656233][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  516.664691][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  516.675249][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  516.682584][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  516.690120][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  516.764277][ T9951] lo speed is unknown, defaulting to 1000
[  517.379275][   T29] audit: type=1326 audit(1734734834.873:21): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9966 comm="syz.3.806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8b785d29 code=0x0
[  518.855974][ T9983] block nbd6: not configured, cannot reconfigure
[  519.517634][ T5838] Bluetooth: hci5: command tx timeout
[  519.610649][ T9951] chnl_net:caif_netlink_parms(): no params data found
[  519.945553][ T9951] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.962556][ T9951] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.973564][ T9951] bridge_slave_0: entered allmulticast mode
[  519.997222][ T9951] bridge_slave_0: entered promiscuous mode
[  520.033830][ T5911] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  520.043176][ T9951] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.084494][ T9951] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.091784][ T9951] bridge_slave_1: entered allmulticast mode
[  520.107210][ T9951] bridge_slave_1: entered promiscuous mode
[  520.183122][ T9951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.221205][ T5911] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  520.248409][ T9951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.280943][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.318486][ T5911] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  520.344005][ T5911] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  520.352191][ T5911] usb 3-1: Manufacturer: syz
[  520.366459][ T5911] usb 3-1: config 0 descriptor??
[  521.266614][ T5911] rc_core: IR keymap rc-hauppauge not found
[  521.272584][ T5911] Registered IR keymap rc-empty
[  521.279420][ T5911] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  521.374944][ T5911] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input51
[  521.494267][ T9951] team0: Port device team_slave_0 added
[  521.506478][ T9951] team0: Port device team_slave_1 added
[  521.564096][ T5838] Bluetooth: hci5: command tx timeout
[  522.085930][ T9627] usb 3-1: USB disconnect, device number 12
[  522.185982][ T9951] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.193276][ T9951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.228751][ T9951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.755992][ T9951] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.783875][ T9951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  522.810689][ T9951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.901832][ T9951] hsr_slave_0: entered promiscuous mode
[  522.920203][ T9951] hsr_slave_1: entered promiscuous mode
[  523.712023][T10066] random: crng reseeded on system resumption
[  524.065041][ T5838] Bluetooth: hci5: command tx timeout
[  526.001373][T10066] Unrecognized hibernate image header format!
[  526.007731][T10066] PM: hibernation: Image mismatch: architecture specific data
[  526.579813][ T5838] Bluetooth: hci5: command tx timeout
[  531.154720][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.831'.
[  531.453807][ T9472] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  531.613958][ T9627] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  531.784130][ T9472] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  531.834270][ T9627] usb 5-1: Using ep0 maxpacket: 32
[  531.857214][ T9627] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.869496][ T9627] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  531.904216][ T9472] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  531.908916][ T9627] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  531.929755][ T9627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.995103][ T9627] hub 5-1:4.0: USB hub found
[  532.041728][ T9472] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  532.052117][ T9472] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  532.060879][ T9472] usb 4-1: Manufacturer: syz
[  532.105740][ T9472] usb 4-1: config 0 descriptor??
[  532.598431][ T9627] hub 5-1:4.0: config failed, can't read hub descriptor (err -22)
[  532.667383][ T9627] usb 5-1: USB disconnect, device number 19
[  532.694211][ T9472] rc_core: IR keymap rc-hauppauge not found
[  532.700236][ T9472] Registered IR keymap rc-empty
[  532.707702][ T9472] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  532.741998][ T9472] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52
[  532.963777][   T51] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  532.977146][ T9472] usb 4-1: USB disconnect, device number 13
[  533.094694][   T51] usb 7-1: device descriptor read/64, error -71
[  533.175708][ T9951] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  533.207978][ T9951] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  533.246603][ T9951] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  533.261310][ T9951] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  534.257606][   T51] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  534.583772][   T51] usb 7-1: device descriptor read/64, error -71
[  534.618844][ T9951] 8021q: adding VLAN 0 to HW filter on device bond0
[  534.640387][ T9951] 8021q: adding VLAN 0 to HW filter on device team0
[  534.754943][   T51] usb usb7-port1: attempt power cycle
[  534.840897][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.848126][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  534.961269][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.973781][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.144616][ T9951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  535.155137][ T9951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  535.172275][   T51] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  535.268981][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  535.385858][   T51] usb 7-1: device descriptor read/8, error -71
[  535.506273][    T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  535.530102][T10171] netlink: 92 bytes leftover after parsing attributes in process `syz.3.838'.
[  535.545935][    T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  535.561548][T10171] openvswitch: netlink: Flow key attr not present in new flow.
[  535.569562][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  535.603915][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  535.619601][    T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  535.629279][    T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  535.633974][   T51] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  535.637539][    T9] usb 3-1: Product: syz
[  535.666091][    T9] usb 3-1: Manufacturer: syz
[  535.691848][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  535.703366][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  535.755467][ T9951] 8021q: adding VLAN 0 to HW filter on device batadv0
[  535.772913][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  535.813976][    T9] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  536.049164][   T51] usb 7-1: device not accepting address 26, error -71
[  536.362542][   T51] usb usb7-port1: unable to enumerate USB device
[  536.604250][    T8] usb 3-1: USB disconnect, device number 13
[  537.096312][ T9951] veth0_vlan: entered promiscuous mode
[  537.142792][ T9951] veth1_vlan: entered promiscuous mode
[  537.283515][ T9951] veth0_macvtap: entered promiscuous mode
[  537.298634][T10186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.844'.
[  537.371064][ T9951] veth1_macvtap: entered promiscuous mode
[  537.591206][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.708275][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.784925][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  537.914789][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  537.951091][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.023764][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.033644][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.061453][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.230311][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.353560][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.783849][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  538.828412][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  538.918738][ T9951] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.960833][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.846'.
[  539.185348][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.211072][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.393941][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.414365][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  539.443948][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  539.900523][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.847'.
[  539.900859][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'.
[  540.049669][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.068177][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.095050][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.112638][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.133577][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  540.688119][ T9951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  540.750004][ T9951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.076066][ T9951] batman_adv: batadv0: Interface activated: batadv_slave_1
[  541.092316][ T9951] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.101570][ T9951] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.110559][ T9951] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.123200][ T9951] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  542.711714][ T8264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  542.719760][ T8264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.236333][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  543.307168][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  543.456575][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'.
[  543.602706][ T5911] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  543.766243][ T5911] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  543.779095][ T5911] usb 3-1: config 0 has no interface number 0
[  543.815416][ T5911] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  543.857772][ T5911] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  544.670555][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.678731][ T5911] usb 3-1: Product: syz
[  544.682916][ T5911] usb 3-1: Manufacturer: syz
[  544.687770][ T5911] usb 3-1: SerialNumber: syz
[  544.798994][ T5911] usb 3-1: config 0 descriptor??
[  544.842218][T10228] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  544.858238][ T5911] usb-storage 3-1:0.20: USB Mass Storage device detected
[  544.865598][    T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  545.135540][ T5911] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  546.002444][ T5911] scsi host1: usb-storage 3-1:0.20
[  546.029533][    T8] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  546.038735][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.058078][    T8] usb 4-1: config 0 descriptor??
[  546.295928][T10260] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'.
[  547.001992][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.860'.
[  547.035750][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  547.042486][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  547.279118][    T8] usb 4-1: USB disconnect, device number 14
[  548.073848][T10255] usb 3-1: reset full-speed USB device number 14 using dummy_hcd
[  548.661533][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.863'.
[  550.881189][T10313] input: syz0 as /devices/virtual/input/input53
[  550.905203][T10313] input: failed to attach handler leds to device input53, error: -6
[  552.413574][T10323] lo speed is unknown, defaulting to 1000
[  554.192918][T10255] usb 3-1: device descriptor read/64, error -110
[  554.366890][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  554.720493][    T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  554.734203][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.790117][T10255] usb 3-1: reset full-speed USB device number 14 using dummy_hcd
[  554.811618][    T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  554.821058][    T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  554.831895][    T9] usb 5-1: Manufacturer: syz
[  554.971535][    T9] usb 5-1: config 0 descriptor??
[  555.014218][   T51] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  555.124422][    T9] rc_core: IR keymap rc-hauppauge not found
[  555.130647][    T9] Registered IR keymap rc-empty
[  555.145041][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  555.164694][T10255] usb 3-1: device descriptor read/64, error -32
[  555.192927][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input54
[  555.269929][   T51] usb 2-1: Using ep0 maxpacket: 32
[  555.294155][   T51] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  555.314617][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.322760][   T51] usb 2-1: Product: syz
[  555.329325][   T51] usb 2-1: Manufacturer: syz
[  555.375727][   T51] usb 2-1: SerialNumber: syz
[  555.412531][   T51] usb 2-1: config 0 descriptor??
[  555.417774][T10255] usb 3-1: reset full-speed USB device number 14 using dummy_hcd
[  555.464356][T10255] usb 3-1: device descriptor read/8, error -32
[  555.692556][   T51] snd-usb-6fire 2-1:0.0: unable to receive device firmware state.
[  555.728904][ T5880] usb 5-1: USB disconnect, device number 20
[  555.803773][T10255] usb 3-1: reset full-speed USB device number 14 using dummy_hcd
[  555.827275][   T51] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -71
[  556.837786][T10255] usb 3-1: device descriptor read/8, error -32
[  557.038704][T10255] raw-gadget.0 gadget.2: failed to queue suspend event
[  557.137007][ T5911] usb 3-1: USB disconnect, device number 14
[  557.800352][   T51] usb 2-1: USB disconnect, device number 12
[  557.853974][T10371] random: crng reseeded on system resumption
[  560.615674][T10385] Unrecognized hibernate image header format!
[  560.621846][T10385] PM: hibernation: Image mismatch: architecture specific data
[  562.632650][T10256] raw-gadget.0 gadget.2: failed to queue disconnect event
[  563.262840][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  563.271260][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  564.295060][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'.
[  565.367701][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.897'.
[  565.578811][ T5911] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  566.002849][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'.
[  566.466365][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  566.476660][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  566.518600][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  566.550786][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.582041][ T5911] usb 2-1: Product: syz
[  566.593938][ T5911] usb 2-1: Manufacturer: syz
[  566.598874][ T5911] usb 2-1: SerialNumber: syz
[  566.748476][    T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  566.984834][    T8] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  567.344391][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.363353][ T5911] usb 2-1: 0:2 : does not exist
[  567.474217][ T5911] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  567.482788][    T8] usb 4-1: config 0 descriptor??
[  567.508126][    T8] gspca_main: cpia1-2.14.0 probing 0813:0001
[  567.519260][ T5911] usb 2-1: USB disconnect, device number 13
[  567.792623][T10144] udevd[10144]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  568.007987][T10482] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  569.293965][ T5880] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  569.526940][ T5880] usb 2-1: Using ep0 maxpacket: 32
[  569.591118][ T5880] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  569.684836][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.005781][ T5880] usb 2-1: Product: syz
[  570.010260][ T5880] usb 2-1: Manufacturer: syz
[  570.014936][ T5880] usb 2-1: SerialNumber: syz
[  570.032011][ T5880] usb 2-1: config 0 descriptor??
[  570.105468][    T8] cpia1 4-1:0.0: unexpected state after lo power cmd: d0
[  570.120631][    T8] gspca_cpia1: usb_control_msg 01, error -71
[  570.127647][    T8] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  570.144077][    T8] usb 4-1: USB disconnect, device number 15
[  570.158566][T10419] udevd[10419]: setting mode of /dev/bus/usb/004/015 to 020664 failed: No such file or directory
[  570.222270][T10419] udevd[10419]: setting owner of /dev/bus/usb/004/015 to uid=0, gid=0 failed: No such file or directory
[  570.352102][ T5880] snd-usb-6fire 2-1:0.0: unable to receive device firmware state.
[  570.392502][ T5880] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -71
[  570.666313][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'.
[  570.668829][ T5880] usb 2-1: USB disconnect, device number 14
[  572.264251][T10512] lo speed is unknown, defaulting to 1000
[  573.304201][    T8] usb 7-1: new full-speed USB device number 27 using dummy_hcd
[  573.487109][    T8] usb 7-1: config 0 has an invalid interface number: 20 but max is 0
[  573.496798][    T8] usb 7-1: config 0 has no interface number 0
[  573.514564][    T8] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  573.530615][    T8] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  573.540175][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.549173][    T8] usb 7-1: Product: syz
[  573.564349][    T8] usb 7-1: Manufacturer: syz
[  573.579006][    T8] usb 7-1: SerialNumber: syz
[  573.603013][    T8] usb 7-1: config 0 descriptor??
[  573.611038][T10519] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  573.613875][ T5880] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  573.635360][    T8] usb-storage 7-1:0.20: USB Mass Storage device detected
[  573.653975][ T5911] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  573.678542][    T8] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  573.805444][ T5880] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  573.829015][ T5880] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  573.841395][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  573.852378][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  573.863980][ T5911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  573.868728][ T5880] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  573.892259][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  573.900532][ T5880] usb 2-1: Product: syz
[  573.900602][    T8] scsi host1: usb-storage 7-1:0.20
[  573.913359][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  573.914415][ T5880] usb 2-1: Manufacturer: syz
[  573.939880][ T5911] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  573.944817][ T5880] cdc_wdm 2-1:1.0: skipping garbage
[  573.963603][ T5880] cdc_wdm 2-1:1.0: skipping garbage
[  573.972989][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  573.978989][ T5880] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  573.992488][ T5911] usb 4-1: SerialNumber: syz
[  574.228100][ T5911] usb 4-1: 0:2 : does not exist
[  574.254510][ T5911] usb 4-1: unit 5 not found!
[  574.363985][ T5911] usb 4-1: USB disconnect, device number 16
[  574.424793][   T51] usb 2-1: USB disconnect, device number 15
[  575.360357][T10144] udevd[10144]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  575.460150][T10551] usb 7-1: reset full-speed USB device number 27 using dummy_hcd
[  578.794063][   T51] usb 7-1: USB disconnect, device number 27
[  580.602927][   T51] usb 7-1: new full-speed USB device number 28 using dummy_hcd
[  581.668769][   T51] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  581.679483][   T51] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  581.698070][   T51] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  581.716448][   T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.725269][   T51] usb 7-1: Product: syz
[  581.729467][   T51] usb 7-1: Manufacturer: syz
[  581.734612][   T51] usb 7-1: SerialNumber: syz
[  582.529179][   T51] usb 7-1: 0:2 : does not exist
[  582.580184][   T51] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  582.670423][   T51] usb 7-1: USB disconnect, device number 28
[  582.974968][T10144] udevd[10144]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  586.274717][T10685] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  586.286342][T10685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  586.304848][T10685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  586.323173][T10685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  586.330329][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  586.352886][T10685] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  586.360470][T10685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  586.382575][T10688] Cache volume key already in use (9p,(null),)
[  586.484260][T10683] lo speed is unknown, defaulting to 1000
[  586.523764][    T9] usb 4-1: Using ep0 maxpacket: 16
[  586.535109][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  586.577308][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  586.624597][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  586.644590][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.663862][ T9627] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  586.774781][T10700] random: crng reseeded on system resumption
[  586.896045][    T9] usb 4-1: config 0 descriptor??
[  587.655390][ T9627] usb 2-1: config 0 has an invalid interface number: 20 but max is 0
[  587.663540][ T9627] usb 2-1: config 0 has no interface number 0
[  587.708978][ T9627] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  587.737994][ T9627] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  587.753836][ T9627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.779093][T10703] lo speed is unknown, defaulting to 1000
[  588.001455][ T9627] usb 2-1: Product: syz
[  588.005827][ T9627] usb 2-1: Manufacturer: syz
[  588.010622][ T9627] usb 2-1: SerialNumber: syz
[  588.031379][ T9627] usb 2-1: config 0 descriptor??
[  588.037465][T10691] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  588.062169][ T9627] usb-storage 2-1:0.20: USB Mass Storage device detected
[  588.299443][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  588.671382][ T5838] Bluetooth: hci1: command tx timeout
[  588.688490][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  588.694018][ T9627] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  588.695782][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  588.833139][    T9] usb 4-1: USB disconnect, device number 17
[  588.883886][ T9627] scsi host1: usb-storage 2-1:0.20
[  588.896148][T10711] Unrecognized hibernate image header format!
[  588.902274][T10711] PM: hibernation: Image mismatch: architecture specific data
[  589.128522][    T9] usb 2-1: USB disconnect, device number 16
[  589.867457][T10683] chnl_net:caif_netlink_parms(): no params data found
[  591.088525][ T5838] Bluetooth: hci1: command tx timeout
[  591.740923][    T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  591.748892][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  592.441484][T10683] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.483534][T10683] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.824116][    T8] usb 3-1: Using ep0 maxpacket: 16
[  592.951246][T10683] bridge_slave_0: entered allmulticast mode
[  593.027144][T10683] bridge_slave_0: entered promiscuous mode
[  593.050675][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  593.078133][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  593.099563][T10683] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.136075][T10683] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.164164][ T5838] Bluetooth: hci1: command tx timeout
[  593.184157][T10683] bridge_slave_1: entered allmulticast mode
[  593.203186][    T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  593.225908][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.259889][T10683] bridge_slave_1: entered promiscuous mode
[  593.292405][    T9] usb 2-1: device descriptor read/all, error -71
[  593.311347][    T8] usb 3-1: config 0 descriptor??
[  593.324922][T10765] Cache volume key already in use (9p,(null),)
[  593.400810][   T29] audit: type=1326 audit(1734734910.895:22): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.6.952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7854585d29 code=0x0
[  593.438309][T10683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  593.544663][T10683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  593.694156][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'.
[  593.813956][    T8] appleir 0003:05AC:8241.000B: unknown main item tag 0x0
[  593.869628][    T8] appleir 0003:05AC:8241.000B: unknown main item tag 0x0
[  594.234436][T10783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.955'.
[  594.447500][T10683] team0: Port device team_slave_0 added
[  594.466260][T10785] netlink: 28 bytes leftover after parsing attributes in process `syz.6.952'.
[  594.485239][    T8] appleir 0003:05AC:8241.000B: unknown main item tag 0x0
[  594.492344][    T8] appleir 0003:05AC:8241.000B: unknown main item tag 0x0
[  594.763136][    T8] appleir 0003:05AC:8241.000B: No inputs registered, leaving
[  594.775770][T10683] team0: Port device team_slave_1 added
[  595.776993][    T8] appleir 0003:05AC:8241.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[  595.789915][ T5838] Bluetooth: hci1: command tx timeout
[  596.414216][    T8] usb 3-1: USB disconnect, device number 16
[  596.589330][T10683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  596.638257][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  596.668025][T10683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  597.664268][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.960'.
[  598.524477][T10683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  598.531471][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  599.433517][T10683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  601.105629][T10683] hsr_slave_0: entered promiscuous mode
[  601.206473][T10683] hsr_slave_1: entered promiscuous mode
[  601.222297][T10683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  601.230385][ T5880] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  601.244454][T10683] Cannot create hsr debugfs directory
[  601.338505][T10842] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  601.610706][ T5880] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  601.777680][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.006026][    T8] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  602.099701][ T5880] usb 3-1: config 0 descriptor??
[  602.113819][ T5880] gspca_main: cpia1-2.14.0 probing 0813:0001
[  602.209715][    T8] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  602.236136][    T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  602.272688][    T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  602.272910][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'.
[  602.303090][    T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  602.396697][    T8] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  602.455736][    T8] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  602.512733][    T8] usb 7-1: Product: syz
[  602.538196][    T8] usb 7-1: Manufacturer: syz
[  602.602999][    T8] cdc_wdm 7-1:1.0: skipping garbage
[  602.613933][ T5880] cpia1 3-1:0.0: unexpected state after lo power cmd: d0
[  602.632731][    T8] cdc_wdm 7-1:1.0: skipping garbage
[  602.719327][    T8] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  602.777651][    T8] cdc_wdm 7-1:1.0: Unknown control protocol
[  602.826717][ T5880] gspca_cpia1: usb_control_msg 01, error -32
[  602.897693][    T8] usb 7-1: USB disconnect, device number 29
[  603.040840][ T5880] gspca_cpia1: usb_control_msg 02, error -71
[  603.069691][   T29] audit: type=1326 audit(1734734920.568:23): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.3.970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8b785d29 code=0x0
[  603.096724][ T5880] cpia1 3-1:0.0: only firmware version 1 is supported (got: 208)
[  603.136208][ T5880] usb 3-1: USB disconnect, device number 17
[  603.468982][T10840] delete_channel: no stack
[  603.679512][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.970'.
[  605.684444][ T5880] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  606.118017][ T5880] usb 4-1: Using ep0 maxpacket: 16
[  606.216423][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  606.312304][ T5880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  606.397688][ T5880] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  606.651872][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  606.725006][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.754739][ T5880] usb 4-1: config 0 descriptor??
[  607.671670][T10683] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  607.768233][T10683] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  607.858888][T10683] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  607.911762][ T5880] appleir 0003:05AC:8241.000C: unknown main item tag 0x0
[  607.919082][ T5880] appleir 0003:05AC:8241.000C: unknown main item tag 0x0
[  607.926249][ T5880] appleir 0003:05AC:8241.000C: unknown main item tag 0x0
[  607.933326][ T5880] appleir 0003:05AC:8241.000C: unknown main item tag 0x0
[  608.676025][ T5880] appleir 0003:05AC:8241.000C: No inputs registered, leaving
[  608.731600][T10914] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  608.928368][T10683] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  609.437356][ T5880] appleir 0003:05AC:8241.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  609.908776][ T9472] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  610.176949][T10683] 8021q: adding VLAN 0 to HW filter on device bond0
[  610.243251][T10683] 8021q: adding VLAN 0 to HW filter on device team0
[  610.274500][ T9472] usb 2-1: Using ep0 maxpacket: 32
[  610.285017][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state
[  610.292213][ T6107] bridge0: port 1(bridge_slave_0) entered forwarding state
[  610.305381][   T29] audit: type=1326 audit(1734734927.804:24): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=10925 comm="syz.6.985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7854585d29 code=0x0
[  610.329123][ T9472] usb 2-1: config 0 has an invalid interface number: 219 but max is 0
[  610.339013][ T9472] usb 2-1: config 0 has no interface number 0
[  610.353530][ T9472] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  610.355127][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state
[  610.371727][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state
[  610.381548][ T9472] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  610.393059][ T9472] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  610.404234][ T9472] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  610.457025][ T5880] usb 4-1: USB disconnect, device number 18
[  610.493159][ T9472] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  610.521699][ T9472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.583482][ T9472] usb 2-1: Product: syz
[  610.597257][ T9472] usb 2-1: Manufacturer: syz
[  610.601918][ T9472] usb 2-1: SerialNumber: syz
[  610.628304][ T9472] usb 2-1: config 0 descriptor??
[  610.634618][T10920] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  610.862547][ T9472] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz)
[  610.917427][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.6.985'.
[  610.934132][ T5880] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  610.976377][T10946] netlink: 4 bytes leftover after parsing attributes in process `syz.6.985'.
[  611.791428][ T5880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  611.857699][T10683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  611.897034][ T5880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  611.986572][ T5880] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  612.040183][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.107678][ T5880] usb 4-1: Product: syz
[  612.137225][ T5880] usb 4-1: Manufacturer: syz
[  612.173354][ T5880] usb 4-1: SerialNumber: syz
[  612.457829][ T5880] usb 4-1: 0:2 : does not exist
[  612.482817][ T5880] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  612.751808][ T5880] usb 4-1: USB disconnect, device number 19
[  612.988372][T10144] udevd[10144]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  613.614651][ T5911] usb 2-1: USB disconnect, device number 19
[  613.756270][T10683] veth0_vlan: entered promiscuous mode
[  613.811096][T10683] veth1_vlan: entered promiscuous mode
[  613.905224][T10683] veth0_macvtap: entered promiscuous mode
[  614.538581][T10683] veth1_macvtap: entered promiscuous mode
[  615.131914][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.153720][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.163589][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.270753][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.992'.
[  615.288953][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.353523][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.438109][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.538891][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.688716][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.783761][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.833774][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.861157][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.892318][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.933891][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  615.964296][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  615.987168][T10683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  616.026284][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  616.073820][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.099767][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  616.122359][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.136109][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  616.147927][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.223152][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  616.254066][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.283855][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  616.323914][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.372300][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  616.386802][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.403814][T10683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  616.423681][T10683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  616.473194][T10683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  617.255873][T10683] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.293784][T10683] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.302570][T10683] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.364051][T10683] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  618.080055][ T3693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.116175][ T3693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.211355][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.249740][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  618.348071][   T29] audit: type=1326 audit(1734734935.844:25): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.1.997" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0dead85d29 code=0x0
[  618.378731][T11022] random: crng reseeded on system resumption
[  618.863874][  T977] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  618.977881][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.997'.
[  618.989003][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.997'.
[  620.154571][  T977] usb 4-1: Using ep0 maxpacket: 32
[  620.169208][  T977] usb 4-1: config 0 has an invalid interface number: 219 but max is 0
[  620.210048][  T977] usb 4-1: config 0 has no interface number 0
[  620.226454][  T977] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  620.354420][  T977] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  620.395955][  T977] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  620.415192][  T977] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  620.453500][  T977] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  620.482901][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.519804][  T977] usb 4-1: Product: syz
[  620.533877][  T977] usb 4-1: Manufacturer: syz
[  620.544148][  T977] usb 4-1: SerialNumber: syz
[  620.557741][  T977] usb 4-1: config 0 descriptor??
[  620.570347][T11030] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  620.835532][  T977] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz)
[  621.797317][T11069] block nbd1: not configured, cannot reconfigure
[  622.463960][  T977] usb 4-1: USB disconnect, device number 20
[  624.688481][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  624.695526][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  624.863878][    T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  626.483723][    T9] usb 3-1: Using ep0 maxpacket: 16
[  626.490729][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  626.513804][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  626.574158][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  626.611292][    T9] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[  626.643944][    T9] usb 3-1: Product: syz
[  626.649354][    T9] usb 3-1: Manufacturer: syz
[  626.686981][    T9] usb 3-1: config 0 descriptor??
[  626.969678][T11135] input: syz0 as /devices/virtual/input/input55
[  627.084336][   T51] libceph: connect (1)[c::]:6789 error -101
[  627.299671][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  627.815779][T11136] ceph: No mds server is up or the cluster is laggy
[  628.023522][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  628.049519][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  628.103743][    T9] usb 3-1: USB disconnect, device number 18
[  629.014544][T11163] trusted_key: encrypted_key: insufficient parameters specified
[  629.993328][T11160] lo speed is unknown, defaulting to 1000
[  630.142477][T11129] input: syz0 as /devices/virtual/input/input56
[  630.294631][ T5880] libceph: connect (1)[c::]:6789 error -101
[  630.300876][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  630.667659][ T5880] libceph: connect (1)[c::]:6789 error -101
[  630.787509][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  631.503697][T11131] ceph: No mds server is up or the cluster is laggy
[  631.686343][  T977] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  631.687504][   T51] libceph: connect (1)[c::]:6789 error -101
[  631.714768][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  631.919584][  T977] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  631.952883][  T977] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  632.040831][  T977] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  632.260734][ T9472] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  632.322964][  T977] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  632.561253][  T977] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  632.587673][  T977] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  632.607816][ T9472] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  632.619626][ T9472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.660835][  T977] usb 6-1: Product: syz
[  632.684085][  T977] usb 6-1: Manufacturer: syz
[  632.733031][ T9472] usb 3-1: config 0 descriptor??
[  632.747134][  T977] cdc_wdm 6-1:1.0: skipping garbage
[  632.804572][ T9472] gspca_main: cpia1-2.14.0 probing 0813:0001
[  632.810909][  T977] cdc_wdm 6-1:1.0: skipping garbage
[  632.831311][  T977] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  632.863744][  T977] cdc_wdm 6-1:1.0: Unknown control protocol
[  633.053855][  T977] usb 6-1: USB disconnect, device number 7
[  633.224055][T11189] syz.6.1024 (11189): drop_caches: 2
[  633.232532][ T9472] cpia1 3-1:0.0: unexpected state after lo power cmd: d0
[  633.641294][ T9472] gspca_cpia1: usb_control_msg 02, error -71
[  633.793862][ T9472] cpia1 3-1:0.0: only firmware version 1 is supported (got: 208)
[  634.224577][ T9472] usb 3-1: USB disconnect, device number 19
[  634.844152][ T9472] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  635.037968][ T9472] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  635.090170][ T9472] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  635.174533][ T9472] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  635.229554][ T9472] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  635.276214][ T9472] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  635.320765][ T9472] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  635.381088][ T9472] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  635.431292][ T9472] usb 3-1: Product: syz
[  635.441221][ T9472] usb 3-1: Manufacturer: syz
[  635.759729][ T9472] cdc_wdm 3-1:1.0: skipping garbage
[  635.773770][ T9472] cdc_wdm 3-1:1.0: skipping garbage
[  636.116799][   T51] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  636.353829][ T9472] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  636.359804][ T9472] cdc_wdm 3-1:1.0: Unknown control protocol
[  636.394911][ T9472] usb 3-1: USB disconnect, device number 20
[  636.565796][   T51] usb 6-1: Using ep0 maxpacket: 32
[  636.595832][   T51] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  636.635362][   T51] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  636.647997][T11237] mkiss: ax0: crc mode is auto.
[  636.670989][   T51] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  636.723356][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.778525][   T51] usb 6-1: Product: syz
[  636.803569][   T51] usb 6-1: Manufacturer: syz
[  636.840536][   T51] usb 6-1: SerialNumber: syz
[  636.981771][   T51] usb 6-1: config 0 descriptor??
[  637.871403][T11253] input: syz0 as /devices/virtual/input/input57
[  637.877957][T11253] input: failed to attach handler leds to device input57, error: -6
[  638.856694][ T5880] libceph: connect (1)[c::]:6789 error -101
[  638.863125][ T5880] libceph: mon0 (1)[c::]:6789 connect error
[  639.204394][T11253] ceph: No mds server is up or the cluster is laggy
[  639.613883][ T5880] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  639.778294][ T5880] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  639.787946][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  639.804888][ T5880] usb 3-1: config 0 descriptor??
[  639.819873][ T5880] gspca_main: cpia1-2.14.0 probing 0813:0001
[  640.038456][ T9472] usb 6-1: USB disconnect, device number 8
[  640.066107][  T977] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  640.330503][ T5880] cpia1 3-1:0.0: unexpected state after lo power cmd: d0
[  640.728599][  T977] usb 4-1: Using ep0 maxpacket: 8
[  640.801166][  T977] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  640.858218][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.863671][ T5880] cpia1 3-1:0.0: only firmware version 1 is supported (got: 208)
[  640.952293][  T977] usb 4-1: Product: syz
[  640.964052][  T977] usb 4-1: Manufacturer: syz
[  640.968732][  T977] usb 4-1: SerialNumber: syz
[  641.006186][  T977] usb 4-1: config 0 descriptor??
[  641.467244][    T9] usb 7-1: new full-speed USB device number 30 using dummy_hcd
[  641.590531][  T977] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  641.612439][ T9472] usb 3-1: USB disconnect, device number 21
[  641.747410][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  641.761200][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  641.774485][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  641.893747][    T9] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  641.902921][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.912252][    T9] usb 7-1: Product: syz
[  641.916718][    T9] usb 7-1: Manufacturer: syz
[  641.921421][    T9] usb 7-1: SerialNumber: syz
[  641.952787][    T9] usb 7-1: config 0 descriptor??
[  641.983031][    T9] streamzap 7-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?!
[  642.427003][    T9] usb 7-1: USB disconnect, device number 30
[  642.880110][  T977] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  643.018443][  T977] usb 4-1: USB disconnect, device number 21
[  644.773951][ T5880] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  644.984033][   T51] usb 7-1: new full-speed USB device number 31 using dummy_hcd
[  645.288721][ T5880] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  645.324084][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.350388][ T5880] usb 4-1: config 0 descriptor??
[  645.365194][   T51] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  645.385740][   T51] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  645.436629][   T51] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  645.453854][   T51] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.473282][   T51] usb 7-1: Product: syz
[  645.485073][   T51] usb 7-1: Manufacturer: syz
[  645.493342][   T51] usb 7-1: SerialNumber: syz
[  645.732470][   T51] usb 7-1: 0:2 : does not exist
[  645.789939][   T51] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  645.811901][ T5880] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  645.839287][ T5880] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  645.870900][ T5880] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  645.920444][ T5880] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  645.932488][   T51] usb 7-1: USB disconnect, device number 31
[  645.939345][ T5880] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  645.962140][ T5880] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  646.029302][T11348] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1056'.
[  646.151060][ T5880] playstation 0003:054C:0DF2.000D: Failed to retrieve feature with reportID 9: -71
[  646.161381][ T5880] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense pairing info: -71
[  646.171201][ T5880] playstation 0003:054C:0DF2.000D: Failed to get MAC address from DualSense
[  646.179993][ T5880] playstation 0003:054C:0DF2.000D: Failed to create dualsense.
[  646.191035][  T977] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  646.231260][ T5880] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -71
[  646.260737][T10419] udevd[10419]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  646.295595][T11351] capability: warning: `syz.5.1056' uses deprecated v2 capabilities in a way that may be insecure
[  646.406180][ T5880] usb 4-1: USB disconnect, device number 22
[  647.211434][  T977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  647.263029][  T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  647.328405][  T977] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  648.426246][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.444719][  T977] usb 2-1: Product: syz
[  648.449967][  T977] usb 2-1: Manufacturer: syz
[  648.455154][  T977] usb 2-1: SerialNumber: syz
[  648.846044][T11363] mkiss: ax0: crc mode is auto.
[  649.541582][  T977] usb 2-1: 0:2 : does not exist
[  650.218161][  T977] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  650.258354][T11364] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  650.268221][T11364] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  650.761888][  T977] usb 2-1: USB disconnect, device number 20
[  651.511940][T11381] trusted_key: encrypted_key: insufficient parameters specified
[  651.649564][   T29] audit: type=1326 audit(1734734969.144:26): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.5.1065" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa12db85d29 code=0x0
[  651.769993][T10144] udevd[10144]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  652.039466][T11397] No control pipe specified
[  652.291633][T11397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1068'.
[  652.300800][T11397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1068'.
[  652.320901][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1065'.
[  652.412844][T11406] input: syz0 as /devices/virtual/input/input58
[  652.419339][T11406] input: failed to attach handler leds to device input58, error: -6
[  652.538808][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1065'.
[  652.715906][ T5913] libceph: connect (1)[c::]:6789 error -101
[  653.098307][ T5913] libceph: mon0 (1)[c::]:6789 connect error
[  653.384073][ T9529] libceph: connect (1)[c::]:6789 error -101
[  653.392675][T11407] ceph: No mds server is up or the cluster is laggy
[  653.426278][ T9529] libceph: mon0 (1)[c::]:6789 connect error
[  654.024905][    T9] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[  654.188594][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  654.253807][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  654.279773][    T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  654.297918][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.337730][    T9] usb 7-1: Product: syz
[  654.341953][    T9] usb 7-1: Manufacturer: syz
[  654.387759][    T9] usb 7-1: SerialNumber: syz
[  654.452082][T11403] input: syz0 as /devices/virtual/input/input59
[  654.740395][   T51] libceph: connect (1)[c::]:6789 error -101
[  654.992322][T11433] ceph: No mds server is up or the cluster is laggy
[  655.062990][   T51] libceph: mon0 (1)[c::]:6789 connect error
[  655.326200][    T9] usb 7-1: 0:2 : does not exist
[  655.392589][    T9] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  655.464984][    T9] usb 7-1: USB disconnect, device number 32
[  655.662174][T10144] udevd[10144]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  655.766848][ T5913] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  656.113702][ T5913] usb 2-1: Using ep0 maxpacket: 32
[  656.135266][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  656.173759][ T5913] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  656.468835][T11463] NILFS (nullb0): couldn't find nilfs on the device
[  657.178832][ T5913] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  658.178929][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.302786][ T5913] usb 2-1: Product: syz
[  658.330417][ T5913] usb 2-1: Manufacturer: syz
[  658.346903][ T5913] usb 2-1: SerialNumber: syz
[  658.568082][ T5913] usb 2-1: config 0 descriptor??
[  658.593738][ T5913] usb 2-1: can't set config #0, error -71
[  658.711253][T11471] mkiss: ax0: crc mode is auto.
[  658.926171][    T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  658.954970][T11472] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  658.964690][T11472] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  659.359330][ T5913] usb 2-1: USB disconnect, device number 21
[  659.528957][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  659.694549][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  659.717787][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  659.767514][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.805985][    T9] usb 4-1: Product: syz
[  659.810314][    T9] usb 4-1: Manufacturer: syz
[  659.853858][    T9] usb 4-1: SerialNumber: syz
[  660.127027][    T9] usb 4-1: 0:2 : does not exist
[  660.251732][T11495] mkiss: ax0: crc mode is auto.
[  660.640822][T11496] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  660.651641][T11496] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  660.906105][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  661.089674][    T9] usb 4-1: USB disconnect, device number 23
[  661.278368][T11502] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1085'.
[  662.328185][T10144] udevd[10144]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  663.094156][T10685] Bluetooth: hci5: command 0x0406 tx timeout
[  663.760711][T11519] Cache volume key already in use (9p,(null),)
[  663.924654][ T5913] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  664.197464][ T5913] usb 2-1: Using ep0 maxpacket: 16
[  664.641813][ T5913] usb 2-1: device descriptor read/all, error -71
[  665.755298][ T9472] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  666.073090][ T9472] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  666.134882][ T9472] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  666.262737][ T9472] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  666.282895][ T9472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.333022][ T9472] usb 3-1: Product: syz
[  666.351714][ T9472] usb 3-1: Manufacturer: syz
[  666.373793][ T9472] usb 3-1: SerialNumber: syz
[  667.244937][ T9472] usb 3-1: 0:2 : does not exist
[  667.325055][ T9472] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  667.394192][ T9472] usb 3-1: USB disconnect, device number 22
[  668.848091][T10144] udevd[10144]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  669.516162][T11570] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1100'.
[  669.525255][T11570] openvswitch: netlink: Flow key attr not present in new flow.
[  672.223771][ T9472] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  673.695280][ T9472] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  673.706282][ T9472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.721989][ T9472] usb 3-1: config 0 descriptor??
[  673.762536][ T9472] gspca_main: cpia1-2.14.0 probing 0813:0001
[  674.369756][T11615] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  674.377357][T11615] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  674.428824][T11615] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  674.439270][T11615] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  674.445662][T11615] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  674.456401][T11615] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  674.462589][T11615] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  674.474670][T11615] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  674.480851][T11615] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  674.491292][T11615] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  674.497531][T11615] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  674.508581][T11615] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  674.515065][T11615] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  674.529037][T11615] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  674.792311][ T9472] gspca_cpia1: usb_control_msg 03, error -32
[  674.798519][ T5881] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  674.816851][ T9472] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  675.020084][ T9472] gspca_cpia1: usb_control_msg 01, error -71
[  675.030628][ T9472] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[  675.049294][ T9472] usb 3-1: USB disconnect, device number 23
[  675.073724][ T5881] usb 2-1: Using ep0 maxpacket: 16
[  675.095032][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  675.113680][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  675.141302][ T5881] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  675.162068][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.204646][ T5881] usb 2-1: config 0 descriptor??
[  675.303975][    T8] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  675.466123][    T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  675.477983][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  675.493226][    T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  675.503772][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.511839][    T8] usb 4-1: Product: syz
[  675.533671][    T8] usb 4-1: Manufacturer: syz
[  675.538352][    T8] usb 4-1: SerialNumber: syz
[  675.644147][ T5881] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.000E/input/input60
[  675.762131][    T8] usb 4-1: 0:2 : does not exist
[  675.997276][T11635] lo speed is unknown, defaulting to 1000
[  676.573350][T10685] Bluetooth: hci2: command 0x0406 tx timeout
[  676.592851][ T5881] appleir 0003:05AC:8241.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0
[  676.650299][    T8] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  676.737451][    T8] usb 4-1: USB disconnect, device number 24
[  676.865869][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  676.872251][ T5838] Bluetooth: hci5: command 0x0406 tx timeout
[  676.878534][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  676.884964][ T5838] Bluetooth: hci3: command 0x0406 tx timeout
[  676.891121][ T5838] Bluetooth: hci0: command 0x0406 tx timeout
[  676.927336][T11644] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1115'.
[  677.001803][ T5881] usb 2-1: reset high-speed USB device number 24 using dummy_hcd
[  677.115706][T11649] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1114'.
[  677.124888][T11649] openvswitch: netlink: Flow key attr not present in new flow.
[  677.307968][T10419] udevd[10419]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  678.136186][    T9] usb 2-1: USB disconnect, device number 24
[  678.144267][    T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  678.869759][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  679.150941][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[  679.195719][T10685] Bluetooth: hci3: command 0x0406 tx timeout
[  679.209280][T10685] Bluetooth: hci4: command 0x0406 tx timeout
[  679.216575][T10685] Bluetooth: hci5: command 0x0406 tx timeout
[  679.223550][T10685] Bluetooth: hci1: command 0x0c1a tx timeout
[  679.397207][    T8] usb 3-1: Using ep0 maxpacket: 16
[  679.474213][T11668] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  679.481390][T11668] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  679.492262][T11668] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  679.500157][T11668] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  679.506893][T11668] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  680.034574][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  680.054266][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  680.068677][T11668] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  680.253750][    T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  680.314505][   T29] audit: type=1326 audit(1734734997.814:27): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=11675 comm="syz.3.1121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c8b785d29 code=0x0
[  680.343862][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.381460][    T8] usb 3-1: config 0 descriptor??
[  680.744093][ T5913] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  680.781076][T11686] input: syz0 as /devices/virtual/input/input61
[  680.787618][T11686] input: failed to attach handler leds to device input61, error: -6
[  680.961646][ T9529] libceph: connect (1)[c::]:6789 error -101
[  681.071302][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1121'.
[  681.381622][    T8] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000F/input/input62
[  681.443820][ T9529] libceph: mon0 (1)[c::]:6789 connect error
[  681.450537][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  681.483679][ T5913] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  681.515899][ T5913] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  681.566528][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.669913][ T5913] usb 2-1: config 0 descriptor??
[  681.706319][T11686] ceph: No mds server is up or the cluster is laggy
[  681.727158][ T9529] libceph: connect (1)[c::]:6789 error -101
[  681.746524][ T9529] libceph: mon0 (1)[c::]:6789 connect error
[  681.768003][    T8] appleir 0003:05AC:8241.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[  681.899308][    T8] usb 3-1: USB disconnect, device number 24
[  682.044355][T10685] Bluetooth: hci5: command 0x0406 tx timeout
[  682.053426][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  682.059791][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  682.059811][T11671] Bluetooth: hci0: command 0x0406 tx timeout
[  682.065923][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout
[  682.072183][T11671] Bluetooth: hci2: command 0x0406 tx timeout
[  682.092512][T11682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  682.142391][T11682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  682.214043][  T977] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  682.390060][    T9] usb 2-1: USB disconnect, device number 25
[  682.416374][  T977] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  682.453548][  T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.487969][  T977] usb 6-1: config 0 descriptor??
[  682.517495][  T977] gspca_main: cpia1-2.14.0 probing 0813:0001
[  682.910028][  T977] gspca_cpia1: usb_control_msg 03, error -32
[  682.937740][  T977] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  683.144833][  T977] gspca_cpia1: usb_control_msg 01, error -71
[  683.181125][  T977] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  683.214831][  T977] usb 6-1: USB disconnect, device number 9
[  684.086565][T11725] syz.1.1126 (11725): drop_caches: 2
[  684.123871][T11702] Bluetooth: hci1: command 0x0c1a tx timeout
[  684.540002][T11730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1127'.
[  684.868582][T11739] mkiss: ax0: crc mode is auto.
[  685.539327][  T977] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  685.610553][T11741] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  685.620438][T11741] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  685.755597][  T977] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  686.597442][  T977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  686.618788][T11702] Bluetooth: hci1: command 0x0c1a tx timeout
[  686.634986][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  686.652104][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  686.732978][  T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  686.790791][  T977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  686.824134][  T977] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  686.846784][  T977] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  686.887044][  T977] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  686.903671][  T977] usb 2-1: Product: syz
[  686.908745][  T977] usb 2-1: Manufacturer: syz
[  686.946259][  T977] cdc_wdm 2-1:1.0: skipping garbage
[  686.976397][  T977] cdc_wdm 2-1:1.0: skipping garbage
[  687.059709][  T977] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  687.078924][  T977] cdc_wdm 2-1:1.0: Unknown control protocol
[  687.310859][T11765] mkiss: ax0: crc mode is auto.
[  688.049354][ T5881] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  688.091505][  T977] usb 2-1: USB disconnect, device number 26
[  688.939083][ T5880] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  689.056977][T11762] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  689.066664][T11762] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  689.324725][T11768] mkiss: ax0: crc mode is auto.
[  689.358500][ T5881] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  689.370909][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.402242][ T5881] usb 7-1: config 0 descriptor??
[  689.431126][ T5881] gspca_main: cpia1-2.14.0 probing 0813:0001
[  689.445891][ T5880] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  689.457848][ T5880] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  689.469738][ T5880] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  689.632225][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  689.740735][ T5880] usb 6-1: SerialNumber: syz
[  690.441574][ T5880] usb 6-1: can't set config #1, error -71
[  690.453910][ T5881] gspca_cpia1: usb_control_msg 05, error -71
[  690.485666][ T5881] gspca_cpia1: usb_control_msg 01, error -71
[  690.491720][ T5881] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[  690.562120][ T5881] usb 7-1: USB disconnect, device number 33
[  690.655914][ T5880] usb 6-1: USB disconnect, device number 10
[  690.836579][T11782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1138'.
[  690.998232][T11787] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1137'.
[  691.007491][T11787] openvswitch: netlink: Flow key attr not present in new flow.
[  691.096895][T11674] list_del corruption, ffff88802fd99180->next is LIST_POISON1 (dead000000000100)
[  691.107938][T11674] ------------[ cut here ]------------
[  691.113511][T11674] kernel BUG at lib/list_debug.c:58!
[  691.125158][T11674] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  691.132133][T11674] CPU: 1 UID: 0 PID: 11674 Comm: kworker/u9:2 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0
[  691.142554][T11674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  691.152624][T11674] Workqueue: hci1 hci_conn_timeout
[  691.157785][T11674] RIP: 0010:__list_del_entry_valid_or_report+0xf4/0x140
[  691.164772][T11674] Code: e8 51 e8 3a fc 90 0f 0b 48 c7 c7 80 f0 5f 8c 4c 89 fe e8 3f e8 3a fc 90 0f 0b 48 c7 c7 e0 f0 5f 8c 4c 89 fe e8 2d e8 3a fc 90 <0f> 0b 48 c7 c7 40 f1 5f 8c 4c 89 fe e8 1b e8 3a fc 90 0f 0b 48 c7
[  691.184396][T11674] RSP: 0018:ffffc9000f99fa30 EFLAGS: 00010246
[  691.190475][T11674] RAX: 000000000000004e RBX: dead000000000122 RCX: 0b95e7d5e29ef600
[  691.198459][T11674] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  691.206435][T11674] RBP: ffff88802fd991a0 R08: ffffffff819ee65c R09: 1ffff92001f33ee0
[  691.214413][T11674] R10: dffffc0000000000 R11: fffff52001f33ee1 R12: dffffc0000000000
[  691.222402][T11674] R13: ffff88802fd99180 R14: dead000000000100 R15: ffff88802fd99180
[  691.230380][T11674] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  691.239305][T11674] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  691.245883][T11674] CR2: 000000002002f000 CR3: 000000003083e000 CR4: 00000000003526f0
[  691.253853][T11674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  691.261829][T11674] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  691.269808][T11674] Call Trace:
[  691.273084][T11674]  <TASK>
[  691.276008][T11674]  ? __die_body+0x5f/0xb0
[  691.280337][T11674]  ? die+0x9e/0xc0
[  691.284057][T11674]  ? do_trap+0x15a/0x3a0
[  691.288291][T11674]  ? __list_del_entry_valid_or_report+0xf4/0x140
[  691.294616][T11674]  ? do_error_trap+0x1dc/0x2c0
[  691.299382][T11674]  ? __list_del_entry_valid_or_report+0xf4/0x140
[  691.305708][T11674]  ? __pfx_do_error_trap+0x10/0x10
[  691.310819][T11674]  ? handle_invalid_op+0x34/0x40
[  691.315749][T11674]  ? __list_del_entry_valid_or_report+0xf4/0x140
[  691.322077][T11674]  ? exc_invalid_op+0x38/0x50
[  691.326747][T11674]  ? asm_exc_invalid_op+0x1a/0x20
[  691.331795][T11674]  ? __wake_up_klogd+0xcc/0x110
[  691.336646][T11674]  ? __list_del_entry_valid_or_report+0xf4/0x140
[  691.342972][T11674]  hci_cmd_sync_dequeue_once+0x262/0x360
[  691.348605][T11674]  hci_cancel_connect_sync+0xc3/0x120
[  691.353980][T11674]  hci_abort_conn+0x194/0x330
[  691.358658][T11674]  ? process_scheduled_works+0x976/0x1840
[  691.364373][T11674]  process_scheduled_works+0xa66/0x1840
[  691.369927][T11674]  ? __pfx_process_scheduled_works+0x10/0x10
[  691.375908][T11674]  ? assign_work+0x364/0x3d0
[  691.380493][T11674]  worker_thread+0x870/0xd30
[  691.385082][T11674]  ? __kthread_parkme+0x169/0x1d0
[  691.390100][T11674]  ? __pfx_worker_thread+0x10/0x10
[  691.395205][T11674]  kthread+0x7a9/0x920
[  691.399267][T11674]  ? __pfx_worker_thread+0x10/0x10
[  691.404369][T11674]  ? __pfx_kthread+0x10/0x10
[  691.408952][T11674]  ? __pfx_kthread+0x10/0x10
[  691.413533][T11674]  ? preempt_schedule_thunk+0x1a/0x30
[  691.418901][T11674]  ? __pfx_kthread+0x10/0x10
[  691.423486][T11674]  ret_from_fork+0x4b/0x80
[  691.427898][T11674]  ? __pfx_kthread+0x10/0x10
[  691.432481][T11674]  ret_from_fork_asm+0x1a/0x30
[  691.437242][T11674]  </TASK>
[  691.440250][T11674] Modules linked in:
[  691.445645][T11674] ---[ end trace 0000000000000000 ]---
[  691.575887][T11674] RIP: 0010:__list_del_entry_valid_or_report+0xf4/0x140
[  691.583084][T11674] Code: e8 51 e8 3a fc 90 0f 0b 48 c7 c7 80 f0 5f 8c 4c 89 fe e8 3f e8 3a fc 90 0f 0b 48 c7 c7 e0 f0 5f 8c 4c 89 fe e8 2d e8 3a fc 90 <0f> 0b 48 c7 c7 40 f1 5f 8c 4c 89 fe e8 1b e8 3a fc 90 0f 0b 48 c7
[  692.093867][T11674] RSP: 0018:ffffc9000f99fa30 EFLAGS: 00010246
[  692.101451][T11674] RAX: 000000000000004e RBX: dead000000000122 RCX: 0b95e7d5e29ef600
[  692.110295][T11674] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  692.119288][T11674] RBP: ffff88802fd991a0 R08: ffffffff819ee65c R09: 1ffff92001f33ee0
[  692.128066][T11674] R10: dffffc0000000000 R11: fffff52001f33ee1 R12: dffffc0000000000
[  692.136295][T11674] R13: ffff88802fd99180 R14: dead000000000100 R15: ffff88802fd99180
[  692.144390][T11674] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  692.153426][T11674] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  692.166235][T11674] CR2: 0000001b3090bff8 CR3: 000000002a55e000 CR4: 00000000003526f0
[  692.181439][T11674] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  692.191195][T11674] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  692.274974][T11674] Kernel panic - not syncing: Fatal exception
[  692.281345][T11674] Kernel Offset: disabled
[  692.285677][T11674] Rebooting in 86400 seconds..