last executing test programs:

41m11.238108982s ago: executing program 32 (id=112):
setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000000), 0x1, 0x50a, &(0x7f0000000280)="$eJzs3M9vVNUeAPDvnXZoC49HH49HQh/vvQLP2JjYQkFh4QYTExeaGHEhy6YdSGUAQ7sQ0siQGFyTuDcujTtN3OrSuPIPwIULE0NClA1gYjLmztw7nc6PzrTW1rafTzJwzp17z7nfuefMnHtP7w1g1xpP/0ki/hYR9yPiQD27coXx+n9PHi3NPn20NBuVavXCz0ltvcdpPpNvty/LTBQiCh8kLQXWLdy8dWWmXC7diEotP7V49d2phZu3np+/OnO5dLl0bfrcuTOnT519cfqFFWVHxHDPoDrUl8b1eOz960ePvHrx3uuzg62FNcfRVb7VL5Weq0b+2XbxTHN5O8D+pnTSHtftTd0Z+jacNcNi2v+XyscvbvUOAZumWq1Wh7q/Xam2utO2BNi2ktjqPQC2Rv5Dn57/5q/6kuJmDD+23MPz9ROgx4+WqrdjcPZJI/7BKGTrFFvOb1OrjJnWZDwi3q78+nH6itWuQ/ywQRUCALve1+ezYWASLeO/QhxuWu/v2RzKaET8IyIORsQ/I+JQRPwrYsW6KyQR1VXqP9S6oFH/F9ksQuHBemPrRzr+eymb28pfWb35KqMDWW5/RD5gLp3MPpOJKA5dmi+XTnUpf0+P+pvHf+krrT8fC2b78WCwZbA5N7M4s75o2z28EzE22Bp/MpgeuHwaJ4mIIxExtoZyR5vS8899erSRaTmt6B1/TbXDlN6GzJ9VP4l4tn78K9GIf2TFJGLSPD9ZaJufnBqOcunkVNoKTnbcyW+/u/tGt/p7xv/lj62bvHL2qwt/PPBMevz3NrX/yOdvl+MfTSKSxnztQkR1YG113P3+w1q54yfa31tv+9+TvFVL5/3rvZnFxRunIvYkr7Uvn17eNs/n66fxT5zo3P8PZtukn8S/IyJtxP+JiP9GDOT7fiwijkdEh9Aavnn5/+90e6/P9v+nSeOf6/j9l2TtoHb8l+fr+0zk5adLBq4cu/90rPPEfRb/gdWP/5laaiJb0vn7L1nxFdHvnm7ARwgAAAB/eYWo/e1/YbKRLhQmJ+vXgA7F3kL5+sLi/yLi2lz9HoHRKBYuzZdL+QW50Sgm+fXP0ab8dEv+dHbd+KOBkVp+cvZ6eW6rg4ddbl+tzydt/T/10xqv8wLb0A66Dw1Yo179//C9TdoRYNP5/Yfdq6n/d3uyRcVfysDO5Pcfdq9O/f92fLbqvQu+M2D7q+rLsKut3v97P28T2L4G481Gunbbc8e7bYGdqPvvvzMD2MF63yQ/tOZ7/5cT1aHObw1HhycGDK+rip6JkQ51bUkiHVltYIHFiOhv5ZH1VJEPAbs/4aGwtgKHov2tgVhtq6TzcxwiotJ1q/RT6bk/lw/32/hLN5Kn9Qdl9ggwfybKRjebz5f7abHPw90l8Vu/zc/5PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsKP8HgAA//87jdA6")
keyctl$clear(0x3, 0xfffffffffffffffd)
request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='usrquota', 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

39m34.834544711s ago: executing program 4 (id=253):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x8, @empty, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)}}], 0x2, 0x8000)
syz_emit_ethernet(0x46, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b80)="93", 0x1}], 0x1}}], 0x1, 0x40)

39m34.638153836s ago: executing program 4 (id=255):
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x3, &(0x7f0000000240)=0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r3, &(0x7f0000001f00)=""/102392, 0x18ff8)
openat$nullb(0xffffffffffffff9c, 0x0, 0x686200, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0xc2900, 0x0)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
pwritev(r4, &(0x7f0000000040), 0x0, 0x0, 0x0)

39m31.764522757s ago: executing program 4 (id=257):
syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x2)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5694, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe27, 0x0, 0x0, 0x1000, 0x10004, 0xffffffffffffffff, 0x0, 0x14b}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)

39m25.52170605s ago: executing program 4 (id=266):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfff2)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000180)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f00000009c0)="$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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x1, &(0x7f0000000500)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
chown(&(0x7f0000001700)='./file0\x00', 0x0, 0x0)

39m25.173969749s ago: executing program 1 (id=268):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000480)={0x1, 0x0, @ioapic={0x483e7698b75afbc8, 0x89, 0x0, 0x8, 0x0, [{0x1, 0xc, 0x81, '\x00', 0x7}, {0xf, 0x6, 0x4}, {0x8, 0xfd, 0x8, '\x00', 0x9}, {0xa, 0x1, 0xa, '\x00', 0x4}, {0x5, 0xa7, 0x4e, '\x00', 0x5}, {0x7, 0x9, 0xea, '\x00', 0x4}, {0x7, 0x3, 0x9, '\x00', 0x9}, {0x2, 0x5, 0x1}, {0x0, 0x7, 0x0, '\x00', 0x3}, {0x9, 0xe, 0xf8, '\x00', 0x1}, {0x1, 0xb, 0x6, '\x00', 0x1}, {0x6, 0x4, 0xf4, '\x00', 0xea}, {0x2, 0x8, 0x9, '\x00', 0xf8}, {0x0, 0x1, 0xfe, '\x00', 0x7}, {0x5, 0x81, 0x3}, {0x1f, 0x2, 0xc, '\x00', 0x5e}, {0x0, 0x2, 0x5, '\x00', 0x9}, {0x1, 0x8, 0xe, '\x00', 0x2}, {0x7, 0x5, 0x2}, {0xc0, 0x3, 0x79, '\x00', 0x6}, {0x4, 0x80, 0x8, '\x00', 0x4}, {0x7, 0x9, 0x7f, '\x00', 0x7}, {0x4, 0x7, 0x6, '\x00', 0x2}, {0x7, 0x2, 0x7, '\x00', 0x96}]}})

39m24.877924466s ago: executing program 4 (id=269):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
rt_tgsigqueueinfo(r2, r2, 0x12, &(0x7f0000000440)={0x1e, 0x1, 0x4})
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x4000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xeed7e89f6334d838})
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0})
unshare(0x26020480)
flock(0xffffffffffffffff, 0x1)
open(0x0, 0x0, 0x0)

39m24.71708999s ago: executing program 1 (id=270):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000f40)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000f80)="4c00000011002914000d0002", 0xc)

39m23.46545617s ago: executing program 1 (id=271):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10e, &(0x7f0000000280), 0x3, 0x464, &(0x7f0000000440)="$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")
r0 = open(0x0, 0x24c42, 0x80)
write$P9_RUNLINKAT(r0, 0x0, 0x0)

39m23.272965095s ago: executing program 4 (id=273):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000019280))
ioperm(0x2000000000005, 0x8007, 0x1040000000005)
read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8)
syz_emit_ethernet(0x36, 0x0, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000019180)=0x6)
ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000019240)={&(0x7f00000191c0)="6c96f262701ffe053c5a2eb54af4e7fad02bea4f263d41fecb6e4235c75f3b778bd63f2716b644cafa12b214a4c2251dd381f34e24971fe6efdb5d595a7f63fcbdd8f826b59825f0b063dc7f7159e57af396387faaffce", 0x57})
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000192c0)={0x0, 0x0, &(0x7f0000019300)={&(0x7f0000019400)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r7, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019500)={&(0x7f0000019540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050)
connect$phonet_pipe(r4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
r8 = syz_open_dev$video(&(0x7f0000019380), 0x41ef, 0x48a03)
ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f00000193c0)={0x3, 0xd, 0x80, "6a4528d4fbb6fd0c308187d85b0ed7d04da9b600", 0x50313134})

39m22.864989936s ago: executing program 1 (id=275):
syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x2)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x5694, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe27, 0x0, 0x0, 0x1000, 0x10004, 0xffffffffffffffff, 0x0, 0x14b}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4000, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x4, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)

39m20.22607112s ago: executing program 1 (id=281):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
rt_tgsigqueueinfo(r2, r2, 0x12, &(0x7f0000000440)={0x1e, 0x1, 0x4})
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x4000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xeed7e89f6334d838})
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0})
unshare(0x26020480)
flock(0xffffffffffffffff, 0x1)
open(0x0, 0x0, 0x0)

39m18.857679844s ago: executing program 1 (id=284):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x150)
write(r0, &(0x7f0000000200)='27', 0x2)
openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})

39m8.287425703s ago: executing program 33 (id=273):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000019280))
ioperm(0x2000000000005, 0x8007, 0x1040000000005)
read$msr(r3, &(0x7f0000000180)=""/102392, 0x18ff8)
syz_emit_ethernet(0x36, 0x0, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000019180)=0x6)
ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000019240)={&(0x7f00000191c0)="6c96f262701ffe053c5a2eb54af4e7fad02bea4f263d41fecb6e4235c75f3b778bd63f2716b644cafa12b214a4c2251dd381f34e24971fe6efdb5d595a7f63fcbdd8f826b59825f0b063dc7f7159e57af396387faaffce", 0x57})
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000192c0)={0x0, 0x0, &(0x7f0000019300)={&(0x7f0000019400)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
sendmsg$nl_route_sched(r7, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019500)={&(0x7f0000019540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0x2, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050)
connect$phonet_pipe(r4, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
r8 = syz_open_dev$video(&(0x7f0000019380), 0x41ef, 0x48a03)
ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f00000193c0)={0x3, 0xd, 0x80, "6a4528d4fbb6fd0c308187d85b0ed7d04da9b600", 0x50313134})

39m2.982001834s ago: executing program 34 (id=284):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x150)
write(r0, &(0x7f0000000200)='27', 0x2)
openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})

35m45.944702105s ago: executing program 5 (id=620):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x8020, 0x0)
sendmsg$802154_dgram(r0, &(0x7f00000002c0)={&(0x7f0000000300), 0x14, &(0x7f00000003c0)={0x0}}, 0x0)

35m39.393271476s ago: executing program 5 (id=630):
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x1, 0xc1})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

35m39.21296398s ago: executing program 5 (id=632):
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r3 = socket(0x23, 0x80805, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000000400)=""/102392, 0x18ff8)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000019500)={0x0, 0x6}, 0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={<r7=>0x0, 0x2}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp_SCTP_INTERLEAVING_SUPPORTED(r5, 0x84, 0x7d, &(0x7f0000000180)={r7, 0x9}, 0xfffffeb9)
semctl$SETVAL(0x0, 0xff7f0000, 0x10, 0x0)

35m37.482079973s ago: executing program 5 (id=633):
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000001d00)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001d40)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000001d80)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001dc0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000001e00), 0x0, 0x0)
read$msr(r4, &(0x7f0000002240)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f000001b240)={0xc, 0xd, &(0x7f000001b300)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

35m31.172867168s ago: executing program 5 (id=644):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
rt_tgsigqueueinfo(r2, r2, 0x12, &(0x7f0000000440)={0x1e, 0x1, 0x4})
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x4000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000001000/0x1000)=nil)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xeed7e89f6334d838})
r6 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0})
unshare(0x26020480)
flock(0xffffffffffffffff, 0x1)
open(0x0, 0x0, 0x0)

35m22.664372597s ago: executing program 5 (id=656):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000540), 0x40800, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYRESOCT])
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0)
read$msr(r1, &(0x7f0000001140)=""/102392, 0x18ff8)

35m7.005106012s ago: executing program 35 (id=656):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000540), 0x40800, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000180)=ANY=[@ANYRESOCT])
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8a}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0)
read$msr(r1, &(0x7f0000001140)=""/102392, 0x18ff8)

25m58.973733028s ago: executing program 3 (id=1492):
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000001d00)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001d40)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000001d80)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001dc0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000001e00), 0x0, 0x0)
read$msr(r4, &(0x7f0000002240)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f000001b240)={0xc, 0xd, &(0x7f000001b300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

25m57.180265232s ago: executing program 3 (id=1493):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000004240)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x47, &(0x7f000001d240)=0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000020000ade308000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f000001d380)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
prlimit64(0x0, 0xe, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0xfbfffffb, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000100)={0x2, 0x1, 0x80, "36c8bda1fae21125d30f0fb69f422db318bba2df3538f97e5e17f40287a75779", 0x55595659})

25m51.846090005s ago: executing program 3 (id=1496):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r4, &(0x7f00000001c0)=""/102392, 0x18ff8)
syz_emit_ethernet(0x0, 0x0, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f00000191c0)=0x40003)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000019240), 0x129202, 0x0)
ppoll(&(0x7f0000019400)=[{r5, 0x4000}, {0xffffffffffffffff, 0xa282}, {r4, 0x9627}, {r5, 0x80}, {r0, 0x1302}], 0x5, 0x0, 0x0, 0x0)

25m48.127134687s ago: executing program 3 (id=1498):
syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="050000006fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="9051ca6e9be95132dc27788fb65b7c8c5292366b36ad10cb7703479fc14eaad152e20ac346e9802e8b1ac8ae47addb058fe698ba3eddb4fef6c10267aeb797abd72dc85c52525f25df2a24d9be61fb56e12761ed3eca7d8ecd65f3fad66194e6906b2b933f460f0c8f6f43d1245bd80180", @ANYBLOB="5f9c36fa3b65193646fd9835c7d87c180bed25c821c5bce901fb63a3241bb1a27f9e7c33f450f8b8b454ea6765554f1fc79bcd4b63529dc5690c97f9bf9e1e90fa931d3a64f1b800000034ab4e4ea247d309cddb93373add7a92f0aa2408a97f780a372e98868a8bb2c9b8d2ba8c04a1ef8970a0b770473b97e0becb361381429b92d594d0373cfb70a5fdd780220c251107aba11d6f8a44c8810c007804e92398b45c96661c438dbcea15d3a6c4c750233608ffba88e1abea1e0d72eb3279645a70a09c", @ANYRES32=0x0], 0x1, 0x71f, &(0x7f0000000380)="$eJzs3UtsHGcdAPD/rNfrXSOlTptHQZVqNVJBWCR2LAfMhYAQ8qFCVTlwxUqcxsrGqWwXOREiboE7B06cysG3igMq90hwpqqEevWBQyWkXsrF4mI0szP78D4dP1t+v2h2vvne8995eHcVTQD/t5ZmovwskliaeWMr3d7dma+P7cxP5MX1iKhERCmi3FhFshZZ6e18ia+nmXn9pM8wSawuvvXpF7ufNTbL+ZLVTwa066XSnbWdLzEdEWP5utt4nx4/Ojh8R393+vY3qtYepgG7VgQu/nikXuHI9rtsN8s+/Gf2Oqj5Yc5b4PxJb+rpiTzW63yeipiMiGpE466/Hbeabb7Mts96AgAAAHBYtR555cFNXtiLvdiKCyc1JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgqanv+f5I/3z9LT0dSPP+/ktVoqJzpZPvq9SDETp9MNNbPTn4yAAAAAAAAAHDiXt2LvdiKC8X2fpL95v9a/rt/6mvxbmzESqzH9diK5diMzViPuYiYauuosrW8ubk+l7WMuDSg5c34uEfLm/3nePuY9xkAAAAAAAAAzrnqkPIH491578dS6/d/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D5KIscYqWy4V6akolSOiWtTbjvg4IipnO9tDSXplPjv9eQAAAMCRVDs3k+oIbV54GnuxFReK7f0k+8x/Jfu8XI13Yy02YzU2ox4rcTf/DJ1+6i/t7szXd3fmH6ZLd78//PxQU896jMZ3D71HfjmrUYt7sZrlXI87kcR+ppT38vLuzny6fth7Xu+lc0p+kBswm7G29N305epHWfr3nd8ilA+1i8+p1LdkKisdj3vZlzArMZvPLW1xsYhA70gMfXeKXdvuHCmP/VyUmt/8XGofpTsiHTHff1rkDhz8vckDtXp+c3MmDkbiZpSa79CVwTGP+OZfP/z5/frag/v3NmbOzy719HRojYORmG+LxNWvUCSGm80icbm5vRQ/iZ/FTHw+8Wasx2r8MpZjM1ami/Ll/HhOX6cGR+qTyfatN0edUeP61WtO09Exp5iOH2ep5Xgte08vxGok8Si7ntzK/t2MuebVoPUOXx487+ysL41wpY29/zQu4RHXvpVlNMMUtf6t/jxqJI5Heq272BbX1lE/m50HF/Ocf72fHg2tKL3YM0rFvW70+1Gb8jfyRNrDbwbeH05beySKu0Qxu5f6HS+NkP5pP33dqK89WL+//M6I472er9Pz6Hfdd4m+h8/JRyx9h1+Mar5zF7PXJL9Hp2UvNe+wnfGq5L+4FPM8WHa52a5xpv40HsXdjjP1u7EQC7GY1b6S1R7vumOlZVebPXVew9Oy9C+tcvOHnfa/tx5FvfH3EADn2+S3Jyu1f9f+Ufug9tva/dob1R9NfG/ilUqM/338++XZsddLryR/iQ/i163P/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPPbePzkwXK9vrLeO1HqXZQMbrVcbz7xbUCdjkSSPypnhMrJxuMn+0M7HJyYyKd3iFal0SJ26ETxtMa2orGI6FF5+vgG7Ur8t/E4rv1WTnX4nhYhGWGIpCvgaePnnnMxcitnfGir/fGeUT3BxPQRmpc7c4oDtq3OoY7eLFHr9X71OdjqQy4cY8dw8QHO1I3Nh+/c2Hj85DurD5ffXnl7ZW18YWFxdnHh1vyNe6v1ldnGa1uDU3n4LXAa2v+caKpExKvD2w54UCsAAAAAAAAAAABwgk7j/0J0jviLs9pVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EtqaSbKzyKJudnrs+n27s58PV2KdKtmOSJKEZH8KiL5W8TtaCwx1dZd0m+cP6wuvvXpF7uftfoqF/VLEdt9241mO19iOiLG8vVx9XdneH+VVnKiR3HSjEwasGtF4KpHmyQc2f8CAAD//xAj9VU=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$P9_RVERSION(r0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r4, &(0x7f0000000ec0)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019ec0)=0x7)
r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00')
pread64(r5, &(0x7f0000019f40)=""/102356, 0x18fd4, 0xac)

25m42.924781536s ago: executing program 3 (id=1505):
syz_mount_image$xfs(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f00000001c0), 0x1, 0x9798, &(0x7f0000001380)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v")
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f000000ac40)='./file0\x00', 0x2000056f)
r1 = open(&(0x7f000000ab40)='.\x00', 0x80000, 0x103)
getdents(r1, 0x0, 0x0)

25m40.465054907s ago: executing program 3 (id=1508):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
sendmsg$IPVS_CMD_NEW_DEST(r4, 0x0, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000300)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1)
ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000780)={0x20, "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"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000a00)=@IORING_OP_SEND={0x1a, 0x60, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}})
io_uring_enter(r5, 0x1, 0x1, 0x5, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

25m38.158153254s ago: executing program 36 (id=1508):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
sendmsg$IPVS_CMD_NEW_DEST(r4, 0x0, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000300)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1)
ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000780)={0x20, "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"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000a00)=@IORING_OP_SEND={0x1a, 0x60, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}})
io_uring_enter(r5, 0x1, 0x1, 0x5, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

24m29.43374898s ago: executing program 7 (id=1576):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd='])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

24m27.496399888s ago: executing program 7 (id=1579):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0802, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @random="2b0436d23321"})
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES8=r0], 0xfdef)

24m24.59799091s ago: executing program 7 (id=1583):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000004240)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x47, &(0x7f000001d240)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000020000ade308000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50)

24m21.028690738s ago: executing program 7 (id=1586):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0xffff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000680)=""/138, 0x0)

24m18.697058126s ago: executing program 7 (id=1588):
mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001cc0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000001d00)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001d40)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000001d80)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001dc0)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000001e00), 0x0, 0x0)
read$msr(r4, &(0x7f0000002240)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f000001b240)={0xc, 0xd, &(0x7f000001b300)=ANY=[@ANYBLOB="18000000000000000000000000000000181500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

24m15.788367728s ago: executing program 7 (id=1590):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000193c0)="b56dcd3292ead749402288086b8d47bdf2d59a220270bdd2e2", 0x19)
r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r1, &(0x7f00000001c0)=""/102392, 0x18ff8)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000019240), 0x129202, 0x0)
ppoll(&(0x7f0000019400)=[{r2, 0x4000}, {0xffffffffffffffff, 0xa282}, {r1, 0x1108}, {r2, 0x80}, {r0, 0x1302}], 0x5, 0x0, 0x0, 0x0)

24m0.106687618s ago: executing program 37 (id=1590):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000193c0)="b56dcd3292ead749402288086b8d47bdf2d59a220270bdd2e2", 0x19)
r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r1, &(0x7f00000001c0)=""/102392, 0x18ff8)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000019240), 0x129202, 0x0)
ppoll(&(0x7f0000019400)=[{r2, 0x4000}, {0xffffffffffffffff, 0xa282}, {r1, 0x1108}, {r2, 0x80}, {r0, 0x1302}], 0x5, 0x0, 0x0, 0x0)

22m47.260105365s ago: executing program 9 (id=1681):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

22m46.566125812s ago: executing program 9 (id=1683):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000540)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000580)={@host, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000005c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})

22m45.799107091s ago: executing program 9 (id=1684):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x802200, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000480)=0x91b)
read$dsp(r1, &(0x7f00000005c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000015c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

22m42.177189601s ago: executing program 9 (id=1689):
syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0xc, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0, @ANYBLOB="050000006fe9bab3f0ab797f1eec2c308c47ccf9510a98013053ad64c2a1184e15", @ANYRES64=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="9051ca6e9be95132dc27788fb65b7c8c5292366b36ad10cb7703479fc14eaad152e20ac346e9802e8b1ac8ae47addb058fe698ba3eddb4fef6c10267aeb797abd72dc85c52525f25df2a24d9be61fb56e12761ed3eca7d8ecd65f3fad66194e6906b2b933f460f0c8f6f43d1245bd80180", @ANYBLOB="5f9c36fa3b65193646fd9835c7d87c180bed25c821c5bce901fb63a3241bb1a27f9e7c33f450f8b8b454ea6765554f1fc79bcd4b63529dc5690c97f9bf9e1e90fa931d3a64f1b800000034ab4e4ea247d309cddb93373add7a92f0aa2408a97f780a372e98868a8bb2c9b8d2ba8c04a1ef8970a0b770473b97e0becb361381429b92d594d0373cfb70a5fdd780220c251107aba11d6f8a44c8810c007804e92398b45c96661c438dbcea15d3a6c4c750233608ffba88e1abea1e0d72eb3279645a70a09c", @ANYRES32=0x0], 0x1, 0x71f, &(0x7f0000000380)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$P9_RVERSION(r0, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r4, &(0x7f0000000ec0)=""/102392, 0x18ff8)
sched_setaffinity(r3, 0x47, &(0x7f0000019ec0)=0x7)
r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00')
pread64(r5, &(0x7f0000019f40)=""/102356, 0x18fd4, 0xac)

22m40.085700113s ago: executing program 9 (id=1691):
socket$nl_route(0x10, 0x3, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x5244, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000400))
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040))
mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,')
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='cdg', 0x3)
sendmmsg$inet(r2, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="0ca5ac161ae2541e0ff5602427566e18598aec611c87996d108995edde93cac9842fbb23ace316d4ada7a614ef3590992b6dc78a0bac56d4e4ce20b98febcbdcf1bc280e96f6e195c8f13779742bd1355d09a4258efb8d3b6b0eb4e4f0efd1d6d73c0cd4d970d9c1ff6eb7bab6ba", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)='R', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)='\b', 0x1}], 0x1}}], 0x3, 0x4000001)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x4)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x48050)

22m36.420945874s ago: executing program 9 (id=1695):
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000004240)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f000001d240)=0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000020000ade308000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f000001d380)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xfbfffffb, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x2, 0x1, 0x80, "36c8bda1fae21125d30f0fb69f422db318bba2df3538f97e5e17f40287a75779", 0x55595659})

22m34.533515661s ago: executing program 38 (id=1695):
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000004240)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f000001d240)=0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000020000ade308000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f000001d380)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
prlimit64(0x0, 0xe, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0xfbfffffb, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x2, 0x1, 0x80, "36c8bda1fae21125d30f0fb69f422db318bba2df3538f97e5e17f40287a75779", 0x55595659})

1m59.001588284s ago: executing program 0 (id=3997):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000280)}, 0x1}], 0x3, 0x100, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85)
mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38, 0x65]}}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r6, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20)

1m56.660419571s ago: executing program 0 (id=4006):
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000280)}, 0x1}], 0x3, 0x100, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85)
mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38, 0x65]}}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r6, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20)

1m52.779893636s ago: executing program 0 (id=4014):
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd})
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000)
recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000280)}, 0x1}], 0x3, 0x100, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85)
mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x38, 0x65]}}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r6, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20)

1m49.887882747s ago: executing program 0 (id=4010):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x49, 0x20008000)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000280)}, 0x1}], 0x3, 0x100, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x403}, 0x50)
r4 = syz_open_dev$sg(0x0, 0x6f5e, 0x2)
ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r5, &(0x7f0000000600), &(0x7f0000000840)=""/8}, 0x20)

1m48.428962892s ago: executing program 0 (id=4011):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000004240)=""/102392, 0x18ff8)
socket$vsock_stream(0x28, 0x1, 0x0)
io_setup(0x9, &(0x7f0000000000))

1m38.946581195s ago: executing program 0 (id=4023):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4009}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe0}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
ioctl(r0, 0x8914, &(0x7f0000000240)="7573623000000000000000000000000003")

1m23.64760208s ago: executing program 39 (id=4023):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4009}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xe0}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
ioctl(r0, 0x8914, &(0x7f0000000240)="7573623000000000000000000000000003")

16.839886927s ago: executing program 8 (id=4094):
mkdir(&(0x7f0000000600)='./bus\x00', 0x49)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x100)
mount$overlay(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x8, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f00000007c0), 0x100c010, &(0x7f0000000800)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]})

14.478267855s ago: executing program 2 (id=4096):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000200), 0x651, 0x0)
recvmmsg(r0, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6)
alarm(0x670)
alarm(0x0)

14.056543795s ago: executing program 6 (id=4097):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12.399259506s ago: executing program 8 (id=4098):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ef17476000000000000109022400010000a00209040005020300840009210000400122180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x0)

10.880069263s ago: executing program 2 (id=4099):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000340)={0x0, 0x8124, 0x400, 0x2, 0x4040086c}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_CQ_RING(0x0, 0x5, 0x1000001, 0x13, r1, 0x8000000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x20, 0x0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
read$msr(r5, &(0x7f0000000f80)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x2, &(0x7f0000019f80)=0x80000000000003)
timer_create(0x0, 0x0, 0x0)

10.61502507s ago: executing program 6 (id=4100):
r0 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

7.929945636s ago: executing program 2 (id=4101):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
eventfd2(0x2000003, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0)
ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f0000000400)={[{0x10000, 0x6, 0x0, 0x1, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0xff, 0x0, 0x10, 0x5}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]})

7.601639844s ago: executing program 8 (id=4102):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000001080)={0x0, 0x0, @ioapic={0x3ff8, 0x4, 0x4, 0xb, 0x0, [{0xb, 0x90, 0x8, '\x00', 0xd2}, {0x0, 0x52, 0xec, '\x00', 0x6}, {0x7, 0xb8, 0x6, '\x00', 0x3}, {0x6, 0x6, 0x3, '\x00', 0x8a}, {0xe1, 0xa2, 0x9, '\x00', 0xe}, {0xc, 0x9, 0xba, '\x00', 0x1}, {0x9, 0x0, 0x9, '\x00', 0x4}, {0x1, 0x3, 0x9, '\x00', 0x4}, {0x0, 0x5, 0xc9, '\x00', 0x4}, {0x1e, 0x0, 0x2, '\x00', 0x1}, {0x8, 0x6e, 0x3, '\x00', 0x6}, {0x4, 0x5, 0x81, '\x00', 0x5}, {0xff, 0x5, 0x61, '\x00', 0x1}, {0x4, 0x0, 0xed, '\x00', 0x1}, {0x1, 0xcc, 0x1, '\x00', 0x63}, {0x7, 0x2, 0x3, '\x00', 0x9}, {0x26, 0x3, 0xc8, '\x00', 0xb}, {0xe, 0x8, 0x7, '\x00', 0x1}, {0x4, 0x4, 0x2}, {0x1, 0x0, 0x8, '\x00', 0x8}, {0x6, 0xb, 0x8, '\x00', 0x6}, {0x8, 0x4, 0x7, '\x00', 0x90}, {0xa, 0x9, 0x7, '\x00', 0xc9}, {0x7, 0x6, 0x6, '\x00', 0x3}]}})

4.384092023s ago: executing program 2 (id=4103):
r0 = syz_io_uring_setup(0x315b, &(0x7f00000008c0)={0x0, 0xc7ca, 0x40, 0x0, 0x1c1}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x7ffffffe)
bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)=""/228, 0xe4}], 0x1, &(0x7f0000000780)=""/21, 0x15}, 0xfffffff9}], 0x1, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000800)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x0, 0x2}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000880)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x10)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0xff21, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "e94641e5"}, @global=@item_012={0x1, 0x1, 0x9, "e0"}]}}, 0x0}, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x68, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0x5, 0x40, 0x2, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xa190, 0xe193, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x2653, 0x2a}, @dmm={0x7, 0x24, 0x14, 0x0, 0xfa6c}, @obex={0x5, 0x24, 0x15, 0xa4a}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xbb, 0xc0}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xd3, 0x0, 0x21}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x1, 0xf}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0x37, 0x8, 0x20}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "b8d0e4006ddf0cde29bca90324a5c0f8"}]}, 0x2, [{0xa8, &(0x7f0000000540)=@string={0xa8, 0x3, "a7ffebfe1354481a1e206e4bed7884f519dcb9c5497a7d26366b240405ead92a8af26db4a57e667f289255528a3fce4f226d0da61090f9906ea02e64b120eec581704d587b00a937e2e42a6cb3f481e87d2c5cfb8c2b856d9930df69e70a13ecee5ad5811084ecdacc9894f0ae6cb2105392a11a1a5daa9564b3bb5469616ffa2d625e9db4656433c78380a87f5378f008a520249d2c8e33f65baf280a13a5f534c600945a25"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x3409}}]})

4.383907533s ago: executing program 8 (id=4104):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

4.332071384s ago: executing program 6 (id=4105):
mkdir(&(0x7f0000000600)='./bus\x00', 0x49)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x100)
mount$overlay(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x8, &(0x7f0000000740)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f00000007c0), 0x100c010, &(0x7f0000000800)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]})

4.128493789s ago: executing program 8 (id=4106):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f0000002340)="$eJzs3U+IVVUcB/Dz5o8zKcw8QcighS3chhQtVIYeYZCL9KUQtDAnF0EIMtguwWxEEIwaCaSsQAuG3MgDIUGYEBe1CTRJEFqY4KaVQrtaFO/de968d67vvueojennEzP3nvu759zzHncx35fnvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhDVv194vq09tvHJh4eyWg7MHGsdvzh89EkKldbyS13e/8tqOd3fufn08dph+I9tWq72GzLr+njVWdB1s9uv+eSeEMJoMMJxvXx0ujNq5u784YKlrx/adnj25fdPCmvVTl3bNnyu+dJrGl3sCyyW/r24t3ku11u+h5Ix2u+PWq3Tdoln/9Ib7T14EAHBPNtRbm/afo/mfuO32obSetGtJey5px78Q5jobS5GNu6LXPNel9WWaZy2LCmM955nU8/e/3a6n/ZN2EjXuYZ7dp+aRZrzXPGeS+nLNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRcqb2wday+tTGKxcWzm45OHugcfzm/NEjIVRbxytZufL07RMjY9e3/fDRja9PvrT66t/Deb+4Hek4OVyPOxsnQ9jTUbkVh/1jIoR6d6HVDF8UC++1drbGAgAAAI+TZ1q/h9rtLA6OdrUrrTRZaf0XZWHx2rF9p2dPbt+0sGb91KVd8+eWPl69x3i1u47XblcXfyodwTjG33S8xXo8dX9hnHLpiGmeP//Ltq/K+hfyf7U8/8d3Tv4HAADgfsj/6Tjl+uX/PZufnSnrX8j/67ouWcj/ccYx/w+FpeV/AAAAeJQ97PxfK4xTrl/+f/Hwm9+X9S/k/w2D5f+RzmnHgz/HCe+dDGFDv6kDAAAAPcT/77740ULM69knB2lev/rNU7+WjVfI/7XB8v/oA31VAAAAwP3YXr3xfFm9kP/rg+X/sYc6awAAAOBefF75ZLasXsj/04Pl/5X5Nl/5kHX6Mf4rhM8mQxhv7sxkhZ/C3MvtAgAAAPCAxJz+6cffXi47r5D/Z8qf/x+fdBDX/3c9/6+w/r+jkD31b7MHAwAAAPAkKq7nj4/Hz765oNf37w+6/n/i5u3vyq5fyP+HBsv/w53bB/n9fwAAALAE/7fv/3urME65fs///2von4tl/Qv5f26w/B+3qzpf3sX4/hyeDGFtcyd/muCZeLm9SaEx2lFoqSc9dsYeeaEx1lFomUl6vDAZwnPNnUNJYXUszCWFOxN54VRSuBwL+f3QLpxNChfjnXZiIp9uWjgfC/kCi0ZcQbGqvSQi6fFnrx7Nwl17/Na+OAAAwBMlhuc8y452N0MaZRuVfies7HfCUL8ThvudMJKckJ7Y63iY7i7E4x/uOP1lKFHI/6cGy//xrViRbXqt/w9x/X/+vYbt9f/TsVBNCo1YqKdPDKjHa2Rh91i8RrWe97iztl0AAACAx1r8XGB4mecBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7J3rzFyXfUBwM8+Z3e93l0TpASKYAElIZW8Xm+wpZAgbKAEgQSbynyoUISNvUk33iTGDwmHh9YOQaAUNSkpCShQuxUUf0lWVIhHgVioGFVN1SiVkNOURwgUIUFNSJSKOpGrmXvP7J1zdx6Odx1v+vtJ3jkz//O8c2c85947ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP8fjt3xhotaxd981SPf/u4Db//44Y8s3P3EVz51RwjTtce7snDXxac+11s5+Z7vHfrpF7+wad2jp/vzcnk8rKn+6c7vfCLW+ou1IXyjK4TeNLB+OAv05feHY32vGg5hXVgM1EvMDGUl0obDDwZDOBIWA/WqvjUYwnAhsO3R7z/0mWrinsEQLg0hVNI2flzJ2hhMA5f1Z4GhNHBrbxb4nzOZeuCb3VkAzll8MdR3+oXpxgxjS5drsv/1LVvHXlzp8HpiYqx5vt9uXeFOFfSnD0yf09NWqo4VUXp5HPdqWwWvttJ2vsvTVvwglX9CObMYqoTuXTM37Dgwtz8+0h0mJnqa1bRCz/NjT31059mkV81+GDswtiz74b2f//nHvvTktfff98l3XP/gM78fP9dunixs0mJ6pVVCvs+tmucx2uL9ZBW8/EqfksbbPm21Ii/xD12f/tnf/kmreGn+P9Z6/h9353jb3ZA71np6JJubx0eGY+LUSDY3BwAAgFVjNRw1nf/K1VOt6ivN/8c7O/8fT/nnk/lstMdD2FJL3D4awiW1x7PAsdjcB0dDeG0tNd0Y2JoEjofwilriinpVSYmBWGI8CfxqJA9sSQInYmA6CXw5Bu5KAp+IgYUksDMGjieBt8ZAmG0cxx+P5OPoODAYA9uzjbgQr0J4eiS2lmyrx+tVAQAALJN8dtjXeLdwrcO5ZojTy4XBdhniFdhNM1SSGtIZbH1a1bSG3nY1dLeroT7u+dbDL9Xc1a7m0mUYXY0Z9n70d38WWijN/ydbz/8rS3Skq3T+P4Tran9j7u48MlePb59uyAAAAACcgzVbb9nWKl6a/2/p7Pr/eEykp5A5PBwPQ+weDWGyMZBVe3U5kJ31XpMHAAAAYDWon4+vnwufzW+zS7TT+XQ5//RZ5o8n/rcsmf/X73zTTa36W5r/T3d2/f9Q423WiROxF58dDWGgEPhh7GU1UDMeAz97S2MgH/+JuAHujFXlFybUq7ozltgeA5NJ4EizEo/US1zSGMifrHrjt9fHMZuXKAQAAADgvIuHA+J5+Xj9/2MHTr6tVbnS/H/72V3/X5sHly7vn1sTwobeEHrSLwY8PJQtDBgDw1154rtDWV09aVWHhkK4pjqwtKon8vX/e9M1Bh8dzKqKgUte99WnLqsm/m4whA3FwI/ef3RTNbE/CdQbf99gCK+pjjZt/OsDWeN9aeP3DoTw6kKgXtUHB0KoNtafVvX9Sv47BmlVD1ZCuKgQqFe1uRLCwQDAKhX/K91VfHDfwdt275ibm9m7gol4DH8w3DA7NzOx89a5XZUmfdqV9LlhGaND5TE1XQ4p8Xi+RNGx564a6SRd/57gZLEv+XH80oWD+f34WaivNs6pvoa7V6ZDfsPry02EwiepF2vIQ8VKFp/EUv0xf39YEwYO7JvZO/HhHfv3792Y/e00+1T2Nw4q21Yb0201tFTfLoDd4/JiJRv237xnw76Dt62fvXnHjTM3ztwyNfnGTZs3TU1u3ryhOqrJ7G+boV6+VNXJUM8cPf9DfWVvoZLz8a4hISGx2hLztx9d0+rtpzT/39N6/h/fdeI7f74+Q7Pz/2PxNH/2+OJp/u0xcKTT8/9jzc7m1y8MGE8C8zEw7zQ/AAAALw3xcGQ87BiPWvcfvfI3rcqV5v/znX3/f5nW/68vXf+uZsv8XxFLTDZb/z9d5r++/v98s/X/02X+6+v/H3kR1v8/UA8km+Rp6/8DAAAvBedv/f+2y/unPxBQytB2ef/0BwJKGdou49/pDwSc9fr/Uzf99BehhdL8/67O5v8W7gcAAIALx93/9NRrWsVL8/8jnc3/z//6f6HZ9f/jzQLTzRYGtP4fAAAAq1Sz9f/OjP7F+1qVK83/Fzqb/8fLLrobcsdaT49ka9qFdE27UyP1rwwAAADA6tAdJib6OszbsDLq1hfe5mP5UqCt0kU/vPq/bmxVX2n+f7yz+X/D9zLu/fzPP/alJ6+9//R9n3zH9Q8+8/vxxfP/AAAAwMrp9LgEAAAAAAAAAAAAAADw4jvwgX891Spe+v5/uK72eLPv/8ff/YvfL3h5Q+5Ya/v1//L72979wMHakoUPj4Tw+mJg9+Hd60L+2/yXFwMPXX/FxdXE4bTEd37y1l9WEx9IA+9c/7Jnq4lrksD2uEjiK9JA/FXFZ9cmgbi84r+ngbg9FtJAfx749NpsHF3ptvr1cLatutJt9R/DIYwWAvVt9Y3hrI2udID3JIH6AD+UBuIA35MHutNePbAm61UMDMeif7Mm6xUAABes+CmwL9wwOzczGT/Cx9tX9jbeRg1Llh0qV9vTYfOP50uTHXvuqpFO0j3pZ9HF3xrvC5XqEDaWPq4Ws3TVRrk8tbTZdC9vMuR2q72t1Kbrbz6iwWxEEztvndvV13bgV7bPMtXbNsvG0mSnmKW7tkk7qKWDvnQwog63TQddjve7w8RET5LrTTE4Fhq02yM6/b5+cZ2/ZntBMc+hub7nW9VXmv+PdTb/rxTH9Wz+YwDz8Zf1/nLUMv8AAACwsj699Q/3xX/fGX3vf7bKW5r/j3c2/48HxvJTwdnRjuPx9/9vHw2h9tP6Y1ngWGzug6MhvLaWmo4lsh/Uf1csMZkFjsUDJlfEEtunG6saiIGFJPCrkTxwPAmciIH8KMVXQ34o5+6REDbVUtc1ltgTS4wlgffGwHgSmIiBySSwNga2JIHfrM0D00ngX2IgzDZuq39Ym28rAACAs5HPs/oa74Z0nrfQ2y5DV7sMQ+0ydLfLUGmXodko4v2vxQx9xfPxeYb4UF9a62BSSylD/DH8s+5XKUN4pDFnWrDUdP1KkrHGnDHDtoXDa0MLpfn/ZGfz/6HG26z1E3H+v/j7f1ngh7F7n42Xjo/HwM/e0hjIDwyciJPdO+tVTecl8kn7nbHElhgYTwJ7YmBLEth+XR44cnFjIJ9p1xu/vd74bF6iEAAAAIDzLh4giIdp4vz/vwee/+tW5Urz/y2dzf9je2uKjX0i1vqLtSF8o2uxN/XA+uEsEI9jDMevx79qOIR1hQMc9RIzQ1mJ/qTh8IPB7Bvq/WlV3xrMvnwQ72979PsPfaaauGcwhEsLR1/qbfy4krUxmAYu688CQ2ng1t4sEI/81APf7M4CcM7qRwXjDpVf6lI3tnS5JvvfS+U3QdPhlY6BLpFvqe9crZRK+kB+TLXu7J62UnWsjHT7H/dqWw2vtufz/4Pr/fJqK36QOpNsnuoQu3fN3LDjwNz++Ejxm6wlK/Q8F7+l2kl6GfbD+Rfe26i7aaSSdmAyefuYXLrc0vthV6zu3s///GNfevLa++/75Duuf/CZ34+362C7/Td+UfiWm/535GRh8660Ssj3uQv+/SR9YNr7yWr4byB9YNzTFkK4Y+GSp1vFS/P/6c7m/73Jbc0f4sbcNxrCGwob9+G4+d82mr0PFgLZu+RF5UB2yv3JkabvnAAAALDc6oc76scLZvPb7ILwdJ5czj99lvnj8YotS+bvtN8fufTSf2wVL83/t7ee/w8k3XT+3/l/Vojz/0u60A9FD6QPzJ/ToehSdayI0svD+f+wCl5tpTM1zv8H5/+X7N8ynP9vzvn/lpz/X90u9Ket9Clpjw9dIYTBr1/9SKt4af6/p7P5v/X/ll60r77+3/Zm6//tabb+37z1/wAAgBXVZKG5dJ5XWr2vlCFdva+Uoe0CgW2XGLT+31mv/zf0V+//XWihNP+f72z+H3eHNcXWV8v6f+PXNanqrhjYY2FAAAAALkTNDhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4vrVyaG3t4q/+apHvv3dB97+8cMfWbj7ia986o4QZmuPd2XhrotPfa63cvI93zv00y9+YdO6R09X8nJ9+e0fNeSOtZ4eCeFI4ZHhmDg1Ur2zGNj27gcO9lYTD4+E8PpiYPfh3euqiS+PhHB5MfDQ9VdcXE0cTkt85ydv/WU18YE08M71L3u2mrgmD3Sl3b1/bdbdrrS7n1kbwmghUO/uTWsbq6q3cW0e6E7b+PvhrI0YGI5F7xvO2oiBuVhidiCEDb0h9KRV/XMlq6onrerblayqnrSqj1dCuCaE0JtW9ZP+rKredOT/1p9VFQOXvO6rT11WTRzpD2FDMfCj9x/dVE18KAnUG//T/hBeU91l0sa/1pc13pc2fk9fCK8OIfSnJZ7pzUr0pyWe6A3hokKg3vif94ZwMPCSEN98dhUf3Hfwtt075uZm9q5goj9vazDcMDs3M7Hz1rldlaRPzXQV0mcOlePdHY798ac+urN6e+y5q0Y6Sffm5fpqXZ7qa7h75XL1vmuFeh/7NVSsZPH5KNUf8/eHNWHgwL6ZvRMf3rF//96N2d9Os09lf3vyaLatNi7XturUC91Wlxcr2bD/5j0b9h28bf3szTtunLlx5papyTdu2rxpanLz5g3VUU1mf5djqEfL8Z4VHuorewuVnI83AAkJidWW6G54d5u80P/LLn3QX+xoX6jU3qBL04pilq7aKJdj0Ftbx89y0NUeNf+c0nZEG0sTh1KWqfZZrixNJhazDGZZap/rSpPDYk3dtU0a73eHiYmm/9ONNd4tbr7fLrF5O/VYvuk6TQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA///jqU04")
r0 = openat(0xffffffffffffff9c, &(0x7f00000074c0)='./file1\x00', 0x143841, 0x114)
ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000007500)={0x0, 0x0, 0x10001, 0x0, 0x1, 0x5, 0x9af, 0x7, 0x7})

3.866449115s ago: executing program 6 (id=4107):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000003080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003140)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000031c0)="b9354b27b553aeee40000b0000a4", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.939413338s ago: executing program 6 (id=4108):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x80000100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r0 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000340)={0x0, 0x8124, 0x400, 0x2, 0x4040086c}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440))
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_CQ_RING(0x0, 0x5, 0x1000001, 0x13, r1, 0x8000000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x20, 0x0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
read$msr(r5, &(0x7f0000000f80)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x2, &(0x7f0000019f80)=0x80000000000003)
timer_create(0x0, 0x0, 0x0)

817.4262ms ago: executing program 6 (id=4109):
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04064352c9"], 0x6)

665.178264ms ago: executing program 2 (id=4110):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000001080)={0x0, 0x0, @ioapic={0x3ff8, 0x4, 0x4, 0xb, 0x0, [{0xb, 0x90, 0x8, '\x00', 0xd2}, {0x0, 0x52, 0xec, '\x00', 0x6}, {0x7, 0xb8, 0x6, '\x00', 0x3}, {0x6, 0x6, 0x3, '\x00', 0x8a}, {0xe1, 0xa2, 0x9, '\x00', 0xe}, {0xc, 0x9, 0xba, '\x00', 0x1}, {0x9, 0x0, 0x9, '\x00', 0x4}, {0x1, 0x3, 0x9, '\x00', 0x4}, {0x0, 0x5, 0xc9, '\x00', 0x4}, {0x1e, 0x0, 0x2, '\x00', 0x1}, {0x8, 0x6e, 0x3, '\x00', 0x6}, {0x4, 0x5, 0x81, '\x00', 0x5}, {0xff, 0x5, 0x61, '\x00', 0x1}, {0x4, 0x0, 0xed, '\x00', 0x1}, {0x1, 0xcc, 0x1, '\x00', 0x63}, {0x7, 0x2, 0x3, '\x00', 0x9}, {0x26, 0x3, 0xc8, '\x00', 0xb}, {0xe, 0x8, 0x7, '\x00', 0x1}, {0x4, 0x4, 0x2}, {0x1, 0x0, 0x8, '\x00', 0x8}, {0x6, 0xb, 0x8, '\x00', 0x6}, {0x8, 0x4, 0x7, '\x00', 0x90}, {0xa, 0x9, 0x7, '\x00', 0xc9}, {0x7, 0x6, 0x6, '\x00', 0x3}]}})

137.664467ms ago: executing program 2 (id=4111):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedeb1d9bcee970ffa8930646fb8e2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94ca00000000c11acdffc890dc6ef75d668954cb9f57fa7f41862200bc47cb4822f1490000"], 0x2, 0x55e, &(0x7f0000001080)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x4a, &(0x7f0000000400), 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x40102)
writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2f)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, r5, 0x0, <r6=>0x0, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x8, r6, 0x0, 0x1, 0x0, &(0x7f0000000400), 0x5})
syz_open_dev$cec(&(0x7f0000000440), 0xffffffffffffffff, 0x4ae60)
syz_open_procfs(0x0, &(0x7f0000000480)='syscall\x00')
syz_open_procfs(0x0, &(0x7f00000004c0)='fd/3\x00')
r7 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0, 0x0)
lseek(r7, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x7, 0x7d5, 0x6, 0x8001, 0x7, 0x7f]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x800)
syz_open_dev$dvb_frontend(&(0x7f0000000500), 0x0, 0x84003)
r8 = memfd_create(&(0x7f00000005c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
lseek(r8, 0x80003, 0x1)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r9, &(0x7f00000002c0)=@shmem={0xc, 0x1, {0x20}}, 0x201)

0s ago: executing program 8 (id=4112):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, 0x0)
io_setup(0x7, &(0x7f0000000480)=<r1=>0x0)
r2 = openat$sysfs(0xffffff9c, &(0x7f00000004c0)='/sys/power/wakeup_count', 0x89443, 0xf1)
io_submit(r1, 0x2, &(0x7f0000000700)=[&(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x240, r2, 0x0}, 0x0])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
keyctl$join(0x1, &(0x7f0000000d00)={'syz', 0x1})
prlimit64(0x0, 0xe, &(0x7f0000000d40)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000d80)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000dc0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000e40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000ec0), 0x651, 0x0)
recvmmsg(r4, &(0x7f0000000f00), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000f40)=0x6)
semget(0x1, 0x5, 0x6b4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
clock_gettime(0x3, &(0x7f0000000f80))
setsockopt$sock_timeval(r6, 0x1, 0x42, 0x0, 0x0)
recvfrom(r6, 0x0, 0x0, 0x2000, 0x0, 0x0)
bpf$LINK_DETACH(0x22, 0x0, 0x0)

kernel console output (not intermixed with test programs):

64356][T21245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2230.984011][T21245] RSP: 002b:00007f8691588028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2230.992477][T21245] RAX: ffffffffffffffda RBX: 00007f8690a25fa0 RCX: 00007f869079e559
[ 2231.000496][T21245] RDX: 0000000000008880 RSI: 00002000000003c0 RDI: 0000000000000004
[ 2231.008530][T21245] RBP: 00007f8690835ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2231.016546][T21245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2231.024601][T21245] R13: 00007f8690a26038 R14: 00007f8690a25fa0 R15: 00007ffd62cbbaf8
[ 2231.032683][T21245]  </TASK>
[ 2231.683204][T21256] overlayfs: conflicting lowerdir path
[ 2232.155001][    C0] net_ratelimit: 24 callbacks suppressed
[ 2235.220664][T21302] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 2235.275143][T21302] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 2235.292360][T21305] loop0: detected capacity change from 0 to 4096
[ 2235.322439][T21305] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 2235.331499][T21302] overlayfs: conflicting lowerdir path
[ 2235.338609][T21305] EXT4-fs (loop0): Test dummy encryption mode enabled
[ 2235.383479][T21305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2235.545659][T21305] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[ 2237.208777][    C0] net_ratelimit: 24 callbacks suppressed
[ 2237.291933][T14028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2237.655228][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3461'.
[ 2241.515625][T21349] loop8: detected capacity change from 0 to 4096
[ 2241.563221][T21349] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[ 2241.593032][T21349] ntfs3: loop8: Failed to load $Extend (-22).
[ 2241.605753][T21349] ntfs3: loop8: Failed to initialize $Extend.
[ 2241.636126][   T28] audit: type=1800 audit(1792334817.303:122): pid=21349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3480" name="file1" dev="loop8" ino=30 res=0 errno=0
[ 2241.695053][ T9638] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 2241.897471][ T9638] usb 7-1: config 0 has no interfaces?
[ 2241.910626][ T9638] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2241.951897][ T9638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2242.037974][ T9638] usb 7-1: config 0 descriptor??
[ 2242.314925][    C1] net_ratelimit: 25 callbacks suppressed
[ 2243.405620][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'.
[ 2244.493034][T13142] usb 7-1: USB disconnect, device number 19
[ 2246.166682][T21400] comedi comedi0: 8255: I/O port conflict (0x5,4)
[ 2246.173798][T21400] comedi comedi0: 8255: I/O port conflict (0x2,4)
[ 2246.184901][ T9638] usb 9-1: new full-speed USB device number 30 using dummy_hcd
[ 2246.206046][T21400] comedi comedi0: 8255: I/O port conflict (0x1,4)
[ 2246.223551][T21400] comedi comedi0: 8255: I/O port conflict (0xfff,4)
[ 2246.233663][T21400] comedi comedi0: 8255: I/O port conflict (0x5,4)
[ 2246.251410][T21400] comedi comedi0: 8255: I/O port conflict (0x3ff,4)
[ 2246.407717][ T9638] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2246.429820][ T9638] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2246.449887][ T9638] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2246.484751][ T9638] usb 9-1: config 0 interface 0 has no altsetting 0
[ 2246.492289][ T9638] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2246.511762][ T9638] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2246.542883][ T9638] usb 9-1: config 0 descriptor??
[ 2246.836717][T21408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3497'.
[ 2246.987211][ T9638] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0
[ 2247.014967][ T9638] lenovo 0003:17EF:6047.0006: unknown main item tag 0x0
[ 2247.041571][ T9638] lenovo 0003:17EF:6047.0006: unbalanced collection at end of report description
[ 2247.097322][ T9638] lenovo 0003:17EF:6047.0006: hid_parse failed
[ 2247.127052][ T9638] lenovo: probe of 0003:17EF:6047.0006 failed with error -22
[ 2247.214335][ T9638] usb 9-1: USB disconnect, device number 30
[ 2247.355029][    C0] net_ratelimit: 43 callbacks suppressed
[ 2248.745058][T13142] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 2250.459235][T13142] usb 9-1: config 0 has no interfaces?
[ 2250.485051][T13142] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2250.519886][T13142] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2250.591186][T13142] usb 9-1: config 0 descriptor??
[ 2252.392612][ T5878] usb 9-1: USB disconnect, device number 31
[ 2252.474931][    C1] net_ratelimit: 24 callbacks suppressed
[ 2255.325210][T13142] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 2255.596988][T13142] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2255.807542][T13142] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2255.861168][T13142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2257.835345][T10364] net_ratelimit: 76 callbacks suppressed
[ 2258.412453][ T9638] usb 1-1: USB disconnect, device number 24
[ 2258.950229][T21508] loop2: detected capacity change from 0 to 4096
[ 2259.026642][T21508] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 2259.081819][T21508] ntfs3: loop2: Failed to load $Extend (-22).
[ 2259.104937][T21508] ntfs3: loop2: Failed to initialize $Extend.
[ 2260.928158][   T28] audit: type=1800 audit(1792334836.573:123): pid=21508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3524" name="file1" dev="loop2" ino=30 res=0 errno=0
[ 2261.654353][T21527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3534'.
[ 2261.707914][T21527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3534'.
[ 2262.085796][ T9638] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 2263.114938][    C1] net_ratelimit: 29 callbacks suppressed
[ 2263.469574][ T9638] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2263.488688][ T9638] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2263.499282][ T9638] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2264.842418][   T27] usb 9-1: USB disconnect, device number 32
[ 2265.075431][T13142] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[ 2265.989357][T13142] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2266.012206][T13142] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2266.032649][T13142] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2266.057014][T13142] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2266.063833][T13142] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2266.093333][T13142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2266.109518][T21566] loop0: detected capacity change from 0 to 4096
[ 2266.118439][T13142] usb 3-1: config 0 descriptor??
[ 2266.263774][T21566] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 2266.278416][T21570] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3549'.
[ 2266.289004][T21570] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3549'.
[ 2266.340974][T21566] ntfs3: loop0: Failed to load $Extend (-22).
[ 2267.765550][T21566] ntfs3: loop0: Failed to initialize $Extend.
[ 2267.824002][T13142] usbhid 3-1:0.0: can't add hid device: -71
[ 2267.845985][T13142] usbhid: probe of 3-1:0.0 failed with error -71
[ 2267.904557][T13142] usb 3-1: USB disconnect, device number 40
[ 2268.033212][   T28] audit: type=1800 audit(1792334843.693:124): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3546" name="file1" dev="loop0" ino=30 res=0 errno=0
[ 2268.485055][T10348] net_ratelimit: 35 callbacks suppressed
[ 2269.765040][ T5872] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 2270.016935][ T5872] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2270.027424][ T5872] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2270.055639][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2271.828629][T21608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3561'.
[ 2273.084588][ T9638] usb 1-1: USB disconnect, device number 25
[ 2273.275521][   T27] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[ 2273.468131][   T27] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2273.499703][   T27] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2273.532394][   T27] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2273.574851][   T27] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2273.581700][   T27] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2273.601081][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2273.626272][   T27] usb 7-1: config 0 descriptor??
[ 2273.852088][T20761] net_ratelimit: 26 callbacks suppressed
[ 2274.059101][   T27] usbhid 7-1:0.0: can't add hid device: -71
[ 2274.071643][   T27] usbhid: probe of 7-1:0.0 failed with error -71
[ 2274.095670][   T27] usb 7-1: USB disconnect, device number 20
[ 2276.000542][T21642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3570'.
[ 2276.725140][ T9638] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 2277.091297][ T9638] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2277.148483][ T9638] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2277.202390][ T9638] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2277.245005][ T9638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2279.434949][    C1] net_ratelimit: 38 callbacks suppressed
[ 2280.022876][ T9638] usb 3-1: USB disconnect, device number 41
[ 2281.943443][T21699] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3584'.
[ 2282.884954][ T5869] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 2283.986793][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.993202][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 2284.017776][ T5869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2284.041705][ T5869] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2284.081659][ T5869] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2284.104486][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2285.044949][    C1] net_ratelimit: 34 callbacks suppressed
[ 2285.068556][T21722] loop6: detected capacity change from 0 to 32768
[ 2285.324704][T21722] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 2286.110251][   T27] usb 3-1: USB disconnect, device number 42
[ 2286.483824][T18777] ocfs2: Unmounting device (7,6) on (node local)
[ 2286.565990][ T9638] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[ 2286.773933][ T9638] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2286.809158][ T9638] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2286.853054][ T9638] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2286.884856][ T9638] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2286.914936][ T9638] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2286.924058][ T9638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2286.981069][ T9638] usb 1-1: config 0 descriptor??
[ 2288.486904][ T9638] usbhid 1-1:0.0: can't add hid device: -71
[ 2288.493032][ T9638] usbhid: probe of 1-1:0.0 failed with error -71
[ 2288.529768][ T9638] usb 1-1: USB disconnect, device number 26
[ 2290.074914][    C0] net_ratelimit: 30 callbacks suppressed
[ 2292.441268][T21782] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3614'.
[ 2292.745147][ T5872] usb 9-1: new full-speed USB device number 33 using dummy_hcd
[ 2292.950494][ T5872] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2292.993697][ T5872] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2293.016227][ T5872] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2293.044881][ T5872] usb 9-1: config 0 interface 0 has no altsetting 0
[ 2293.051607][ T5872] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2293.084101][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2293.108150][ T5872] usb 9-1: config 0 descriptor??
[ 2293.578164][ T5872] usbhid 9-1:0.0: can't add hid device: -71
[ 2293.601486][ T5872] usbhid: probe of 9-1:0.0 failed with error -71
[ 2293.635392][ T5872] usb 9-1: USB disconnect, device number 33
[ 2295.434893][    C1] net_ratelimit: 33 callbacks suppressed
[ 2299.745119][ T5869] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 2299.958782][ T5869] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2300.006569][ T5869] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 2300.042392][ T5869] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2300.115022][ T5869] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2300.124378][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2301.434891][    C1] net_ratelimit: 33 callbacks suppressed
[ 2302.487821][ T5869] usb 9-1: USB disconnect, device number 34
[ 2304.794920][  T172] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[ 2304.997661][  T172] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2305.024871][  T172] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2305.062876][  T172] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2305.090728][  T172] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2305.108130][  T172] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2305.134667][  T172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2305.158157][  T172] usb 3-1: config 0 descriptor??
[ 2306.134895][T21881] tmpfs: Group quota inode hardlimit too large.
[ 2307.362862][    C1] net_ratelimit: 29 callbacks suppressed
[ 2307.416247][  T172] usbhid 3-1:0.0: can't add hid device: -71
[ 2307.475427][  T172] usbhid: probe of 3-1:0.0 failed with error -71
[ 2307.554495][  T172] usb 3-1: USB disconnect, device number 43
[ 2312.634879][    C0] net_ratelimit: 24 callbacks suppressed
[ 2314.389129][T21909] loop8: detected capacity change from 0 to 32768
[ 2314.395840][   T27] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 2314.461910][T21909] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 2314.553286][T21920] loop0: detected capacity change from 0 to 4096
[ 2314.597272][   T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2314.614980][   T27] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 2314.664286][   T27] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2314.705904][   T27] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2314.745120][T21920] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 2314.753130][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2314.830684][T21920] ntfs3: loop0: Failed to load $Extend (-22).
[ 2314.885888][T21920] ntfs3: loop0: Failed to initialize $Extend.
[ 2315.051887][   T28] audit: type=1800 audit(1792334890.713:125): pid=21920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3648" name="file1" dev="loop0" ino=30 res=0 errno=0
[ 2315.175426][T12766] ocfs2: Unmounting device (7,8) on (node local)
[ 2317.914886][    C1] net_ratelimit: 23 callbacks suppressed
[ 2318.682421][ T5878] usb 3-1: USB disconnect, device number 44
[ 2319.354223][T21944] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3651'.
[ 2322.672367][T21960] loop8: detected capacity change from 0 to 512
[ 2322.781902][T21960] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2322.845406][T21960] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2322.954868][    C1] net_ratelimit: 26 callbacks suppressed
[ 2324.385413][ T9638] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 2324.485101][T21963] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 2324.605416][ T9638] usb 9-1: Using ep0 maxpacket: 8
[ 2324.630411][ T9638] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2324.645200][ T9638] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 2324.675123][ T9638] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2324.705658][ T9638] usb 9-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40
[ 2325.761422][   T27] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 2325.769190][ T9638] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2325.793225][ T9638] usb 9-1: Product: syz
[ 2325.808878][ T9638] usb 9-1: Manufacturer: syz
[ 2325.819972][ T9638] usb 9-1: SerialNumber: syz
[ 2325.969758][ T9638] usb 9-1: can't set config #1, error -71
[ 2325.997771][ T9638] usb 9-1: USB disconnect, device number 35
[ 2326.017867][   T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2326.031040][T12766] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2326.057138][   T27] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 2326.115909][   T27] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2326.165111][   T27] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2326.174355][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2326.404425][T21980] loop8: detected capacity change from 0 to 4096
[ 2326.460153][T21980] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[ 2326.493418][T21980] ntfs3: loop8: Failed to load $Extend (-22).
[ 2326.512746][T21980] ntfs3: loop8: Failed to initialize $Extend.
[ 2326.637867][   T28] audit: type=1800 audit(1792334902.293:126): pid=21980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3664" name="file1" dev="loop8" ino=30 res=0 errno=0
[ 2327.553431][T21989] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3663'.
[ 2327.755582][ T9638] usb 3-1: USB disconnect, device number 45
[ 2328.234866][    C0] net_ratelimit: 33 callbacks suppressed
[ 2329.944240][T21993] loop6: detected capacity change from 0 to 1024
[ 2330.039956][T21993] hfsplus: unknown catalog record type 5377
[ 2333.255315][    C0] net_ratelimit: 23 callbacks suppressed
[ 2335.213249][T22023] overlayfs: conflicting lowerdir path
[ 2337.308996][T22036] loop2: detected capacity change from 0 to 4096
[ 2337.593880][T22036] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[ 2337.653074][T22036] ntfs3: loop2: Failed to load $Extend (-22).
[ 2337.957714][T22036] ntfs3: loop2: Failed to initialize $Extend.
[ 2338.457029][    C0] net_ratelimit: 29 callbacks suppressed
[ 2338.462834][   T28] audit: type=1800 audit(1792334914.103:127): pid=22036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3678" name="file1" dev="loop2" ino=30 res=0 errno=0
[ 2343.674977][    C1] net_ratelimit: 42 callbacks suppressed
[ 2345.921236][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 2345.927912][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 2346.982319][T22093] loop6: detected capacity change from 0 to 512
[ 2347.066785][T22093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2347.165994][T22093] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2347.386208][T22097] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 2347.443080][T22099] FAULT_INJECTION: forcing a failure.
[ 2347.443080][T22099] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2347.456611][T22099] CPU: 0 PID: 22099 Comm: syz.2.3697 Not tainted syzkaller #0
[ 2347.464137][T22099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2347.474243][T22099] Call Trace:
[ 2347.477550][T22099]  <TASK>
[ 2347.477563][T22099]  dump_stack_lvl+0x18c/0x250
[ 2347.485206][T22099]  ? show_regs_print_info+0x20/0x20
[ 2347.485235][T22099]  ? load_image+0x420/0x420
[ 2347.494970][T22099]  ? __might_fault+0xaa/0x120
[ 2347.495008][T22099]  should_fail_ex+0x394/0x4c0
[ 2347.504364][T22099]  copyin+0x1a/0x90
[ 2347.508240][T22099]  _copy_from_iter+0x532/0x1290
[ 2347.513167][T22099]  ? copyout_mc+0x70/0x70
[ 2347.517536][T22099]  ? __virt_addr_valid+0x10c/0x380
[ 2347.522680][T22099]  ? __virt_addr_valid+0x10c/0x380
[ 2347.527857][T22099]  ? __virt_addr_valid+0x10c/0x380
[ 2347.533033][T22099]  ? __check_object_size+0x4fc/0xa40
[ 2347.538382][T22099]  netlink_sendmsg+0x76b/0xbf0
[ 2347.543221][T22099]  ? netlink_getsockopt+0x590/0x590
[ 2347.548465][T22099]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 2347.554053][T22099]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2347.559370][T22099]  ? security_socket_sendmsg+0x80/0xa0
[ 2347.564887][T22099]  sock_write_iter+0x2dc/0x420
[ 2347.569711][T22099]  ? sock_read_iter+0x3f0/0x3f0
[ 2347.574630][T22099]  ? common_file_perm+0x198/0x1f0
[ 2347.579712][T22099]  do_iter_write+0x747/0xc50
[ 2347.584348][T22099]  ? __asan_memset+0x22/0x40
[ 2347.588977][T22099]  ? vfs_iter_write+0xa0/0xa0
[ 2347.593694][T22099]  ? __import_iovec+0x3fa/0x850
[ 2347.598589][T22099]  ? import_iovec+0x73/0xa0
[ 2347.603132][T22099]  do_writev+0x27f/0x480
[ 2347.607436][T22099]  ? do_readv+0x460/0x460
[ 2347.611813][T22099]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2347.617940][T22099]  ? lock_chain_count+0x20/0x20
[ 2347.622828][T22099]  ? lockdep_hardirqs_on+0x98/0x150
[ 2347.628067][T22099]  do_syscall_64+0x55/0xb0
[ 2347.632508][T22099]  ? clear_bhb_loop+0x40/0x90
[ 2347.637212][T22099]  ? clear_bhb_loop+0x40/0x90
[ 2347.641916][T22099]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2347.647846][T22099] RIP: 0033:0x7fc310b9e559
[ 2347.652293][T22099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2347.672026][T22099] RSP: 002b:00007fc311987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 2347.680476][T22099] RAX: ffffffffffffffda RBX: 00007fc310e25fa0 RCX: 00007fc310b9e559
[ 2347.688661][T22099] RDX: 0000000000000003 RSI: 0000200000000140 RDI: 0000000000000003
[ 2347.696713][T22099] RBP: 00007fc310c35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2347.704710][T22099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2347.712707][T22099] R13: 00007fc310e26038 R14: 00007fc310e25fa0 R15: 00007fffe4dd48a8
[ 2347.720731][T22099]  </TASK>
[ 2347.734292][T13142] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 2347.891779][T22107] netlink: 'syz.0.3700': attribute type 10 has an invalid length.
[ 2347.924914][T13142] usb 7-1: Using ep0 maxpacket: 8
[ 2347.932802][T13142] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2347.946077][T22107] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2347.959612][T13142] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 2347.979410][T13142] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 2348.008312][T13142] usb 7-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40
[ 2348.023583][T13142] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2348.042074][T13142] usb 7-1: Product: syz
[ 2348.052912][T13142] usb 7-1: Manufacturer: syz
[ 2348.062690][T13142] usb 7-1: SerialNumber: syz
[ 2349.034879][    C1] net_ratelimit: 26 callbacks suppressed
[ 2350.077992][T13142] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 2350.115020][T22105] loop8: detected capacity change from 0 to 32768
[ 2351.675301][T22105] read_mapping_page failed!
[ 2351.679946][T22105] jfs_mount: Failed to read AGGREGATE_I
[ 2351.724876][T22105] Mount JFS Failure: -5
[ 2351.732918][T22105] jfs_mount failed w/return code = -5
[ 2351.875875][T13142] usb 7-1: USB disconnect, device number 21
[ 2351.932870][T18777] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2353.395444][T13142] usb 7-1: new full-speed USB device number 22 using dummy_hcd
[ 2353.574919][T13142] usb 7-1: device descriptor read/64, error -71
[ 2353.864931][T13142] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[ 2354.034982][T13142] usb 7-1: device descriptor read/64, error -71
[ 2354.169343][T13142] usb usb7-port1: attempt power cycle
[ 2354.234858][    C1] net_ratelimit: 29 callbacks suppressed
[ 2355.456574][T13142] usb 7-1: new full-speed USB device number 24 using dummy_hcd
[ 2355.545762][T13142] usb 7-1: device descriptor read/8, error -71
[ 2355.690302][T22152] loop6: detected capacity change from 0 to 256
[ 2357.668314][T22166] overlayfs: missing 'lowerdir'
[ 2357.680565][T22168] loop0: detected capacity change from 0 to 1024
[ 2357.702411][T22168] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 2357.756074][T22169] overlayfs: conflicting lowerdir path
[ 2359.082654][T22178] netlink: 'syz.2.3725': attribute type 10 has an invalid length.
[ 2359.123441][T22178] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2359.274848][    C0] net_ratelimit: 42 callbacks suppressed
[ 2359.366983][T22184] FAULT_INJECTION: forcing a failure.
[ 2359.366983][T22184] name fail_futex, interval 1, probability 0, space 0, times 0
[ 2359.396638][T22184] CPU: 0 PID: 22184 Comm: syz.2.3728 Not tainted syzkaller #0
[ 2359.404174][T22184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2359.414292][T22184] Call Trace:
[ 2359.417613][T22184]  <TASK>
[ 2359.420603][T22184]  dump_stack_lvl+0x18c/0x250
[ 2359.425333][T22184]  ? show_regs_print_info+0x20/0x20
[ 2359.430565][T22184]  ? load_image+0x420/0x420
[ 2359.435107][T22184]  ? mark_lock+0x94/0x320
[ 2359.439473][T22184]  ? __lock_acquire+0x135d/0x7eb0
[ 2359.444524][T22184]  ? plist_add+0x3db/0x490
[ 2359.448977][T22184]  should_fail_ex+0x394/0x4c0
[ 2359.453704][T22184]  get_futex_key+0x136/0x1030
[ 2359.458428][T22184]  ? futex_unqueue+0xcb/0xf0
[ 2359.463050][T22184]  ? futex_wait+0x4a7/0x5c0
[ 2359.467597][T22184]  ? futex_setup_timer+0xc0/0xc0
[ 2359.472580][T22184]  futex_wake+0x127/0x4f0
[ 2359.476957][T22184]  ? futex_wake_mark+0x150/0x150
[ 2359.481946][T22184]  do_futex+0x35d/0x3e0
[ 2359.486139][T22184]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2359.491203][T22184]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 2359.497133][T22184]  __se_sys_futex+0x3a9/0x440
[ 2359.501934][T22184]  ? __x64_sys_futex+0xf0/0xf0
[ 2359.506755][T22184]  ? __x64_sys_futex+0x21/0xf0
[ 2359.511554][T22184]  do_syscall_64+0x55/0xb0
[ 2359.516010][T22184]  ? clear_bhb_loop+0x40/0x90
[ 2359.520728][T22184]  ? clear_bhb_loop+0x40/0x90
[ 2359.525460][T22184]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2359.531394][T22184] RIP: 0033:0x7fc310b9e559
[ 2359.535841][T22184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2359.555477][T22184] RSP: 002b:00007fc3119870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 2359.563920][T22184] RAX: ffffffffffffffda RBX: 00007fc310e25fa8 RCX: 00007fc310b9e559
[ 2359.571923][T22184] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc310e25fac
[ 2359.579929][T22184] RBP: 00007fc310e25fa0 R08: 0000000000745d1e R09: 0000000000000000
[ 2359.587930][T22184] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 2359.595930][T22184] R13: 00007fc310e26038 R14: 00007fffe4dd47c0 R15: 00007fffe4dd48a8
[ 2359.603948][T22184]  </TASK>
[ 2359.685181][  T172] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[ 2359.864900][  T172] usb 1-1: device descriptor read/64, error -71
[ 2361.627138][  T172] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[ 2361.824858][  T172] usb 1-1: device descriptor read/64, error -71
[ 2361.946637][  T172] usb usb1-port1: attempt power cycle
[ 2363.507699][T21996] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 2363.795305][T21996] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2363.827604][T21996] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2363.864830][T21996] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2363.917150][T21996] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2364.014994][T21996] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2364.101046][T21996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2364.554846][    C1] net_ratelimit: 26 callbacks suppressed
[ 2366.326166][ T5869] usb 7-1: USB disconnect, device number 26
[ 2366.491215][T22232] FAULT_INJECTION: forcing a failure.
[ 2366.491215][T22232] name fail_futex, interval 1, probability 0, space 0, times 0
[ 2366.542046][T22234] bond0: option arp_interval: invalid value ()
[ 2366.550997][T22232] CPU: 0 PID: 22232 Comm: syz.6.3737 Not tainted syzkaller #0
[ 2366.558524][T22232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2366.568628][T22232] Call Trace:
[ 2366.571944][T22232]  <TASK>
[ 2366.574921][T22232]  dump_stack_lvl+0x18c/0x250
[ 2366.579632][T22232]  ? show_regs_print_info+0x20/0x20
[ 2366.584865][T22232]  ? load_image+0x420/0x420
[ 2366.589406][T22232]  ? mark_lock+0x94/0x320
[ 2366.593858][T22232]  ? __lock_acquire+0x135d/0x7eb0
[ 2366.598915][T22232]  ? plist_add+0x3db/0x490
[ 2366.603439][T22232]  should_fail_ex+0x394/0x4c0
[ 2366.608193][T22232]  get_futex_key+0x136/0x1030
[ 2366.612957][T22232]  ? futex_unqueue+0xcb/0xf0
[ 2366.617611][T22232]  ? futex_wait+0x4a7/0x5c0
[ 2366.622166][T22232]  ? futex_setup_timer+0xc0/0xc0
[ 2366.627157][T22232]  futex_wake+0x127/0x4f0
[ 2366.631707][T22232]  ? futex_wake_mark+0x150/0x150
[ 2366.636744][T22232]  do_futex+0x35d/0x3e0
[ 2366.640954][T22232]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2366.646022][T22232]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 2366.651959][T22232]  __se_sys_futex+0x3a9/0x440
[ 2366.656686][T22232]  ? __x64_sys_futex+0xf0/0xf0
[ 2366.656732][T22232]  ? __x64_sys_futex+0x21/0xf0
[ 2366.656760][T22232]  do_syscall_64+0x55/0xb0
[ 2366.666309][T22232]  ? clear_bhb_loop+0x40/0x90
[ 2366.666336][T22232]  ? clear_bhb_loop+0x40/0x90
[ 2366.666362][T22232]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2366.675494][T22232] RIP: 0033:0x7f869079e559
[ 2366.675519][T22232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2366.675540][T22232] RSP: 002b:00007f86915880e8 EFLAGS: 00000246
[ 2366.686114][T22232]  ORIG_RAX: 00000000000000ca
[ 2366.686127][T22232] RAX: ffffffffffffffda RBX: 00007f8690a25fa8 RCX: 00007f869079e559
[ 2366.686143][T22232] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8690a25fac
[ 2366.686159][T22232] RBP: 00007f8690a25fa0 R08: 0000000000745d1e R09: 0000000000000000
[ 2366.686174][T22232] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 2366.710213][T22232] R13: 00007f8690a26038 R14: 00007ffd62cbba10 R15: 00007ffd62cbbaf8
[ 2366.721028][T22232]  </TASK>
[ 2366.758322][T22234] bond0: option arp_interval: allowed values 0 - 2147483647
[ 2369.834896][    C0] net_ratelimit: 27 callbacks suppressed
[ 2372.095667][ T5869] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 2372.304239][T22265] overlayfs: missing 'lowerdir'
[ 2372.317611][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2372.337163][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2372.346927][T22265] overlayfs: conflicting lowerdir path
[ 2372.359922][ T5869] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2372.372276][ T5869] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2372.390253][ T5869] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2372.410011][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2372.555110][   T23] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[ 2372.568100][T22267] dvmrp0: entered allmulticast mode
[ 2372.766360][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2372.785312][   T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2372.805704][   T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2372.828628][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2372.854214][   T23] usb 3-1: config 0 descriptor??
[ 2375.232991][   T23] usb 1-1: USB disconnect, device number 30
[ 2375.274840][    C1] net_ratelimit: 40 callbacks suppressed
[ 2375.437574][T13142] usb 3-1: USB disconnect, device number 46
[ 2378.299114][ T5872] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 2378.745239][ T5872] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2378.984229][ T5872] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2379.003372][ T5872] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2379.060951][ T5872] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2379.084838][ T5872] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2379.103183][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2380.314855][    C1] net_ratelimit: 25 callbacks suppressed
[ 2381.403698][ T5872] usb 7-1: USB disconnect, device number 27
[ 2381.780435][T22331] overlayfs: missing 'lowerdir'
[ 2381.813485][T22331] overlayfs: conflicting lowerdir path
[ 2384.925173][T21996] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[ 2385.147365][T21996] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2385.165639][T21996] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2385.179374][T21996] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2385.188999][T21996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2385.355784][    C1] net_ratelimit: 42 callbacks suppressed
[ 2386.670551][ T5872] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 2386.705116][T21996] usb 1-1: config 0 descriptor??
[ 2386.758662][T22363] bond0: option arp_interval: invalid value ()
[ 2386.862729][T22363] bond0: option arp_interval: allowed values 0 - 2147483647
[ 2386.951402][ T5872] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2386.969353][ T5872] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2386.986618][ T5872] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2386.996617][ T5872] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2387.009973][ T5872] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2387.020330][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2388.089806][ T5869] usb 1-1: USB disconnect, device number 31
[ 2388.146225][T22371] loop8: detected capacity change from 0 to 256
[ 2389.700638][ T5869] usb 7-1: USB disconnect, device number 28
[ 2390.474822][    C0] net_ratelimit: 21 callbacks suppressed
[ 2392.227326][T22396] dvmrp0: entered allmulticast mode
[ 2392.965065][  T172] usb 9-1: new full-speed USB device number 36 using dummy_hcd
[ 2393.012951][T22408] loop6: detected capacity change from 0 to 256
[ 2393.997195][  T172] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2394.021909][  T172] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2394.055807][  T172] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2394.094918][  T172] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2394.126992][  T172] usb 9-1: config 0 descriptor??
[ 2395.746466][    C1] net_ratelimit: 34 callbacks suppressed
[ 2395.762157][ T5869] usb 9-1: USB disconnect, device number 36
[ 2395.778074][T22419] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 2395.829729][T22419] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2395.951851][T22422] overlayfs: conflicting lowerdir path
[ 2401.196872][    C1] net_ratelimit: 33 callbacks suppressed
[ 2402.070560][T22458] loop8: detected capacity change from 0 to 256
[ 2402.234950][ T5869] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[ 2403.333788][ T5869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2403.345180][ T5869] usb 7-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2403.364895][ T5869] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2403.374330][ T5869] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2403.425763][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2403.456929][ T5869] usb 7-1: config 0 descriptor??
[ 2403.884889][ T5869] usb 7-1: can't set config #0, error -71
[ 2403.915199][ T9638] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 2403.928451][ T5869] usb 7-1: USB disconnect, device number 29
[ 2404.147555][ T9638] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[ 2404.163767][ T9638] usb 3-1: config 0 has no interface number 0
[ 2404.189448][ T9638] usb 3-1: config 0 interface 120 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 2404.225247][ T9638] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[ 2404.234390][ T9638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2404.287513][ T9638] usb 3-1: config 0 descriptor??
[ 2404.506225][ T9638] usb 3-1: USB disconnect, device number 47
[ 2405.955985][T22477] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 2405.993957][T22477] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2406.051722][T22480] overlayfs: conflicting lowerdir path
[ 2406.128673][T22479] FAULT_INJECTION: forcing a failure.
[ 2406.128673][T22479] name failslab, interval 1, probability 0, space 0, times 0
[ 2406.194890][T22479] CPU: 0 PID: 22479 Comm: syz.2.3814 Not tainted syzkaller #0
[ 2406.202434][T22479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2406.212541][T22479] Call Trace:
[ 2406.215862][T22479]  <TASK>
[ 2406.218840][T22479]  dump_stack_lvl+0x18c/0x250
[ 2406.223588][T22479]  ? show_regs_print_info+0x20/0x20
[ 2406.228832][T22479]  ? load_image+0x420/0x420
[ 2406.233395][T22479]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2406.238496][T22479]  should_fail_ex+0x394/0x4c0
[ 2406.243232][T22479]  should_failslab+0x9/0x20
[ 2406.247788][T22479]  slab_pre_alloc_hook+0x59/0x300
[ 2406.252868][T22479]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2406.257951][T22479]  kmem_cache_alloc_lru+0x4d/0x2b0
[ 2406.263124][T22479]  ? sock_alloc_inode+0x28/0xc0
[ 2406.268042][T22479]  sock_alloc_inode+0x28/0xc0
[ 2406.272778][T22479]  ? sockfs_init_fs_context+0xb0/0xb0
[ 2406.278193][T22479]  new_inode_pseudo+0x63/0x1d0
[ 2406.283021][T22479]  __sock_create+0x12d/0x940
[ 2406.287661][T22479]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2406.293699][T22479]  __sys_socket+0xd7/0x1b0
[ 2406.298170][T22479]  __x64_sys_socket+0x7a/0x90
[ 2406.302897][T22479]  do_syscall_64+0x55/0xb0
[ 2406.307372][T22479]  ? clear_bhb_loop+0x40/0x90
[ 2406.312083][T22479]  ? clear_bhb_loop+0x40/0x90
[ 2406.316801][T22479]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2406.322747][T22479] RIP: 0033:0x7fc310b9e559
[ 2406.327204][T22479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2406.346858][T22479] RSP: 002b:00007fc311987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[ 2406.355302][T22479] RAX: ffffffffffffffda RBX: 00007fc310e25fa0 RCX: 00007fc310b9e559
[ 2406.363303][T22479] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010
[ 2406.371311][T22479] RBP: 00007fc310c35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2406.379413][T22479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2406.387411][T22479] R13: 00007fc310e26038 R14: 00007fc310e25fa0 R15: 00007fffe4dd48a8
[ 2406.395422][T22479]  </TASK>
[ 2406.420107][T22479] net_ratelimit: 28 callbacks suppressed
[ 2406.420120][T22479] socket: no more sockets
[ 2406.455924][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.463354][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 2409.744955][ T9638] usb 7-1: new full-speed USB device number 30 using dummy_hcd
[ 2409.988741][ T9638] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2410.014490][ T9638] usb 7-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2410.045031][ T9638] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2410.069530][ T9638] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2410.085921][ T9638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2410.124405][ T9638] usb 7-1: config 0 descriptor??
[ 2410.144452][ T9638] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 2410.679002][T22512] bond0: option arp_interval: invalid value ()
[ 2410.691023][T22512] bond0: option arp_interval: allowed values 0 - 2147483647
[ 2411.445127][    C0] net_ratelimit: 30 callbacks suppressed
[ 2411.681578][  T172] usb 7-1: USB disconnect, device number 30
[ 2415.335033][T22536] FAULT_INJECTION: forcing a failure.
[ 2415.335033][T22536] name fail_futex, interval 1, probability 0, space 0, times 0
[ 2415.397457][T22536] CPU: 0 PID: 22536 Comm: syz.2.3826 Not tainted syzkaller #0
[ 2415.405005][T22536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2415.415110][T22536] Call Trace:
[ 2415.418430][T22536]  <TASK>
[ 2415.421400][T22536]  dump_stack_lvl+0x18c/0x250
[ 2415.426136][T22536]  ? show_regs_print_info+0x20/0x20
[ 2415.431397][T22536]  ? load_image+0x420/0x420
[ 2415.435952][T22536]  ? mark_lock+0x94/0x320
[ 2415.440358][T22536]  ? __lock_acquire+0x135d/0x7eb0
[ 2415.445455][T22536]  ? plist_add+0x3db/0x490
[ 2415.449940][T22536]  should_fail_ex+0x394/0x4c0
[ 2415.454698][T22536]  get_futex_key+0x136/0x1030
[ 2415.459429][T22536]  ? futex_unqueue+0xcb/0xf0
[ 2415.464110][T22536]  ? futex_wait+0x4a7/0x5c0
[ 2415.468722][T22536]  ? futex_setup_timer+0xc0/0xc0
[ 2415.473722][T22536]  futex_wake+0x127/0x4f0
[ 2415.478130][T22536]  ? futex_wake_mark+0x150/0x150
[ 2415.483134][T22536]  do_futex+0x35d/0x3e0
[ 2415.487340][T22536]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2415.492417][T22536]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 2415.498395][T22536]  __se_sys_futex+0x3a9/0x440
[ 2415.503132][T22536]  ? __x64_sys_futex+0xf0/0xf0
[ 2415.507986][T22536]  ? __x64_sys_futex+0x21/0xf0
[ 2415.512806][T22536]  do_syscall_64+0x55/0xb0
[ 2415.517275][T22536]  ? clear_bhb_loop+0x40/0x90
[ 2415.521997][T22536]  ? clear_bhb_loop+0x40/0x90
[ 2415.526707][T22536]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2415.532638][T22536] RIP: 0033:0x7fc310b9e559
[ 2415.537088][T22536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2415.556810][T22536] RSP: 002b:00007fc3119870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 2415.565363][T22536] RAX: ffffffffffffffda RBX: 00007fc310e25fa8 RCX: 00007fc310b9e559
[ 2415.573361][T22536] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc310e25fac
[ 2415.581370][T22536] RBP: 00007fc310e25fa0 R08: 0000000000745d1e R09: 0000000000000000
[ 2415.589387][T22536] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 2415.597407][T22536] R13: 00007fc310e26038 R14: 00007fffe4dd47c0 R15: 00007fffe4dd48a8
[ 2415.605421][T22536]  </TASK>
[ 2417.179049][    C1] net_ratelimit: 43 callbacks suppressed
[ 2417.605143][ T5869] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[ 2417.753339][ T9638] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 2417.801867][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2417.832223][ T5869] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2417.889505][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2417.914910][ T5869] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2417.924034][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2417.988284][ T5869] usb 1-1: config 0 descriptor??
[ 2418.018683][ T5869] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 2418.098133][ T9638] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2418.329711][ T9638] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2418.375301][ T9638] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2418.401514][ T9638] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2418.627952][ T9638] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2419.007699][ T9638] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2419.505752][T22467] usb 1-1: USB disconnect, device number 32
[ 2421.104269][T22467] usb 9-1: USB disconnect, device number 37
[ 2422.794807][    C1] net_ratelimit: 56 callbacks suppressed
[ 2423.606458][T22597] FAULT_INJECTION: forcing a failure.
[ 2423.606458][T22597] name fail_futex, interval 1, probability 0, space 0, times 0
[ 2423.631849][T22600] overlayfs: missing 'lowerdir'
[ 2423.646475][T22597] CPU: 1 PID: 22597 Comm: syz.2.3842 Not tainted syzkaller #0
[ 2423.654019][T22597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2423.664132][T22597] Call Trace:
[ 2423.667454][T22597]  <TASK>
[ 2423.670424][T22597]  dump_stack_lvl+0x18c/0x250
[ 2423.675162][T22597]  ? show_regs_print_info+0x20/0x20
[ 2423.680425][T22597]  ? load_image+0x420/0x420
[ 2423.684982][T22597]  ? mark_lock+0x94/0x320
[ 2423.689384][T22597]  ? __lock_acquire+0x135d/0x7eb0
[ 2423.694466][T22597]  ? plist_add+0x3db/0x490
[ 2423.698944][T22597]  should_fail_ex+0x394/0x4c0
[ 2423.703696][T22597]  get_futex_key+0x136/0x1030
[ 2423.708419][T22597]  ? futex_unqueue+0xcb/0xf0
[ 2423.713053][T22597]  ? futex_wait+0x4a7/0x5c0
[ 2423.717608][T22597]  ? futex_setup_timer+0xc0/0xc0
[ 2423.722604][T22597]  futex_wake+0x127/0x4f0
[ 2423.726997][T22597]  ? futex_wake_mark+0x150/0x150
[ 2423.732025][T22597]  do_futex+0x35d/0x3e0
[ 2423.736229][T22597]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2423.741309][T22597]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 2423.747262][T22597]  __se_sys_futex+0x3a9/0x440
[ 2423.752004][T22597]  ? __x64_sys_futex+0xf0/0xf0
[ 2423.756827][T22597]  ? __x64_sys_futex+0x21/0xf0
[ 2423.761646][T22597]  do_syscall_64+0x55/0xb0
[ 2423.766111][T22597]  ? clear_bhb_loop+0x40/0x90
[ 2423.770836][T22597]  ? clear_bhb_loop+0x40/0x90
[ 2423.775568][T22597]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2423.781538][T22597] RIP: 0033:0x7fc310b9e559
[ 2423.786000][T22597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2423.805627][T22597] RSP: 002b:00007fc3119870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 2423.805658][T22597] RAX: ffffffffffffffda RBX: 00007fc310e25fa8 RCX: 00007fc310b9e559
[ 2423.814093][T22597] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc310e25fac
[ 2423.830070][T22597] RBP: 00007fc310e25fa0 R08: 0000000000745d1e R09: 0000000000000000
[ 2423.830090][T22597] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 2423.830107][T22597] R13: 00007fc310e26038 R14: 00007fffe4dd47c0 R15: 00007fffe4dd48a8
[ 2423.830168][T22597]  </TASK>
[ 2423.900569][T22601] overlayfs: conflicting lowerdir path
[ 2423.952017][T22594] tmpfs: Group quota inode hardlimit too large.
[ 2426.434872][ T5869] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 2427.070721][ T5869] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2427.108007][ T5869] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2427.146542][ T5869] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2427.189745][ T5869] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2427.239217][ T5869] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2427.262523][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2428.061743][T22640] overlayfs: missing 'workdir'
[ 2428.074975][    C0] net_ratelimit: 66 callbacks suppressed
[ 2428.146618][T22643] overlayfs: conflicting lowerdir path
[ 2431.000999][   T23] usb 9-1: USB disconnect, device number 38
[ 2433.290831][    C1] net_ratelimit: 44 callbacks suppressed
[ 2435.825251][T22680] tmpfs: Group quota inode hardlimit too large.
[ 2437.152053][ T5872] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 2438.455511][    C0] net_ratelimit: 30 callbacks suppressed
[ 2438.515084][ T5872] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2438.538190][ T5872] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2438.556912][ T5872] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2438.595008][ T5872] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2438.649056][ T5872] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2438.697824][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2441.059984][ T9638] usb 7-1: new full-speed USB device number 31 using dummy_hcd
[ 2441.379884][ T9638] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2441.474977][ T9638] usb 7-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2441.534933][ T9638] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2441.542237][ T9638] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2441.560006][T21996] usb 9-1: USB disconnect, device number 39
[ 2441.594895][ T9638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2441.652052][ T9638] usb 7-1: config 0 descriptor??
[ 2441.682719][ T9638] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 2442.206072][T22716] overlayfs: missing 'workdir'
[ 2442.298320][T22716] overlayfs: conflicting lowerdir path
[ 2442.965264][T21996] usb 7-1: USB disconnect, device number 31
[ 2443.674841][    C1] net_ratelimit: 33 callbacks suppressed
[ 2448.135073][T11900] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[ 2448.357975][T11900] usb 7-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2448.397908][T11900] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2448.404638][T11900] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2448.438211][T11900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2448.511181][T11900] usb 7-1: config 0 descriptor??
[ 2448.550198][T22762] loop8: detected capacity change from 0 to 2048
[ 2448.572047][T11900] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 2448.770130][T22762]  loop8: p1 < > p3
[ 2448.851835][T22762] loop8: p3 size 134217728 extends beyond EOD, truncated
[ 2448.949875][ T5144]  loop8: p1 < > p3
[ 2448.970199][ T5144] loop8: p3 size 134217728 extends beyond EOD, truncated
[ 2449.274832][    C0] net_ratelimit: 39 callbacks suppressed
[ 2449.469987][T22759] udevd[22759]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[ 2449.486832][T22769] udevd[22769]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[ 2452.308396][T22770] usb 7-1: USB disconnect, device number 32
[ 2454.394828][    C1] net_ratelimit: 34 callbacks suppressed
[ 2454.675166][   T23] usb 7-1: new full-speed USB device number 33 using dummy_hcd
[ 2454.915167][   T23] usb 7-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2454.928763][   T23] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2454.936352][   T23] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2454.945620][   T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2455.038604][   T23] usb 7-1: config 0 descriptor??
[ 2455.096522][   T23] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 2457.912961][T11900] usb 7-1: USB disconnect, device number 33
[ 2459.310807][T17850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2459.329918][T17850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2459.339203][T17850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2459.349413][T17850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2459.373116][T17850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2459.381045][T17850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2459.457311][T19212] net_ratelimit: 27 callbacks suppressed
[ 2459.477713][T22873] rxe_eth0 speed is unknown, defaulting to 1000
[ 2460.374285][T10359] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2461.954996][T17850] Bluetooth: hci0: command tx timeout
[ 2462.850007][T10359] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2464.525692][T17850] Bluetooth: hci0: command tx timeout
[ 2464.532547][T10344] net_ratelimit: 27 callbacks suppressed
[ 2464.588635][T10359] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2465.030706][T10359] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2465.955590][T10359] tipc: Left network mode
[ 2466.363600][T22873] chnl_net:caif_netlink_parms(): no params data found
[ 2467.648293][T17850] Bluetooth: hci0: command tx timeout
[ 2468.126145][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 2468.132498][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 2469.595792][ T3490] net_ratelimit: 27 callbacks suppressed
[ 2469.637110][T22873] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2469.645290][T22873] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2469.653160][T22873] bridge_slave_0: entered allmulticast mode
[ 2469.679140][T22873] bridge_slave_0: entered promiscuous mode
[ 2469.686040][T17850] Bluetooth: hci0: command tx timeout
[ 2469.867506][T22873] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2469.888055][T22873] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2470.975803][T22873] bridge_slave_1: entered allmulticast mode
[ 2471.013940][T22873] bridge_slave_1: entered promiscuous mode
[ 2471.632366][T22873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2471.678790][T22873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2473.274355][T22966] FAULT_INJECTION: forcing a failure.
[ 2473.274355][T22966] name failslab, interval 1, probability 0, space 0, times 0
[ 2473.340182][T22966] CPU: 1 PID: 22966 Comm: syz.0.3931 Not tainted syzkaller #0
[ 2473.347827][T22966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2473.357934][T22966] Call Trace:
[ 2473.361252][T22966]  <TASK>
[ 2473.364207][T22966]  dump_stack_lvl+0x18c/0x250
[ 2473.368933][T22966]  ? show_regs_print_info+0x20/0x20
[ 2473.374194][T22966]  ? load_image+0x420/0x420
[ 2473.378736][T22966]  ? __might_sleep+0xe0/0xe0
[ 2473.383365][T22966]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2473.388404][T22966]  ? load_image+0x420/0x420
[ 2473.392930][T22966]  should_fail_ex+0x394/0x4c0
[ 2473.397639][T22966]  should_failslab+0x9/0x20
[ 2473.402166][T22966]  slab_pre_alloc_hook+0x59/0x300
[ 2473.407209][T22966]  ? __dynamic_pr_debug+0x1a3/0x260
[ 2473.412429][T22966]  ? pkcs8_key_preparse+0x12e/0x3e0
[ 2473.417641][T22966]  __kmem_cache_alloc_node+0x53/0x250
[ 2473.423038][T22966]  ? pkcs8_key_preparse+0x12e/0x3e0
[ 2473.428257][T22966]  kmalloc_trace+0x2a/0xe0
[ 2473.432692][T22966]  pkcs8_key_preparse+0x12e/0x3e0
[ 2473.437754][T22966]  ? pkcs8_note_key+0x80/0x80
[ 2473.442468][T22966]  ? down_read+0x1ac/0x2e0
[ 2473.446915][T22966]  asymmetric_key_preparse+0xa9/0x140
[ 2473.452310][T22966]  __key_create_or_update+0x3a6/0xa60
[ 2473.457716][T22966]  ? key_create_or_update+0x60/0x60
[ 2473.462940][T22966]  ? bpf_lsm_key_permission+0x9/0x10
[ 2473.468253][T22966]  ? lookup_user_key+0xb66/0x1140
[ 2473.473296][T22966]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[ 2473.479296][T22966]  key_create_or_update+0x42/0x60
[ 2473.484361][T22966]  __se_sys_add_key+0x34f/0x410
[ 2473.489264][T22966]  ? __x64_sys_add_key+0xc0/0xc0
[ 2473.494258][T22966]  ? lockdep_hardirqs_on+0x98/0x150
[ 2473.499520][T22966]  ? __x64_sys_add_key+0x20/0xc0
[ 2473.504502][T22966]  do_syscall_64+0x55/0xb0
[ 2473.508946][T22966]  ? clear_bhb_loop+0x40/0x90
[ 2473.513644][T22966]  ? clear_bhb_loop+0x40/0x90
[ 2473.518356][T22966]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2473.524273][T22966] RIP: 0033:0x7f483879e559
[ 2473.528697][T22966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2473.548315][T22966] RSP: 002b:00007f4839596028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 2473.556746][T22966] RAX: ffffffffffffffda RBX: 00007f4838a25fa0 RCX: 00007f483879e559
[ 2473.564755][T22966] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[ 2473.572772][T22966] RBP: 00007f4838835ab8 R08: ffffffffffffffff R09: 0000000000000000
[ 2473.580758][T22966] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[ 2473.588760][T22966] R13: 00007f4838a26038 R14: 00007f4838a25fa0 R15: 00007ffca92ef518
[ 2473.596755][T22966]  </TASK>
[ 2473.765428][T10359] dvmrp0 (unregistering): left allmulticast mode
[ 2473.873328][T22873] team0: Port device team_slave_0 added
[ 2473.928588][T22873] team0: Port device team_slave_1 added
[ 2474.635947][   T50] net_ratelimit: 28 callbacks suppressed
[ 2474.695963][T22873] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2474.710824][T22873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2474.815230][T22873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2474.845915][T22873] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2474.852939][T22873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2474.935084][T22873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2475.781765][T22873] hsr_slave_0: entered promiscuous mode
[ 2475.824340][T22873] hsr_slave_1: entered promiscuous mode
[ 2475.903232][T10359] hsr_slave_0: left promiscuous mode
[ 2475.965006][T10359] hsr_slave_1: left promiscuous mode
[ 2475.973936][T10359] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2475.987517][T10359] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2476.035072][T10359] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2476.042529][T10359] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2476.085099][T10359] bridge_slave_1: left allmulticast mode
[ 2476.090769][T10359] bridge_slave_1: left promiscuous mode
[ 2476.121075][T10359] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2477.672539][T10359] bridge_slave_0: left allmulticast mode
[ 2477.779180][T10359] bridge_slave_0: left promiscuous mode
[ 2477.785483][T10359] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2479.654367][    C0] net_ratelimit: 27 callbacks suppressed
[ 2479.911126][T10359] veth1_macvtap: left promiscuous mode
[ 2479.944837][T10359] veth0_macvtap: left promiscuous mode
[ 2479.950612][T10359] veth1_vlan: left promiscuous mode
[ 2479.985748][T10359] veth0_vlan: left promiscuous mode
[ 2480.273961][T23002] device-mapper: table: 248:1: mirror: Insufficient mirror log arguments (-EINVAL)
[ 2480.301829][T23002] device-mapper: ioctl: error adding target to table
[ 2484.961076][    C1] net_ratelimit: 26 callbacks suppressed
[ 2485.148322][T23019] loop6: detected capacity change from 0 to 4096
[ 2485.402859][T23019] ntfs3: loop6: failed to convert "0080" to macromanian
[ 2485.447531][T23019] ntfs3: loop6: failed to convert name for inode 1e.
[ 2485.457301][T23022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3941'.
[ 2485.471909][T23019] ntfs3: loop6: ino=1f, mi_enum_attr
[ 2485.493592][T23019] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[ 2485.606792][T23019] ntfs3: loop6: ino=1f, mi_enum_attr
[ 2485.762164][T10359] team0 (unregistering): Port device team_slave_1 removed
[ 2485.909667][T10359] team0 (unregistering): Port device team_slave_0 removed
[ 2486.023325][T10359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2486.176455][T10359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2488.622831][T10359] bond0 (unregistering): Released all slaves
[ 2488.642223][T23042] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3949'.
[ 2489.147225][T23044] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3957'.
[ 2490.075000][    C1] net_ratelimit: 19 callbacks suppressed
[ 2493.476992][T23072] FAULT_INJECTION: forcing a failure.
[ 2493.476992][T23072] name failslab, interval 1, probability 0, space 0, times 0
[ 2493.536557][T23072] CPU: 0 PID: 23072 Comm: syz.2.3950 Not tainted syzkaller #0
[ 2493.544100][T23072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2493.554184][T23072] Call Trace:
[ 2493.554215][T23072]  <TASK>
[ 2493.554226][T23072]  dump_stack_lvl+0x18c/0x250
[ 2493.554255][T23072]  ? show_regs_print_info+0x20/0x20
[ 2493.570739][T23072]  ? load_image+0x420/0x420
[ 2493.575315][T23072]  ? __might_sleep+0xe0/0xe0
[ 2493.576664][T23074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3951'.
[ 2493.579945][T23072]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2493.593880][T23072]  ? load_image+0x420/0x420
[ 2493.598450][T23072]  should_fail_ex+0x394/0x4c0
[ 2493.603179][T23072]  should_failslab+0x9/0x20
[ 2493.607910][T23072]  slab_pre_alloc_hook+0x59/0x300
[ 2493.607937][T23072]  ? __dynamic_pr_debug+0x1a3/0x260
[ 2493.607973][T23072]  ? pkcs8_key_preparse+0x12e/0x3e0
[ 2493.623516][T23072]  __kmem_cache_alloc_node+0x53/0x250
[ 2493.628958][T23072]  ? pkcs8_key_preparse+0x12e/0x3e0
[ 2493.634207][T23072]  kmalloc_trace+0x2a/0xe0
[ 2493.638697][T23072]  pkcs8_key_preparse+0x12e/0x3e0
[ 2493.643800][T23072]  ? pkcs8_note_key+0x80/0x80
[ 2493.648540][T23072]  ? down_read+0x1ac/0x2e0
[ 2493.653019][T23072]  asymmetric_key_preparse+0xa9/0x140
[ 2493.658461][T23072]  __key_create_or_update+0x3a6/0xa60
[ 2493.663879][T23072]  ? key_create_or_update+0x60/0x60
[ 2493.669118][T23072]  ? bpf_lsm_key_permission+0x9/0x10
[ 2493.674442][T23072]  ? lookup_user_key+0xb66/0x1140
[ 2493.679515][T23072]  ? search_process_keyrings_rcu+0x2b0/0x2b0
[ 2493.685531][T23072]  key_create_or_update+0x42/0x60
[ 2493.690608][T23072]  __se_sys_add_key+0x34f/0x410
[ 2493.695507][T23072]  ? __x64_sys_add_key+0xc0/0xc0
[ 2493.700486][T23072]  ? lockdep_hardirqs_on+0x98/0x150
[ 2493.705723][T23072]  ? __x64_sys_add_key+0x20/0xc0
[ 2493.710705][T23072]  do_syscall_64+0x55/0xb0
[ 2493.715157][T23072]  ? clear_bhb_loop+0x40/0x90
[ 2493.719868][T23072]  ? clear_bhb_loop+0x40/0x90
[ 2493.724572][T23072]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2493.730507][T23072] RIP: 0033:0x7fc310b9e559
[ 2493.734954][T23072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2493.754601][T23072] RSP: 002b:00007fc311987028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 2493.763047][T23072] RAX: ffffffffffffffda RBX: 00007fc310e25fa0 RCX: 00007fc310b9e559
[ 2493.771047][T23072] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[ 2493.779053][T23072] RBP: 00007fc310c35ab8 R08: ffffffffffffffff R09: 0000000000000000
[ 2493.787051][T23072] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000
[ 2493.795057][T23072] R13: 00007fc310e26038 R14: 00007fc310e25fa0 R15: 00007fffe4dd48a8
[ 2493.803087][T23072]  </TASK>
[ 2494.544968][ T9638] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[ 2494.736946][ T9638] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2494.768456][T22873] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 2495.104939][    C1] net_ratelimit: 20 callbacks suppressed
[ 2496.201979][T22873] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 2496.295769][T22873] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 2496.335079][ T9638] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2496.344962][ T9638] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2496.344999][ T9638] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2496.364564][ T9638] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2496.374449][ T9638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2496.399241][ T9638] usb 3-1: config 0 descriptor??
[ 2496.467805][T22873] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 2498.392031][ T9638] usbhid 3-1:0.0: can't add hid device: -71
[ 2498.415143][ T9638] usbhid: probe of 3-1:0.0 failed with error -71
[ 2498.451132][ T9638] usb 3-1: USB disconnect, device number 48
[ 2498.577934][T22873] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2498.650293][T22873] 8021q: adding VLAN 0 to HW filter on device team0
[ 2498.717084][T19212] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2498.724350][T19212] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2498.774019][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2498.781261][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2499.646149][T22873] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2499.715185][ T9638] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 2499.914213][ T9638] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2499.935159][ T9638] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2499.953211][ T9638] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2500.234904][    C1] net_ratelimit: 26 callbacks suppressed
[ 2501.579208][ T9638] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2501.592225][ T9638] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2501.706490][ T9638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2501.785674][T23145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3960'.
[ 2502.237538][T22873] veth0_vlan: entered promiscuous mode
[ 2502.281414][T22873] veth1_vlan: entered promiscuous mode
[ 2502.392115][T22873] veth0_macvtap: entered promiscuous mode
[ 2502.433021][T22873] veth1_macvtap: entered promiscuous mode
[ 2502.506587][T22873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2502.542380][T22873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2502.580486][T22873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2502.633894][T22873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2502.693354][T22873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2502.739347][T22873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2502.778878][T22873] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2503.493334][T22873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2503.545602][T22873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2503.596334][T11900] usb 3-1: USB disconnect, device number 49
[ 2503.629524][T22873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2503.629543][T22873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2503.629564][T22873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2503.651979][T22873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2503.672198][T22873] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2503.708501][T22873] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2503.755222][T22873] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2503.764010][T22873] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2503.775252][T22873] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2505.443223][    C0] net_ratelimit: 41 callbacks suppressed
[ 2505.659298][T10344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2505.741857][T10344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2505.911648][T10344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2505.922819][T10344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2506.675530][ T5869] usb 7-1: new full-speed USB device number 34 using dummy_hcd
[ 2506.774868][T22467] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 2506.897551][ T5869] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2506.922095][ T5869] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2506.964463][ T5869] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2506.977570][T22467] usb 9-1: Using ep0 maxpacket: 8
[ 2507.004911][T22467] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 2507.024826][T22467] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2507.044893][ T5869] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2507.064844][ T5869] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2507.096283][T22467] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2507.124795][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2507.133782][T22467] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2507.153914][T22467] usb 9-1: SerialNumber: syz
[ 2507.160441][ T5869] usb 7-1: config 0 descriptor??
[ 2507.188127][T23191] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 2507.300765][T23199] loop0: detected capacity change from 0 to 2048
[ 2507.408553][T23199] Alternate GPT is invalid, using primary GPT.
[ 2507.424655][T23191] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 2507.453373][T23199]  loop0: p1 p2 p3
[ 2507.612593][ T5869] usbhid 7-1:0.0: can't add hid device: -71
[ 2507.619404][ T5144] Alternate GPT is invalid, using primary GPT.
[ 2507.635035][ T5869] usbhid: probe of 7-1:0.0 failed with error -71
[ 2507.642285][ T5144]  loop0: p1 p2 p3
[ 2507.676848][ T5869] usb 7-1: USB disconnect, device number 34
[ 2507.969666][T22467] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42
[ 2508.128527][T23209] udevd[23209]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[ 2508.144638][T23206] udevd[23206]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[ 2508.176438][T23207] udevd[23207]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[ 2508.367672][T23214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3972'.
[ 2508.511574][   T23] usb 9-1: USB disconnect, device number 40
[ 2508.754106][   T23] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device
[ 2509.555558][ T5869] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 2509.758067][ T5869] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2509.815171][ T5869] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2509.862089][ T5869] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2510.635147][    C0] net_ratelimit: 45 callbacks suppressed
[ 2511.479319][ T5869] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2511.504977][ T5869] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2511.524793][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2512.017102][ T5869] usb 7-1: USB disconnect, device number 35
[ 2512.534399][T23248] loop6: detected capacity change from 0 to 2048
[ 2512.719348][T23248] Alternate GPT is invalid, using primary GPT.
[ 2512.755117][T23248]  loop6: p1 p2 p3
[ 2513.184825][ T5869] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[ 2513.436599][ T5869] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2513.503117][ T5869] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2513.571775][ T5869] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2513.651996][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2513.716344][ T5869] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2513.775015][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2513.840964][ T5869] usb 1-1: config 0 descriptor??
[ 2514.154163][T23274] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3985'.
[ 2514.355254][ T5869] usbhid 1-1:0.0: can't add hid device: -71
[ 2514.405114][ T5869] usbhid: probe of 1-1:0.0 failed with error -71
[ 2514.466025][ T5869] usb 1-1: USB disconnect, device number 33
[ 2515.885029][  T172] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 2516.060967][T23286] tmpfs: Group quota inode hardlimit too large.
[ 2516.076981][    C0] net_ratelimit: 31 callbacks suppressed
[ 2517.094797][  T172] usb 7-1: Using ep0 maxpacket: 8
[ 2517.130459][  T172] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 2517.178224][  T172] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2517.268853][  T172] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2517.283413][  T172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2517.292662][  T172] usb 7-1: SerialNumber: syz
[ 2517.309843][T23280] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 2519.335417][  T172] cdc_ether: probe of 7-1:1.0 failed with error -71
[ 2519.417293][  T172] usb 7-1: USB disconnect, device number 36
[ 2520.554990][  T172] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 2520.771990][  T172] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2520.792489][  T172] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2520.813025][  T172] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2520.834278][  T172] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2520.884844][  T172] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2520.919448][  T172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2521.194803][    C1] net_ratelimit: 48 callbacks suppressed
[ 2523.163758][  T172] usb 9-1: new full-speed USB device number 41 using dummy_hcd
[ 2523.921902][   T23] usb 3-1: USB disconnect, device number 50
[ 2523.995481][  T172] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2524.008224][  T172] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2524.018024][  T172] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2524.031926][  T172] usb 9-1: config 0 interface 0 has no altsetting 0
[ 2524.038871][  T172] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2524.088861][  T172] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2524.126421][  T172] usb 9-1: config 0 descriptor??
[ 2526.256902][  T172] usbhid 9-1:0.0: can't add hid device: -71
[ 2526.263055][  T172] usbhid: probe of 9-1:0.0 failed with error -71
[ 2526.338902][  T172] usb 9-1: USB disconnect, device number 41
[ 2526.436401][T23342] loop8: detected capacity change from 0 to 256
[ 2526.625042][ T9638] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 2526.634774][    C0] net_ratelimit: 24 callbacks suppressed
[ 2526.855127][ T9638] usb 3-1: Using ep0 maxpacket: 8
[ 2526.882679][ T9638] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 2526.901749][ T9638] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2526.941635][ T9638] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2526.961073][ T9638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2526.972266][ T9638] usb 3-1: SerialNumber: syz
[ 2526.992777][T23340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2527.267516][T23340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 2527.783296][ T9638] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[ 2528.135184][ T9638] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 2528.542479][    T9] usb 3-1: USB disconnect, device number 51
[ 2529.289977][    C1] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[ 2529.354262][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 2529.371553][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 2529.586905][ T9638] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2530.704049][ T9638] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2530.808273][ T9638] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2530.818279][ T9638] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2530.831461][ T9638] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2530.840672][ T9638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2530.884828][    T9] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[ 2530.981785][ T9638] usb 7-1: can't set config #1, error -71
[ 2531.014430][ T9638] usb 7-1: USB disconnect, device number 37
[ 2531.756026][    C1] net_ratelimit: 29 callbacks suppressed
[ 2531.954825][    T9] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[ 2532.183968][    T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2532.224754][    T9] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2532.253996][T23387] FAULT_INJECTION: forcing a failure.
[ 2532.253996][T23387] name failslab, interval 1, probability 0, space 0, times 0
[ 2532.267677][T23387] CPU: 0 PID: 23387 Comm: syz.6.4017 Not tainted syzkaller #0
[ 2532.275174][T23387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2532.285371][T23387] Call Trace:
[ 2532.288698][T23387]  <TASK>
[ 2532.291713][T23387]  dump_stack_lvl+0x18c/0x250
[ 2532.296476][T23387]  ? show_regs_print_info+0x20/0x20
[ 2532.301718][T23387]  ? load_image+0x420/0x420
[ 2532.306271][T23387]  should_fail_ex+0x394/0x4c0
[ 2532.310985][T23387]  ? __sigqueue_alloc+0x32/0x520
[ 2532.315926][T23387]  should_failslab+0x9/0x20
[ 2532.320495][T23387]  slab_pre_alloc_hook+0x59/0x300
[ 2532.320518][T23387]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2532.330579][T23387]  ? __sigqueue_alloc+0x32/0x520
[ 2532.335550][T23387]  kmem_cache_alloc+0x5a/0x2c0
[ 2532.335586][T23387]  ? __sigqueue_alloc+0x40c/0x520
[ 2532.345562][T23387]  ? __sigqueue_alloc+0x32/0x520
[ 2532.345590][T23387]  __sigqueue_alloc+0x40c/0x520
[ 2532.345621][T23387]  __send_signal_locked+0x22f/0xe00
[ 2532.355428][T23387]  do_notify_parent+0xb26/0xd10
[ 2532.355461][T23387]  ? trace_signal_generate+0x1c0/0x1c0
[ 2532.365666][T23387]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2532.376210][T23387]  release_task+0x1227/0x1690
[ 2532.380941][T23387]  ? do_exit+0x1888/0x2530
[ 2532.380980][T23387]  ? delayed_put_task_struct+0x2a0/0x2a0
[ 2532.391038][T23387]  ? _raw_write_lock_irq+0xbb/0xf0
[ 2532.396255][T23387]  ? _raw_write_lock_irqsave+0x100/0x100
[ 2532.401945][T23387]  ? _raw_write_unlock_irq+0x23/0x50
[ 2532.407254][T23387]  ? lockdep_hardirqs_on+0x98/0x150
[ 2532.412470][T23387]  do_exit+0x1888/0x2530
[ 2532.416743][T23387]  ? put_task_struct+0xc0/0xc0
[ 2532.421533][T23387]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2532.427529][T23387]  ? get_signal+0x100e/0x1390
[ 2532.432214][T23387]  ? lock_chain_count+0x20/0x20
[ 2532.437134][T23387]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 2532.442171][T23387]  do_group_exit+0x22d/0x2f0
[ 2532.446768][T23387]  ? lockdep_hardirqs_on+0x98/0x150
[ 2532.451980][T23387]  get_signal+0x12a6/0x1390
[ 2532.456510][T23387]  arch_do_signal_or_restart+0xc2/0x7b0
[ 2532.462089][T23387]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 2532.467998][T23387]  ? slab_free_freelist_hook+0x130/0x1a0
[ 2532.473643][T23387]  ? get_sigframe_size+0x20/0x20
[ 2532.478633][T23387]  ? exit_to_user_mode_loop+0x3b/0x110
[ 2532.484132][T23387]  exit_to_user_mode_loop+0x70/0x110
[ 2532.489458][T23387]  exit_to_user_mode_prepare+0xee/0x180
[ 2532.495042][T23387]  syscall_exit_to_user_mode+0x1a/0x50
[ 2532.500548][T23387]  do_syscall_64+0x61/0xb0
[ 2532.505012][T23387]  ? clear_bhb_loop+0x40/0x90
[ 2532.509719][T23387]  ? clear_bhb_loop+0x40/0x90
[ 2532.514410][T23387]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2532.520321][T23387] RIP: 0033:0x7f869079e559
[ 2532.524873][T23387] Code: Unable to access opcode bytes at 0x7f869079e52f.
[ 2532.531932][T23387] RSP: 002b:00007f86915880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 2532.540357][T23387] RAX: 0000000000000001 RBX: 00007f8690a25fa8 RCX: 00007f869079e559
[ 2532.548339][T23387] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8690a25fac
[ 2532.556356][T23387] RBP: 00007f8690a25fa0 R08: 0000000000745d1e R09: 0000000000000000
[ 2532.564345][T23387] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 2532.572332][T23387] R13: 00007f8690a26038 R14: 00007ffd62cbba10 R15: 00007ffd62cbbaf8
[ 2532.580342][T23387]  </TASK>
[ 2532.585547][    T9] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2532.598733][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2532.605487][    T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2532.614562][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2532.689118][    T9] usb 3-1: config 0 descriptor??
[ 2534.800116][    T9] usbhid 3-1:0.0: can't add hid device: -71
[ 2534.856324][    T9] usbhid: probe of 3-1:0.0 failed with error -71
[ 2534.937302][    T9] usb 3-1: USB disconnect, device number 52
[ 2535.087487][    C1] hrtimer: interrupt took 592675 ns
[ 2536.875849][ T3490] net_ratelimit: 41 callbacks suppressed
[ 2539.995211][T11900] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 2540.332595][T11900] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2540.392337][T11900] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2540.445260][T11900] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2540.504939][T11900] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2540.585153][T11900] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2540.629686][T11900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2540.773250][T11900] usb 9-1: can't set config #1, error -71
[ 2540.852968][T11900] usb 9-1: USB disconnect, device number 42
[ 2541.772735][T23440] loop8: detected capacity change from 0 to 32768
[ 2541.820935][T23440] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.4027 (23440)
[ 2541.847267][T23440] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2541.857652][T23440] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[ 2541.866508][T23440] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 2541.876795][T23440] BTRFS info (device loop8): use zstd compression, level 3
[ 2541.884051][T23440] BTRFS info (device loop8): force clearing of disk cache
[ 2541.891611][T23440] BTRFS info (device loop8): enabling disk space caching
[ 2541.898864][T23440] BTRFS info (device loop8): disk space caching is enabled
[ 2542.029325][T23457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4028'.
[ 2542.074822][    C1] net_ratelimit: 20 callbacks suppressed
[ 2542.107239][T23440] BTRFS info (device loop8): enabling ssd optimizations
[ 2542.114230][T23440] BTRFS info (device loop8): auto enabling async discard
[ 2542.125015][T23440] BTRFS info (device loop8): rebuilding free space tree
[ 2544.211981][T23440] BTRFS info (device loop8): disabling free space tree
[ 2544.219339][T23440] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 2544.229568][T23440] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 2544.584765][ T9638] usb 7-1: new full-speed USB device number 38 using dummy_hcd
[ 2544.700085][T22873] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 2544.858476][ T9638] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2544.905047][ T9638] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2544.994363][ T9638] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2545.067909][ T9638] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2545.074654][ T9638] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2545.114271][ T9638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2545.256241][ T9638] usb 7-1: config 0 descriptor??
[ 2546.567183][ T9638] usbhid 7-1:0.0: can't add hid device: -71
[ 2546.573325][ T9638] usbhid: probe of 7-1:0.0 failed with error -71
[ 2546.806344][ T9638] usb 7-1: USB disconnect, device number 38
[ 2547.146826][T23476] netlink: 'syz.8.4033': attribute type 10 has an invalid length.
[ 2547.293479][T23476] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 2547.353865][T23477] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4033'.
[ 2547.363020][    C0] net_ratelimit: 34 callbacks suppressed
[ 2547.454853][ T9638] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[ 2547.647963][ T9638] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2547.688822][ T9638] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2547.768158][ T9638] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2547.834898][ T9638] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2547.924913][ T9638] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2547.975277][ T9638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2548.068642][T23477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2548.243814][T23477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2548.485867][T23477] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[ 2548.494472][ T9638] gud: probe of 7-1:1.0 failed with error -5
[ 2548.647707][T23477] bond0 (unregistering): Released all slaves
[ 2551.704187][   T23] usb 7-1: USB disconnect, device number 39
[ 2552.171473][T23492] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 2552.255306][T23492] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2552.394875][    C1] net_ratelimit: 36 callbacks suppressed
[ 2552.403748][   T23] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 2552.643620][   T23] usb 1-1: Using ep0 maxpacket: 8
[ 2552.755161][   T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[ 2552.814898][   T23] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2554.884620][   T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2554.896236][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 2554.906927][   T23] usb 1-1: SerialNumber: syz
[ 2554.929519][T23494] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 2555.449360][   T23] cdc_ether: probe of 1-1:1.0 failed with error -71
[ 2555.529983][   T23] usb 1-1: USB disconnect, device number 34
[ 2555.620277][T23503] nbd6: detected capacity change from 0 to 18
[ 2555.624611][T17850] block nbd6: Receive control failed (result -107)
[ 2555.745443][T11852] block nbd6: Dead connection, failed to find a fallback
[ 2555.753167][T11852] block nbd6: shutting down sockets
[ 2555.764906][T11852] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2555.777837][T11852] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 2555.794565][T11852] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2555.804583][T11852] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 2555.815450][T11852] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2555.824568][T11852] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 2555.833247][T11852] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2555.842411][T11852] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 2555.850559][T11852] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2555.859737][T11852] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 2555.875520][T23472] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2555.885968][T23472] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 2555.914168][T23507] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2555.923919][T23507] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 2555.924197][T23507] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2555.924228][T23507] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 2555.924279][T23486] ldm_validate_partition_table(): Disk read failed.
[ 2555.924405][T23507] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2555.924435][T23507] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 2555.924968][T23507] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2555.983910][T23507] Buffer I/O error on dev nbd6, logical block 0, async page read
[ 2555.992126][T23486] Dev nbd6: unable to read RDB block 0
[ 2555.998184][T23486]  nbd6: unable to read partition table
[ 2556.004046][T23486] nbd6: partition table beyond EOD, truncated
[ 2556.026560][T23486] ldm_validate_partition_table(): Disk read failed.
[ 2556.033868][T23486] Dev nbd6: unable to read RDB block 0
[ 2556.045917][T23486]  nbd6: unable to read partition table
[ 2556.051780][T23486] nbd6: partition table beyond EOD, truncated
[ 2556.125684][T23503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4041'.
[ 2556.208889][T23503] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4041'.
[ 2556.244793][T23503] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[ 2558.154763][    C0] net_ratelimit: 28 callbacks suppressed
[ 2560.716480][T11900] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 2560.861883][T12770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2560.878857][T12770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2560.890912][T12770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2560.928635][T12770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2560.956158][T12770] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 2560.967133][T12770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2560.981582][T11900] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2560.994037][T11900] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2561.006144][T11900] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2561.018527][T11900] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2561.047137][T11900] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2561.058533][T11900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2561.567365][T11900] gud: probe of 3-1:1.0 failed with error -5
[ 2561.644045][T20762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2561.741889][T23541] rxe_eth0 speed is unknown, defaulting to 1000
[ 2561.923933][T20762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2561.934998][T11900] usb 9-1: new full-speed USB device number 43 using dummy_hcd
[ 2562.117820][T20762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2562.191714][T11900] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2562.244894][T11900] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2562.275102][T11900] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2562.312859][T11900] usb 9-1: config 0 interface 0 has no altsetting 0
[ 2562.335757][T11900] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2562.346637][T11900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2562.368888][T11900] usb 9-1: config 0 descriptor??
[ 2562.425922][T20762] bond0: (slave netdevsim0): Releasing backup interface
[ 2562.459083][T20762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2563.196122][T12770] Bluetooth: hci3: command tx timeout
[ 2563.434910][    C1] net_ratelimit: 29 callbacks suppressed
[ 2563.482678][T11900] usbhid 9-1:0.0: can't add hid device: -71
[ 2563.505330][T11900] usbhid: probe of 9-1:0.0 failed with error -71
[ 2563.534913][T11900] usb 9-1: USB disconnect, device number 43
[ 2563.602324][ T9638] usb 3-1: USB disconnect, device number 53
[ 2564.029230][T23560] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 2564.075268][T23560] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 2566.546914][T17850] Bluetooth: hci3: command tx timeout
[ 2566.975033][T20762] tipc: Left network mode
[ 2569.102269][    C1] net_ratelimit: 17 callbacks suppressed
[ 2569.114944][T17850] Bluetooth: hci3: command tx timeout
[ 2569.702192][T23541] chnl_net:caif_netlink_parms(): no params data found
[ 2571.195873][T17850] Bluetooth: hci3: command tx timeout
[ 2571.730745][T23541] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2571.739531][T23592] loop2: detected capacity change from 0 to 256
[ 2571.754842][T23541] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2571.762209][T23541] bridge_slave_0: entered allmulticast mode
[ 2571.831829][T23541] bridge_slave_0: entered promiscuous mode
[ 2571.909374][T23541] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2571.948830][T23541] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2571.993222][T23541] bridge_slave_1: entered allmulticast mode
[ 2572.037178][T23541] bridge_slave_1: entered promiscuous mode
[ 2574.638483][T14230] net_ratelimit: 23 callbacks suppressed
[ 2574.899645][T23603] loop6: detected capacity change from 0 to 256
[ 2579.664941][  T172] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[ 2579.754722][    C0] net_ratelimit: 26 callbacks suppressed
[ 2582.562858][  T172] usb 3-1: device descriptor read/all, error -71
[ 2582.785425][T23541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2582.809095][T23541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2583.535747][T23541] team0: Port device team_slave_0 added
[ 2583.576724][T23541] team0: Port device team_slave_1 added
[ 2583.965840][T23541] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2583.972850][T23541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2584.144962][T23541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2584.300221][T23541] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2584.329001][T23541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2584.525594][T23541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2585.237700][T20762] hsr_slave_0: left promiscuous mode
[ 2585.276399][T20762] hsr_slave_1: left promiscuous mode
[ 2585.307731][T20762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2585.342003][T20762] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2585.354737][    C0] net_ratelimit: 27 callbacks suppressed
[ 2585.385948][    T9] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 2585.395976][T20762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2585.403479][T20762] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2585.471885][T20762] bridge_slave_1: left allmulticast mode
[ 2585.500920][T20762] bridge_slave_1: left promiscuous mode
[ 2585.522390][T20762] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2585.575757][T20762] bridge_slave_0: left allmulticast mode
[ 2585.599947][    T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2585.614750][T20762] bridge_slave_0: left promiscuous mode
[ 2585.620600][T20762] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2585.641711][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2585.700849][    T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2585.743447][    T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2585.822178][    T9] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2585.868561][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2585.912911][T20762] veth1_macvtap: left promiscuous mode
[ 2585.951564][T20762] veth0_macvtap: left promiscuous mode
[ 2585.986879][T20762] veth1_vlan: left promiscuous mode
[ 2586.019008][T20762] veth0_vlan: left promiscuous mode
[ 2586.381981][    T9] gud: probe of 9-1:1.0 failed with error -5
[ 2589.490849][T17850] block nbd2: Receive control failed (result -107)
[ 2589.491258][T23647] nbd2: detected capacity change from 0 to 18
[ 2589.532318][ T5869] usb 9-1: USB disconnect, device number 44
[ 2589.545992][T23647] block nbd2: shutting down sockets
[ 2589.594877][T23647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4063'.
[ 2589.603810][T23647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4063'.
[ 2589.646151][T23647] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22)
[ 2591.868124][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 2591.895050][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 2591.914742][    C0] net_ratelimit: 41 callbacks suppressed
[ 2592.935054][   T23] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[ 2593.228033][   T23] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2593.260051][   T23] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2593.304983][   T23] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2593.344991][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2593.353803][   T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2593.414954][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2593.453587][   T23] usb 3-1: config 0 descriptor??
[ 2593.964126][   T23] usbhid 3-1:0.0: can't add hid device: -71
[ 2594.005673][   T23] usbhid: probe of 3-1:0.0 failed with error -71
[ 2594.043594][   T23] usb 3-1: USB disconnect, device number 56
[ 2594.454788][T22770] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[ 2594.661006][T22770] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2594.702872][T22770] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2594.745283][T22770] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 2594.754395][T22770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2594.828420][T22770] usb 7-1: config 0 descriptor??
[ 2594.976807][T20762] team0 (unregistering): Port device team_slave_1 removed
[ 2595.262874][T20762] team0 (unregistering): Port device team_slave_0 removed
[ 2595.283212][T22770] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[ 2595.441963][T22770] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[ 2595.515225][T22770] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[ 2595.554762][T22770] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[ 2595.581238][T22770] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[ 2595.626582][T22770] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[ 2595.644533][T22770] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0
[ 2595.720734][T22770] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[ 2595.767399][T20762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2595.850582][T22770] cp2112 0003:10C4:EA90.0007: error requesting version
[ 2595.944150][T22770] cp2112: probe of 0003:10C4:EA90.0007 failed with error -71
[ 2596.071406][T22770] usb 7-1: USB disconnect, device number 40
[ 2596.250252][T20762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2596.877706][T22770] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[ 2597.115606][T22770] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2597.159395][T22770] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2597.191374][T22770] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2597.213164][T22770] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2597.274813][    C1] net_ratelimit: 55 callbacks suppressed
[ 2597.285451][T22770] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2597.294556][T22770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2597.847570][T22770] gud: probe of 7-1:1.0 failed with error -5
[ 2601.059400][    T9] usb 7-1: USB disconnect, device number 41
[ 2601.134943][T22770] usb 9-1: new full-speed USB device number 45 using dummy_hcd
[ 2601.410228][T22770] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2601.464798][T22770] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2601.507323][T22770] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 2601.549351][T22770] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2601.606064][T22770] usb 9-1: config 0 descriptor??
[ 2601.626334][T20762] bond0 (unregistering): Released all slaves
[ 2601.750382][T23692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2601.825581][T23692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2601.957945][T22770] usbhid 9-1:0.0: can't add hid device: -71
[ 2602.003261][T22770] usbhid: probe of 9-1:0.0 failed with error -71
[ 2602.058889][T22770] usb 9-1: USB disconnect, device number 45
[ 2602.470662][T23541] hsr_slave_0: entered promiscuous mode
[ 2602.506386][T23541] hsr_slave_1: entered promiscuous mode
[ 2602.524889][ T5869] usb 7-1: new full-speed USB device number 42 using dummy_hcd
[ 2602.545126][T23541] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2602.578012][T23541] Cannot create hsr debugfs directory
[ 2602.809130][ T5869] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2602.887742][ T5869] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2602.942702][ T5869] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2602.991820][ T5869] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2603.027672][ T5869] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2603.068471][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2603.134034][ T5869] usb 7-1: config 0 descriptor??
[ 2603.204920][    C1] net_ratelimit: 28 callbacks suppressed
[ 2603.604439][ T5869] usbhid 7-1:0.0: can't add hid device: -71
[ 2603.615407][ T5869] usbhid: probe of 7-1:0.0 failed with error -71
[ 2603.664203][ T5869] usb 7-1: USB disconnect, device number 42
[ 2604.088434][T23703] nbd2: detected capacity change from 0 to 18
[ 2604.090579][T17850] block nbd2: Receive control failed (result -107)
[ 2604.187865][T23704] block nbd2: shutting down sockets
[ 2604.266761][T23507] blk_print_req_error: 25 callbacks suppressed
[ 2604.266777][T23507] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2604.282356][T23507] buffer_io_error: 25 callbacks suppressed
[ 2604.282372][T23507] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 2604.305267][T23472] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2604.315986][T23472] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 2604.325806][T23472] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2604.336535][T23472] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 2604.345951][T23472] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2604.356758][T23472] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 2604.366267][T23472] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2604.377211][T23472] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 2604.387518][T23472] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2604.399232][T23472] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 2604.409224][T23472] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2604.419973][T23472] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 2604.431493][T23472] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2604.442637][T23472] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 2604.452157][T23657] ldm_validate_partition_table(): Disk read failed.
[ 2604.460376][T23472] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2604.470535][T23472] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 2604.480541][T23472] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 2604.490739][T23472] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 2604.547305][T23657] Dev nbd2: unable to read RDB block 0
[ 2604.574303][T23657]  nbd2: unable to read partition table
[ 2604.615161][T23657] nbd2: partition table beyond EOD, truncated
[ 2606.715316][T23657] ldm_validate_partition_table(): Disk read failed.
[ 2606.971582][ T5869] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 2607.057748][T23657] Dev nbd2: unable to read RDB block 0
[ 2607.077235][T23657]  nbd2: unable to read partition table
[ 2607.083123][T23657] nbd2: partition table beyond EOD, truncated
[ 2607.241097][ T5869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2607.325089][ T5869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2607.403247][ T5869] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 2607.474286][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2607.575475][ T5869] usb 9-1: config 0 descriptor??
[ 2607.984272][ T5869] usbhid 9-1:0.0: can't add hid device: -71
[ 2608.015757][ T5869] usbhid: probe of 9-1:0.0 failed with error -71
[ 2608.122624][ T5869] usb 9-1: USB disconnect, device number 46
[ 2608.664921][    T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 2608.714814][    C1] net_ratelimit: 30 callbacks suppressed
[ 2608.883048][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2608.937155][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2609.012591][    T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2609.083028][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2609.180063][    T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2609.230257][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2609.748526][    T9] gud: probe of 3-1:1.0 failed with error -5
[ 2610.354852][  T172] usb 9-1: new full-speed USB device number 47 using dummy_hcd
[ 2610.578975][  T172] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2610.603792][  T172] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2610.635123][  T172] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2610.714043][  T172] usb 9-1: config 0 interface 0 has no altsetting 0
[ 2610.778353][  T172] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2610.834061][  T172] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2613.351517][  T172] usb 9-1: config 0 descriptor??
[ 2613.569871][T22770] usb 3-1: USB disconnect, device number 57
[ 2613.665752][  T172] usb 9-1: can't set config #0, error -71
[ 2613.735035][    C0] net_ratelimit: 21 callbacks suppressed
[ 2613.756686][  T172] usb 9-1: USB disconnect, device number 47
[ 2616.530492][T23541] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2618.786871][    C1] net_ratelimit: 22 callbacks suppressed
[ 2620.706872][T12770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2620.721606][T12770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2620.732247][T12770] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2620.744443][T12770] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2620.754473][T12770] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 2620.763458][T12770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2622.076479][T23759] rxe_eth0 speed is unknown, defaulting to 1000
[ 2622.384984][T21996] usb 7-1: new full-speed USB device number 43 using dummy_hcd
[ 2622.600503][T21996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2622.655377][T21996] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2622.676917][T21996] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 2622.737944][T21996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2622.846506][T21996] usb 7-1: config 0 descriptor??
[ 2622.898389][T17850] Bluetooth: hci2: command tx timeout
[ 2623.055151][   T23] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 2623.290496][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2623.334337][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2623.367082][   T23] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 2623.392317][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2623.436844][   T23] usb 3-1: config 0 descriptor??
[ 2623.461446][T21996] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0
[ 2623.570324][T23770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2623.631416][T23770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2623.714392][T21996] isku 0003:1E7D:319C.0008: couldn't init struct isku_device
[ 2623.762393][T21996] isku 0003:1E7D:319C.0008: couldn't install keyboard
[ 2623.810173][T21996] isku: probe of 0003:1E7D:319C.0008 failed with error -71
[ 2623.905244][T21996] usb 7-1: USB disconnect, device number 43
[ 2623.924842][    C1] net_ratelimit: 27 callbacks suppressed
[ 2624.029896][   T23] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 2624.045727][T23780] fido_id[23780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 2624.072926][   T23] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 2624.082457][   T23] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 2624.143250][   T23] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 2624.183167][   T23] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 2624.234143][   T23] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 2624.290842][   T23] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[ 2624.396976][   T23] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[ 2624.565539][   T23] cp2112 0003:10C4:EA90.0009: error requesting version
[ 2624.696720][   T23] cp2112: probe of 0003:10C4:EA90.0009 failed with error -71
[ 2624.805966][   T23] usb 3-1: USB disconnect, device number 58
[ 2624.961879][T23786] fido_id[23786]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[ 2624.978598][T17850] Bluetooth: hci2: command tx timeout
[ 2625.814792][ T9638] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[ 2625.869345][T23759] chnl_net:caif_netlink_parms(): no params data found
[ 2626.028087][ T9638] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2626.066990][ T9638] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2626.106285][ T9638] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2626.159241][ T9638] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2626.231452][ T9638] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[ 2626.282111][ T9638] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2626.607285][T23814] overlayfs: missing 'workdir'
[ 2626.744902][ T9638] gud: probe of 7-1:1.0 failed with error -5
[ 2627.036553][T17850] Bluetooth: hci2: command tx timeout
[ 2627.206980][T23759] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2627.245504][T23759] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2627.252946][T23759] bridge_slave_0: entered allmulticast mode
[ 2627.326436][T23759] bridge_slave_0: entered promiscuous mode
[ 2627.361546][T23759] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2627.421515][T23759] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2627.444977][ T9638] usb 9-1: new full-speed USB device number 48 using dummy_hcd
[ 2627.484521][T23759] bridge_slave_1: entered allmulticast mode
[ 2627.514019][T23759] bridge_slave_1: entered promiscuous mode
[ 2627.667302][ T9638] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2627.698657][ T9638] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2627.763543][ T9638] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2627.812547][ T9638] usb 9-1: config 0 interface 0 has no altsetting 0
[ 2627.849604][ T9638] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2627.890235][ T9638] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2627.973921][ T9638] usb 9-1: config 0 descriptor??
[ 2628.427434][ T9638] usbhid 9-1:0.0: can't add hid device: -71
[ 2628.465658][ T9638] usbhid: probe of 9-1:0.0 failed with error -71
[ 2628.554251][ T9638] usb 9-1: USB disconnect, device number 48
[ 2628.604445][T21996] usb 7-1: USB disconnect, device number 44
[ 2628.642753][T23759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2628.728105][T23759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2628.954787][    C0] net_ratelimit: 40 callbacks suppressed
[ 2631.325427][T17850] Bluetooth: hci2: command tx timeout
[ 2631.684348][T20762] hsr_slave_0: left promiscuous mode
[ 2631.723306][T20762] hsr_slave_1: left promiscuous mode
[ 2631.759361][T20762] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2631.807518][T20762] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2631.843328][T20762] bridge_slave_1: left allmulticast mode
[ 2631.892014][T20762] bridge_slave_1: left promiscuous mode
[ 2631.898434][    T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[ 2631.935946][T20762] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2631.996075][T20762] bridge_slave_0: left allmulticast mode
[ 2632.001830][T20762] bridge_slave_0: left promiscuous mode
[ 2632.040190][T20762] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2632.147255][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2632.192382][    T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 2632.245235][    T9] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[ 2632.282743][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2632.354630][    T9] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[ 2633.340287][T20762] team0 (unregistering): Port device team_slave_1 removed
[ 2633.521397][T20762] team0 (unregistering): Port device team_slave_0 removed
[ 2633.669286][T20762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2633.843685][T20762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2634.320729][T21996] usb 7-1: USB disconnect, device number 45
[ 2634.361006][T21996] idmouse 7-1:1.0: disconnected
[ 2634.394723][    C0] net_ratelimit: 24 callbacks suppressed
[ 2634.794297][T20762] bond0 (unregistering): Released all slaves
[ 2635.003847][T23759] team0: Port device team_slave_0 added
[ 2635.058678][T23759] team0: Port device team_slave_1 added
[ 2635.213202][T23854] overlayfs: missing 'workdir'
[ 2635.437669][ T5869] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[ 2635.467305][T23759] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2635.492169][T23759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2635.590667][T23759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2635.656739][T23759] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2635.690150][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2635.710521][T23759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2635.749962][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2635.792426][ T5869] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 2635.815003][T23759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2635.823876][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2635.872349][ T5869] usb 3-1: config 0 descriptor??
[ 2636.307108][T23759] hsr_slave_0: entered promiscuous mode
[ 2636.337638][T23759] hsr_slave_1: entered promiscuous mode
[ 2636.397085][ T5869] isku 0003:1E7D:319C.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0
[ 2636.410060][T23759] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2636.439919][T23759] Cannot create hsr debugfs directory
[ 2636.561548][T23853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2636.588599][T23853] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2637.047575][ T5869] isku 0003:1E7D:319C.000A: couldn't init struct isku_device
[ 2637.056494][ T5869] isku 0003:1E7D:319C.000A: couldn't install keyboard
[ 2637.077785][ T5869] isku: probe of 0003:1E7D:319C.000A failed with error -71
[ 2637.108126][ T5869] usb 3-1: USB disconnect, device number 59
[ 2638.561414][T23864] fido_id[23864]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 2639.393576][T23879] loop2: detected capacity change from 0 to 164
[ 2640.234788][    C1] net_ratelimit: 36 callbacks suppressed
[ 2640.576587][T17850] 
[ 2640.579083][T17850] ======================================================
[ 2640.586134][T17850] WARNING: possible circular locking dependency detected
[ 2640.593198][T17850] syzkaller #0 Not tainted
[ 2640.597640][T17850] ------------------------------------------------------
[ 2640.604701][T17850] kworker/u5:0/17850 is trying to acquire lock:
[ 2640.610977][T17850] ffffffff8f364ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x41/0x550
[ 2640.620312][T17850] 
[ 2640.620312][T17850] but task is already holding lock:
[ 2640.627718][T17850] ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x2e1/0xba0
[ 2640.628337][    C1] virtqueue callback for ffff88802483ce00 (ffffffff85c809b0)
[ 2640.637627][T17850] 
[ 2640.637627][T17850] which lock already depends on the new lock.
[ 2640.637627][T17850] 
[ 2640.637637][T17850] 
[ 2640.637637][T17850] the existing dependency chain (in reverse order) is:
[ 2640.654049][    C1] No more buffers in queue
[ 2640.655433][T17850] 
[ 2640.655433][T17850] -> #2 (hci_cb_list_lock){+.+.}-{3:3}:
[ 2640.655474][T17850]        __mutex_lock+0x135/0xc80
[ 2640.655506][T17850]        hci_remote_features_evt+0x535/0x900
[ 2640.655533][T17850]        hci_event_packet+0x807/0x1280
[ 2640.655556][T17850]        hci_rx_work+0x43a/0xd60
[ 2640.655587][T17850]        process_scheduled_works+0xa60/0x1600
[ 2640.655616][T17850]        worker_thread+0xa5e/0xfe0
[ 2640.666876][    C1] Receiving skb proto 0x0800 len 52 type 0
[ 2640.669083][T17850]        kthread+0x2fa/0x390
[ 2640.669112][T17850]        ret_from_fork+0x48/0x80
[ 2640.669140][T17850]        ret_from_fork_asm+0x11/0x20
[ 2640.669171][T17850] 
[ 2640.669171][T17850] -> #1 (&hdev->lock){+.+.}-{3:3}:
[ 2640.669207][T17850]        __mutex_lock+0x135/0xc80
[ 2640.669233][T17850]        l2cap_chan_connect+0xfc/0xe30
[ 2640.669258][T17850]        l2cap_sock_connect+0x586/0x760
[ 2640.669287][T17850]        kernel_connect+0x142/0x1c0
[ 2640.678936][    C1] No more buffers in queue
[ 2640.682066][T17850]        rfcomm_dlc_open+0xa1f/0xec0
[ 2640.682099][T17850]        rfcomm_sock_connect+0x2ed/0x600
[ 2640.682127][T17850]        __sys_connect+0x3da/0x470
[ 2640.682155][T17850]        __x64_sys_connect+0x7a/0x90
[ 2640.682182][T17850]        do_syscall_64+0x55/0xb0
[ 2640.682202][T17850]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2640.682236][T17850] 
[ 2640.682236][T17850] -> #0 (rfcomm_mutex){+.+.}-{3:3}:
[ 2640.682271][T17850]        __lock_acquire+0x3a07/0x7eb0
[ 2640.682297][T17850]        lock_acquire+0x19e/0x420
[ 2640.682321][T17850]        __mutex_lock+0x135/0xc80
[ 2640.738479][    C1] No more buffers in queue
[ 2640.743233][T17850]        rfcomm_security_cfm+0x41/0x550
[ 2640.743268][T17850]        hci_auth_complete_evt+0x366/0xba0
[ 2640.743295][T17850]        hci_event_packet+0x807/0x1280
[ 2640.743318][T17850]        hci_rx_work+0x43a/0xd60
[ 2640.743348][T17850]        process_scheduled_works+0xa60/0x1600
[ 2640.743378][T17850]        worker_thread+0xa5e/0xfe0
[ 2640.743412][T17850]        kthread+0x2fa/0x390
[ 2640.743433][T17850]        ret_from_fork+0x48/0x80
[ 2640.743460][T17850]        ret_from_fork_asm+0x11/0x20
[ 2640.743489][T17850] 
[ 2640.743489][T17850] other info that might help us debug this:
[ 2640.743489][T17850] 
[ 2640.743497][T17850] Chain exists of:
[ 2640.743497][T17850]   rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock
[ 2640.743497][T17850] 
[ 2640.743543][T17850]  Possible unsafe locking scenario:
[ 2640.743543][T17850] 
[ 2640.743550][T17850]        CPU0                    CPU1
[ 2640.743557][T17850]        ----                    ----
[ 2640.743564][T17850]   lock(hci_cb_list_lock);
[ 2640.743579][T17850]                                lock(&hdev->lock);
[ 2640.743596][T17850]                                lock(hci_cb_list_lock);
[ 2640.743613][T17850]   lock(rfcomm_mutex);
[ 2640.750465][    C1] eth0: xmit ffff888049f9c500 42:01:0a:80:00:01
[ 2640.754668][T17850] 
[ 2640.754668][T17850]  *** DEADLOCK ***
[ 2640.754668][T17850] 
[ 2640.754677][T17850] 4 locks held by kworker/u5:0/17850:
[ 2640.754693][T17850]  #0: ffff88805cae5938 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 2640.754783][T17850]  #1: ffffc9000f2afd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[ 2640.754849][T17850]  #2: ffff8880334400b8 (&hdev->lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x98/0xba0
[ 2640.754910][T17850]  #3: ffffffff8f341368 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x2e1/0xba0
[ 2640.754969][T17850] 
[ 2640.754969][T17850] stack backtrace:
[ 2640.754978][T17850] CPU: 0 PID: 17850 Comm: kworker/u5:0 Not tainted syzkaller #0
[ 2640.755000][T17850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2640.755016][T17850] Workqueue: hci4 hci_rx_work
[ 2640.755049][T17850] Call Trace:
[ 2640.755060][T17850]  <TASK>
[ 2640.761542][    C1] Added buffer head 6 to ffff88802483d000
[ 2640.761602][    C1] virtqueue callback for ffff88802483d000 (ffffffff85c80aa0)
[ 2640.764778][T17850]  dump_stack_lvl+0x18c/0x250
[ 2640.775709][T17850]  ? load_image+0x420/0x420
[ 2640.775746][T17850]  ? show_regs_print_info+0x20/0x20
[ 2640.775778][T17850]  ? print_circular_bug+0x12b/0x1a0
[ 2640.775812][T17850]  check_noncircular+0x2fc/0x400
[ 2640.775848][T17850]  ? print_deadlock_bug+0x5d0/0x5d0
[ 2640.775878][T17850]  ? lockdep_lock+0xf5/0x230
[ 2640.775910][T17850]  ? _find_first_zero_bit+0xd6/0x100
[ 2640.775938][T17850]  __lock_acquire+0x3a07/0x7eb0
[ 2640.775981][T17850]  ? preempt_count_add+0x91/0x1a0
[ 2640.776018][T17850]  ? verify_lock_unused+0x140/0x140
[ 2640.776047][T17850]  ? vprintk_emit+0x53d/0x610
[ 2640.782508][    C1] Sent skb ffff888049f9c500
[ 2640.786486][T17850]  ? printk_sprint+0x460/0x460
[ 2640.786524][T17850]  ? l2cap_security_cfm+0x1277/0x1300
[ 2640.786565][T17850]  lock_acquire+0x19e/0x420
[ 2640.786595][T17850]  ? rfcomm_security_cfm+0x41/0x550
[ 2640.786627][T17850]  ? load_image+0x420/0x420
[ 2640.786661][T17850]  ? __might_sleep+0xe0/0xe0
[ 2640.786692][T17850]  ? read_lock_is_recursive+0x20/0x20
[ 2640.786725][T17850]  ? __dynamic_pr_debug+0x1a3/0x260
[ 2640.786765][T17850]  __mutex_lock+0x135/0xc80
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 2640.786794][T17850]  ? rfcomm_security_cfm+0x41/0x550
[ 2640.786826][T17850]  ? trace_contention_end+0x39/0xe0
[ 2640.786852][T17850]  ? __mutex_lock+0x30d/0xc80
[ 2640.786879][T17850]  ? rfcomm_security_cfm+0x41/0x550
[ 2640.793150][    C1] No more buffers in queue
[ 2640.798284][T17850]  ? mutex_lock_nested+0x20/0x20
[ 2640.798322][T17850]  ? mutex_lock_nested+0x20/0x20
[ 2640.798356][T17850]  rfcomm_security_cfm+0x41/0x550
[ 2640.798397][T17850]  ? hci_conn_hash_lookup_handle+0x22e/0x240
[ 2640.798429][T17850]  ? rfcomm_send_msc+0x360/0x360
[ 2640.798459][T17850]  hci_auth_complete_evt+0x366/0xba0
[ 2640.798493][T17850]  ? hci_disconn_complete_evt+0x900/0x900
[ 2640.798522][T17850]  ? skb_pull_data+0xf0/0x1f0
[ 2640.798560][T17850]  ? hci_disconn_complete_evt+0x900/0x900
[ 2640.798588][T17850]  hci_event_packet+0x807/0x1280
[ 2640.798617][T17850]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2640.798648][T17850]  ? bis_list+0x290/0x290
[ 2640.798680][T17850]  ? hci_send_to_monitor+0xd7/0x4f0
[ 2640.798706][T17850]  hci_rx_work+0x43a/0xd60
[ 2640.798746][T17850]  ? process_scheduled_works+0x975/0x1600
[ 2640.815424][ T5765] No more buffers in queue
[ 2640.816588][T17850]  process_scheduled_works+0xa60/0x1600
[ 2640.816646][T17850]  ? worker_attach_to_pool+0x370/0x370
[ 2640.816683][T17850]  ? assign_work+0x3cc/0x5d0
[ 2640.822918][ T5765] eth0: xmit ffff88805c6f80f0 42:01:0a:80:00:01
[ 2640.826201][T17850]  worker_thread+0xa5e/0xfe0
[ 2640.826255][T17850]  kthread+0x2fa/0x390
[ 2640.826280][T17850]  ? pr_cont_work+0x550/0x550
[ 2640.826312][T17850]  ? kthread_blkcg+0xd0/0xd0
[ 2640.826338][T17850]  ret_from_fork+0x48/0x80
[ 2640.826369][T17850]  ? kthread_blkcg+0xd0/0xd0
[ 2640.826402][T17850]  ret_from_fork_asm+0x11/0x20
[ 2640.826444][T17850]  </TASK>
[ 2640.888973][T17850] hcon ffff88806929e000 orig refcnt 0
[ 2640.889004][T17850] hcon ffff88806929e000 orig refcnt 1
[ 2640.889044][T17850] kcov: kcov_move_area: ffffc9001dd26000 1048576 <= ffffc90017d15000 586399
[ 2641.204868][    C0] wireguard: wg1: Sending keepalive packet to peer 82 (127.0.0.1:20003)
[ 2641.208622][ T5765] Added buffer head 6 to ffff88802483d000
[ 2641.208735][    C1] virtqueue callback for ffff88802483d000 (ffffffff85c80aa0)
[ 2641.212604][    C0] virtqueue callback for ffff88802483ca00 (ffffffff85c809b0)
[ 2641.224059][    C0] No more buffers in queue
[ 2641.224084][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 2641.224112][    C0] No more buffers in queue
[ 2641.284877][    C0] wireguard: wg0: Sending keepalive packet to peer 80 ([::1]:20003/0%0)
[ 2641.288771][    C1] Sent skb ffff88805c6f80f0
[ 2641.293213][    C0] wireguard: wg0: Sending keepalive packet to peer 74 ([::1]:20003/0%0)
[ 2641.330279][    C0] virtqueue callback for ffff888144a51200 (ffffffff84a0d580)
[ 2641.334641][    C1] No more buffers in queue
[ 2641.338342][    C0] virtqueue interrupt with no work for ffff888144a51000
[ 2641.338357][    C0] virtqueue interrupt with no work for ffff888144a50e00
[ 2641.463381][    C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775808 percpu 1
[ 2641.568152][T23891] kcov: kcov_start: t = ffff88807e199e00, size = 524288, area = ffffc9001b11d000
[ 2641.594791][    C1] wireguard: wg0: Sending keepalive packet to peer 67 (127.0.0.1:20002)
[ 2641.603977][    C1] wireguard: wg0: Sending keepalive packet to peer 73 ([::1]:20002/0%0)
[ 2641.615127][  T172] Added buffer head 0 to ffff888144a51200
[ 2641.665610][ T5107] sd 0:0:1:0: cmd ffff8880255c9e90 CDB: 0x2a
[ 2641.672159][ T5107] Added buffer head 645 to ffff888022488600
[ 2641.681571][    C1] virtqueue callback for ffff888022488600 (ffffffff857fec60)
[ 2641.689005][    C1] sd 0:0:1:0: cmd ffff8880255c9e90 response 0 status 0x0 sense_len 0
[ 2641.697112][    C1] No more buffers in queue
[ 2641.703778][T23472] sd 0:0:1:0: cmd ffff8880234d3110 CDB: 0x35
[ 2641.705646][   T50] sd 0:0:1:0: cmd ffff8880255d0890 CDB: 0x2a
[ 2641.724230][T23472] Added buffer head 645 to ffff888022488600
[ 2641.730720][    C1] virtqueue callback for ffff888022488600 (ffffffff857fec60)
[ 2641.738139][    C1] sd 0:0:1:0: cmd ffff8880234d3110 response 0 status 0x0 sense_len 0
[ 2641.746235][    C1] No more buffers in queue
[ 2641.752416][T23472] sd 0:0:1:0: cmd ffff8880255ca250 CDB: 0x2a
[ 2641.758871][T23472] Added buffer head 645 to ffff888022488600
[ 2641.780953][    C1] virtqueue callback for ffff888022488600 (ffffffff857fec60)
[ 2641.788388][    C1] sd 0:0:1:0: cmd ffff8880255ca250 response 0 status 0x0 sense_len 0
[ 2641.796484][    C1] No more buffers in queue
[ 2641.807754][   T50] Added buffer head 645 to ffff888022488600
[ 2641.817879][    C1] virtqueue callback for ffff888022488600 (ffffffff857fec60)
[ 2641.825326][    C1] sd 0:0:1:0: cmd ffff8880255d0890 response 0 status 0x0 sense_len 0
[ 2641.833391][    C1] No more buffers in queue
[ 2641.864536][   T27] free_ioctx: freeing ffff88805ca85980
[ 2641.881423][   T27] aio_free_ring: pid(27) [0] page->count=1
[ 2641.889015][T23891] i2c i2c-0: dvb_frontend_open:
[ 2641.893993][T23891] i2c i2c-0: dvb_frontend_start:
[ 2641.901657][ T5766] No more buffers in queue
[ 2641.906161][ T5766] eth0: xmit ffff888049e85c70 42:01:0a:80:00:01
[ 2641.912492][ T5766] Added buffer head 0 to ffff88802483cc00
[ 2641.912777][    C1] virtqueue callback for ffff88802483ce00 (ffffffff85c809b0)
[ 2641.918413][    C0] virtqueue callback for ffff88802483cc00 (ffffffff85c80aa0)
[ 2641.931412][    C1] No more buffers in queue
[ 2641.933592][    C0] Sent skb ffff888049e85c70
[ 2641.938484][    C1] Receiving skb proto 0x0800 len 52 type 0
[ 2641.942144][    C0] No more buffers in queue
[ 2641.953476][    C1] No more buffers in queue
[ 2641.985532][T23894] kcov: kcov_start: t = ffff888054f8da00, size = 524288, area = ffffc9001b51e000
[ 2642.005907][T22856] kcov: kcov_task_exit: t = ffff888028f6bc00, kcov->t = ffff888028f6bc00
[ 2642.006837][T23759] netdevsim netdevsim4 eth5 (unregistering): bond_netdev_event received NETDEV_UNREGISTER
[ 2642.016619][T16823] kcov: kcov_task_exit: t = ffff888021f35a00, kcov->t = ffff888021f35a00
[ 2642.032971][ T5765] No more buffers in queue
[ 2642.036469][T18759] kcov: kcov_task_exit: t = ffff88801ca51e00, kcov->t = ffff88801ca51e00
[ 2642.037680][ T5765] eth0: xmit ffff888049e85770 42:01:0a:80:00:01
[ 2642.052298][ T5765] Added buffer head 0 to ffff88802483cc00
[ 2642.052329][    C0] virtqueue callback for ffff88802483cc00 (ffffffff85c80aa0)
[ 2642.058144][    C0] virtqueue callback for ffff88802483ca00 (ffffffff85c809b0)
[ 2642.073288][    C0] Sent skb ffff888049e85770
[ 2642.077898][    C0] No more buffers in queue
[ 2642.082912][    C0] No more buffers in queue
[ 2642.087438][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 2642.093327][    C0] virtqueue callback for ffff88802483ca00 (ffffffff85c809b0)
[ 2642.100876][    C0] Receiving skb proto 0x0800 len 88 type 0
[ 2642.106802][    C0] Receiving skb proto 0x0800 len 112 type 0
[ 2642.112796][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 2642.118713][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 2642.124655][    C0] No more buffers in queue
[ 2642.129162][    C0] Added buffer head 3409 to ffff88802483ca00
[ 2642.135241][    C0] Added buffer head 3408 to ffff88802483ca00
[ 2642.141316][    C0] Added buffer head 3407 to ffff88802483ca00
[ 2642.147391][    C0] Added buffer head 3406 to ffff88802483ca00
[ 2642.153471][    C0] Added buffer head 3405 to ffff88802483ca00
[ 2642.159622][    C0] Added buffer head 3404 to ffff88802483ca00
[ 2642.165725][    C0] Added buffer head 3403 to ffff88802483ca00
[ 2642.171800][    C0] Added buffer head 3402 to ffff88802483ca00
[ 2642.177893][    C0] Added buffer head 3401 to ffff88802483ca00
[ 2642.183981][    C0] Added buffer head 3400 to ffff88802483ca00
[ 2642.190098][    C0] Added buffer head 3399 to ffff88802483ca00
[ 2642.196205][    C0] Added buffer head 3398 to ffff88802483ca00
[ 2642.202279][    C0] Added buffer head 3397 to ffff88802483ca00
[ 2642.208386][    C0] Added buffer head 3396 to ffff88802483ca00
[ 2642.214455][    C0] Added buffer head 3395 to ffff88802483ca00
[ 2642.220640][    C0] Added buffer head 3394 to ffff88802483ca00
[ 2642.226812][    C0] Added buffer head 3393 to ffff88802483ca00
[ 2642.232923][    C0] Added buffer head 3392 to ffff88802483ca00
[ 2642.239080][    C0] Added buffer head 3391 to ffff88802483ca00
[ 2642.245190][    C0] Added buffer head 3390 to ffff88802483ca00
[ 2642.251256][    C0] Added buffer head 3389 to ffff88802483ca00
[ 2642.257431][    C0] Added buffer head 3388 to ffff88802483ca00
[ 2642.263518][    C0] Added buffer head 3387 to ffff88802483ca00
[ 2642.269612][    C0] Added buffer head 3386 to ffff88802483ca00
[ 2642.275750][    C0] Added buffer head 3385 to ffff88802483ca00
[ 2642.281821][    C0] Added buffer head 3384 to ffff88802483ca00
[ 2642.287919][    C0] Added buffer head 3383 to ffff88802483ca00
[ 2642.294002][    C0] Added buffer head 3382 to ffff88802483ca00
[ 2642.300085][    C0] Added buffer head 3381 to ffff88802483ca00
[ 2642.306227][    C0] Added buffer head 3380 to ffff88802483ca00
[ 2642.312381][    C0] Added buffer head 3379 to ffff88802483ca00
[ 2642.318448][    C0] virtqueue callback for ffff88802483ca00 (ffffffff85c809b0)
[ 2642.325963][    C0] Added buffer head 3378 to ffff88802483ca00
[ 2642.332034][    C0] virtqueue callback for ffff888144a51200 (ffffffff84a0d580)
[ 2642.332113][    C0] virtqueue interrupt with no work for ffff888144a51000
[ 2642.332128][    C0] virtqueue interrupt with no work for ffff888144a50e00
[ 2642.335554][T23747] kcov: kcov_task_exit: t = ffff88802bfabc00, kcov->t = ffff88802bfabc00
[ 2642.339764][    C0] Added buffer head 3377 to ffff88802483ca00
[ 2642.368180][    C0] Added buffer head 3376 to ffff88802483ca00
[ 2642.374259][    C0] Added buffer head 3375 to ffff88802483ca00
[ 2642.381178][    C0] No more buffers in queue
[ 2642.385721][    C0] Receiving skb proto 0x0800 len 148 type 0
[ 2642.391713][    C0] No more buffers in queue
[ 2642.396708][T21996] Added buffer head 0 to ffff888144a51200
[ 2642.413782][T23893] i2c i2c-0: dvb_frontend_thread:
[ 2642.420479][T23891] i2c i2c-0: dvb_frontend_release:
[ 2642.448549][T23893] i2c i2c-0: dvb_frontend_init: initialising adapter 0 frontend 0 (Dummy demod for DVB-T/T2/C/S/S2)...
[ 2642.480143][T22873] ffff88807648c000 name hci0 bus 0
[ 2642.504264][T23759] net eth5: siw: event 6
[ 2642.524873][T22873] hci0 ffff88807648c000
[ 2642.529154][T22873] hci0: 
[ 2642.532088][T22873] hci0: err 0x13
[ 2642.549648][T23759] netdevsim netdevsim4 eth5 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT
[ 2642.562945][T23884] kcov: kcov_task_exit: t = ffff88802d1e5a00, kcov->t = ffff88802d1e5a00
[ 2642.585114][ T5765] No more buffers in queue
[ 2642.589595][ T5765] eth0: xmit ffff888031e6d140 42:01:0a:80:00:01
[ 2642.595909][ T5765] Added buffer head 0 to ffff88802483cc00
[ 2642.595938][    C0] virtqueue callback for ffff88802483cc00 (ffffffff85c80aa0)
[ 2642.609153][    C0] Sent skb ffff888031e6d140
[ 2642.613733][    C0] No more buffers in queue
[ 2642.621790][T22873] hci0: cancelling interleave scan
[ 2642.644805][T22873] channel 3 len 6
[ 2642.648575][T22873] channel 3 len 8
[ 2642.651958][T23759] net eth5: siw: event 18
[ 2642.652261][T22873] hdev hci0 event 2
[ 2642.660595][T23879] kcov: kcov_task_exit: t = ffff88802337da00, kcov->t = ffff88802337da00
[ 2642.684944][T23759] kobject: 'rx-0' (ffff88805d786750): kobject_cleanup, parent ffff888052214c50
[ 2642.695281][T23894] kcov: kcov_task_exit: t = ffff888054f8da00, kcov->t = ffff888054f8da00
[ 2642.711969][T23889] kcov: kcov_task_exit: t = ffff88807e19da00, kcov->t = ffff88807e19da00
[ 2642.726225][T22873] hdev 0000000000000000 len 8
[ 2642.731030][T22873] kernfs runtime_status: removing
[ 2642.759050][T23759] kobject: 'rx-0' (ffff88805d786750): auto cleanup kobject_del
[ 2642.768342][T23891] kcov: kcov_task_exit: t = ffff88807e199e00, kcov->t = ffff88807e199e00
[ 2642.796384][T22873] kernfs control: removing
[ 2642.800889][T22873] kernfs runtime_suspended_time: removing
[ 2642.837833][    C1] virtqueue callback for ffff88802483ce00 (ffffffff85c809b0)
[ 2642.845890][    C1] No more buffers in queue
[ 2642.850725][    C1] Receiving skb proto 0x0806 len 28 type 1
[ 2642.855205][T22873] kernfs runtime_active_time: removing
[ 2642.857835][    C1] No more buffers in queue
[ 2642.862091][T22873] kernfs autosuspend_delay_ms: removing
[ 2642.862159][T22873] kernfs power: removing
[ 2642.862201][T22873] kernfs device: removing
[ 2642.862233][T22873] kernfs subsystem: removing
[ 2642.862265][T22873] kernfs rfkill46: removing
[ 2642.862299][T22873] kernfs uevent: removing
[ 2642.862322][T22873] kernfs name: removing
[ 2642.862358][T22873] kernfs type: removing
[ 2642.862396][T22873] kernfs index: removing
[ 2642.869120][    C1] No more buffers in queue
[ 2642.913946][    C1] eth0: xmit ffff88807571e3c0 42:01:0a:80:00:01
[ 2642.920524][    C1] Added buffer head 6 to ffff88802483d000
[ 2642.926561][    C1] virtqueue callback for ffff88802483d000 (ffffffff85c80aa0)
[ 2642.934719][    C1] Sent skb ffff88807571e3c0
[ 2642.939493][    C1] No more buffers in queue
[ 2643.015195][ T5763] No more buffers in queue
[ 2643.020023][ T5763] eth0: xmit ffff88802c9960f0 42:01:0a:80:00:01
[ 2643.026860][ T5763] Added buffer head 6 to ffff88802483d000
[ 2643.026896][    C1] virtqueue callback for ffff88802483d000 (ffffffff85c80aa0)
[ 2643.027098][    C0] virtqueue callback for ffff88802483ca00 (ffffffff85c809b0)
[ 2643.040153][    C0] No more buffers in queue
[ 2643.040212][    C0] Receiving skb proto 0x0800 len 52 type 0
[ 2643.040238][    C0] No more buffers in queue
[ 2643.064549][    C1] Sent skb ffff88802c9960f0
[ 2643.069467][    C1] No more buffers in queue
[ 2643.088142][T23759] kernfs rps_cpus: removing
[ 2643.184831][T22873] kernfs persistent: removing
[ 2643.189626][T23759] kernfs rps_flow_cnt: removing
[ 2643.194541][T23759] kobject: 'rx-0' (ffff88805d786750): auto cleanup 'remove' event
[ 2643.204021][T23894] kernfs backing_file: removing
[ 2643.218227][T23894] kernfs offset: removing
[ 2643.222823][T23894] kernfs sizelimit: removing
[ 2643.243869][T23894] kernfs autoclear: removing
[ 2643.251422][T22873] kernfs state: removing
[ 2643.277545][T23759] kobject: 'rx-0' (ffff88805d786750): kobject_uevent_env
[ 2643.294987][T22873] kernfs soft: removing
[ 2643.299241][T22873] kernfs hard: removing
[ 2643.303458][T22873] kernfs hard_block_reasons: removing
[ 2643.310357][T23759] kobject: 'rx-0' (ffff88805d786750): fill_kobj_path: path = '/devices/netdevsim4/net/eth5/queues/rx-0'
[ 2643.330099][    C0] virtqueue callback for ffff888144a51200 (ffffffff84a0d580)
[ 2643.337575][    C0] virtqueue interrupt with no work for ffff888144a51000
[ 2643.344549][    C0] virtqueue interrupt with no work for ffff888144a50e00
[ 2643.351931][ T5872] Added buffer head 0 to ffff888144a51200
[ 2643.397753][T22873] PM: Removing info for No Bus:rfkill46
[ 2643.403421][T23894] kernfs partscan: removing
[ 2643.411480][T23759] kernfs rx-0: removing
[ 2643.416329][T22873] kobject: 'rfkill46' (ffff88807be5d110): kobject_uevent_env
[ 2643.416416][T22873] kobject: 'rfkill46' (ffff88807be5d110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill46'
[ 2643.456244][T23759] kobject: 'rx-0' (ffff88805d786750): calling ktype release
[ 2643.464203][T23759] kobject: 'rx-0': free name
[ 2643.470172][T23894] kernfs dio: removing
[ 2643.474557][T23894] kernfs loop: removing
[ 2643.506053][T23894] kobject: 'loop2' (ffff888148c08da8): kobject_uevent_env
[ 2643.513607][T23894] kobject: 'loop2' (ffff888148c08da8): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2643.526075][T23759] kernfs limit: removing
[ 2643.530813][T23759] kernfs limit_max: removing
[ 2643.614973][T23894] kobject: 'loop2' (ffff888148c08da8): kobject_uevent_env
[ 2643.622530][T23894] kobject: 'loop2' (ffff888148c08da8): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 2643.628190][T22873] kernfs rfkill46: removing
[ 2643.682148][T22873] kobject: 'rfkill46' (ffff88807be5d110): kobject_cleanup, parent 0000000000000000
[ 2643.691586][T23759] kernfs limit_min: removing
[ 2643.708002][T23759] kernfs hold_time: removing
[ 2643.713171][T23759] kernfs inflight: removing
[ 2643.767480][T22873] kobject: 'rfkill46' (ffff88807be5d110): calling ktype release
[ 2643.774073][T23759] kernfs byte_queue_limits: removing
[ 2643.781805][T23759] kobject: 'tx-0' (ffff88802f603420): kobject_cleanup, parent ffff888052214c50
[ 2643.793437][T23758] inotify_handle_inode_event: group=ffff88807e349800 mark=ffff888021cebc80 mask=8000
[ 2643.807468][T22873] kobject: 'rfkill46': free name
[ 2643.812488][T22873] kernfs runtime_status: removing
[ 2643.844782][T23759] kobject: 'tx-0' (ffff88802f603420): auto cleanup kobject_del
[ 2643.859333][T23758] fsnotify_insert_event: group=ffff88807e349800 event=ffff88805d86e840
[ 2643.907318][ T5144] get_one_event: group=ffff88807e349800 event=ffff88805d86e840
[ 2643.915588][ T5144] fsnotify_remove_first_event: group=ffff88807e349800 event=ffff88805d86e840
[ 2643.936164][T22873] kernfs control: removing
[ 2643.940665][T22873] kernfs runtime_suspended_time: removing
[ 2643.992534][T23868] ffff888033440000 name hci4 bus 0
[ 2643.998335][ T5144] inotify_read: group=ffff88807e349800 kevent=ffff88805d86e840
[ 2644.014776][ T5144] copy_event_to_user: group=ffff88807e349800 event=ffff88805d86e840
[ 2644.023304][ T5144] inotify_read: group=ffff88807e349800 kevent=0000000000000000
[ 2644.044823][T23759] kernfs tx_timeout: removing
[ 2644.049950][T22873] kernfs runtime_active_time: removing
[ 2644.055603][T23868] hci4 ffff888033440000
[ 2644.060004][T23868] hci4: 
[ 2644.063045][T23868] hci4: err 0x13
[ 2644.085705][T23868] hci4: cancelling interleave scan
[ 2644.091167][T23868] hci4 state 0 -> 0
[ 2644.124076][T23868] All LE pending actions cleared
[ 2644.135504][T23868] hdev hci4
[ 2644.139177][T23868] hcon ffff88806929e000 reason 22
[ 2644.144457][T23868] hcon ffff88806929e000 conn ffff88807c781000, err 103
[ 2644.176570][T23868] hci4 hcon ffff88806929e000 chan ffff88805e816400
[ 2644.185366][T23868] hci4 hcon ffff88806929e000 handle 201
[ 2644.191243][T23868] hci4: hcon ffff88806929e000
[ 2644.265307][T23759] kernfs traffic_class: removing
[ 2644.270374][T22873] kernfs autosuspend_delay_ms: removing
[ 2644.282590][T23759] kernfs xps_cpus: removing
[ 2644.305570][T23759] kernfs xps_rxqs: removing
[ 2644.316314][T22873] kernfs power: removing
[ 2644.320644][T22873] kernfs subsystem: removing
[ 2644.325373][T23868] hcon ffff88806929e000
[ 2644.330002][    C0] virtqueue callback for ffff888144a51200 (ffffffff84a0d580)
[ 2644.337444][    C0] virtqueue interrupt with no work for ffff888144a51000
[ 2644.344414][    C0] virtqueue interrupt with no work for ffff888144a50e00
[ 2644.352455][ T5872] Added buffer head 0 to ffff888144a51200
[ 2644.363716][T23868] hci4: conn ffff88806929e000
[ 2644.385113][T23868] device: 'hci4:201': device_unregister
[ 2644.405032][T22873] kernfs hci0: removing
[ 2644.409286][T22873] kernfs uevent: removing
[ 2644.413662][T22873] PM: Removing info for No Bus:hci0
[ 2644.419017][T23759] kernfs tx_maxrate: removing
[ 2644.423803][T23759] kobject: 'tx-0' (ffff88802f603420): auto cleanup 'remove' event
[ 2644.433408][T23781] inotify_handle_inode_event: group=ffff88807e349800 mark=ffff888021ceb3e8 mask=8000
[ 2644.446805][T23868] kernfs runtime_status: removing
[ 2644.452141][T23868] kernfs control: removing
[ 2644.474920][T23894] ffff88807b298000 name hci1 bus 0
[ 2644.481408][T23781] fsnotify_insert_event: group=ffff88807e349800 event=ffff88801de4e700
[ 2644.486173][T23868] kernfs runtime_suspended_time: removing
[ 2644.489893][T23759] kobject: 'tx-0' (ffff88802f603420): kobject_uevent_env
[ 2644.489979][T23759] kobject: 'tx-0' (ffff88802f603420): fill_kobj_path: path = '/devices/netdevsim4/net/eth5/queues/tx-0'
[ 2644.515407][T22873] kobject: 'hci0' (ffff88807648d490): kobject_uevent_env
[ 2644.522513][T22873] kobject: 'hci0' (ffff88807648d490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0'
[ 2644.526449][T23894] hci1 ffff88807b298000
[ 2644.540225][T23868] kernfs runtime_active_time: removing
[ 2644.546850][ T5144] get_one_event: group=ffff88807e349800 event=ffff88801de4e700
[ 2644.546873][ T5144] fsnotify_remove_first_event: group=ffff88807e349800 event=ffff88801de4e700
[ 2644.546892][ T5144] inotify_read: group=ffff88807e349800 kevent=ffff88801de4e700
[ 2644.546910][ T5144] copy_event_to_user: group=ffff88807e349800 event=ffff88801de4e700
[ 2644.546939][ T5144] inotify_read: group=ffff88807e349800 kevent=0000000000000000
[ 2644.590137][T23894] hci1: 
[ 2644.593276][T23894] hci1: err 0x13
[ 2644.597290][T23894] hci1: cancelling interleave scan
[ 2644.602813][T23894] hci1 state 0 -> 0
[ 2644.614907][T23894] All LE pending actions cleared
[ 2644.620126][T23894] hdev hci1
[ 2644.623402][T23894] hcon ffff888025a28000 reason 22
[ 2644.637207][T23894] hcon ffff888025a28000 conn ffff88802de10000, err 103
[ 2644.644465][T23894] hci1 hcon ffff888025a28000 chan ffff888054f0ff00
[ 2644.656527][T23894] hci1 hcon ffff888025a28000 handle 201
[ 2644.662402][T23894] hci1: hcon ffff888025a28000
[ 2644.678983][T22873] kernfs hci0: removing
[ 2644.683241][T22873] hci0 orig refcnt 2
[ 2644.687310][T23894] hcon ffff888025a28000
[ 2644.691801][T22873] kobject: 'hci0' (ffff88807648d490): kobject_cleanup, parent 0000000000000000
[ 2644.695569][T23759] kernfs tx-0: removing
[ 2644.705948][T23894] hci1: conn ffff888025a28000
[ 2644.710930][T23894] device: 'hci1:201': device_unregister
[ 2644.729416][T23868] kernfs autosuspend_delay_ms: removing
[ 2644.736982][T23894] kernfs runtime_status: removing
[ 2644.742342][T23894] kernfs control: removing
[ 2644.749998][T23759] kobject: 'tx-0' (ffff88802f603420): calling ktype release
[ 2644.754084][T22873] kobject: 'hci0' (ffff88807648d490): calling ktype release
[ 2644.765908][T23868] kernfs power: removing
[ 2644.770458][T23868] kernfs device: removing
[ 2644.776769][T23759] kobject: 'tx-0': free name
[ 2644.777029][T22873] All LE connection parameters were removed
[ 2644.787794][T22873] hci0: Unregister MSFT extension
[ 2644.792968][T22873] kobject: 'hci0': free name
[ 2644.804293][T23868] kernfs subsystem: removing
[ 2644.809359][T23894] kernfs runtime_suspended_time: removing
[ 2644.818018][T23759] kernfs queues: removing
[ 2644.822422][T23759] kobject: 'queues' (ffff888052214c50): kobject_cleanup, parent 0000000000000000
[ 2644.839442][T23868] kernfs hci4:201: removing
[ 2644.844320][T23894] kernfs runtime_active_time: removing
[ 2644.850412][T23894] kernfs autosuspend_delay_ms: removing
[ 2644.857269][T23894] kernfs power: removing
[ 2644.861797][T23894] kernfs device: removing
[ 2644.870615][T23868] kernfs uevent: removing
[ 2644.875787][T23868] PM: Removing info for No Bus:hci4:201
[ 2644.881683][T23868] kobject: 'hci4:201' (ffff88806929e5f0): kobject_uevent_env
[ 2644.889762][T23894] kernfs subsystem: removing
[ 2644.896144][T23894] kernfs hci1:201: removing
[ 2644.900976][T23894] kernfs uevent: removing
[ 2644.907039][T23759] kobject: 'queues' (ffff888052214c50): calling ktype release
[ 2644.914549][T23759] kobject: 'queues' (ffff888052214c50): kset_release
[ 2644.921794][T23868] kobject: 'hci4:201' (ffff88806929e5f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:201'
[ 2644.928796][T23759] kobject: 'queues': free name
[ 2644.940647][T23894] PM: Removing info for No Bus:hci1:201
[ 2644.949822][T23759] kernfs runtime_status: removing
[ 2644.955219][T23894] kobject: 'hci1:201' (ffff888025a285f0): kobject_uevent_env
[ 2644.963805][T23759] kernfs control: removing
[ 2644.972095][T23759] kernfs runtime_suspended_time: removing
[ 2644.980380][T23894] kobject: 'hci1:201' (ffff888025a285f0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:201'
[ 2644.988610][T23759] kernfs runtime_active_time: removing
[ 2644.998780][T23868] kernfs hci4:201: removing
[ 2645.003655][T23868] kobject: 'hci4:201' (ffff88806929e5f0): kobject_cleanup, parent 0000000000000000
[ 2645.013584][T23759] kernfs autosuspend_delay_ms: removing
[ 2645.020921][T23868] kobject: 'hci4:201' (ffff88806929e5f0): calling ktype release
[ 2645.029071][T23894] kernfs hci1:201: removing
[ 2645.029098][T23894] kobject: 'hci1:201' (ffff888025a285f0): kobject_cleanup, parent 0000000000000000
[ 2645.029119][T23894] kobject: 'hci1:201' (ffff888025a285f0): calling ktype release
[ 2645.029175][T23894] kobject: 'hci1:201': free name
[ 2645.029204][T23894] hci1 orig refcnt 7
[ 2645.064723][T23759] kernfs power: removing
[ 2645.069284][T23759] kernfs device: removing
[ 2645.073878][T23759] kernfs subsystem: removing
[ 2645.075213][T23868] kobject: 'hci4:201': free name
[ 2645.080777][T23759] kernfs eth5: removing
[ 2645.088337][T23759] kernfs uevent: removing
[ 2645.092811][T23868] hci4 orig refcnt 7
[ 2645.092829][T23868] hdev hci4 event 4
[ 2645.092874][T23868] hdev 0000000000000000 len 8
[ 2645.092922][T23868] hci4: Cleanup of MSFT extension
[ 2645.093433][T23868] hdev hci4 event 8
[ 2645.097941][T23759] kernfs rx_packets: removing
[ 2645.120693][T23868] hci4 orig refcnt 6
[ 2645.124930][T23759] kernfs tx_packets: removing
[ 2645.125464][T23759] kernfs rx_bytes: removing
[ 2645.134870][T23868] channel 3 len 6
[ 2645.135118][T23868] channel 3 len 8
[ 2645.139594][T23759] kernfs tx_bytes: removing
[ 2645.147446][T23759] kernfs rx_errors: removing
[ 2645.148701][T23894] hdev hci1 event 4
[ 2645.156094][T23759] kernfs tx_errors: removing
[ 2645.161855][T23759] kernfs rx_dropped: removing
[ 2645.164570][T23868] hdev hci4 event 2
[ 2645.168758][T23759] kernfs tx_dropped: removing
[ 2645.175328][T23868] hdev 0000000000000000 len 8
[ 2645.176876][T23759] kernfs multicast: removing
[ 2645.185594][T23894] hdev 0000000000000000 len 8
[ 2645.190339][T23894] hci1: Cleanup of MSFT extension
[ 2645.195778][T23759] kernfs collisions: removing
[ 2645.200919][T23759] kernfs rx_length_errors: removing
[ 2645.206750][T23759] kernfs rx_over_errors: removing
[ 2645.212441][T23868] kernfs runtime_status: removing
[ 2645.219269][T23894] hdev hci1 event 8
[ 2645.223280][T23894] hci1 orig refcnt 6
[ 2645.228183][T23894] channel 3 len 6
[ 2645.232112][T23894] channel 3 len 8
[ 2645.236211][T23759] kernfs rx_crc_errors: removing
[ 2645.241526][T23759] kernfs rx_frame_errors: removing
[ 2645.247515][T23894] hdev hci1 event 2
[ 2645.251405][T23894] hdev 0000000000000000 len 8
[ 2645.256362][T23759] kernfs rx_fifo_errors: removing
[ 2645.261941][T23868] kernfs control: removing
[ 2645.269812][T23868] kernfs runtime_suspended_time: removing
[ 2645.276797][T23868] kernfs runtime_active_time: removing
[ 2645.282520][T23759] kernfs rx_missed_errors: removing
[ 2645.288411][T23868] kernfs autosuspend_delay_ms: removing
[ 2645.294069][T23868] kernfs power: removing
[ 2645.299228][T23759] kernfs tx_aborted_errors: removing
[ 2645.305455][T23759] kernfs tx_carrier_errors: removing
[ 2645.311249][T23759] kernfs tx_fifo_errors: removing
[ 2645.316917][T23894] kernfs runtime_status: removing
[ 2645.322262][T23894] kernfs control: removing
[ 2645.326990][T23894] kernfs runtime_suspended_time: removing
[ 2645.329970][    C0] virtqueue callback for ffff888144a51200 (ffffffff84a0d580)
[ 2645.333895][T23894] kernfs runtime_active_time: removing
[ 2645.340142][    C0] virtqueue interrupt with no work for ffff888144a51000
[ 2645.340171][    C0] virtqueue interrupt with no work for ffff888144a50e00
[ 2645.364562][  T172] Added buffer head 0 to ffff888144a51200
[ 2645.371232][T23868] kernfs device: removing
[ 2645.379700][T23868] kernfs subsystem: removing
[ 2645.394882][T23759] kernfs tx_heartbeat_errors: removing
[ 2645.400800][T23759] kernfs tx_window_errors: removing
[ 2645.406586][T23894] kernfs autosuspend_delay_ms: removing
[ 2645.412351][T23894] kernfs power: removing
[ 2645.419716][T23894] kernfs device: removing
[ 2645.424112][T23894] kernfs subsystem: removing
[ 2645.428905][T23868] kernfs rfkill43: removing
[ 2645.434126][T23759] kernfs rx_compressed: removing
[ 2645.439666][T23759] kernfs tx_compressed: removing
[ 2645.445925][T23759] kernfs rx_nohandler: removing
[ 2645.450946][T23894] kernfs rfkill40: removing
[ 2645.456051][T23894] kernfs uevent: removing
[ 2645.460622][T23894] kernfs name: removing
[ 2645.467559][T23868] kernfs uevent: removing
[ 2645.472665][T23868] kernfs name: removing
[ 2645.478598][T23759] kernfs statistics: removing
[ 2645.483397][T23894] kernfs type: removing
[ 2645.491902][T23894] kernfs index: removing
[ 2645.498063][T23868] kernfs type: removing
[ 2645.502294][T23868] kernfs index: removing
[ 2645.508051][T23868] kernfs persistent: removing
[ 2645.513165][T23759] kernfs netdev_group: removing
[ 2645.518736][T23759] kernfs type: removing
[ 2645.523006][T23894] kernfs persistent: removing
[ 2645.531454][T23894] kernfs state: removing
[ 2645.536277][T23868] kernfs state: removing
[ 2645.540601][T23868] kernfs soft: removing
[ 2645.546137][T23759] kernfs dev_id: removing
[ 2645.550561][T23759] kernfs dev_port: removing
[ 2645.555641][T23759] kernfs iflink: removing
[ 2645.560355][T23894] kernfs soft: removing
[ 2645.564581][T23894] kernfs hard: removing
[ 2645.569956][T23894] kernfs hard_block_reasons: removing
[ 2645.577209][T23894] PM: Removing info for No Bus:rfkill40
[ 2645.583065][T23894] kobject: 'rfkill40' (ffff888077b1e110): kobject_uevent_env
[ 2645.588503][T23868] kernfs hard: removing
[ 2645.595029][T23894] kobject: 'rfkill40' (ffff888077b1e110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill40'
[ 2645.607922][T23868] kernfs hard_block_reasons: removing
[ 2645.613386][T23868] PM: Removing info for No Bus:rfkill43
[ 2645.619176][T23894] kernfs rfkill40: removing
[ 2645.624011][T23759] kernfs ifindex: removing
[ 2645.630007][T23759] kernfs name_assign_type: removing
[ 2645.638127][T23894] kobject: 'rfkill40' (ffff888077b1e110): kobject_cleanup, parent 0000000000000000
[ 2645.649449][T23868] kobject: 'rfkill43' (ffff88807be59110): kobject_uevent_env
[ 2645.657192][T23759] kernfs addr_assign_type: removing
[ 2645.660846][T23868] kobject: 'rfkill43' (ffff88807be59110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/rfkill43'
[ 2645.665763][T23894] kobject: 'rfkill40' (ffff888077b1e110): calling ktype release
[ 2645.683341][T23759] kernfs addr_len: removing
[ 2645.685405][T23894] kobject: 'rfkill40': free name
[ 2645.696680][T23868] kernfs rfkill43: removing
[ 2645.701543][T23894] kernfs runtime_status: removing
[ 2645.706783][T23894] kernfs control: removing
[ 2645.711254][T23894] kernfs runtime_suspended_time: removing
[ 2645.719949][T23759] kernfs link_mode: removing
[ 2645.726523][T23868] kobject: 'rfkill43' (ffff88807be59110): kobject_cleanup, parent 0000000000000000
[ 2645.738136][T23759] kernfs address: removing
[ 2645.742977][T23894] kernfs runtime_active_time: removing
[ 2645.750968][T23868] kobject: 'rfkill43' (ffff88807be59110): calling ktype release
[ 2645.762806][T23894] kernfs autosuspend_delay_ms: removing
[ 2645.764757][    C1] net_ratelimit: 37 callbacks suppressed
[ 2645.764776][    C1] wireguard: wg0: Sending keepalive packet to peer 79 ([::1]:20002/0%0)
[ 2645.785430][    C1] wireguard: wg0: Sending keepalive packet to peer 73 ([::1]:20002/0%0)
[ 2645.794256][    C1] wireguard: wg0: Sending keepalive packet to peer 67 (127.0.0.1:20002)
[ 2645.804004][    C1] wireguard: wg1: Receiving keepalive packet from peer 75 ([::1]:20001/0%0)
[ 2645.814069][T23759] kernfs broadcast: removing
[ 2645.820005][T23894] kernfs power: removing
[ 2645.824331][T23894] kernfs subsystem: removing
[ 2645.829337][    C0] wireguard: wg1: Receiving keepalive packet from peer 81 ([::1]:20001/0%0)
[ 2645.830188][    C1] wireguard: wg1: Receiving keepalive packet from peer 69 (127.0.0.1:20001)
[ 2645.849093][T23868] kobject: 'rfkill43': free name
[ 2645.854191][T23759] kernfs speed: removing
[ 2645.861370][T23868] kernfs runtime_status: removing
[ 2645.867685][T23868] kernfs control: removing
[ 2645.872213][T23759] kernfs duplex: removing
[ 2645.878896][T23894] kernfs hci1: removing
[ 2645.883142][T23894] kernfs uevent: removing
[ 2645.889026][T23894] PM: Removing info for No Bus:hci1
[ 2645.889307][T23759] kernfs dormant: removing
[ 2645.896805][T23894] kobject: 'hci1' (ffff88807b299490): kobject_uevent_env
[ 2645.901439][T23759] kernfs testing: removing
[ 2645.911126][T23894] kobject: 'hci1' (ffff88807b299490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1'
[ 2645.921837][T23868] kernfs runtime_suspended_time: removing
[ 2645.929479][T23868] kernfs runtime_active_time: removing
[ 2645.937130][T23868] kernfs autosuspend_delay_ms: removing
[ 2645.943385][T23759] kernfs operstate: removing
[ 2645.950050][T23759] kernfs carrier_changes: removing
[ 2645.955660][T23759] kernfs ifalias: removing
[ 2645.960567][T23759] kernfs carrier: removing
[ 2645.967341][T23894] kernfs hci1: removing
[ 2645.971570][T23894] hci1 orig refcnt 2
[ 2645.972083][T23868] kernfs power: removing
[ 2645.981901][T23759] kernfs mtu: removing
[ 2645.988523][T23894] kobject: 'hci1' (ffff88807b299490): kobject_cleanup, parent 0000000000000000
[ 2645.998491][T23868] kernfs subsystem: removing
[ 2646.003373][T23868] kernfs hci4: removing
[ 2646.010111][T23759] kernfs flags: removing
[ 2646.014835][T23759] kernfs tx_queue_len: removing
[ 2646.020019][T23759] kernfs gro_flush_timeout: removing
[ 2646.025787][T23759] kernfs napi_defer_hard_irqs: removing
[ 2646.029991][T23894] kobject: 'hci1' (ffff88807b299490): calling ktype release
[ 2646.038949][T23759] kernfs phys_port_id: removing
[ 2646.044323][T23894] All LE connection parameters were removed
[ 2646.061097][T23894] hci1: Unregister MSFT extension
[ 2646.067177][T23759] kernfs phys_port_name: removing
[ 2646.072805][T23759] kernfs phys_switch_id: removing
[ 2646.079636][T23868] kernfs uevent: removing
[ 2646.085146][T23868] PM: Removing info for No Bus:hci4
[ 2646.090479][T23868] kobject: 'hci4' (ffff888033441490): kobject_uevent_env
[ 2646.111755][T23894] kobject: 'hci1': free name
[ 2646.117877][T23868] kobject: 'hci4' (ffff888033441490): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4'
[ 2646.128875][T23759] kernfs proto_down: removing
[ 2646.133880][T23759] kernfs carrier_up_count: removing
[ 2646.141353][T23759] kernfs carrier_down_count: removing
[ 2646.147682][T23759] kernfs threaded: removing
[ 2646.152534][T23759] PM: Removing info for No Bus:eth5
[ 2646.152642][T23868] kernfs hci4: removing
[ 2646.161174][T23759] kobject: 'eth5' (ffff88806a0946a8): kobject_uevent_env
[ 2646.164404][T23868] hci4 orig refcnt 2
[ 2646.172711][T23759] kobject: 'eth5' (ffff88806a0946a8): fill_kobj_path: path = '/devices/netdevsim4/net/eth5'
[ 2646.175085][T23868] kobject: 'hci4' (ffff888033441490): kobject_cleanup, parent 0000000000000000
[ 2646.198777][T23868] kobject: 'hci4' (ffff888033441490): calling ktype release
[ 2646.206407][T23759] kernfs eth5: removing
[ 2646.206437][T23759] kernfs net: removing
[ 2646.206451][T23759] kobject: 'net' (ffff888068528000): kobject_cleanup, parent 0000000000000000
[ 2646.206473][T23759] kobject: 'net' (ffff888068528000): calling ktype release
[ 2646.206509][T23759] kobject: 'net': free name
[ 2646.238463][ T5439] lapb32: bond_netdev_event received NETDEV_PRE_UP
[ 2646.245536][ T5439] net lapb32: siw: event 14
[ 2646.250665][ T5439] lapb32: bond_netdev_event received NETDEV_UP
[ 2646.271999][ T5439] net lapb32: siw: event 1
[ 2646.274928][T23868] All LE connection parameters were removed
[ 2646.284209][T23868] hci4: Unregister MSFT extension
[ 2646.308272][T23868] kobject: 'hci4': free name
[ 2646.313621][T23759] kobject: 'eth5' (ffff88806a0946a8): kobject_cleanup, parent 0000000000000000
[ 2646.324732][    C1] wireguard: wg1: Sending keepalive packet to peer 70 (127.0.0.1:20003)
[ 2646.326711][T23759] kobject: 'eth5' (ffff88806a0946a8): calling ktype release
[ 2646.333169][    C0] virtqueue callback for ffff888144a51200 (ffffffff84a0d580)
[ 2646.333231][    C0] virtqueue interrupt with no work for ffff888144a51000
[ 2646.333245][    C0] virtqueue interrupt with no work for ffff888144a50e00
[ 2646.362124][T21996] Added buffer head 0 to ffff888144a51200
[ 2646.368338][T22873] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN
[ 2646.375648][    C0] wireguard: wg2: Receiving keepalive packet from peer 72 (127.0.0.1:20002)
[ 2646.387112][T22873] net syz_tun: siw: event 10
[ 2646.393560][T22873] In tnode_resize ffff88802c58cc20 inflate_threshold=50 threshold=25
[ 2646.402059][T22873] In tnode_resize ffff88805ce0a020 inflate_threshold=50 threshold=25
[ 2646.412058][T23759] kobject: 'eth5': free name
[ 2646.420086][T22873] In tnode_resize ffff88805d820420 inflate_threshold=50 threshold=25
[ 2646.432474][T22873] In tnode_resize ffff88805c4c6d20 inflate_threshold=50 threshold=25
[ 2646.441071][T22873] In tnode_resize ffff8880691d8020 inflate_threshold=50 threshold=25
[ 2646.451436][T22873] In tnode_resize ffff88805c258ba0 inflate_threshold=50 threshold=25
[ 2646.460586][T22873] In tnode_resize ffff88805c5adb20 inflate_threshold=50 threshold=25
[ 2646.471585][T22873] trie_flush found=1
[ 2646.475887][T22873] In tnode_resize ffff88802c58cc20 inflate_threshold=50 threshold=25
[ 2646.484010][T22873] In tnode_resize ffff88805ce0a020 inflate_threshold=50 threshold=25
[ 2646.499318][T22873] In tnode_resize ffff88805d820420 inflate_threshold=50 threshold=25
[ 2646.507811][T22873] In tnode_resize ffff88805c4c6d20 inflate_threshold=50 threshold=25
[ 2646.516697][T22873] In tnode_resize ffff8880691d8020 inflate_threshold=50 threshold=25
[ 2646.525041][T22873] In tnode_resize ffff88805c258ba0 inflate_threshold=50 threshold=25
[ 2646.533152][T22873] In tnode_resize ffff88805c5adb20 inflate_threshold=50 threshold=25
[ 2646.543401][T22873] trie_flush found=1
[ 2646.548062][T22873] syz_tun: bond_netdev_event received NETDEV_DOWN
[ 2646.554576][T22873] net syz_tun: siw: event 2
[ 2646.568608][T22873] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::a8aa:aaff:feaa:aaaa in wq:ffff888049c18fd8
[ 2646.584883][T22873] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::aa in wq:ffff888049c18fd8
[ 2646.598376][T22873] Deleting ac141400/24 dsfield=0x00 t=ffff88802c9afd30
[ 2646.610035][T22873] Deleting ac1414ff/32 dsfield=0x00 t=ffff88802c9afd30
[ 2646.617825][T22873] Deleting ac1414aa/32 dsfield=0x00 t=ffff88802c9afd30
[ 2646.625954][T22873] In tnode_resize ffff88805c4c6d20 inflate_threshold=50 threshold=25
[ 2646.634072][T22873] In tnode_resize ffff88805c5adb20 inflate_threshold=50 threshold=25
[ 2646.643421][T22873] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff888049c18fd8
[ 2646.657500][T22873] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER
[ 2646.666399][T22873] net syz_tun: siw: event 6
[ 2646.672348][T22873] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT
[ 2646.681127][T22873] net syz_tun: siw: event 18
[ 2646.688053][T22873] kobject: 'rx-0' (ffff88805e28ef50): kobject_cleanup, parent ffff888020aef450
[ 2646.698751][T22873] kobject: 'rx-0' (ffff88805e28ef50): auto cleanup kobject_del
[ 2646.707338][T22873] kernfs rps_cpus: removing
[ 2646.711925][T22873] kernfs rps_flow_cnt: removing
[ 2646.719309][T22873] kobject: 'rx-0' (ffff88805e28ef50): auto cleanup 'remove' event
[ 2646.728060][T22873] kobject: 'rx-0' (ffff88805e28ef50): kobject_uevent_env
[ 2646.736122][T22873] kobject: 'rx-0' (ffff88805e28ef50): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0'
[ 2646.747759][T22873] kernfs rx-0: removing
[ 2646.752274][T22873] kobject: 'rx-0' (ffff88805e28ef50): calling ktype release
[ 2646.759716][T22873] kobject: 'rx-0': free name
[ 2646.764360][T22873] kernfs limit: removing
[ 2646.771790][T22873] kernfs limit_max: removing
[ 2646.776502][T22873] kernfs limit_min: removing
[ 2646.781255][T22873] kernfs hold_time: removing
[ 2646.786134][T22873] kernfs inflight: removing
[ 2646.790693][T22873] kernfs byte_queue_limits: removing
[ 2646.799708][T22873] kobject: 'tx-0' (ffff88805fda3420): kobject_cleanup, parent ffff888020aef450
[ 2646.808750][T22873] kobject: 'tx-0' (ffff88805fda3420): auto cleanup kobject_del
[ 2646.817367][T22873] kernfs tx_timeout: removing
[ 2646.822116][T22873] kernfs traffic_class: removing
[ 2646.827238][T22873] kernfs xps_cpus: removing
[ 2646.831805][T22873] kernfs xps_rxqs: removing
[ 2646.838553][T22873] kernfs tx_maxrate: removing
[ 2646.843700][T22873] kobject: 'tx-0' (ffff88805fda3420): auto cleanup 'remove' event
[ 2646.852533][T22873] kobject: 'tx-0' (ffff88805fda3420): kobject_uevent_env
[ 2646.859765][T22873] kobject: 'tx-0' (ffff88805fda3420): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0'
[ 2646.871233][T22873] kernfs tx-0: removing
[ 2646.875686][T22873] kobject: 'tx-0' (ffff88805fda3420): calling ktype release
[ 2646.883051][T22873] kobject: 'tx-0': free name
[ 2646.885388][    C1] wireguard: wg0: Sending keepalive packet to peer 67 (127.0.0.1:20002)
[ 2646.887819][T22873] kernfs queues: removing
[ 2646.887893][T22873] kobject: 'queues' (ffff888020aef450): kobject_cleanup, parent 0000000000000000
[ 2646.898023][    C1] wireguard: wg0: Sending keepalive packet to peer 79 ([::1]:20002/0%0)
[ 2646.900524][T22873] kobject: 'queues' (ffff888020aef450): calling ktype release
[ 2646.900542][T22873] kobject: 'queues' (ffff888020aef450): kset_release
[ 2646.900574][T22873] kobject: 'queues': free name
[ 2646.900604][T22873] kernfs runtime_status: removing
[ 2646.900639][T22873] kernfs control: removing
[ 2646.900669][T22873] kernfs runtime_suspended_time: removing
[ 2646.900699][T22873] kernfs runtime_active_time: removing
[ 2646.900729][T22873] kernfs autosuspend_delay_ms: removing
[ 2646.900826][T22873] kernfs power: removing
[ 2646.977610][T22873] kernfs subsystem: removing
[ 2646.982307][T22873] kernfs syz_tun: removing
[ 2646.987165][T22873] kernfs uevent: removing
[ 2646.991563][T22873] kernfs tun_flags: removing
[ 2646.996900][T22873] kernfs owner: removing
[ 2647.001308][T22873] kernfs group: removing
[ 2647.006528][T22873] kernfs rx_packets: removing
[ 2647.011279][T22873] kernfs tx_packets: removing
[ 2647.017272][T22873] kernfs rx_bytes: removing
[ 2647.022134][T22873] kernfs tx_bytes: removing
[ 2647.026765][T22873] kernfs rx_errors: removing
[ 2647.031414][T22873] kernfs tx_errors: removing
[ 2647.036529][T22873] kernfs rx_dropped: removing
[ 2647.041262][T22873] kernfs tx_dropped: removing
[ 2647.047031][T22873] kernfs multicast: removing
[ 2647.051684][T22873] kernfs collisions: removing
[ 2647.056722][T22873] kernfs rx_length_errors: removing
[ 2647.061984][T22873] kernfs rx_over_errors: removing
[ 2647.068037][T22873] kernfs rx_crc_errors: removing
[ 2647.073053][T22873] kernfs rx_frame_errors: removing
[ 2647.078648][T22873] kernfs rx_fifo_errors: removing
[ 2647.083729][T22873] kernfs rx_missed_errors: removing
[ 2647.089032][    C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888049c18fd8 is addr:fe80::a8aa:aaff:feaa:aaaa for cmd:2 at entry:ffff8880277d6400
[ 2647.089101][    C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888049c18fd8 is addr:fe80::aa for cmd:2 at entry:ffff88805e056380
[ 2647.089160][    C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888049c18fd8 is addr:172.20.20.170 for cmd:2 at entry:ffff8880277d6380
[ 2647.135830][T22873] kernfs tx_aborted_errors: removing
[ 2647.141197][T22873] kernfs tx_carrier_errors: removing
[ 2647.146708][T22873] kernfs tx_fifo_errors: removing
[ 2647.151793][T22873] kernfs tx_heartbeat_errors: removing
[ 2647.158483][T22873] kernfs tx_window_errors: removing
[ 2647.163762][T22873] kernfs rx_compressed: removing
[ 2647.168807][T22873] kernfs tx_compressed: removing
[ 2647.173914][T22873] kernfs rx_nohandler: removing
[ 2647.181660][T22873] kernfs statistics: removing
[ 2647.186469][T22873] kernfs netdev_group: removing
[ 2647.191382][T22873] kernfs type: removing
[ 2647.196036][T22873] kernfs dev_id: removing
[ 2647.200517][T22873] kernfs dev_port: removing
[ 2647.205147][T22873] kernfs iflink: removing
[ 2647.211144][T22873] kernfs ifindex: removing
[ 2647.216056][T22873] kernfs name_assign_type: removing
[ 2647.221327][T22873] kernfs addr_assign_type: removing
[ 2647.226731][T22873] kernfs addr_len: removing
[ 2647.232501][T22873] kernfs link_mode: removing
[ 2647.238555][T22873] kernfs address: removing
[ 2647.243038][T22873] kernfs broadcast: removing
[ 2647.249309][T22873] kernfs speed: removing
[ 2647.254037][T22873] kernfs duplex: removing
[ 2647.259495][T22873] kernfs dormant: removing
[ 2647.263983][T22873] kernfs testing: removing
[ 2647.269566][T22873] kernfs operstate: removing
[ 2647.274219][T22873] kernfs carrier_changes: removing
[ 2647.279627][T22873] kernfs ifalias: removing
[ 2647.284344][T22873] kernfs carrier: removing
[ 2647.288925][T22873] kernfs mtu: removing
[ 2647.293049][T22873] kernfs flags: removing
[ 2647.299157][T22873] kernfs tx_queue_len: removing
[ 2647.304194][T22873] kernfs gro_flush_timeout: removing
[ 2647.309819][T22873] kernfs napi_defer_hard_irqs: removing
[ 2647.317135][T22873] kernfs phys_port_id: removing
[ 2647.322381][T22873] kernfs phys_port_name: removing
[ 2647.327612][T22873] kernfs phys_switch_id: removing
[ 2647.332667][    C0] virtqueue callback for ffff888144a51200 (ffffffff84a0d580)
[ 2647.332731][    C0] virtqueue interrupt with no work for ffff888144a51000
[ 2647.332752][    C0] virtqueue interrupt with no work for ffff888144a50e00
[ 2647.354451][T21996] Added buffer head 0 to ffff888144a51200
[ 2647.358538][T22873] kernfs proto_down: removing
[ 2647.368287][T22873] kernfs carrier_up_count: removing
[ 2647.373898][T22873] kernfs carrier_down_count: removing
[ 2647.379821][T22873] kernfs threaded: removing
[ 2647.384387][T22873] PM: Removing info for No Bus:syz_tun
[ 2647.390036][T22873] kobject: 'syz_tun' (ffff88805c7886a8): kobject_uevent_env
[ 2647.397633][T22873] kobject: 'syz_tun' (ffff88805c7886a8): fill_kobj_path: path = '/devices/virtual/net/syz_tun'
[ 2647.408182][T22873] kernfs syz_tun: removing
[ 2647.413087][T23894] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN
[ 2647.422654][T23894] net syz_tun: siw: event 10
[ 2647.428687][T23894] In tnode_resize ffff888024aa5220 inflate_threshold=50 threshold=25
[ 2647.437697][T23894] In tnode_resize ffff88805cad9c20 inflate_threshold=50 threshold=25
[ 2647.446769][T23894] In tnode_resize ffff888024ae9c20 inflate_threshold=50 threshold=25
[ 2647.455569][T22873] kobject: 'syz_tun' (ffff88805c7886a8): kobject_cleanup, parent 0000000000000000
[ 2647.456569][T23894] In tnode_resize ffff88801df77b20 inflate_threshold=50 threshold=25
[ 2647.466484][T22873] kobject: 'syz_tun' (ffff88805c7886a8): calling ktype release
[ 2647.486537][T23894] In tnode_resize ffff888061a22620 inflate_threshold=50 threshold=25
[ 2647.495995][T23894] In tnode_resize ffff88801aaac520 inflate_threshold=50 threshold=25
[ 2647.504107][T23894] In tnode_resize ffff88801aaacfa0 inflate_threshold=50 threshold=25
[ 2647.512571][T23894] trie_flush found=1
[ 2647.518486][T23894] In tnode_resize ffff888024aa5220 inflate_threshold=50 threshold=25
[ 2647.527393][T22873] kobject: 'syz_tun': free name
[ 2647.528654][T23894] In tnode_resize ffff88805cad9c20 inflate_threshold=50 threshold=25
[ 2647.541383][T23894] In tnode_resize ffff888024ae9c20 inflate_threshold=50 threshold=25
[ 2647.550728][T23894] In tnode_resize ffff88801df77b20 inflate_threshold=50 threshold=25
[ 2647.560133][T23894] In tnode_resize ffff888061a22620 inflate_threshold=50 threshold=25
[ 2647.568405][T23894] In tnode_resize ffff88801aaac520 inflate_threshold=50 threshold=25
[ 2647.576945][T23894] In tnode_resize ffff88801aaacfa0 inflate_threshold=50 threshold=25
[ 2647.585855][T23894] trie_flush found=1
[ 2647.590003][T23894] syz_tun: bond_netdev_event received NETDEV_DOWN
[ 2647.597706][ T5107] sd 0:0:1:0: cmd ffff8880255ca610 CDB: 0x2a
[ 2647.604267][ T5107] Added buffer head 645 to ffff888022488600
[ 2647.610729][T23894] net syz_tun: siw: event 2
[ 2647.622985][    C1] virtqueue callback for ffff888022488600 (ffffffff857fec60)
[ 2647.630470][    C1] sd 0:0:1:0: cmd ffff8880255ca610 response 0 status 0x0 sense_len 0
[ 2647.638540][    C1] No more buffers in queue
[ 2647.647516][T18435] sd 0:0:1:0: cmd ffff8880234d3110 CDB: 0x35
[ 2647.653648][T18435] Added buffer head 645 to ffff888022488600
[ 2647.659730][    C1] virtqueue callback for ffff888022488600 (ffffffff857fec60)
[ 2647.667131][    C1] sd 0:0:1:0: cmd ffff8880234d3110 response 0 status 0x0 sense_len 0
[ 2647.675247][    C1] No more buffers in queue
[ 2647.680971][T23472] sd 0:0:1:0: cmd ffff8880255d0c50 CDB: 0x2a
[ 2647.687342][T23472] Added buffer head 645 to ffff888022488600
[ 2647.707377][T23894] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::a8aa:aaff:feaa:aaaa in wq:ffff888064e8e918
[ 2647.719555][    C1] virtqueue callback for ffff888022488600 (ffffffff857fec60)
[ 2647.719591][    C1] sd 0:0:1:0: cmd ffff8880255d0c50 response 0 status 0x0 sense_len 0
[ 2647.719619][    C1] No more buffers in queue
[ 2647.751814][T23894] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::aa in wq:ffff888064e8e918
[ 2647.765979][T23894] Deleting ac141400/24 dsfield=0x00 t=ffff8880669b04b0
[ 2647.772967][T23894] Deleting ac1414ff/32 dsfield=0x00 t=ffff8880669b04b0
[ 2647.780366][T23894] Deleting ac1414aa/32 dsfield=0x00 t=ffff8880669b04b0
[ 2647.788887][T23894] In tnode_resize ffff88801df77b20 inflate_threshold=50 threshold=25
[ 2647.797441][T23894] In tnode_resize ffff88801aaacfa0 inflate_threshold=50 threshold=25
[ 2647.805957][T23894] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff888064e8e918
[ 2647.817695][T23894] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER
[ 2647.829792][T23894] net syz_tun: siw: event 6
[ 2647.838828][T23894] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT
[ 2647.851964][T23894] net syz_tun: siw: event 18
[ 2647.858133][T23894] kobject: 'rx-0' (ffff888031979350): kobject_cleanup, parent ffff8880229f8f50
[ 2647.867930][T23894] kobject: 'rx-0' (ffff888031979350): auto cleanup kobject_del
[ 2647.876770][T23894] kernfs rps_cpus: removing
[ 2647.881575][T23894] kernfs rps_flow_cnt: removing
[ 2647.887164][T23894] kobject: 'rx-0' (ffff888031979350): auto cleanup 'remove' event
[ 2647.895820][T23894] kobject: 'rx-0' (ffff888031979350): kobject_uevent_env
[ 2647.903282][T23894] kobject: 'rx-0' (ffff888031979350): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0'
[ 2647.916265][T23894] kernfs rx-0: removing
[ 2647.920495][T23894] kobject: 'rx-0' (ffff888031979350): calling ktype release
[ 2647.929553][T23894] kobject: 'rx-0': free name
[ 2647.934228][T23894] kernfs limit: removing
[ 2647.941564][T23894] kernfs limit_max: removing
[ 2647.946829][T23894] kernfs limit_min: removing
[ 2647.951686][T23894] kernfs hold_time: removing
[ 2647.960128][T23894] kernfs inflight: removing
[ 2647.965114][T23894] kernfs byte_queue_limits: removing
[ 2647.970723][T23894] kobject: 'tx-0' (ffff8880637a6c20): kobject_cleanup, parent ffff8880229f8f50
[ 2647.980461][T23894] kobject: 'tx-0' (ffff8880637a6c20): auto cleanup kobject_del
[ 2647.990548][T23894] kernfs tx_timeout: removing
[ 2647.995631][T23894] kernfs traffic_class: removing
[ 2648.000754][T23894] kernfs xps_cpus: removing
[ 2648.005750][T23894] kernfs xps_rxqs: removing
[ 2648.010324][T23894] kernfs tx_maxrate: removing
[ 2648.015516][T23894] kobject: 'tx-0' (ffff8880637a6c20): auto cleanup 'remove' event
[ 2648.023362][T23894] kobject: 'tx-0' (ffff8880637a6c20): kobject_uevent_env
[ 2648.032531][T23894] kobject: 'tx-0' (ffff8880637a6c20): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0'
[ 2648.044147][T23894] kernfs tx-0: removing
[ 2648.050858][T23894] kobject: 'tx-0' (ffff8880637a6c20): calling ktype release
[ 2648.058627][T23894] kobject: 'tx-0': free name
[ 2648.063292][T23894] kernfs queues: removing
[ 2648.071474][T23894] kobject: 'queues' (ffff8880229f8f50): kobject_cleanup, parent 0000000000000000
[ 2648.081607][T23894] kobject: 'queues' (ffff8880229f8f50): calling ktype release
[ 2648.090750][T23894] kobject: 'queues' (ffff8880229f8f50): kset_release
[ 2648.098259][T23894] kobject: 'queues': free name
[ 2648.103100][T23894] kernfs runtime_status: removing
[ 2648.108392][T23894] kernfs control: removing
[ 2648.112874][T23894] kernfs runtime_suspended_time: removing
[ 2648.118881][T23894] kernfs runtime_active_time: removing
[ 2648.124395][T23894] kernfs autosuspend_delay_ms: removing
[ 2648.131652][T23894] kernfs power: removing
[ 2648.136067][T23894] kernfs subsystem: removing
[ 2648.140727][T23894] kernfs syz_tun: removing
[ 2648.146346][T23894] kernfs uevent: removing
[ 2648.150742][T23894] kernfs tun_flags: removing
[ 2648.156930][T23894] kernfs owner: removing
[ 2648.161252][T23894] kernfs group: removing
[ 2648.167992][T23894] kernfs rx_packets: removing
[ 2648.172994][T23894] kernfs tx_packets: removing
[ 2648.179416][T23894] kernfs rx_bytes: removing
[ 2648.184001][T23894] kernfs tx_bytes: removing
[ 2648.191040][T23894] kernfs rx_errors: removing
[ 2648.196433][T23894] kernfs tx_errors: removing
[ 2648.201095][T23894] kernfs rx_dropped: removing
[ 2648.206377][T23894] kernfs tx_dropped: removing
[ 2648.211121][T23894] kernfs multicast: removing
[ 2648.216094][T23894] kernfs collisions: removing
[ 2648.220828][T23894] kernfs rx_length_errors: removing
[ 2648.226709][T23894] kernfs rx_over_errors: removing
[ 2648.231793][T23894] kernfs rx_crc_errors: removing
[ 2648.239721][T23894] kernfs rx_frame_errors: removing
[ 2648.245291][    C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888064e8e918 is addr:fe80::a8aa:aaff:feaa:aaaa for cmd:2 at entry:ffff88805e056c00
[ 2648.245420][    C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888064e8e918 is addr:fe80::aa for cmd:2 at entry:ffff8880277d6280
[ 2648.245512][    C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888064e8e918 is addr:172.20.20.170 for cmd:2 at entry:ffff88805e056300
[ 2648.290591][T23894] kernfs rx_fifo_errors: removing
[ 2648.298993][T23894] kernfs rx_missed_errors: removing
[ 2648.304271][T23894] kernfs tx_aborted_errors: removing
[ 2648.310344][T23894] kernfs tx_carrier_errors: removing
[ 2648.315850][T23894] kernfs tx_fifo_errors: removing
[ 2648.320926][T23894] kernfs tx_heartbeat_errors: removing
[ 2648.329216][T23894] kernfs tx_window_errors: removing
[ 2648.334458][    C0] virtqueue callback for ffff888144a51200 (ffffffff84a0d580)
[ 2648.334531][    C0] virtqueue interrupt with no work for ffff888144a51000
[ 2648.334545][    C0] virtqueue interrupt with no work for ffff888144a50e00
[ 2648.357193][T21996] Added buffer head 0 to ffff888144a51200
[ 2648.363677][T23894] kernfs rx_compressed: removing
[ 2648.369788][T23894] kernfs tx_compressed: removing
[ 2648.375130][T23894] kernfs rx_nohandler: removing
[ 2648.380059][T23894] kernfs statistics: removing
[ 2648.387573][T23894] kernfs netdev_group: removing
[ 2648.392724][T23894] kernfs type: removing
[ 2648.397567][T23894] kernfs dev_id: removing
[ 2648.402155][T23894] kernfs dev_port: removing
[ 2648.409313][T23894] kernfs iflink: removing
[ 2648.413925][T23894] kernfs ifindex: removing
[ 2648.419098][T23894] kernfs name_assign_type: removing
[ 2648.424371][T23894] kernfs addr_assign_type: removing
[ 2648.429872][T23894] kernfs addr_len: removing
[ 2648.434435][T23894] kernfs link_mode: removing
[ 2648.441477][T23894] kernfs address: removing
[ 2648.446594][T23894] kernfs broadcast: removing
[ 2648.451536][T23894] kernfs speed: removing
[ 2648.456981][T23894] kernfs duplex: removing
[ 2648.461389][T23894] kernfs dormant: removing
[ 2648.467302][T23894] kernfs testing: removing
[ 2648.471792][T23894] kernfs operstate: removing
[ 2648.478338][T23894] kernfs carrier_changes: removing
[ 2648.483749][T23894] kernfs ifalias: removing
[ 2648.489127][T23894] kernfs carrier: removing
[ 2648.493852][T23894] kernfs mtu: removing
[ 2648.499990][T23894] kernfs flags: removing
[ 2648.504304][T23894] kernfs tx_queue_len: removing
[ 2648.512160][T23894] kernfs gro_flush_timeout: removing
[ 2648.521467][T23894] kernfs napi_defer_hard_irqs: removing
[ 2648.527635][T23894] kernfs phys_port_id: removing
[ 2648.532538][T23894] kernfs phys_port_name: removing
[ 2648.538914][T23894] kernfs phys_switch_id: removing
[ 2648.545708][T23894] kernfs proto_down: removing
[ 2648.550472][T23894] kernfs carrier_up_count: removing
[ 2648.558039][T23894] kernfs carrier_down_count: removing
[ 2648.563473][T23894] kernfs threaded: removing
[ 2648.568479][T23894] PM: Removing info for No Bus:syz_tun
[ 2648.573977][T23894] kobject: 'syz_tun' (ffff8880744146a8): kobject_uevent_env
[ 2648.583162][T23894] kobject: 'syz_tun' (ffff8880744146a8): fill_kobj_path: path = '/devices/virtual/net/syz_tun'
[ 2648.594599][T23894] kernfs syz_tun: removing
[ 2648.600299][T23868] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN
[ 2648.609009][T23868] net syz_tun: siw: event 10
[ 2648.616503][T23868] In tnode_resize ffff88805c8e5c20 inflate_threshold=50 threshold=25
[ 2648.627100][T23868] In tnode_resize ffff8880279f8020 inflate_threshold=50 threshold=25
[ 2648.636512][T23894] kobject: 'syz_tun' (ffff8880744146a8): kobject_cleanup, parent 0000000000000000
[ 2648.649278][T23868] In tnode_resize ffff88805cb70420 inflate_threshold=50 threshold=25
[ 2648.655831][T23894] kobject: 'syz_tun' (ffff8880744146a8): calling ktype release
[ 2648.667193][T23894] kobject: 'syz_tun': free name
[ 2648.705049][T23868] In tnode_resize ffff88807bb48520 inflate_threshold=50 threshold=25
[ 2648.713197][T23868] In tnode_resize ffff88802f52faa0 inflate_threshold=50 threshold=25
[ 2648.728219][T23868] In tnode_resize ffff88802713e620 inflate_threshold=50 threshold=25
[ 2648.755965][T23868] In tnode_resize ffff88802dfe7c20 inflate_threshold=50 threshold=25
[ 2648.764096][T23868] trie_flush found=1
[ 2648.781242][T23868] In tnode_resize ffff88805c8e5c20 inflate_threshold=50 threshold=25
[ 2648.790105][T23868] In tnode_resize ffff8880279f8020 inflate_threshold=50 threshold=25
[ 2648.801091][T23868] In tnode_resize ffff88805cb70420 inflate_threshold=50 threshold=25
[ 2648.809863][T23868] In tnode_resize ffff88807bb48520 inflate_threshold=50 threshold=25
[ 2648.818486][T23868] In tnode_resize ffff88802f52faa0 inflate_threshold=50 threshold=25
[ 2648.827914][T23868] In tnode_resize ffff88802713e620 inflate_threshold=50 threshold=25
[ 2648.836333][T23868] In tnode_resize ffff88802dfe7c20 inflate_threshold=50 threshold=25
[ 2648.837092][    C1] virtqueue callback for ffff88802483ce00 (ffffffff85c809b0)
[ 2648.844422][T23868] trie_flush found=1
[ 2648.853574][    C1] No more buffers in queue
[ 2648.861451][    C1] Receiving skb proto 0x0806 len 28 type 1
[ 2648.867667][    C1] No more buffers in queue
[ 2648.872590][    C1] No more buffers in queue
[ 2648.877411][    C1] eth0: xmit ffff888069e7c8c0 42:01:0a:80:00:01
[ 2648.883968][    C1] Added buffer head 6 to ffff88802483d000
[ 2648.890162][    C1] virtqueue callback for ffff88802483d000 (ffffffff85c80aa0)
[ 2648.898500][    C1] Sent skb ffff888069e7c8c0
[ 2648.903260][    C1] No more buffers in queue
[ 2648.912952][T23868] syz_tun: bond_netdev_event received NETDEV_DOWN
[ 2648.920854][T23868] net syz_tun: siw: event 2
[ 2648.935312][T23868] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::a8aa:aaff:feaa:aaaa in wq:ffff888064e88fd8
[ 2648.955288][T23868] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::aa in wq:ffff888064e88fd8
[ 2648.980732][T23868] Deleting ac141400/24 dsfield=0x00 t=ffff88802fb3eb30
[ 2648.988194][T23868] Deleting ac1414ff/32 dsfield=0x00 t=ffff88802fb3eb30
[ 2648.995736][T23868] Deleting ac1414aa/32 dsfield=0x00 t=ffff88802fb3eb30
[ 2649.002907][T23868] In tnode_resize ffff88807bb48520 inflate_threshold=50 threshold=25
[ 2649.012448][T23868] In tnode_resize ffff88802dfe7c20 inflate_threshold=50 threshold=25
[ 2649.022855][T23868] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:172.20.20.170 in wq:ffff888064e88fd8
[ 2649.040823][T23868] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER
[ 2649.049662][T23868] net syz_tun: siw: event 6
[ 2649.058649][T23868] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT
[ 2649.067574][T23868] net syz_tun: siw: event 18
[ 2649.072566][T23868] kobject: 'rx-0' (ffff88807eae5550): kobject_cleanup, parent ffff88801bf4c750
[ 2649.081690][T23868] kobject: 'rx-0' (ffff88807eae5550): auto cleanup kobject_del
[ 2649.089621][T23868] kernfs rps_cpus: removing
[ 2649.094211][T23868] kernfs rps_flow_cnt: removing
[ 2649.099969][T23868] kobject: 'rx-0' (ffff88807eae5550): auto cleanup 'remove' event
[ 2649.108026][T23868] kobject: 'rx-0' (ffff88807eae5550): kobject_uevent_env
[ 2649.115447][T23868] kobject: 'rx-0' (ffff88807eae5550): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0'
[ 2649.129589][T23868] kernfs rx-0: removing
[ 2649.133825][T23868] kobject: 'rx-0' (ffff88807eae5550): calling ktype release
[ 2649.141454][T23868] kobject: 'rx-0': free name
[ 2649.149991][T23868] kernfs limit: removing
[ 2649.156589][T23868] kernfs limit_max: removing
[ 2649.161454][T23868] kernfs limit_min: removing
[ 2649.166616][T23868] kernfs hold_time: removing
[ 2649.171467][T23868] kernfs inflight: removing
[ 2649.177495][T23868] kernfs byte_queue_limits: removing
[ 2649.183079][T23868] kobject: 'tx-0' (ffff888063debc20): kobject_cleanup, parent ffff88801bf4c750
[ 2649.192805][T23868] kobject: 'tx-0' (ffff888063debc20): auto cleanup kobject_del
[ 2649.200830][T23868] kernfs tx_timeout: removing
[ 2649.206244][T23868] kernfs traffic_class: removing
[ 2649.211483][T23868] kernfs xps_cpus: removing
[ 2649.244913][T23868] kernfs xps_rxqs: removing
[ 2649.249733][T23868] kernfs tx_maxrate: removing
[ 2649.260774][T23868] kobject: 'tx-0' (ffff888063debc20): auto cleanup 'remove' event
[ 2649.271355][T23868] kobject: 'tx-0' (ffff888063debc20): kobject_uevent_env
[ 2649.279386][T23868] kobject: 'tx-0' (ffff888063debc20): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0'
[ 2649.291871][T23868] kernfs tx-0: removing
[ 2649.298873][T23868] kobject: 'tx-0' (ffff888063debc20): calling ktype release
[ 2649.306918][T23868] kobject: 'tx-0': free name
[ 2649.311799][T23868] kernfs queues: removing
[ 2649.316580][T23868] kobject: 'queues' (ffff88801bf4c750): kobject_cleanup, parent 0000000000000000
[ 2649.326809][T23868] kobject: 'queues' (ffff88801bf4c750): calling ktype release
[ 2649.329625][    C0] virtqueue callback for ffff888144a51200 (ffffffff84a0d580)
[ 2649.341745][    C0] virtqueue interrupt with no work for ffff888144a51000
[ 2649.348712][    C0] virtqueue interrupt with no work for ffff888144a50e00
[ 2649.356004][ T5872] Added buffer head 0 to ffff888144a51200
[ 2649.366876][T23868] kobject: 'queues' (ffff88801bf4c750): kset_release
[ 2649.373977][T23868] kobject: 'queues': free name
[ 2649.379270][T23868] kernfs runtime_status: removing
[ 2649.384605][T23868] kernfs control: removing
[ 2649.389679][T23868] kernfs runtime_suspended_time: removing
[ 2649.396069][T23868] kernfs runtime_active_time: removing
[ 2649.401867][T23868] kernfs autosuspend_delay_ms: removing
[ 2649.409703][T23868] kernfs power: removing
[ 2649.414222][T23868] kernfs subsystem: removing
[ 2649.419444][T23868] kernfs syz_tun: removing
[ 2649.423939][T23868] kernfs uevent: removing
[ 2649.428764][T23868] kernfs tun_flags: removing
[ 2649.433408][T23868] kernfs owner: removing
[ 2649.438112][T23868] kernfs group: removing
[ 2649.442424][T23868] kernfs rx_packets: removing
[ 2649.447461][T23868] kernfs tx_packets: removing
[ 2649.452186][T23868] kernfs rx_bytes: removing
[ 2649.456765][    C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888064e88fd8 is addr:fe80::a8aa:aaff:feaa:aaaa for cmd:2 at entry:ffff8880277d6080
[ 2649.456831][    C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888064e88fd8 is addr:fe80::aa for cmd:2 at entry:ffff888022796e00
[ 2649.456888][    C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffff888064e88fd8 is addr:172.20.20.170 for cmd:2 at entry:ffff8880277d6c00
[ 2649.506395][T23868] kernfs tx_bytes: removing
[ 2649.511186][T23868] kernfs rx_errors: removing
[ 2649.516439][T23868] kernfs tx_errors: removing
[ 2649.521089][T23868] kernfs rx_dropped: removing
[ 2649.527932][T23868] kernfs tx_dropped: removing
[ 2649.532671][T23868] kernfs multicast: removing
[ 2649.537811][T23868] kernfs collisions: removing
[ 2649.542552][T23868] kernfs rx_length_errors: removing
[ 2649.548093][T23868] kernfs rx_over_errors: removing
[ 2649.553178][T23868] kernfs rx_crc_errors: removing
[ 2649.558525][T23868] kernfs rx_frame_errors: removing
[ 2649.566169][T23868] kernfs rx_fifo_errors: removing
[ 2649.571259][T23868] kernfs rx_missed_errors: removing
[ 2649.576834][T23868] kernfs tx_aborted_errors: removing
[ 2649.582186][T23868] kernfs tx_carrier_errors: removing
[ 2649.589701][T23868] kernfs tx_fifo_errors: removing
[ 2649.594956][T23868] kernfs tx_heartbeat_errors: removing
[ 2649.600464][T23868] kernfs tx_window_errors: removing
[ 2649.605868][T23868] kernfs rx_compressed: removing
[ 2649.610859][T23868] kernfs tx_compressed: removing
[ 2649.623293][T23868] kernfs rx_nohandler: removing
[ 2649.628312][T23868] kernfs statistics: removing
[ 2649.633038][T23868] kernfs netdev_group: removing
[ 2649.640560][T23868] kernfs type: removing
[ 2649.644846][T23868] kernfs dev_id: removing
[ 2649.649230][T23868] kernfs dev_port: removing
[ 2649.653781][T23868] kernfs iflink: removing
[ 2649.658499][T23868] kernfs ifindex: removing
[ 2649.662973][T23868] kernfs name_assign_type: removing
[ 2649.669187][T23868] kernfs addr_assign_type: removing
[ 2649.674442][T23868] kernfs addr_len: removing
[ 2649.679455][T23868] kernfs link_mode: removing
[ 2649.684107][T23868] kernfs address: removing
[ 2649.691231][T23868] kernfs broadcast: removing
[ 2649.696697][T23868] kernfs speed: removing
[ 2649.701206][T23868] kernfs duplex: removing
[ 2649.707481][T23868] kernfs dormant: removing
[ 2649.712169][T23868] kernfs testing: removing
[ 2649.717115][T23868] kernfs operstate: removing
[ 2649.721775][T23868] kernfs carrier_changes: removing
[ 2649.728648][T23868] kernfs ifalias: removing
[ 2649.733617][T23868] kernfs carrier: removing
[ 2649.744376][T23868] kernfs mtu: removing
[ 2649.748740][T23868] kernfs flags: removing
[ 2649.753033][T23868] kernfs tx_queue_len: removing
[ 2649.759376][T23868] kernfs gro_flush_timeout: removing
[ 2649.765410][T23868] kernfs napi_defer_hard_irqs: removing
[ 2649.772515][T23868] kernfs phys_port_id: removing
[ 2649.777856][T23868] kernfs phys_port_name: removing
[ 2649.782939][T23868] kernfs phys_switch_id: removing
[ 2649.789441][T23868] kernfs proto_down: removing
[ 2649.794410][T23868] kernfs carrier_up_count: removing
[ 2649.800607][T23868] kernfs carrier_down_count: removing
[ 2649.807034][T23868] kernfs threaded: removing
[ 2649.811815][T23868] PM: Removing info for No Bus:syz_tun
[ 2649.818006][T23868] kobject: 'syz_tun' (ffff8880644386a8): kobject_uevent_env
[ 2649.826685][T23868] kobject: 'syz_tun' (ffff8880644386a8): fill_kobj_path: path = '/devices/virtual/net/syz_tun'
[ 2649.837331][T23868] kernfs syz_tun: removing
[ 2649.844876][ T5439] netdevsim netdevsim0 eth2: bond_netdev_event received NETDEV_CHANGE
[ 2649.853852][ T5439] net eth2: siw: event 4
[ 2649.861486][T23605] wireguard: wg2: Creating namespace exiting
[ 2649.873943][T23605] wireguard: wg1: Creating namespace exiting
[ 2649.896584][T23868] kobject: 'syz_tun' (ffff8880644386a8): kobject_cleanup, parent 0000000000000000
[ 2649.908386][T23759] kobject: 'netdevsim4' (ffff88802d270000): kobject_uevent_env
[ 2649.917498][T23868] kobject: 'syz_tun' (ffff8880644386a8): calling ktype release
[ 2649.926280][T23605] wireguard: wg0: Creating namespace exiting
[ 2649.932960][T23759] kobject: 'netdevsim4' (ffff88802d270000): fill_kobj_path: path = '/devices/netdevsim4'
[ 2649.943994][T23868] kobject: 'syz_tun': free name
[ 2649.965663][T23605] netdevsim netdevsim8 netdevsim3: bond_netdev_event received NETDEV_GOING_DOWN
[ 2649.978303][T23759] PM: Removing info for netdevsim:netdevsim4
[ 2649.984369][T23759] kobject: 'netdevsim4' (ffff88802d270000): kobject_uevent_env
[ 2650.005127][T23605] net netdevsim3: siw: event 10
[ 2650.015634][T23605] netdevsim netdevsim8 netdevsim3: bond_netdev_event received NETDEV_DOWN
[ 2650.028547][    C1] percpu_ref_switch_to_atomic_rcu: global 9223372036854775809 percpu 0
[ 2650.034401][T23759] kobject: 'netdevsim4' (ffff88802d270000): fill_kobj_path: path = '/devices/netdevsim4'
[ 2650.056859][T23759] kernfs netdevsim4: removing
[ 2650.061589][T23759] kobject: 'netdevsim4' (ffff88802d270000): kobject_cleanup, parent 0000000000000000
[ 2650.081267][T23605] net netdevsim3: siw: event 2
[ 2650.087583][T23759] kobject: 'netdevsim4' (ffff88802d270000): calling ktype release
[ 2650.106435][T23605] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:fe80::b063:8dff:fea6:d528 in wq:ffff888049c18fd8
[ 2650.119377][T23759] kobject: 'netdevsim4': free name
[ 2650.158362][T23605] netdevsim netdevsim8 netdevsim3 (unregistering): bond_netdev_event received NETDEV_UNREGISTER
[ 2650.196717][T23605] net netdevsim3: siw: event 6
[ 2650.203324][T23605] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2650.329548][    C0] virtqueue callback for ffff888144a51200 (ffffffff84a0d580)
[ 2650.337029][    C0] virtqueue interrupt with no work for ffff888144a51000
[ 2650.344008][    C0] virtqueue interrupt with no work for ffff888144a50e00
[ 2650.351125][T21996] Added buffer head 0 to ffff888144a51200
[ 2650.375477][T23605] netdevsim netdevsim8 netdevsim3 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT
[ 2650.416972][T23605] net netdevsim3: siw: event 18
[ 2650.455938][T23605] kobject: 'rx-0' (ffff88805c7fdb50): kobject_cleanup, parent ffff8880542f8f50
[ 2650.484861][T23605] kobject: 'rx-0' (ffff88805c7fdb50): auto cleanup kobject_del
[ 2650.515041][T23605] kernfs rps_cpus: removing
[ 2650.521233][T23605] kernfs rps_flow_cnt: removing
[ 2650.564745][T23605] kobject: 'rx-0' (ffff88805c7fdb50): auto cleanup 'remove' event
[ 2650.572626][T23605] kobject: 'rx-0' (ffff88805c7fdb50): kobject_uevent_env