last executing test programs:

15.275850277s ago: executing program 3 (id=1068):
socket(0x10, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f00000005c0))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000400)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10)
r5 = fcntl$dupfd(r4, 0x406, r4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200047fd, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10)
sendmsg$nl_netfilter(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c8000000110201012abd7000ffdbdf2501000005255ebf9f97750551a76a5a661a0ff1d25f804f96951bc9279adf91b3bd4571b7e2a4222c81c10a186534a143fcc173b7cf8c1000348004005680040075800400f1800800c500", @ANYRES32=0x0, @ANYBLOB="08005e0000000000f220e36f6db39dbdb88b504f51fb025c0e34039aeb865e81a2493d137ab277034978dee965f3bd0131cdd8f02c0ae57a6a3637cdc1fd2fb5fe09cfa419a40dc145d026c3d7d457dbd69ef9140076800c00ab0000000000000000000400af80000000"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
write$binfmt_elf64(r5, &(0x7f00000007c0)=ANY=[], 0x540)
shutdown(r4, 0x1)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000280)=0xb24)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)

14.119409448s ago: executing program 3 (id=1069):
r0 = gettid()
process_vm_readv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000003c0)={0x400000100002f, {0x0, 0x0, 0x6300}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cd"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)

13.707201967s ago: executing program 4 (id=1072):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, 0x0, 0x0)

12.668767584s ago: executing program 1 (id=1073):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000001c0)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5})
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x10000, 0x2, 0x4f}, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000380)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd=r0, 0x1, 0x0, 0x0, 0x16, 0x0, {0x2, 0x0, 0x4, '\x00', 0x0}})
io_uring_enter(r1, 0x2000, 0xb963, 0xa9, 0x0, 0x0)

12.612688737s ago: executing program 0 (id=1074):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prlimit64(r1, 0x1, &(0x7f0000000880)={0x4, 0x8000000000000000}, &(0x7f0000000900))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0000000100001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d2330000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023002d497ed877fc175d92efb5d3000000000000"], 0xf0}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r5)
sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4c844)
sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000127bd7000fbdbdf25020000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40480c0)
r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r7}, &(0x7f00000008c0)=ANY=[@ANYBLOB='enc=pkcs1 '], 0x0, 0x0)

12.495752737s ago: executing program 4 (id=1075):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2000048, &(0x7f00000002c0)={[{@oldalloc}, {@debug}, {@noinit_itable}]}, 0x1, 0x4be, &(0x7f0000000300)="$eJzs3c1vG2UaAPDHdpMmaXb7satV25W2lbpS90ON86FVk929cAIOlRCVuIBUQuKGEieOYqc0UQ8p3HrggEAgIQ7c+Qu40BMVEuIMd8QBFUEJEiAhGc3YTvPl4KI0RpnfT5p4Zl5nnveN9byZeWfGE0BmnU1+5CIGI+LTiDjaWNz8hrONl7X7N6eSKRf1+uVvcun7kuXWW1u/dyQiViOiLyKefjzihdz2uNXlldnJcrm02Fwu1uYWitXllQvX5iZnSjOl+ZHxixMT48NjoxN71tbbr710+9IHT/a+/8Or9+6+/tGHSbUGm2Ub27GXGk3vieMb1h2KiP8/imBdUGi2p7/bFeE3ST6/P0XEuTT/j0Yh/TSBLKjX6/Wf64fbFa/WgQMrn+4D5/JDEdGYz+eHhhr78H+OgXy5Uq39+2plaX66sa98LHryV6+VS8PNY4Vj0ZNLlkfS+QfLo1uWxyLSfeA3Cv3p8tBUpTy9v10dsMWRZv73N/P/+0Ij/4GM2PmQv+1BAXCAGPKD7JL/kF3yH7JL/kN2yX/ILvkP2fXQ+V94NPUA9p///5Bd8h+yS/5DJj116VIy1Vv3v09fX16arVy/MF2qzg7NLU0NTVUWF4ZmKpWZ9J6duV/bXrlSWRj5TyzdKNZK1VqxurxyZa6yNF+7kt7Xf6XUsy+tAjpx/Mydz3MRsfrf/nRK9DbL5CocbPV6Lrp9DzLQHc7kQXYZ+oPscowP7PAVvZv0tStY2Pu6APsj3+0KAF1z/pTzf5BVxv8hu4z/Q3bZxweM/0P2GP+H7Bps8/yvP2x4dtdwRPwxIj4r9BxuPesLOAjyX+Ui8sn+//mjfx/cWtqb+7EQ0ZOeE3z5nctv3Zis1RZHkvXfpqcOkvW1t5vrR7vSAKBDrTxt5TEAkF1r929Otab9jPv1Y42LELbHP9Qcm+xLz1EOrOU2XauQ26NrF1ZvRcTJneLnms87b5z5GFgrbIt/ovmaa2wire+h9Lnp+xP/1Ib4f9sQ//Qu8Xofom5w0N1J+p/hnfIvn+Z0rOff5v5ncI+unWjf/+XX+79Cm/7vTIcxXnz3lS/bxr8VcXrH+K14fWmsrfGTup3vLHzu3nPP/KVdYf29xnZ2ir++gYgo1uYWitXllQvp98jNlOZHxi9OTIwPj41OFNMx6mJrpHq7/5385O5u7R94EL8/Ijpqf7Lun521P37668fPnt0l/j/O7fz5n9glflLRf3UY/7vRL55vV5bEn27z98/vEj9ZN9Zh/OqbT3iWOAD8jlSXV2Yny+XSohkzZsysz3S7ZwIetQdJ3+2aAAAAAAAAAAAAAJ3aj8uJu91GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICD4JcAAAD///3C05Q=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000880)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000980), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000009c0), 0x10106, 0x2, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000a00)={0x0, &(0x7f0000000a40)})
close_range(r4, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000a80)={0xd0000002})
fchmodat(0xffffffffffffff9c, &(0x7f0000000ac0)='.\x00', 0xfffffe41)
setns(0xc9, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x28, 0x0, 0x809, 0x70bd2f, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000890}, 0x24080888)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0)
fchown(r0, 0x0, 0xee01)
syz_usb_connect$uac1(0x6, 0xfffffffffffffddf, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7d1f, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x0, 0x24, 0x2, 0x1, 0x2, 0x6, 0x8, 0x2, 0x5}, @format_type_i_ext={0x0, 0x24, 0x2, 0x1, 0xfc, 0x7, 0x2, 0x63, 0x1}, @as_header={0x0, 0x24, 0x1, 0x6c, 0x3}, @format_type_ii_ext={0x0, 0x24, 0x2, 0x2, 0x6, 0x2, 0x8, 0x8}, @format_type_i_continuous={0x0, 0x24, 0x2, 0x1, 0x6, 0x2, 0x8, 0x4, "fd"}, @as_header={0x0, 0x24, 0x1, 0x5, 0xfd, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x6, 0x2, 0x4, {0x7, 0x25, 0x1, 0x4, 0xa5, 0xc3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x31, 0x6, 0x3f, {0x7, 0x25, 0x1, 0xc, 0x4, 0x9}}}}}}}}]}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0)
fgetxattr(r7, &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000180)=""/138, 0xffffffffffffff98)

11.613492685s ago: executing program 0 (id=1076):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x2000)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r1 = syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f00000002c0)='./file1\x00', 0x40, &(0x7f0000000300)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f0000001680)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000006780)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000067c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c1000000000", 0x53}], 0x1)
connect$unix(r3, &(0x7f0000006800)=@abs, 0x6e)
getpid()
sendmmsg$unix(r4, &(0x7f0000006880), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000068c0), 0x10106, 0x2, 0x0)
syz_extract_tcp_res(0x0, 0x0, 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4486dd6000550700140600fc0100"/34, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006980)={'bridge_slave_0\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f00000069c0)=0x6)
r6 = openat(r1, &(0x7f0000006a00)='./file1\x00', 0x42, 0x0)
fallocate(r6, 0x0, 0x0, 0x90001)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000006a40)={&(0x7f0000006a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006ac0)={&(0x7f0000006b00)=ANY=[@ANYBLOB="48000000070a010400000000000000000000000408000b40010000030c00000208000a40000000060c00064000f845fc236355c35135fd71000000000000040900010073797a310096df6f4de40b1b913928bcaef381412fc8ce0c00708aa803accb14f2e9f6b34f739e46aa4e0ae694105c8ef5108523c0a38a4ea6b29995019f1e5b2eb28ded"], 0x48}}, 0x4040040)
openat$vsock(0xffffffffffffff9c, &(0x7f0000006bc0), 0x80000, 0x0)
syz_io_uring_setup(0xf998, &(0x7f0000006c00)={0x0, 0x3b50, 0x2000, 0x10000002, 0x8003c0, 0x0, r6}, &(0x7f0000006c80), &(0x7f0000006cc0), &(0x7f0000000280))
syz_emit_ethernet(0x76, &(0x7f0000006d40)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa86dd60d3ffff00403a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000005026050835900000000fc010000000000000000000000000000fe80000000007f00000000bb3a000000000000000c0004000920020000000000"], 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x8)

11.186740286s ago: executing program 1 (id=1078):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000340), 0x318, 0x0)
recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2)
r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/netlink\x00')
preadv(r5, 0x0, 0x0, 0x162, 0xb)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=<r6=>0xffffffffffffffff, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, r6, 0x15, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0}}, 0x30)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt(r7, 0x6, 0x23, 0x0, &(0x7f0000000600))
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x61)
mlockall(0x7)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000680)='pagemap\x00')
read$eventfd(r8, &(0x7f00000006c0), 0x8)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
r9 = fsopen(&(0x7f00000002c0)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000000300)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x2)

11.159367837s ago: executing program 3 (id=1079):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, &(0x7f0000000880)={0x0, 0xfffffffe, 0x800, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c84, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ced, 0x2, 0x1, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x20ec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

9.096618606s ago: executing program 2 (id=1080):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000540)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="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", 0x177}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000bc0)=0xdf8, 0x4)
writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb", 0x75}], 0x1)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="7da20883b15bddf63516401492b737f7c572aa792ad6fd3b2c11a24b66b6412511c65642df2fd4d899c036fc2d04b8fcd235d7680e1a8c366061e08d3fb1393a838ae749cb327824f88cf800171828ed5a73815bdebbd5", 0x57}, {&(0x7f0000000140)="7581bd48f6cda4b2432aa171a3e7ada76fda5f785788878541d6d8921e2c5ca0e602796f268d1fba5ec3f57b0a0110a500303572be0aa1d078e1111e47e9d014c283b311ba1b41658d4e37530c8ab637e92a395ca03d05838a6f0e07565d360d60303ca3c6a8039f35897165d33e12660edc53d352525c997331bdf41e9d825cdf7d93ada2e1878187e07606a7ff1f8117fbbcd85c5d3e3c7527bdfa1194642456569130d0fb0764530bb4a5e23f91fcf86c57a4d9a8a3f042a192ccbf1d9f0c86772744de", 0xc5}], 0x2, &(0x7f0000007500)=[{0x70, 0x104, 0x7, "bd5d1601a0add1a072715a33b93962ff9662141d55e04898285d2aa7138717212f98fad5517b3c18ff15daa55cf6fd5d0d63cbc6c4915a35322763ddcc70dfc97f895dc20497710d8fcdae3d09619fda227de9c9df6bf247b3"}, {0x90, 0x115, 0x0, "00000000ac3097aa9f067922bcb70bf5400a4b1b92338669c9fdf826deb2980db4cd41d37fef6c23b1f2ca263f6cb07465b19d3a611b136f23411451f025e65c4f207ad99e35f551f3a4ca7383a759e3a0801c0991decc1378b2ca56b484ddc22d027ec7497684b171ecbac4cf5e5d191ff840a81935e12905a5958e"}], 0x100}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}, {&(0x7f0000001080)="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", 0x1cb}], 0x2}}], 0x2, 0x40c0)

8.382421281s ago: executing program 0 (id=1081):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8502, 0x0)
write$sndseq(r1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {}, @result={0xbac, 0x28}}], 0x54)
socket(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000140)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"})
r3 = syz_open_dev$dvb_demux(&(0x7f0000000180), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f00000001c0)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5})
syz_io_uring_setup(0xf00, &(0x7f0000000280)={0x0, 0x5961, 0x10000, 0x2, 0x4f}, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000380)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd=r3, 0x1, 0x0, 0x0, 0x16, 0x0, {0x2, 0x0, 0x4, '\x00', 0x0}})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/resume', 0xa82, 0x0)

8.320442289s ago: executing program 4 (id=1082):
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x2000)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r1 = syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f00000002c0)='./file1\x00', 0x40, &(0x7f0000000300)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f0000001680)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000006780)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000067c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000380)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000000000224e0000", 0x79}], 0x1)
connect$unix(r3, &(0x7f0000006800)=@abs, 0x6e)
getpid()
sendmmsg$unix(r4, &(0x7f0000006880), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000068c0), 0x10106, 0x2, 0x0)
syz_extract_tcp_res(0x0, 0x0, 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4486dd6000550700140600fc01000000000000000000000000003b775b2b8df001d185bdf49b8ca25500000000000083b90c6724e204e3f984", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000069c0)=0x6)
r7 = openat(r1, &(0x7f0000006a00)='./file1\x00', 0x42, 0x0)
fallocate(r7, 0x0, 0x0, 0x90001)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000006a40)={&(0x7f0000006a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006ac0)={&(0x7f0000006b00)=ANY=[@ANYBLOB="48000000070a010400000000000000000000000408000b40010000030c00000208000a40000000060c00064000f845fc236355c35135fd71000000000000040900010073797a310096df6f4de40b1b913928bcaef381412fc8ce0c00708aa803accb14f2e9f6b34f739e46aa4e0ae694105c8ef5108523c0a38a4ea6b29995019f1e5b2eb28ded"], 0x48}}, 0x4040040)
openat$vsock(0xffffffffffffff9c, &(0x7f0000006bc0), 0x80000, 0x0)
syz_io_uring_setup(0xf998, &(0x7f0000006c00)={0x0, 0x3b50, 0x2000, 0x10000002, 0x8003c0, 0x0, r7}, &(0x7f0000006c80), &(0x7f0000006cc0), &(0x7f0000000280))
syz_emit_ethernet(0x76, &(0x7f0000006d40)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa86dd60d3ffff00403a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000005026050835900000000fc010000000000000000000000000000fe80000000007f00000000bb3a000000000000000c0004000920020000000000"], 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x8)

8.239110256s ago: executing program 1 (id=1083):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x40)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40243)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000001980)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000001a40)=[{0x5, 0xff, 0xf8, 0x0, @time, {0x2}, {0x0, 0x1}, @raw32={[0x3, 0xa, 0x40f4]}}], 0x1c)
syz_mount_image$vfat(&(0x7f0000001440), &(0x7f00000014c0)='./file0\x00', 0x2210008, &(0x7f0000001a80)=ANY=[], 0x1, 0x39f, &(0x7f0000001500)="$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")
fremovexattr(0xffffffffffffffff, &(0x7f0000001900)=@known='system.posix_acl_default\x00')
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x5f, 0x0, 0x0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0xc9a9c042ad77c5e5)
write$binfmt_elf32(r4, &(0x7f0000001a80)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x9e, 0xd, 0x0, 0x2, 0x3, 0xc, 0x2ca, 0x38, 0x25e, 0x404, 0x6edf, 0x20, 0x4, 0xfff8, 0x3ff, 0x200}, [{0x6474e551, 0x2714, 0xf20c, 0x4, 0x100, 0x6, 0x3, 0x8}, {0x4, 0x7fffffff, 0x2a8, 0x7fff, 0x6, 0x4, 0x6f9b, 0xb}, {0x70000000, 0xfffffffe, 0x5, 0xfffffffa, 0x9, 0x6f1, 0xbe, 0xc30}, {0x60000000, 0x5, 0x8cd2, 0x36, 0x6, 0x2, 0x7fffffff, 0x1ff}]}, 0xb8)
ioctl$SNDCTL_TMR_METRONOME(r4, 0x40045407)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001940)={'sit0\x00', &(0x7f0000001b80)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001c40)={'sit0\x00', &(0x7f0000001c80)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r6 = epoll_create1(0x0)
epoll_pwait(r6, &(0x7f0000000380)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000001480)={0x30000008})

8.068103779s ago: executing program 2 (id=1084):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000380)=0x4)
timer_create(0x2, &(0x7f0000000140)={0x0, 0x7, 0x1, @thr={&(0x7f0000000080)="5e7ff6c89bd074ed19e026645ac5fe59ad2f69ae87377afedbca7f55099921397a84aa41564c413c46c69ee69adf93e697565c3860", &(0x7f0000000100)="3a81515fb1f3e0080cb5ac342de2d4ad5df1d97896bb79650548f09a1e47479ff9ade47582bd"}}, &(0x7f0000000200)=<r3=>0x0)
timer_delete(r3)
sendfile(r1, r2, 0x0, 0x20000023896)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c6012837000300"})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f0000000a00)="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", 0xa3f)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000400)={'pimreg\x00', 0x23340301d9c96252})
pwritev2(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000480)="01", 0x1}, {0x0, 0xffc8}], 0x2, 0xa74a, 0x80000000, 0x18)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES16=r5, @ANYBLOB="050b0000000000000000240000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x4040010)
r6 = socket(0x10, 0x80003, 0x0)
sendmsg$nl_route_sched(r6, 0x0, 0x40000)

7.882208735s ago: executing program 3 (id=1085):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0)
timerfd_create(0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1003, 0x100000001, 0x2, 0x1ff, 0x0, 0x3, 0x4})
socket$inet6(0xa, 0x3, 0x8000000003c)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0xfffffffffffffd52}, {0x6, 0x1, 0x41c}}}, 0x7)
sched_setscheduler(0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000000e00)=""/102392, 0x18ff8)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8001)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast2, @multicast2}, &(0x7f0000000300)=0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x7, [@enum={0xb, 0x7, 0x0, 0x6, 0x4, [{0xf, 0x5a44}, {0x8, 0x4}, {0x7, 0xffff}, {0x3, 0x1}, {0xb, 0x2}, {0x6, 0x8}, {0x8, 0x4}]}, @struct={0xa, 0x5, 0x0, 0x4, 0x1, 0x2000, [{0x8, 0x0, 0xa9}, {0xd, 0x4, 0x2b}, {0x9, 0x4, 0x3}, {0xe, 0x3, 0x6}, {0xd, 0x3, 0x7}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x30]}}, &(0x7f0000000440)=""/83, 0xab, 0x53, 0x0, 0x8, 0x10000}, 0x28)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f00000005c0)='4', 0x1)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000019e00)={{r1, &(0x7f0000000600)='keyring\x00', 0x101200, &(0x7f0000000640)={@_ha_fsid={[0x5, 0x3]}, {0x7, 0x2, 0xfffffff9, 0xf10}}, 0x2, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0x3}, {[0xbb, 0x8, 0x8, 0x200]}, 0x8, 0xcc, &(0x7f0000000700)=""/204})
fsmount(r2, 0x1, 0x70)
add_key(&(0x7f0000000840)='asymmetric\x00', 0x0, &(0x7f0000000880)="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", 0x554, 0x0)

6.347992595s ago: executing program 4 (id=1086):
socket$inet6(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prlimit64(r1, 0x1, &(0x7f0000000880)={0x4, 0x8000000000000000}, &(0x7f0000000900))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0000000100001040000000000000000000000000000000000000000000000010000000000000000000000000000000112341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d2330000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023002d497ed877fc175d92efb5d3000000000000"], 0xf0}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r5)
sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4c844)
sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000127bd7000fbdbdf25020000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40480c0)
r7 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r7}, &(0x7f00000008c0)=ANY=[@ANYBLOB='enc=pkcs1 '], 0x0, 0x0)

6.12837914s ago: executing program 3 (id=1087):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$sndctrl(&(0x7f00000018c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001ac00), 0x4000000004002, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f000001ac40), 0xc2900, 0x0)
sendfile(r4, r5, 0x0, 0x201f00)

6.070998589s ago: executing program 2 (id=1088):
mkdir(0x0, 0x1ff)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES32], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000001180)='3', 0x4e)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f00000011c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001200)={&(0x7f0000001240)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x4000000)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000580)={0x20000008})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000005c0)={0x20000001})
syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x40, 0x1, 0xb9, {0xb9, 0x23, "1a30ca1c3133146d7b034fba00b0331a8a62f2bc08697a27da8e75237baa2a9b8f89394aa640814334aa731555ebc00bb7a53352f1a4c5f5dd103ce7ae429a9bc02a0016e6809338e3b2b80f3b116bbccde3aed6d59a8acf0af7c73e6ec936236e9d5af1fd2425399f43d45861422603e05a0a7ffc76d8e5acd7488a4191cf54576006c1dd5a48a7195b6b81080fb31c89455eac8331fa1c4bc78accc436b1f731f7d95dd28b4bbdd011921ec72a774e8f00840b40bd60"}}, &(0x7f0000000100)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "8130012a93178428dccba5d8770c39e0283f5654349ca18cb10c42757325a31d32e7684881a12f402879cf6bf2d6cf959d746ce9069313d27d29c1f95a16a1b62eb8fccad33b95d115f11d86ad0a93746c522f1024ea96515e8ab67a0dbcb32343ace19b9525baefd8427ade810ec6f3c88f3ab9153f3350a77fd3b22dbd5418f8acc96a7b2fc3027c6f426dd038675eb51d99f6870c7486c4141e4c020a6bff0ade86908f15e6379d744e826bb3c7f5597059946225c7f4053c56840d0bc77c1f87efb1fa10fbfb79d36b4b169814ce6d551dd625540667e7bbe68d68da528af2c735cc541ac1310d657e5000f5f5e328"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x10, 0x16, 0x4f, "045781f54a62617470d5ac646311c0a22be2d1328ffe5e7814e4e98b5c424300ae63618b8baf1bc73d8e43d427d88c97d8707794205dd28285edac01f04b73f2bda55e61ce0338253150d865c3fcaa"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6a}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x81, 0x1, '\v'}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "6d3586"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "201d"}, &(0x7f0000000440)={0x20, 0x84, 0x4, "572d62ec"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "5c537f"}})
syz_usb_control_io$lan78xx(r0, &(0x7f00000007c0)={0x14, &(0x7f0000000600)={0x0, 0x30, 0xc7, {0xc7, 0xd, "e146fe9fccf79b4edccd90d601fbb8c4dea766f8c66a133fac70a31583fb0dda5cb887b627bcaa1c8a3118e66b2174beb42830de122f599560ac74572178f4f7df5b3ae95e3a66840ea0d6f3ee0203e56870fb9f611b32ee361fc6fa717b751d51bce389aacfddfda85c1245ec3b00356f6ac2e2d78842887ef4b7140e2240310dd67bdb38db13f9a8fc6a3ab7f4e691c6e3d7df07db916a72828c4aff93b5a7ae4feacd55b3bd21758f023a4d122e6f329ebda3873070538f560375081891d88f35ae71aa"}}, &(0x7f0000000700)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "d7d39fd2d93d202852eb18ed0839ad48829819c9314b0dd71a30df5ce2ad9980c3b135e1aafe77e975ad2f0106c7f6d4ab20f46d22ee1218963a8e0b1a1ba03b10bc8dd405f4c2060ef2a5094d1f5ce7950df688eb6abeeea2617299d55f5545857282d818e300b0bfee9de2a338856483a3d933574012cfe961ec78adaa9555a157805deb9e9b8d2a0d5f7377f1418c408f86af004f41e13aefdaba"}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000800)={0x0, 0x3, 0x89, "45ea1f40b2aa0dc024058e66e306a2f9c041509d26720950f9570fd0a49298612af6ff18a13d7d2442c64fcc56085b0435b289607e167472d7bef1515a060f1dee057ae50df9da52ffe42e4efd8f88c439a3993b3f6685323e4df2a3c5252a460fb438e84190c151574e47932a002db103bb8805742441185d51f6a445a00a16dccf7924661c5f6183"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x32}, &(0x7f0000000940)={0xc0, 0xa1, 0x4, 0x5}, &(0x7f0000000980)={0x40, 0xa0, 0x4, 0x80000001}, &(0x7f00000009c0)={0xc0, 0xa2, 0x2f, "2c8113535c11dfee125d777c272b89d84ddd08b375d61b92c1eb518f02b1621ebba8c549828bc9f5e4271bacd618d6"}})
syz_usb_control_io$sierra_net(r0, &(0x7f0000000bc0)={0x14, &(0x7f0000001380)={0x0, 0x5, 0xc5, {0xc5, 0x5, "f604fac254bfd162418a3f73dff6a8d90059eefac83ceed6e52c46d2dc8626fc2e02953ccbe3c3f42c46794d1b0b37800cf09ae6fed3e66171724c06b000cd81c0455d84264113711345c93534c704fa6550e578979edd6ee453330fa217e998c8bee3788e6a0c1f3f3ae564bd68516b9cc1e521b9331e9a41618d24b09ba0067febc731913efbfb094b34d85a0ed80db8df4df278f6b18c17f0069d23341d26df7ac670c753958bd76c8f8c9a9af61f9aae96df0322fbe26c994bd85c12f61abda22f"}}, &(0x7f0000000b40)={0x0, 0x3, 0x45, @string={0x45, 0x3, "0594b7f79bc57b0455b226364e001664498f6930653620d075227ca6212969dc1b30ece45efb9f7f5afa2a2c8a40df59d44baddcdfcc4024c742806225c972884f4e8b"}}}, &(0x7f0000001100)={0x1c, &(0x7f0000000c00)={0x40, 0x30, 0x69, "8cd3ff52191e3b55df58ca75a931ce99094b9a2f4d500dc26059be4529d28c45149a11a5cdc12f6766cd5f9dba60eaf4986d849e447b53743de2cf5eeaa23d2adbe033dc4fc5b282a3f8c24519771501f3d5206cb1c258ff0ea7dcd301ade91e2e83e8fe95239b2a31"}, &(0x7f0000000c80)={0xa1, 0x1, 0x400, "6b606112aced5f0c93c28417f2503232b749fdcbfd7f03696f0f633ec259188be1b5120dbf423fcc09ec69894a094161a362b379dde774999474491e7fdde4dc92aac01b0f338617c39829580a94d2273020b0a0bacd9f392c86cd5ba3f9b9604f2ec86805186fa58978392dc71821ecc13380b8eba9114b7b5b01020a8e198aaf09f2743b54307cf614d93b9775e796075e5c0d2bf3338cccce84567528baf7e6de4b6fb4ff882a67fb4408542fe6076b1d1f290cfdfc4e09f8d30be3e4873b0ef9a8f1ebb2e71146687e7aa50416f7ab75aa74c7f231d437d7dd7b41c28d2bcf3c6b20e0dbf6300e9715c42d373625101fef024dc31a34edb02fe53bedaeb087d3e54c301824c979e69056779e1bbcd3a2e16e0347d35ddf7a24f5893e57e23284cbbd305a032aab838076838c8e4d53e5b0785ea4bad76ae65b4edc7e18e3788cfa7b37c0600203a19488586441a244e4165dddf5553f4ae1326aba97b883c3d1262f8b82ff30782782d6a7d8d2136f283b8147520be79c3a04511dceb575824c0bed487744ab419af5af99ea913b8691758bc013b0427210d17c6af880ddff9764f1c5228ef808d023377cab77bb0d4b27dad8e464bf4a37716685fb500f7148394f15f05cf8ed8853cd35106fc71b68cdf39ec792b4526b2fc1fa0829df6933c4f80010927f463af0f3554a970effc2c93e2032f4146c63766e8ea2e167f3aa293a9c7d106a42af1088a38117813dcde8805dd5e6e6f9e14d5eb614587ba6c83b4ef3a18c4fb154b806c5e829fa205c60abf10da9c9dd2d267939c9a5066254d98599ca567d2f6af5022ab07fc5cd96bb7e643656839e2ed2b956f92cac02a6f6c24b3c02e902cef924bbecca70ccc09d23ae8feb6e3fdb664430bf63b4c98136fbc3861e14d306c34f5b5e2f59d735c6e8d4bd11d91f8ab9758c7ec623e647ac85bf472b74da9b69db113d20b0feaf371ebe645bba7fd52cc631360cc6ead5b32cf3488aee388464397ea7e81242f20124f9263bd754ee8b5e5c4f9a1ed00ddd0947cf4388c92ca6c736e19e303ec541f0ec349d5e4dcb90661c10417eec4a327d3da95c5c10b06bca9d74aa4d8512d3353899cb1a6315bbf46d2abc267be5bed33345e72d4e785bf362cd0b04f1513d02402576c4278ecff9c95313f9378b7d4187e73db860f3f153b06feeb62552562648b4ff432d5f4f31f0d9600799b2e3eb968800d06a2f85495771b6004ee415fa0a1f9ae26327c4836313cffcf5977ece7eb2b997f2c051e9d0bf0cb79979fa94a07e5d88fb2f54a0cd7342a7e6d2b0fea934c0157bb31311d9cd210b08fca4897b148775550c062473c9c1e38125dfc3a0bd95d3e201acd39e044a7cef2657fa7ffe2f26283dd58207341c6a5f4ddf499c3dd17d714a9e2548ed8a21af46999d1cf811b6999aa811c0b6bf9d"}, &(0x7f00000010c0)={0x21, 0x0, 0x1, "e9"}})

4.932483619s ago: executing program 3 (id=1089):
r0 = gettid()
process_vm_readv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, 0x0)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f00000003c0)={0x400000100002f, {0x0, 0x0, 0x6300}})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000001000000b700000000000000950000000000000015a19e5db906c6257a0627ea323477e1a0e4ffb05e1c7d170c55ed4fb273483e7f7b90d25541c791cf5d064de3f7b06448bd43056f37fea571fe1466dadb8fcfbc26b7c24f287b4aa5d0759945abd5997f8c6a0a722ef134b431611075dec2872754ef4ce4826d3b29a88f98c8ebe7d9216a0217015b63c0cdf3dec8"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)

4.355036508s ago: executing program 4 (id=1090):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x40)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40243)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000001980)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000001a40)=[{0x5, 0xff, 0xf8, 0x0, @time, {0x2}, {0x0, 0x1}, @raw32={[0x3, 0xa, 0x40f4]}}], 0x1c)
syz_mount_image$vfat(&(0x7f0000001440), &(0x7f00000014c0)='./file0\x00', 0x2210008, &(0x7f0000001a80)=ANY=[], 0x1, 0x39f, &(0x7f0000001500)="$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")
fremovexattr(0xffffffffffffffff, &(0x7f0000001900)=@known='system.posix_acl_default\x00')
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x5f, 0x0, 0x0)
r4 = creat(&(0x7f0000000140)='./file0\x00', 0xc9a9c042ad77c5e5)
write$binfmt_elf32(r4, &(0x7f0000001a80)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x6, 0x9e, 0xd, 0x0, 0x2, 0x3, 0xc, 0x2ca, 0x38, 0x25e, 0x404, 0x6edf, 0x20, 0x4, 0xfff8, 0x3ff, 0x200}, [{0x6474e551, 0x2714, 0xf20c, 0x4, 0x100, 0x6, 0x3, 0x8}, {0x4, 0x7fffffff, 0x2a8, 0x7fff, 0x6, 0x4, 0x6f9b, 0xb}, {0x70000000, 0xfffffffe, 0x5, 0xfffffffa, 0x9, 0x6f1, 0xbe, 0xc30}, {0x60000000, 0x5, 0x8cd2, 0x36, 0x6, 0x2, 0x7fffffff, 0x1ff}]}, 0xb8)
ioctl$SNDCTL_TMR_METRONOME(r4, 0x40045407)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001940)={'sit0\x00', &(0x7f0000001b80)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001c40)={'sit0\x00', &(0x7f0000001c80)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r6 = epoll_create1(0x0)
epoll_pwait(r6, &(0x7f0000000380)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000001480)={0x30000008})

4.145186188s ago: executing program 1 (id=1091):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x2000)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r1 = syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f00000002c0)='./file1\x00', 0x40, &(0x7f0000000300)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f0000001680)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000006780)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000067c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000000000224e0000", 0x79}], 0x1)
connect$unix(r3, &(0x7f0000006800)=@abs, 0x6e)
getpid()
sendmmsg$unix(r4, &(0x7f0000006880), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000068c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006980)={'bridge_slave_0\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f00000069c0)=0x6)
r6 = openat(r1, &(0x7f0000006a00)='./file1\x00', 0x42, 0x0)
fallocate(r6, 0x0, 0x0, 0x90001)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000006a40)={&(0x7f0000006a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006ac0)={&(0x7f0000006b00)=ANY=[@ANYBLOB="48000000070a010400000000000000000000000408000b40010000030c00000208000a40000000060c00064000f845fc236355c35135fd71000000000000040900010073797a310096df6f4de40b1b913928bcaef381412fc8ce0c00708aa803accb14f2e9f6b34f739e46aa4e0ae694105c8ef5108523c0a38a4ea6b29995019f1e5b2eb28ded"], 0x48}}, 0x4040040)
openat$vsock(0xffffffffffffff9c, &(0x7f0000006bc0), 0x80000, 0x0)
syz_io_uring_setup(0xf998, &(0x7f0000006c00)={0x0, 0x3b50, 0x2000, 0x10000002, 0x8003c0, 0x0, r6}, &(0x7f0000006c80), &(0x7f0000006cc0), &(0x7f0000000280))
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0xfffffffffffffc3b)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000006d40)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa86dd60d3ffff00403a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000005026050835900000000fc010000000000000000000000000000fe80000000007f00000000bb3a000000000000000c0004000920020000000000"], 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x8)

3.9530552s ago: executing program 0 (id=1092):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x2000)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r1 = syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f00000002c0)='./file1\x00', 0x40, &(0x7f0000000300)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f0000001680)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000006780)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000067c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000000000224e0000", 0x79}], 0x1)
connect$unix(r3, &(0x7f0000006800)=@abs, 0x6e)
getpid()
sendmmsg$unix(r4, &(0x7f0000006880), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000068c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[], 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006980)={'bridge_slave_0\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f00000069c0)=0x6)
r6 = openat(r1, &(0x7f0000006a00)='./file1\x00', 0x42, 0x0)
fallocate(r6, 0x0, 0x0, 0x90001)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000006a40)={&(0x7f0000006a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006ac0)={&(0x7f0000006b00)=ANY=[@ANYBLOB="48000000070a010400000000000000000000000408000b40010000030c00000208000a40000000060c00064000f845fc236355c35135fd71000000000000040900010073797a310096df6f4de40b1b913928bcaef381412fc8ce0c00708aa803accb14f2e9f6b34f739e46aa4e0ae694105c8ef5108523c0a38a4ea6b29995019f1e5b2eb28ded"], 0x48}}, 0x4040040)
openat$vsock(0xffffffffffffff9c, &(0x7f0000006bc0), 0x80000, 0x0)
syz_io_uring_setup(0xf998, &(0x7f0000006c00)={0x0, 0x3b50, 0x2000, 0x10000002, 0x8003c0, 0x0, r6}, &(0x7f0000006c80), &(0x7f0000006cc0), &(0x7f0000000280))
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0xfffffffffffffc3b)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000006d40)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa86dd60d3ffff00403a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000005026050835900000000fc010000000000000000000000000000fe80000000007f00000000bb3a000000000000000c0004000920020000000000"], 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x8)

3.475853802s ago: executing program 2 (id=1093):
r0 = gettid()
process_vm_readv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018005dde000000000c0000000c00000004000000020000000000000f0400000000005f00"], 0x0, 0x28}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b7040000010000008500000015000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)

2.528719745s ago: executing program 1 (id=1094):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x844)
prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7)
r0 = getpgrp(0x0)
syz_open_dev$sndmidi(&(0x7f0000000880), 0xc7, 0x2000)
sched_setaffinity(r0, 0x8, &(0x7f00000008c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x3)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000000"])
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000009c0), 0x0, 0x0)
setpriority(0x0, 0xffffffffffffffff, 0x800)
read$msr(r3, &(0x7f0000000a00)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x47, &(0x7f0000019a00)=0x7)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000019a80)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000019ac0)={0x48, 0x2, r5, 0x0, <r6=>0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_DESTROY$stdev(r4, 0x3b80, &(0x7f0000019b40)={0x8, r6})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
open(&(0x7f0000000000)='.\x00', 0x8c00, 0x5)

1.486686891s ago: executing program 0 (id=1095):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000540)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d", 0x177}], 0x1}}], 0x1, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000bc0)=0xdf8, 0x4)
writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb", 0x75}], 0x1)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="7da20883b15bddf63516401492b737f7c572aa792ad6fd3b2c11a24b66b6412511c65642df2fd4d899c036fc2d04b8fcd235d7680e1a8c366061e08d3fb1393a838ae749cb327824f88cf800171828ed5a73815bdebbd5", 0x57}, {&(0x7f0000000140)="7581bd48f6cda4b2432aa171a3e7ada76fda5f785788878541d6d8921e2c5ca0e602796f268d1fba5ec3f57b0a0110a500303572be0aa1d078e1111e47e9d014c283b311ba1b41658d4e37530c8ab637e92a395ca03d05838a6f0e07565d360d60303ca3c6a8039f35897165d33e12660edc53d352525c997331bdf41e9d825cdf7d93ada2e1878187e07606a7ff1f8117fbbcd85c5d3e3c7527bdfa1194642456569130d0fb0764530bb4a5e23f91fcf86c57a4d9a8a3f042a192ccbf1d9f0c86772744de", 0xc5}], 0x2, &(0x7f0000007500)=[{0x98, 0x104, 0x7, "bd5d1601a0add1a072715a33b93962ff9662141d55e04898285d2aa7138717212f98fad5517b3c18ff15daa55cf6fd5d0d63cbc6c4915a35322763ddcc70dfc97f895dc20497710d8fcdae3d09619fda227de9c9df6bf247b347eb7ef5fabb860f6de96684ab5dc2646afc535c529a5fb7ecd33e791d9ec3bc7f485ac329348fa6146b7f82"}, {0x90, 0x115, 0x0, "00000000ac3097aa9f067922bcb70bf5400a4b1b92338669c9fdf826deb2980db4cd41d37fef6c23b1f2ca263f6cb07465b19d3a611b136f23411451f025e65c4f207ad99e35f551f3a4ca7383a759e3a0801c0991decc1378b2ca56b484ddc22d027ec7497684b171ecbac4cf5e5d191ff840a81935e12905a5958e"}], 0x128}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}, {&(0x7f0000001080)="e5e665acd32555ca8ee2a75af090cf74fc82ad4bdb1f4ee458730067d98e9a1dc7deeb8d01c89ef31aa31b1ef28dbb82e468e2c2ffe8f253357a1c0a467b73ac88e74a98939b9d8abe14c1342a93a87a13743a459b028b5aaf580d8646df063bd84166728c82c429d4305d213a0f44e77945d8e375d5ebc751a29e9f019fbf0c992f31f5d8ac4089dc946c5d0dea980fda1705fafafa82c8d2e79acd748b64bc726679863a111e32730dee92165f3d2717d92bbd520c3f597c61f07b0367ad9b08ea9bcbebb8a2b5ca4a519cee6ab80ebd46f77df00bccafd5a4fdab5c46714a03d28f6e26f5cdd5a88404793d9d59a45e7028875aef60831cd6d4ec0f52d878df3141b54114079dc3ac731d521f66db0b39b5591937033f1e93bdb54a71b8748b5c7fec0f8af31b4f7c25455d34f9103514d604bfd60e1557b78f6e609c0b606eb402ec8d9c2c217a0de83af7027d2d0574ff01dd699dfbacaf096a345fc14c16f6416bc98ea674a241908e6f42d6f70e4414e8c951723bfc524be519e2415aaa43bc3f295644b2e0b092a4a68d8d9a2ba223b3607ad500e0160c5bd2fa219576d3cec5cc4aba6afc73d2b86d4d5da5dea0931ab1e43b855bf9393ef2f904293537c9706094ac94d29c58", 0x1cb}], 0x2}}], 0x2, 0x40c0)

1.483233668s ago: executing program 2 (id=1096):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000540)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x1, &(0x7f0000000600)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000680)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6955889fcc8cce51ecd73721ad8c044534221e4572f8ab98df38845f0077e10f19314402484b81bc3727426283f803d", 0x177}], 0x1}}], 0x1, 0x2090)
writev(r0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="396cf87d08c5a180ab47bb5bf073f86e645bdcec1582ceaa94028bed754c6a0a9ee51723aba90ee33675431670f9548c745b3da48b83d07d7eccc4eb90a1e0e95fa8b02a190ec6899154b7410e1d84c95416f10bf24f7da37249ca1fa786f57c23ba93b389f5220c418523d836670706d8805eb8fb", 0x75}], 0x1)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="7da20883b15bddf63516401492b737f7c572aa792ad6fd3b2c11a24b66b6412511c65642df2fd4d899c036fc2d04b8fcd235d7680e1a8c366061e08d3fb1393a838ae749cb327824f88cf800171828ed5a73815bdebbd5", 0x57}, {&(0x7f0000000140)="7581bd48f6cda4b2432aa171a3e7ada76fda5f785788878541d6d8921e2c5ca0e602796f268d1fba5ec3f57b0a0110a500303572be0aa1d078e1111e47e9d014c283b311ba1b41658d4e37530c8ab637e92a395ca03d05838a6f0e07565d360d60303ca3c6a8039f35897165d33e12660edc53d352525c997331bdf41e9d825cdf7d93ada2e1878187e07606a7ff1f8117fbbcd85c5d3e3c7527bdfa1194642456569130d0fb0764530bb4a5e23f91fcf86c57a4d9a8a3f042a192ccbf1d9f0c86772744de", 0xc5}], 0x2, &(0x7f0000007500)=[{0xc8, 0x104, 0x7, "bd5d1601a0add1a072715a33b93962ff9662141d55e04898285d2aa7138717212f98fad5517b3c18ff15daa55cf6fd5d0d63cbc6c4915a35322763ddcc70dfc97f895dc20497710d8fcdae3d09619fda227de9c9df6bf247b347eb7ef5fabb860f6de96684ab5dc2646afc535c529a5fb7ecd33e791d9ec3bc7f485ac329348fa6146b7f82e2d6e32b0cbfbb6f0ff38c838568fbe7ce3fcede11680eeecaf1b48ab8d5a10cb122d0ed17212e46472d2a2c"}, {0x90, 0x115, 0x0, "00000000ac3097aa9f067922bcb70bf5400a4b1b92338669c9fdf826deb2980db4cd41d37fef6c23b1f2ca263f6cb07465b19d3a611b136f23411451f025e65c4f207ad99e35f551f3a4ca7383a759e3a0801c0991decc1378b2ca56b484ddc22d027ec7497684b171ecbac4cf5e5d191ff840a81935e12905a5958e"}], 0x158}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000003c0)="247f0a66fba8024c834a20", 0xb}, {&(0x7f0000000980)="6c63deea5305da0ef08128a51760fd3ec4afd4cd6a23b145f55b6b75184cf81931d44677639deb5242a97ea5ecd09a0aca9c432f26d86d1eedbb02ba58ec18b645d6025e21f1f4a900352ea39be3cd3083f2a3e947923781e8fbf6f0d36cd282", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000b00)="bf52bd1698ff032a7b355fe6a6a3d29b46020cfece02b90dd1eea4ee5b7370585e4c7c34bf6a5addd80d17caa0b92dda82484b75846fa52e50702acc5f4742616b18f5cdf3", 0x45}, {&(0x7f0000001080)="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", 0x1cf}], 0x2}}], 0x3, 0x40c0)

1.187766679s ago: executing program 4 (id=1097):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001c00)=""/102392, 0x18ff8)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f000001ac00), 0x4000000004002, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f000001ac40), 0xc2900, 0x0)
sendfile(r3, r4, 0x0, 0x201f00)

1.13447708s ago: executing program 0 (id=1098):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x100)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000780)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000800)=@abs, 0x6e)
setuid(0xee01)
r1 = getpgrp(0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x20004f)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000880), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x6)
shmget$private(0x0, 0x3000, 0x400, &(0x7f000053b000/0x3000)=nil)
mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0x17, &(0x7f0000000a80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xbfffffff}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000b40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x848000000015, 0x805, 0x0)
r3 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$revoke(0x3, r3)
keyctl$read(0xb, r3, 0x0, 0x0)

1.021196891s ago: executing program 2 (id=1099):
r0 = fanotify_init(0x40, 0x80000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r2}, 0xc)
r3 = fsopen(&(0x7f0000000280)='configfs\x00', 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xc, 0xfff3}, {0x9, 0x4}}}, 0x24}}, 0x404c810)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f0004000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r3, 0x1, 0x8c)
mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fusectl\x00', 0x10000, &(0x7f0000000480)='configfs\x00')
fchdir(r5)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xa880, 0x4b)
r7 = syz_open_procfs(0x0, &(0x7f0000000840)='net/ip_mr_cache\x00')
pread64(r7, &(0x7f00000004c0)=""/253, 0xfd, 0x1)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f00000005c0)={{0xff, @rand_addr=0x64010102, 0x4e22, 0x1, 'fo\x00', 0x9, 0x1, 0x10}, {@broadcast, 0x4e24, 0xe5bbbc3e658f409, 0x3ff, 0x8000, 0x200}}, 0x44)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4001, 0x101)
r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_exec(r9, &(0x7f0000000880)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b706212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd503eac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147cca3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6d3ab625ab702e5b1dc15f9c4b3d09be812f340e681e0694f5badf640da3fdfc2f929b4c2beb9a592c577287b6021bfeec24146c7f95608bb60a736207a09d9f47e89c4044eadde57cdefd15f25b822d2eaf2205df0d6b71b63ee0b63cb598f26509af36983578f6f4198a0843cc1b1bd780015007ab9709cc6211e3b5c68502f7f549fa66f30e7a9fe149282f679c8466b9734e3850ec98419dd0c887715902f9e7802842085bc606f30c2654869e9e3701fd0fc69137fe16559268a265eebd5cafad7c29de2adadec42a818d8ee389ca1fe33a1ef23617c89116a3a458b56612e4c36c43a9150d5331adbb0beb01a062b1f1349fc2ecea76cb7c40cdfe378185f3099b1d71414d0fda5a47f8593260cc0bd723a4cca81435f041321635f91bcb15aac48883a9617fb4e58c19b18cf3a7e1299a07f45325fcd05a7c30f47e77073dcc584f7e0516cb74c55a0a2a30dc9f3163868f7c233ad1fff87a2c3ad0fb71cc6433e9bd7c3209de0cba9552f5c7c04f24eccf206bdb745564539dd62d655a33d40a507660668c30f7720280c86c104e58d30d6cb65814e00b55ff9a33f3ed375dfb4b47d89a599f31a0d612827a8f6e2a73eb376e11160ddbc0d79e3a11d5a99fa9c98f559efeb1e0a196d6da225f8c145334989fae4eafc05bbad0dc880e923d6b2ed2890eed8255bd2f8296b8d689762aa02e1399045bc0cbec07ec937f2e6dfac960460574e2e00dc39221a4a0c31dbbfa4973e8b056afe87bdfe6bc1405d9ae867d05316247465aceddf5c95825d73a9b119dab89ac982fff04e5d140a8391bd6f1831a9b7519ba86abc94993fe918a1b640d57e276027d9ef490065235935403f7eda36490d0c96a16d2"], 0x564)
fanotify_mark(r0, 0x6cc7720dd3769f30, 0x0, r8, 0x0)
getdents64(r6, 0x0, 0x0)
r10 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000340)={0x6, @multicast1, 0x4e1f, 0x0, 'sh\x00', 0x0, 0x20, 0xfffffffc}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000380)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44)
setsockopt$IP_VS_SO_SET_DELDEST(r10, 0x0, 0x488, &(0x7f0000000400)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x0, 0xfffffffe}, {@loopback, 0x4e21, 0x1, 0x1}}, 0x44)
userfaultfd(0x80801)

0s ago: executing program 1 (id=1100):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x2000)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r1 = syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f00000002c0)='./file1\x00', 0x40, &(0x7f0000000300)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f0000001680)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000006780)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000067c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000380)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000000000224e0000", 0x79}], 0x1)
connect$unix(r3, &(0x7f0000006800)=@abs, 0x6e)
getpid()
sendmmsg$unix(r4, &(0x7f0000006880), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000068c0), 0x10106, 0x2, 0x0)
syz_extract_tcp_res(0x0, 0x0, 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa4486dd6000550700140600fc01000000000000000000000000003b775b2b8df001d185bdf49b8ca25500000000000083b90c6724e204e3f984", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000069c0)=0x6)
r7 = openat(r1, &(0x7f0000006a00)='./file1\x00', 0x42, 0x0)
fallocate(r7, 0x0, 0x0, 0x90001)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000006a40)={&(0x7f0000006a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006ac0)={&(0x7f0000006b00)=ANY=[@ANYBLOB="48000000070a010400000000000000000000000408000b40010000030c00000208000a40000000060c00064000f845fc236355c35135fd71000000000000040900010073797a310096df6f4de40b1b913928bcaef381412fc8ce0c00708aa803accb14f2e9f6b34f739e46aa4e0ae694105c8ef5108523c0a38a4ea6b29995019f1e5b2eb28d"], 0x48}}, 0x4040040)
openat$vsock(0xffffffffffffff9c, &(0x7f0000006bc0), 0x80000, 0x0)
syz_io_uring_setup(0xf998, &(0x7f0000006c00)={0x0, 0x3b50, 0x2000, 0x10000002, 0x8003c0, 0x0, r7}, &(0x7f0000006c80), &(0x7f0000006cc0), &(0x7f0000000280))
syz_emit_ethernet(0x76, &(0x7f0000006d40)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaaaa86dd60d3ffff00403a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000005026050835900000000fc010000000000000000000000000000fe80000000007f00000000bb3a000000000000000c0004000920020000000000"], 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x8)

kernel console output (not intermixed with test programs):

hort (expected 74, got 45)
[  296.946867][ T2251] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  296.946891][ T2251] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  296.946904][ T2251] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  296.946916][ T2251] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  296.946928][ T2251] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  296.946951][ T2251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.183112][ T5742] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  297.284298][ T2251] usb 5-1: usb_control_msg returned -32
[  297.284349][ T2251] usbtmc 5-1:16.0: can't read capabilities
[  297.333197][ T5742] usb 2-1: Using ep0 maxpacket: 16
[  297.335078][ T5742] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40
[  297.340310][ T5742] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  297.340333][ T5742] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  297.417712][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.417740][ T5742] usb 2-1: Product: syz
[  297.417755][ T5742] usb 2-1: Manufacturer: syz
[  297.417768][ T5742] usb 2-1: SerialNumber: syz
[  297.545712][ T5742] usb 2-1: 0:2 : does not exist
[  297.743822][ T7655] ALSA: mixer_oss: invalid OSS volume ''
[  297.760884][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  297.760953][ T7655] usbtmc 5-1:16.0: Unable to send data, error -71
[  297.762418][ T7655] usbtmc 5-1:16.0: usb_control_msg returned -32
[  297.790997][ T5742] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  297.800775][    T9] usb 5-1: USB disconnect, device number 24
[  298.118635][ T5742] usb 2-1: USB disconnect, device number 16
[  299.113790][ T7640] udevd[7640]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  300.174554][   T32] audit: type=1400 audit(1792669584.288:21): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  301.268810][   T45] IPVS: starting estimator thread 0...
[  301.402826][ T7678] IPVS: using max 32 ests per chain, 76800 per kthread
[  303.553229][ T5715] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  303.708965][ T5715] usb 5-1: Using ep0 maxpacket: 32
[  303.709642][ T5715] usb 5-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  303.716430][ T5715] usb 5-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config
[  303.716477][ T5715] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  303.716503][ T5715] usb 5-1: config 0 interface 0 has no altsetting 0
[  303.776019][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.776049][ T5715] usb 5-1: Product: syz
[  303.776062][ T5715] usb 5-1: Manufacturer: syz
[  303.776076][ T5715] usb 5-1: SerialNumber: syz
[  303.805880][ T5715] usb 5-1: config 0 descriptor??
[  303.817585][ T5715] gs_usb 5-1:0.0: Required endpoints not found
[  306.471560][ T5715] usb 5-1: USB disconnect, device number 25
[  307.944799][ T7720] loop4: detected capacity change from 0 to 512
[  308.045112][ T7720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.045186][ T7720] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.879609][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.184842][ T5742] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  309.358645][ T5742] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  309.360775][ T5742] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  309.360791][ T5742] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  309.401383][ T5742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.401407][ T5742] usb 2-1: Product: syz
[  309.401415][ T5742] usb 2-1: Manufacturer: syz
[  309.401422][ T5742] usb 2-1: SerialNumber: syz
[  309.882295][ T7743] loop4: detected capacity change from 0 to 512
[  309.911574][ T7743] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  310.736910][ T5742] usb 2-1: failed to send ARPC request 1: -110
[  310.737047][ T5742] usb 2-1: failed to execute ARPC: -110
[  310.737063][ T5742] usb 2-1: failed to set connected state for cport 0: -110
[  310.737102][ T5742] greybus greybus1: 0/0:0: failed to set connected state: -110
[  310.739327][ T5742] usb 2-1: failed to send ARPC request 3: -32
[  310.739452][ T5742] usb 2-1: failed to execute ARPC: -32
[  310.739468][ T5742] usb 2-1: failed to clear cport 0: -32
[  310.739483][ T5742] greybus greybus1: 0/0:0: failed to clear host cport: -32
[  311.677188][ T5742] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -110
[  311.748968][ T7743] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  311.752763][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  311.752786][    C0] EXT4-fs (loop4): initial error at time 1792669595: ext4_mb_generate_buddy:1315
[  311.752808][    C0] EXT4-fs (loop4): last error at time 1792669595: ext4_mb_generate_buddy:1315
[  311.799463][ T7743] EXT4-fs error (device loop4): ext4_do_update_inode:6701: inode #16: comm syz.4.499: corrupted inode contents
[  311.799487][ T7743] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  311.851563][ T7743] EXT4-fs error (device loop4): ext4_dirty_inode:7673: inode #16: comm syz.4.499: mark_inode_dirty error
[  311.851601][ T7743] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  311.878266][ T7743] EXT4-fs error (device loop4): ext4_do_update_inode:6701: inode #16: comm syz.4.499: corrupted inode contents
[  311.878305][ T7743] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  311.914560][ T7743] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.499: mark_inode_dirty error
[  311.914595][ T7743] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  311.917880][ T7743] EXT4-fs error (device loop4): ext4_do_update_inode:6701: inode #16: comm syz.4.499: corrupted inode contents
[  311.917910][ T7743] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  311.964685][ T7743] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.499: mark_inode_dirty error
[  311.964720][ T7743] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  311.967836][ T7743] EXT4-fs error (device loop4): ext4_do_update_inode:6701: inode #16: comm syz.4.499: corrupted inode contents
[  311.967866][ T7743] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  311.993845][ T7743] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem
[  311.993864][ T7743] loop4: lost filesystem error report for type 5 error -117
[  312.026640][ T7743] EXT4-fs error (device loop4): ext4_do_update_inode:6701: inode #16: comm syz.4.499: corrupted inode contents
[  312.026665][ T7743] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  312.058801][ T7743] EXT4-fs error (device loop4): ext4_truncate:5538: inode #16: comm syz.4.499: mark_inode_dirty error
[  312.058836][ T7743] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  312.086345][ T7743] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem
[  312.086373][ T7743] loop4: lost filesystem error report for type 5 error -117
[  312.116850][ T7743] EXT4-fs (loop4): 1 truncate cleaned up
[  312.117761][ T7743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.117828][ T7743] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  312.170569][   T45] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  312.170674][   T45] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:2: Failed to release dquot type 1
[  312.222126][ T7743] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.135519][  T193] usb 2-1: USB disconnect, device number 17
[  314.693617][ T5725] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  314.822874][ T5715] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  314.845849][ T5725] usb 5-1: Using ep0 maxpacket: 32
[  314.846436][ T5725] usb 5-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  314.847535][ T5725] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  314.847558][ T5725] usb 5-1: config 0 has no interface number 0
[  314.847598][ T5725] usb 5-1: config 0 interface 12 has no altsetting 0
[  314.850635][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.850658][ T5725] usb 5-1: Product: syz
[  314.850665][ T5725] usb 5-1: Manufacturer: syz
[  314.850673][ T5725] usb 5-1: SerialNumber: syz
[  314.921600][ T5725] usb 5-1: config 0 descriptor??
[  315.011335][ T5715] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  315.035528][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  315.035561][ T5715] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.035589][ T5715] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  315.035601][ T5715] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  315.102757][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.102787][ T5715] usb 2-1: Product: syz
[  315.102801][ T5715] usb 2-1: Manufacturer: syz
[  315.102815][ T5715] usb 2-1: SerialNumber: syz
[  315.448898][ T5715] usb 2-1: Not enough endpoints found in device, aborting!
[  316.047440][ T5725] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  316.047497][ T5725] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  316.047513][ T5725] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  316.047590][ T5725] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  316.101039][ T5725] usb 5-1: USB disconnect, device number 26
[  317.246758][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  317.246797][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  317.946875][ T5348] usb 2-1: USB disconnect, device number 18
[  317.966566][ T7805] rxe_eth0 speed is unknown, defaulting to 1000
[  319.341859][ T7818] ip_tables: iptables: counters copy to user failed while replacing table
[  319.418026][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'.
[  319.723211][ T5348] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  319.900578][ T5348] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  319.907228][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.940594][ T5348] usb 5-1: config 0 descriptor??
[  320.201910][ T5348] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  320.210804][ T5348] [drm:udl_init] *ERROR* Selecting channel failed
[  320.293447][ T5348] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  320.293474][ T5348] [drm] Initialized udl on minor 1
[  320.328371][ T5348] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  320.328841][ T5348] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  320.382260][ T5348] usb 5-1: USB disconnect, device number 27
[  320.390055][ T5725] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  320.390585][ T5725] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  320.390778][ T5725] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  320.532132][ T7828] Bluetooth: MGMT ver 1.23
[  321.438634][   T32] audit: type=1400 audit(1792670117.555:22): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  322.208967][ T7845] vxcan1: tx drop: invalid sa for name 0x0000000000000001
[  327.663694][  T193] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  327.757117][ T7897] loop5: detected capacity change from 0 to 7
[  327.768156][ T7897] Dev loop5: unable to read RDB block 7
[  327.768199][ T7897]  loop5: unable to read partition table
[  327.772260][ T7897] loop5: partition table beyond EOD, truncated
[  327.772307][ T7897] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  327.859342][  T193] usb 5-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00
[  327.860294][  T193] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.860310][  T193] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  327.860332][  T193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.914023][ T7897] netlink: 'syz.0.550': attribute type 1 has an invalid length.
[  327.970544][  T193] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  329.876181][  T193] usb 5-1: USB disconnect, device number 28
[  329.896940][  T193] idmouse 5-1:1.0: disconnected
[  332.849914][ T7927] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  332.850106][ T7927] block device autoloading is deprecated and will be removed.
[  339.353058][ T5856] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  339.664576][ T5856] usb 2-1: Using ep0 maxpacket: 32
[  339.665340][ T5856] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=0.8e
[  339.665365][ T5856] usb 2-1: no configurations
[  339.665372][ T5856] usb 2-1: can't read configurations, error -22
[  339.793432][ T5856] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  339.999149][ T5856] usb 2-1: Using ep0 maxpacket: 32
[  340.012345][ T5856] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=0.8e
[  340.012372][ T5856] usb 2-1: no configurations
[  340.012380][ T5856] usb 2-1: can't read configurations, error -22
[  340.021993][ T5856] usb usb2-port1: attempt power cycle
[  340.453484][ T5856] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  340.487760][ T5856] usb 2-1: Using ep0 maxpacket: 32
[  340.495764][ T5856] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=0.8e
[  340.495793][ T5856] usb 2-1: no configurations
[  340.495800][ T5856] usb 2-1: can't read configurations, error -22
[  340.702984][ T5856] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  340.736480][ T5856] usb 2-1: Using ep0 maxpacket: 32
[  340.737209][ T5856] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=0.8e
[  340.737249][ T5856] usb 2-1: no configurations
[  340.737261][ T5856] usb 2-1: can't read configurations, error -22
[  340.737554][ T5856] usb usb2-port1: unable to enumerate USB device
[  342.256980][  T193] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  342.423734][  T193] usb 2-1: Using ep0 maxpacket: 32
[  342.424249][  T193] usb 2-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  342.433866][  T193] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  342.433892][  T193] usb 2-1: config 0 has no interface number 0
[  342.433939][  T193] usb 2-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[  342.433961][  T193] usb 2-1: config 0 interface 12 has no altsetting 0
[  342.487510][  T193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.487538][  T193] usb 2-1: Product: syz
[  342.487552][  T193] usb 2-1: Manufacturer: syz
[  342.487565][  T193] usb 2-1: SerialNumber: syz
[  342.535920][  T193] usb 2-1: config 0 descriptor??
[  342.556439][  T193] f81534 2-1:0.12: required endpoints missing
[  343.993361][ T7014] syz.1.298 (7014) used greatest stack depth: 15944 bytes left
[  344.957642][ T2251] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  345.151194][ T5742] usb 2-1: USB disconnect, device number 23
[  345.168168][ T2251] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  345.197793][ T2251] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  345.197823][ T2251] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  345.241631][ T2251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.241660][ T2251] usb 1-1: Product: syz
[  345.241674][ T2251] usb 1-1: Manufacturer: syz
[  345.241688][ T2251] usb 1-1: SerialNumber: syz
[  345.827334][ T8017] loop1: detected capacity change from 0 to 32768
[  345.829896][ T8017] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  345.852348][ T8017] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.583 (8017)
[  345.871555][ T8017] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  345.871589][ T8017] BTRFS info (device loop1): using crc32c checksum algorithm
[  345.987693][ T8017] BTRFS info (device loop1): rebuilding free space tree
[  346.000563][ T8017] BTRFS info (device loop1): disabling free space tree
[  346.000625][ T8017] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  346.000639][ T8017] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  346.010845][ T8017] BTRFS info (device loop1): enabling ssd optimizations
[  346.010865][ T8017] BTRFS info (device loop1): turning on async discard
[  346.010874][ T8017] BTRFS info (device loop1): force clearing of disk cache
[  346.010885][ T8017] BTRFS info (device loop1): use zstd compression, level 3
[  346.684072][    C0] usb 1-1: short aprc response received
[  346.763006][ T2251] usb 1-1: failed to execute ARPC: -110
[  346.763024][ T2251] usb 1-1: failed to set connected state for cport 0: -110
[  346.763035][ T2251] greybus greybus1: 0/0:0: failed to set connected state: -110
[  346.865731][ T5614] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  347.117159][ T2251] usb 1-1: failed to send ARPC request 3: -71
[  347.117318][ T2251] usb 1-1: failed to execute ARPC: -71
[  347.117328][ T2251] usb 1-1: failed to clear cport 0: -71
[  347.117338][ T2251] greybus greybus1: 0/0:0: failed to clear host cport: -71
[  347.226039][ T2251] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110
[  347.233822][ T2251] usb 1-1: USB disconnect, device number 18
[  347.797997][ T8015] loop4: detected capacity change from 0 to 32768
[  347.812266][ T8015] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  347.828247][ T8015] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.582 (8015)
[  348.028160][ T8015] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  348.028198][ T8015] BTRFS info (device loop4): using crc32c checksum algorithm
[  348.198927][ T8015] BTRFS info (device loop4): rebuilding free space tree
[  348.426286][ T8015] BTRFS info (device loop4): disabling free space tree
[  348.426330][ T8015] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  348.426342][ T8015] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  348.664876][ T8015] BTRFS info (device loop4): enabling ssd optimizations
[  348.664896][ T8015] BTRFS info (device loop4): turning on async discard
[  348.664905][ T8015] BTRFS info (device loop4): force clearing of disk cache
[  348.664916][ T8015] BTRFS info (device loop4): use zstd compression, level 3
[  348.954790][ T5627] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  349.216469][  T193] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  349.517684][  T193] usb 2-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  349.547562][  T193] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  349.547615][  T193] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.547672][  T193] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  349.547695][  T193] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  350.140584][  T193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.140616][  T193] usb 2-1: Product: syz
[  350.140630][  T193] usb 2-1: Manufacturer: syz
[  350.140644][  T193] usb 2-1: SerialNumber: syz
[  350.679612][  T193] usb 2-1: Cannot retrieve CPort count: -32
[  350.679661][  T193] usb 2-1: Cannot retrieve CPort count: -32
[  350.679686][  T193] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -32
[  350.712804][ T5856] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  350.783112][ T5725] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  350.862874][ T5856] usb 1-1: Using ep0 maxpacket: 32
[  350.863590][ T5856] usb 1-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  350.864605][ T5856] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  350.864628][ T5856] usb 1-1: config 0 has no interface number 0
[  350.864669][ T5856] usb 1-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[  350.864691][ T5856] usb 1-1: config 0 interface 12 has no altsetting 0
[  350.866811][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.866825][ T5856] usb 1-1: Product: syz
[  350.866836][ T5856] usb 1-1: Manufacturer: syz
[  350.866844][ T5856] usb 1-1: SerialNumber: syz
[  350.872382][ T5856] usb 1-1: config 0 descriptor??
[  350.951434][ T5725] usb 5-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  350.965746][ T5856] f81534 1-1:0.12: required endpoints missing
[  350.969760][ T5725] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  350.969806][ T5725] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  351.004023][ T5725] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  351.004041][ T5725] usb 5-1: Manufacturer: syz
[  351.004049][ T5725] usb 5-1: SerialNumber: syz
[  351.263200][ T5725] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  351.269158][ T5725] usb 5-1: USB disconnect, device number 29
[  352.162261][ T5348] usb 2-1: USB disconnect, device number 24
[  353.507344][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888056002400: rx timeout, send abort
[  353.922582][ T2251] usb 1-1: USB disconnect, device number 19
[  354.008491][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888056002400: abort rx timeout. Force session deactivation
[  356.420602][ T2251] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  356.588846][ T2251] usb 2-1: Using ep0 maxpacket: 32
[  356.601031][ T2251] usb 2-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  356.630207][ T2251] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  356.630238][ T2251] usb 2-1: config 0 has no interface number 0
[  356.630279][ T2251] usb 2-1: config 0 interface 12 has no altsetting 0
[  356.673901][ T2251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.673932][ T2251] usb 2-1: Product: syz
[  356.673947][ T2251] usb 2-1: Manufacturer: syz
[  356.673960][ T2251] usb 2-1: SerialNumber: syz
[  356.729014][ T2251] usb 2-1: config 0 descriptor??
[  356.804799][ T8128] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  357.735484][ T5742] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  357.936548][ T5742] usb 5-1: Using ep0 maxpacket: 8
[  357.944454][ T5742] usb 5-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  357.946860][ T5742] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  357.946910][ T5742] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  357.946950][ T5742] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  357.946962][ T5742] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  357.946985][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.038218][ T5742] usbtmc 5-1:16.0: bulk endpoints not found
[  358.448864][ T2251] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: d8 failed: -71
[  358.448901][ T2251] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  358.448919][ T2251] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  358.448967][ T2251] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  358.508250][ T2251] usb 2-1: USB disconnect, device number 25
[  359.483073][ T5348] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  359.622800][   T26] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  359.642029][ T5348] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  359.653343][ T5348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  359.653396][ T5348] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.653418][ T5348] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  359.653440][ T5348] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  359.706408][ T5348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.706437][ T5348] usb 1-1: Product: syz
[  359.706446][ T5348] usb 1-1: Manufacturer: syz
[  359.706454][ T5348] usb 1-1: SerialNumber: syz
[  359.772797][   T26] usb 2-1: Using ep0 maxpacket: 32
[  359.774570][   T26] usb 2-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  359.780757][   T26] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  359.780779][   T26] usb 2-1: config 0 has no interface number 0
[  359.780803][   T26] usb 2-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[  359.780816][   T26] usb 2-1: config 0 interface 12 has no altsetting 0
[  359.832603][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.832953][   T26] usb 2-1: Product: syz
[  359.832970][   T26] usb 2-1: Manufacturer: syz
[  359.832984][   T26] usb 2-1: SerialNumber: syz
[  359.841111][   T26] usb 2-1: config 0 descriptor??
[  359.876656][   T26] f81534 2-1:0.12: required endpoints missing
[  360.075196][ T5348] usb 1-1: Cannot retrieve CPort count: -32
[  360.075227][ T5348] usb 1-1: Cannot retrieve CPort count: -32
[  360.075242][ T5348] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -32
[  361.034938][ T2251] usb 5-1: USB disconnect, device number 30
[  362.626631][   T26] usb 1-1: USB disconnect, device number 20
[  362.673119][ T5856] usb 2-1: USB disconnect, device number 26
[  362.728482][ T8177] loop4: detected capacity change from 0 to 164
[  363.289028][ T8184] Could not find key with description: [0123456789abcdef]
[  363.289040][ T8184] process_request_key_err: No key
[  363.289046][ T8184] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef]
[  363.289052][ T8184] One or more global auth toks could not properly register; rc = [-2]
[  363.289067][ T8184] Error validating options; rc = [-2]
[  364.973130][ T5856] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  365.132811][ T5856] usb 2-1: Using ep0 maxpacket: 8
[  365.133330][ T5856] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  365.137332][ T5856] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  365.137364][ T5856] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  365.137382][ T5856] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  365.137395][ T5856] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64
[  365.137408][ T5856] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  365.137430][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.237399][ T5856] usbtmc 2-1:16.0: bulk endpoints not found
[  365.368090][ T7148] syz.1.337 (7148) used greatest stack depth: 15752 bytes left
[  365.812945][ T5856] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  365.972783][ T5856] usb 1-1: Using ep0 maxpacket: 32
[  365.973490][ T5856] usb 1-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  365.976878][ T5856] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  366.012616][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  366.012635][ T5856] usb 1-1: Product: syz
[  366.027974][ T5856] usb 1-1: Manufacturer: syz
[  366.027993][ T5856] usb 1-1: SerialNumber: syz
[  366.051304][ T5856] usb 1-1: config 0 descriptor??
[  366.058120][ T8205] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  366.075590][ T5856] hub 1-1:0.0: bad descriptor, ignoring hub
[  366.075618][ T5856] hub 1-1:0.0: probe with driver hub failed with error -5
[  366.103918][ T5348] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  366.252915][ T5348] usb 5-1: Using ep0 maxpacket: 8
[  366.253612][ T5348] usb 5-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  366.254787][ T5348] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  366.254802][ T5348] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  366.254813][ T5348] usb 5-1: config 0 has no interface number 0
[  366.254835][ T5348] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  366.254849][ T5348] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  366.254862][ T5348] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  366.257207][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  366.257230][ T5348] usb 5-1: Product: syz
[  366.295576][ T5348] usb 5-1: config 0 descriptor??
[  366.318098][ T8208] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  366.543122][ T5742] usb 1-1: USB disconnect, device number 21
[  367.204142][ T5348] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input19
[  368.205383][ T2251] usb 2-1: USB disconnect, device number 27
[  368.534261][ T5348] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  369.366220][ T5348] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  369.367778][ T5348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  369.367890][ T5348] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.367912][ T5348] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  369.367934][ T5348] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  369.374462][ T5348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.374486][ T5348] usb 1-1: Product: syz
[  369.374500][ T5348] usb 1-1: Manufacturer: syz
[  369.374513][ T5348] usb 1-1: SerialNumber: syz
[  369.696864][ T5856] usb 5-1: USB disconnect, device number 31
[  369.696924][    C1] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  369.762078][ T5348] usb 1-1: Cannot retrieve CPort count: -32
[  369.762131][ T5348] usb 1-1: Cannot retrieve CPort count: -32
[  369.762156][ T5348] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -32
[  369.993558][ T8234] loop1: detected capacity change from 0 to 32768
[  369.995639][ T8234] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  370.032580][ T8234] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.638 (8234)
[  370.051776][ T8234] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  370.051840][ T8234] BTRFS info (device loop1): using crc32c checksum algorithm
[  370.160281][ T8234] BTRFS info (device loop1): rebuilding free space tree
[  370.183116][ T8234] BTRFS info (device loop1): disabling free space tree
[  370.183160][ T8234] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  370.183172][ T8234] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  370.188098][ T8234] BTRFS info (device loop1): enabling ssd optimizations
[  370.188124][ T8234] BTRFS info (device loop1): turning on async discard
[  370.188139][ T8234] BTRFS info (device loop1): force clearing of disk cache
[  370.188158][ T8234] BTRFS info (device loop1): use zstd compression, level 3
[  370.888258][ T5614] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  372.025303][ T2251] usb 1-1: USB disconnect, device number 22
[  372.263365][ T8267] IPv6: Can't replace route, no match found
[  372.712861][ T2251] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  373.464644][ T2251] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00
[  373.466147][ T2251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.244723][ T2251] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  374.287085][ T2251] usb 1-1: USB disconnect, device number 23
[  375.104390][ T8288] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  375.133091][  T193] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  375.283102][  T193] usb 5-1: Using ep0 maxpacket: 8
[  375.283933][  T193] usb 5-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  375.284956][  T193] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  375.284980][  T193] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  375.285000][  T193] usb 5-1: config 0 has no interface number 0
[  375.285046][  T193] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  375.285069][  T193] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  375.285090][  T193] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  375.286659][  T193] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  375.286681][  T193] usb 5-1: Product: syz
[  375.292059][  T193] usb 5-1: config 0 descriptor??
[  375.353227][ T8286] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  375.545729][   T51] IPVS: starting estimator thread 0...
[  375.633859][ T8299] IPVS: using max 38 ests per chain, 91200 per kthread
[  375.635322][ T8289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.808233][ T8289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  375.937785][ T8289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.029564][  T193] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input20
[  376.192894][ T6545] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  376.224347][ T4064] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.274545][ T6545] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.274631][ T6545] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.844327][ T5742] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  376.995598][ T5742] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  376.997977][ T5742] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  376.998008][ T5742] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.998021][ T5742] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  376.998033][ T5742] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  377.033945][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.033963][ T5742] usb 1-1: Product: syz
[  377.033971][ T5742] usb 1-1: Manufacturer: syz
[  377.033979][ T5742] usb 1-1: SerialNumber: syz
[  377.331686][ T5742] usb 1-1: Cannot retrieve CPort count: 0
[  377.331717][ T5742] usb 1-1: Cannot retrieve CPort count: -5
[  377.331731][ T5742] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -5
[  377.990176][ T5725] usb 5-1: USB disconnect, device number 32
[  377.990280][    C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  378.255210][ T8338] loop1: detected capacity change from 0 to 512
[  378.266494][ T8338] EXT4-fs: Ignoring removed oldalloc option
[  378.322111][ T8338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002]
[  378.322235][ T8338] System zones: 1-3, 19-19, 35-38
[  378.375420][ T8338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.375538][ T8338] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  378.561674][   T32] audit: type=1400 audit(1792670686.677:23): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  378.780932][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  378.781017][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  379.276555][ T8353] loop4: detected capacity change from 0 to 512
[  379.366509][ T8353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.366633][ T8353] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.514899][ T8329] md: could not open device unknown-block(1,5).
[  379.515009][ T8329] md: error, md_import_device() returned -16
[  379.738533][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.320053][ T2251] usb 1-1: USB disconnect, device number 24
[  381.271860][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.652823][ T5725] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  381.805405][ T5725] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  381.818824][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.833089][   T26] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  381.834401][ T5725] usb 1-1: config 0 descriptor??
[  381.983288][   T26] usb 2-1: Using ep0 maxpacket: 8
[  381.992119][   T26] usb 2-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  381.993860][   T26] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  381.993884][   T26] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  381.993902][   T26] usb 2-1: config 0 has no interface number 0
[  381.993962][   T26] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  381.993987][   T26] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  381.994010][   T26] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  382.038363][   T26] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  382.038389][   T26] usb 2-1: Product: syz
[  382.086706][   T26] usb 2-1: config 0 descriptor??
[  382.088319][ T8386] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  382.401677][ T5725] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  382.602433][ T5725] [drm:udl_init] *ERROR* Selecting channel failed
[  382.729900][ T5725] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1
[  382.729928][ T5725] [drm] Initialized udl on minor 1
[  382.783254][ T5725] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  382.783706][ T5725] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  382.786154][   T26] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input22
[  382.862035][ T5725] usb 1-1: USB disconnect, device number 25
[  382.885811][   T26] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  382.886983][   T26] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  382.995125][ T8395] loop4: detected capacity change from 0 to 512
[  383.019116][ T8395] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  383.070178][ T8395] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  383.070805][ T8395] EXT4-fs error (device loop4): ext4_do_update_inode:6701: inode #16: comm syz.4.671: corrupted inode contents
[  383.070832][ T8395] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  383.086095][    C0] EXT4-fs (loop4): error count since last fsck: 2
[  383.086113][    C0] EXT4-fs (loop4): initial error at time 1792670947: ext4_mb_generate_buddy:1315
[  383.086126][    C0] EXT4-fs (loop4): last error at time 1792670947: ext4_do_update_inode:6701: inode 16
[  383.142296][ T8395] EXT4-fs error (device loop4): ext4_dirty_inode:7673: inode #16: comm syz.4.671: mark_inode_dirty error
[  383.142331][ T8395] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  383.154195][ T8395] EXT4-fs error (device loop4): ext4_do_update_inode:6701: inode #16: comm syz.4.671: corrupted inode contents
[  383.154229][ T8395] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  383.177392][ T8395] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.671: mark_inode_dirty error
[  383.179421][ T8395] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  383.183028][ T8395] EXT4-fs error (device loop4): ext4_do_update_inode:6701: inode #16: comm syz.4.671: corrupted inode contents
[  383.183062][ T8395] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  383.211268][ T8395] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.671: mark_inode_dirty error
[  383.211305][ T8395] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  383.237626][ T8395] EXT4-fs error (device loop4): ext4_do_update_inode:6701: inode #16: comm syz.4.671: corrupted inode contents
[  383.237743][ T8395] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  383.266658][ T8395] EXT4-fs error (device loop4) in ext4_orphan_del:304: Corrupt filesystem
[  383.266686][ T8395] loop4: lost filesystem error report for type 5 error -117
[  383.294370][ T8395] EXT4-fs error (device loop4): ext4_do_update_inode:6701: inode #16: comm syz.4.671: corrupted inode contents
[  383.294393][ T8395] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  383.322821][ T8395] EXT4-fs error (device loop4): ext4_truncate:5538: inode #16: comm syz.4.671: mark_inode_dirty error
[  383.322912][ T8395] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  383.348637][ T8395] EXT4-fs error (device loop4) in ext4_process_orphan:346: Corrupt filesystem
[  383.348656][ T8395] loop4: lost filesystem error report for type 5 error -117
[  383.352574][ T8395] EXT4-fs (loop4): 1 truncate cleaned up
[  383.386544][ T8363] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  383.386608][ T8363] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:17: Failed to release dquot type 1
[  383.386620][ T8363] loop4: lost filesystem error report for type 5 error -117
[  383.417512][ T8395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.417632][ T8395] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  383.460434][ T8395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.700673][ T8405] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.048339][ T8405] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.457760][ T8405] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  384.574463][ T8405] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.380129][ T5725] usb 2-1: USB disconnect, device number 28
[  385.380241][    C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  385.459963][  T150] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.477269][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.677'.
[  385.524106][ T8363] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  385.524166][ T8363] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  385.533327][  T150] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  385.852766][ T5725] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  386.004493][ T5725] usb 1-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  386.007174][ T5725] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  386.007260][ T5725] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  386.009541][ T5725] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  386.009559][ T5725] usb 1-1: Manufacturer: syz
[  386.009568][ T5725] usb 1-1: SerialNumber: syz
[  386.299533][ T5725] usbhid 1-1:36.0: couldn't find an input interrupt endpoint
[  386.315340][ T5725] usb 1-1: USB disconnect, device number 26
[  387.176264][ T8435] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  388.398792][ T5742] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  389.215192][ T5742] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  389.218251][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.221019][ T5742] usb 5-1: config 0 descriptor??
[  389.707616][ T5742] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  389.711148][ T5742] [drm:udl_init] *ERROR* Selecting channel failed
[  389.763708][ T5742] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  389.763738][ T5742] [drm] Initialized udl on minor 1
[  389.764633][ T5742] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  389.764885][ T5742] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  389.799649][ T5742] usb 5-1: USB disconnect, device number 33
[  389.820879][ T8452] rxe_eth0 speed is unknown, defaulting to 1000
[  389.831647][  T193] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  390.844975][ T2251] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  391.818714][ T2251] usb 5-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  391.833066][ T2251] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  391.833097][ T2251] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  391.858955][ T2251] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  391.858986][ T2251] usb 5-1: Manufacturer: syz
[  391.859000][ T2251] usb 5-1: SerialNumber: syz
[  392.197438][ T2251] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  392.252628][ T2251] usb 5-1: USB disconnect, device number 34
[  393.851901][ T8479] loop4: detected capacity change from 0 to 2048
[  394.100615][ T8479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  395.183674][   T26] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  395.338141][   T26] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  395.592844][    T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  395.793175][    T9] usb 5-1: Using ep0 maxpacket: 8
[  395.823595][    T9] usb 5-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  395.870148][    T9] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  395.870670][    T9] usb 5-1: config 0 has an invalid interface number: 21 but max is 0
[  395.870832][    T9] usb 5-1: config 0 has no interface number 0
[  395.872295][    T9] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  395.896691][    T9] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  395.897262][    T9] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  395.970800][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.999921][   T26] usb 1-1: config 0 descriptor??
[  396.021215][    T9] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  396.021243][    T9] usb 5-1: Product: syz
[  396.044669][    T9] usb 5-1: config 0 descriptor??
[  396.052578][ T8500] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  396.224633][   T26] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  396.313543][ T5725] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  396.463022][ T5725] usb 2-1: Using ep0 maxpacket: 8
[  396.464276][ T8510] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.464917][ T5725] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  396.470747][ T5725] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  396.470796][ T5725] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  396.470820][ T5725] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  396.470841][ T5725] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  396.470865][ T5725] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  396.470885][ T5725] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  396.470925][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.621273][   T26] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1
[  396.621321][   T26] [drm] Initialized udl on minor 1
[  396.797294][ T5725] usb 2-1: usb_control_msg returned -32
[  396.797346][ T5725] usbtmc 2-1:16.0: can't read capabilities
[  396.838533][   T26] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  396.838979][   T26] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  396.950365][    T9] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input24
[  397.202288][ T8506] ALSA: mixer_oss: invalid OSS volume ''
[  397.218450][    C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  397.218897][ T8506] usbtmc 2-1:16.0: Unable to send data, error -71
[  397.219596][ T8506] usbtmc 2-1:16.0: usb_control_msg returned -32
[  397.255441][    T9] usb 2-1: USB disconnect, device number 29
[  397.414882][ T5725] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  397.501674][ T5725] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  397.501882][ T5725] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  397.518205][ T5725] usb 1-1: USB disconnect, device number 27
[  397.929724][ T8511] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.951298][ T5725] usb 5-1: USB disconnect, device number 35
[  398.951358][    C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  400.116675][ T8511] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.040729][ T8511] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.634677][ T4082] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.740485][ T8511] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.957084][ T8560] loop4: detected capacity change from 0 to 32768
[  401.957801][ T8560] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  401.962503][ T8560] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.717 (8560)
[  401.993812][ T8560] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  401.993841][ T8560] BTRFS info (device loop4): using crc32c checksum algorithm
[  402.177918][ T8560] BTRFS info (device loop4): rebuilding free space tree
[  402.203682][ T8560] BTRFS info (device loop4): disabling free space tree
[  402.203754][ T8560] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  402.203776][ T8560] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  402.236398][ T8560] BTRFS info (device loop4): enabling ssd optimizations
[  402.236416][ T8560] BTRFS info (device loop4): turning on async discard
[  402.236425][ T8560] BTRFS info (device loop4): force clearing of disk cache
[  402.236435][ T8560] BTRFS info (device loop4): use zstd compression, level 3
[  402.941502][ T5715] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  403.100315][ T5627] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  403.113334][ T5715] usb 1-1: Using ep0 maxpacket: 8
[  403.118742][ T5715] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  403.129446][ T5715] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  403.129478][ T5715] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  403.129493][ T5715] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  403.129506][ T5715] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  403.129517][ T5715] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  403.129529][ T5715] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  403.129555][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.213858][ T5715] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  403.555973][    C1] Unknown status report in ack skb
[  404.037929][ T8597] rxe_eth0 speed is unknown, defaulting to 1000
[  405.438499][ T8605] ALSA: mixer_oss: invalid OSS volume ''
[  405.452608][ T5715] usb 1-1: USB disconnect, device number 28
[  406.704121][ T8624] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  406.706229][ T8624] block device autoloading is deprecated and will be removed.
[  407.772190][ T8633] syzkaller0: entered promiscuous mode
[  407.772207][ T8633] syzkaller0: entered allmulticast mode
[  407.818792][ T8633] tipc: Enabling of bearer <eth:syzkall> rejected, failed to enable media
[  407.877864][ T8638] loop1: detected capacity change from 0 to 512
[  407.898077][ T8638] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  407.954632][ T8638] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  407.958226][ T8638] EXT4-fs error (device loop1): ext4_do_update_inode:6701: inode #16: comm syz.1.732: corrupted inode contents
[  407.958543][ T8638] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  407.959730][ T8638] EXT4-fs error (device loop1): ext4_dirty_inode:7673: inode #16: comm syz.1.732: mark_inode_dirty error
[  407.959758][ T8638] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  407.962745][    C1] EXT4-fs (loop1): error count since last fsck: 3
[  407.962766][    C1] EXT4-fs (loop1): initial error at time 1792670972: ext4_mb_generate_buddy:1315
[  407.962793][    C1] EXT4-fs (loop1): last error at time 1792670972: ext4_dirty_inode:7673: inode 16
[  407.978787][ T8638] EXT4-fs error (device loop1): ext4_do_update_inode:6701: inode #16: comm syz.1.732: corrupted inode contents
[  407.978824][ T8638] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  408.004708][ T8638] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.732: mark_inode_dirty error
[  408.004745][ T8638] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  408.041746][ T8638] EXT4-fs error (device loop1): ext4_do_update_inode:6701: inode #16: comm syz.1.732: corrupted inode contents
[  408.041784][ T8638] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  408.114347][ T8638] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.732: mark_inode_dirty error
[  408.114385][ T8638] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  408.139344][ T8638] EXT4-fs error (device loop1): ext4_do_update_inode:6701: inode #16: comm syz.1.732: corrupted inode contents
[  408.139380][ T8638] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  408.160910][ T8638] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem
[  408.160941][ T8638] loop1: lost filesystem error report for type 5 error -117
[  408.191765][ T8638] EXT4-fs error (device loop1): ext4_do_update_inode:6701: inode #16: comm syz.1.732: corrupted inode contents
[  408.191790][ T8638] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  408.200306][ T8638] EXT4-fs error (device loop1): ext4_truncate:5538: inode #16: comm syz.1.732: mark_inode_dirty error
[  408.200344][ T8638] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  408.215252][ T8638] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem
[  408.215279][ T8638] loop1: lost filesystem error report for type 5 error -117
[  408.262620][ T8638] EXT4-fs (loop1): 1 truncate cleaned up
[  408.287420][ T8638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  408.287502][ T8638] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  408.305101][  T150] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  408.305196][  T150] EXT4-fs error (device loop1): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 1
[  409.344366][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.534118][ T5725] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  409.683459][ T5725] usb 1-1: Using ep0 maxpacket: 8
[  409.685132][ T5725] usb 1-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  409.687672][ T5725] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  409.687690][ T5725] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  409.687701][ T5725] usb 1-1: config 0 has no interface number 0
[  409.687722][ T5725] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  409.687736][ T5725] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  409.687749][ T5725] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  409.689431][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  409.689447][ T5725] usb 1-1: Product: syz
[  409.734708][ T5725] usb 1-1: config 0 descriptor??
[  409.778301][ T8647] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  409.803627][ T5715] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  409.957410][ T5715] usb 2-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  409.959396][ T5715] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  409.959445][ T5715] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  409.983020][ T5715] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  409.983048][ T5715] usb 2-1: Manufacturer: syz
[  409.983062][ T5715] usb 2-1: SerialNumber: syz
[  410.172750][ T5742] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  410.274281][ T5715] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[  410.295976][ T5715] usb 2-1: USB disconnect, device number 30
[  410.323744][ T5742] usb 5-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00
[  410.326400][ T5742] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  410.326449][ T5742] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.326469][ T5742] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  410.326489][ T5742] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  410.331727][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.331754][ T5742] usb 5-1: Product: syz
[  410.331768][ T5742] usb 5-1: Manufacturer: syz
[  410.331781][ T5742] usb 5-1: SerialNumber: syz
[  410.492199][ T5725] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input25
[  410.660500][ T5742] usb 5-1: Cannot retrieve CPort count: 0
[  410.660551][ T5742] usb 5-1: Cannot retrieve CPort count: -5
[  410.660576][ T5742] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -5
[  412.568643][    T9] usb 1-1: USB disconnect, device number 29
[  412.568787][    C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  412.614094][ T8672] loop1: detected capacity change from 0 to 512
[  413.026377][ T8675] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  413.026776][ T8675] FAT-fs (loop1): Filesystem has been set read-only
[  413.834066][    T9] usb 5-1: USB disconnect, device number 36
[  415.140158][ T8689] loop0: detected capacity change from 0 to 512
[  415.241762][ T8691] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  415.241780][ T8691] block device autoloading is deprecated and will be removed.
[  415.429327][ T8689] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  415.429346][ T8689] FAT-fs (loop0): Filesystem has been set read-only
[  416.015284][ T8701] IPv6: Can't replace route, no match found
[  416.293602][ T8691] md: invalid raid superblock magic on ram7
[  416.293626][ T8691] md: ram7 does not have a valid v0.0 superblock, not importing!
[  416.293702][ T8691] md: md_import_device returned -22
[  416.334174][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  416.494769][    T9] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00
[  416.499522][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.746832][    T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  417.039422][   T26] usb 1-1: USB disconnect, device number 30
[  418.022871][    T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  418.196215][    T9] usb 5-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  418.198656][    T9] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  418.198704][    T9] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  418.244311][    T9] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  418.244330][    T9] usb 5-1: Manufacturer: syz
[  418.244339][    T9] usb 5-1: SerialNumber: syz
[  418.426266][ T8721] loop1: detected capacity change from 0 to 512
[  418.428126][ T8721] EXT4-fs: Ignoring removed oldalloc option
[  418.466201][ T8721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002]
[  418.466305][ T8721] System zones: 1-3, 19-19, 35-38
[  418.498439][ T8721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.498539][ T8721] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.670204][    T9] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  418.711939][    T9] usb 5-1: USB disconnect, device number 37
[  419.529993][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.733845][ T5742] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  420.137167][ T5742] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  420.167290][ T5742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.374972][    C0] wlan0: beacon TX faster than countdown (channel/color switch) completion
[  420.541291][ T5742] usb 1-1: config 0 descriptor??
[  420.985838][ T8743] loop1: detected capacity change from 0 to 32768
[  420.986666][ T8743] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  420.992228][ T8743] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.766 (8743)
[  421.030391][ T8743] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  421.030425][ T8743] BTRFS info (device loop1): using crc32c checksum algorithm
[  421.051526][ T5742] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  421.052298][ T5742] [drm:udl_init] *ERROR* Selecting channel failed
[  421.113794][ T5742] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1
[  421.113820][ T5742] [drm] Initialized udl on minor 1
[  421.469732][ T5742] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  421.469992][ T5742] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  421.506130][ T5742] usb 1-1: USB disconnect, device number 31
[  421.507290][ T2251] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  421.533853][ T8743] BTRFS info (device loop1): rebuilding free space tree
[  421.544823][ T8743] BTRFS info (device loop1): disabling free space tree
[  421.544887][ T8743] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  421.544909][ T8743] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  421.556683][ T8743] BTRFS info (device loop1): enabling ssd optimizations
[  421.556709][ T8743] BTRFS info (device loop1): turning on async discard
[  421.556723][ T8743] BTRFS info (device loop1): force clearing of disk cache
[  421.556739][ T8743] BTRFS info (device loop1): use zstd compression, level 3
[  422.471863][ T5614] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  426.023009][   T26] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  426.175146][   T26] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  426.177576][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.208664][   T26] usb 5-1: config 0 descriptor??
[  427.083112][   T26] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  427.334972][   T26] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  427.334990][   T26] [drm] Initialized udl on minor 1
[  429.371110][   T26] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  429.371380][   T26] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  429.413043][   T26] usb 5-1: USB disconnect, device number 38
[  429.420523][ T5827] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  432.234337][ T8859] IPv6: Can't replace route, no match found
[  433.114325][ T8863] loop1: detected capacity change from 0 to 32768
[  433.115052][ T8863] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  433.123548][ T8863] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.798 (8863)
[  433.173903][ T5742] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  433.271398][ T8863] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  433.271424][ T8863] BTRFS info (device loop1): using crc32c checksum algorithm
[  433.334479][ T5742] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00
[  433.335891][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.395279][ T8863] BTRFS info (device loop1): rebuilding free space tree
[  433.401905][ T8863] BTRFS info (device loop1): disabling free space tree
[  433.401950][ T8863] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  433.401962][ T8863] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  433.412177][ T8863] BTRFS info (device loop1): enabling ssd optimizations
[  433.412197][ T8863] BTRFS info (device loop1): turning on async discard
[  433.412206][ T8863] BTRFS info (device loop1): force clearing of disk cache
[  433.412216][ T8863] BTRFS info (device loop1): use zstd compression, level 3
[  433.628038][ T5742] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  433.861819][ T5742] usb 5-1: USB disconnect, device number 39
[  435.697887][ T8891] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[  436.014238][ T2251] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  436.780815][ T2251] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  436.793027][ T2251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.815942][ T2251] usb 1-1: config 0 descriptor??
[  437.673206][ T2251] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  437.673547][ T2251] [drm:udl_init] *ERROR* Selecting channel failed
[  437.802183][ T2251] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1
[  437.814195][ T2251] [drm] Initialized udl on minor 1
[  437.835322][ T2251] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  437.838869][ T2251] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  437.888617][    T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  437.890553][ T2251] usb 1-1: USB disconnect, device number 32
[  437.910036][    T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  439.313752][ T5827] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  440.133344][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  440.133404][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  440.172811][ T5827] usb 1-1: Using ep0 maxpacket: 16
[  440.175853][ T5827] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40
[  440.209962][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  440.209989][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  440.237475][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.237503][ T5827] usb 1-1: Product: syz
[  440.237526][ T5827] usb 1-1: Manufacturer: syz
[  440.237539][ T5827] usb 1-1: SerialNumber: syz
[  440.275869][ T5827] usb 1-1: 0:2 : does not exist
[  440.297433][ T5614] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  440.520325][ T5827] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  441.559964][ T5827] usb 1-1: USB disconnect, device number 33
[  441.845645][ T7882] udevd[7882]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  442.979331][ T5725] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  443.132921][ T5725] usb 2-1: Using ep0 maxpacket: 8
[  443.133449][ T5725] usb 2-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  443.135241][ T5725] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  443.135268][ T5725] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  443.135284][ T5725] usb 2-1: config 0 has no interface number 0
[  443.135317][ T5725] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  443.135339][ T5725] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  443.135360][ T5725] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  443.138227][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  443.138242][ T5725] usb 2-1: Product: syz
[  443.207495][ T5725] usb 2-1: config 0 descriptor??
[  443.245103][ T8946] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  444.088920][ T8956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.209729][ T5725] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input29
[  445.330721][ T8956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.575977][ T8956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.784050][ T5725] usb 2-1: USB disconnect, device number 31
[  446.784092][    C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  447.170776][ T8956] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.839788][   T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.133154][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.262829][   T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.422855][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  450.493272][   T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.573953][    T9] usb 2-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  450.594777][    T9] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  450.594831][    T9] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  450.637599][    T9] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  450.637630][    T9] usb 2-1: Manufacturer: syz
[  450.637644][    T9] usb 2-1: SerialNumber: syz
[  450.976098][    T9] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[  450.999481][ T9016] IPv6: Can't replace route, no match found
[  451.019018][    T9] usb 2-1: USB disconnect, device number 32
[  451.473004][    T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  451.628830][    T9] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00
[  451.656911][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.931058][    T9] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  452.392078][    T9] usb 5-1: USB disconnect, device number 40
[  454.826608][ T9024] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  455.505922][ T9045] netlink: 36 bytes leftover after parsing attributes in process `syz.4.846'.
[  456.313685][ T9042] loop0: detected capacity change from 0 to 32768
[  460.746272][ T9075] IPv6: Can't replace route, no match found
[  461.044171][   T26] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  461.198078][   T26] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00
[  461.208254][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.474280][ T9081] rxe_eth0 speed is unknown, defaulting to 1000
[  461.490547][   T26] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  461.833221][    T9] usb 5-1: USB disconnect, device number 41
[  462.182995][ T9089] loop1: detected capacity change from 0 to 32768
[  462.183658][ T9089] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  462.191763][ T9089] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.860 (9089)
[  462.223926][ T9089] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  462.223957][ T9089] BTRFS info (device loop1): using crc32c checksum algorithm
[  462.373226][ T9089] BTRFS info (device loop1): rebuilding free space tree
[  462.394334][ T9089] BTRFS info (device loop1): disabling free space tree
[  462.394410][ T9089] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  462.394432][ T9089] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  462.427750][ T9089] BTRFS info (device loop1): enabling ssd optimizations
[  462.427770][ T9089] BTRFS info (device loop1): turning on async discard
[  462.427779][ T9089] BTRFS info (device loop1): force clearing of disk cache
[  462.427789][ T9089] BTRFS info (device loop1): use zstd compression, level 3
[  463.212104][ T5614] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  469.555157][ T9144] IPv6: Can't replace route, no match found
[  470.163200][  T193] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  470.630820][  T193] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00
[  470.646256][  T193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.719983][  T193] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  472.691751][  T193] usb 5-1: USB disconnect, device number 42
[  473.084915][   T26] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  473.235257][   T26] usb 2-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  473.253575][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.275592][   T26] usb 2-1: config 0 descriptor??
[  474.283516][   T26] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  474.287834][   T26] [drm:udl_init] *ERROR* Selecting channel failed
[  474.365435][   T26] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1
[  474.365454][   T26] [drm] Initialized udl on minor 1
[  474.370099][   T26] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  474.402550][   T26] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  474.417485][ T5715] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  474.421444][   T26] usb 2-1: USB disconnect, device number 33
[  474.441401][ T5715] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  474.508486][ T9181] IPv6: Can't replace route, no match found
[  474.753464][ T9184] loop0: detected capacity change from 0 to 512
[  475.512197][    T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  475.576941][ T9191] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  475.576960][ T9191] FAT-fs (loop0): Filesystem has been set read-only
[  475.674802][    T9] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00
[  475.675878][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.940528][    T9] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  476.038668][ T9194] loop1: detected capacity change from 0 to 164
[  477.150037][   T26] usb 5-1: USB disconnect, device number 43
[  477.476957][ T9198] rxe_eth0 speed is unknown, defaulting to 1000
[  480.082977][  T193] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  480.234133][  T193] usb 5-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  480.235145][  T193] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  480.235188][  T193] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  480.236815][  T193] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  480.236832][  T193] usb 5-1: Manufacturer: syz
[  480.236840][  T193] usb 5-1: SerialNumber: syz
[  480.334294][ T9218] loop0: detected capacity change from 0 to 2048
[  480.388964][ T9218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  480.534960][  T193] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  480.558691][  T193] usb 5-1: USB disconnect, device number 44
[  481.084465][ T9222] loop0: detected capacity change from 0 to 164
[  483.425818][ T9235] loop0: detected capacity change from 0 to 164
[  483.618591][   T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  484.395380][ T4033] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  484.473500][ T4033] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  484.531031][   T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  484.732029][ T9247] IPv6: Can't replace route, no match found
[  485.640462][ T9255] syzkaller0: entered promiscuous mode
[  485.640478][ T9255] syzkaller0: entered allmulticast mode
[  486.427511][ T2251] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  486.987538][ T2251] usb 5-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00
[  486.991853][ T2251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.015739][ T9241] netlink: 'syz.2.900': attribute type 1 has an invalid length.
[  487.238626][ T2251] cdc_acm 5-1:1.0: ttyACM0: USB ACM device
[  488.278163][ T2251] usb 5-1: USB disconnect, device number 45
[  491.241828][ T9294] loop0: detected capacity change from 0 to 32768
[  491.242967][ T9294] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  491.262474][ T9294] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.912 (9294)
[  491.282709][ T9294] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  491.282840][ T9294] BTRFS info (device loop0): using crc32c checksum algorithm
[  491.371784][ T9294] BTRFS info (device loop0): rebuilding free space tree
[  491.400765][ T9294] BTRFS info (device loop0): disabling free space tree
[  491.400812][ T9294] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  491.400825][ T9294] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  491.433099][ T9294] BTRFS info (device loop0): enabling ssd optimizations
[  491.433137][ T9294] BTRFS info (device loop0): turning on async discard
[  491.433148][ T9294] BTRFS info (device loop0): force clearing of disk cache
[  491.433218][ T9294] BTRFS info (device loop0): use zstd compression, level 3
[  491.673394][ T9281] md: invalid raid superblock magic on ram7
[  491.673415][ T9281] md: ram7 does not have a valid v0.0 superblock, not importing!
[  491.673485][ T9281] md: md_import_device returned -22
[  492.190734][ T5617] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  494.081122][ T9327] loop0: detected capacity change from 0 to 512
[  494.301568][ T9329] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  494.301589][ T9329] FAT-fs (loop0): Filesystem has been set read-only
[  494.328074][ T9334] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.509008][ T9334] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.699480][ T9334] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.091527][ T9334] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.032936][ T9171] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  496.207985][   T63] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  496.223733][ T9171] usb 1-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00
[  496.225876][ T9171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.225908][ T9171] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.225946][ T9171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.229792][ T9171] usb 1-1: config 0 descriptor??
[  497.103933][ T6545] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.198252][ T4127] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.209973][ T6545] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.273529][ T9358] rxe_eth0 speed is unknown, defaulting to 1000
[  497.498396][ T9171] usb 1-1: string descriptor 0 read error: -22
[  497.921815][ T9171] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71
[  497.921881][ T9171] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71
[  497.921899][ T9171] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71
[  497.921971][ T9171] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[  497.922150][ T9171] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71
[  497.982495][ T9171] usb 1-1: USB disconnect, device number 34
[  499.414222][ T9376] rxe_eth0 speed is unknown, defaulting to 1000
[  500.638462][ T9387] loop4: detected capacity change from 0 to 32768
[  500.639430][ T9387] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  500.641890][ T9387] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.934 (9387)
[  500.662163][ T9387] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  500.662196][ T9387] BTRFS info (device loop4): using crc32c checksum algorithm
[  500.799574][ T9387] BTRFS info (device loop4): rebuilding free space tree
[  500.813419][ T9387] BTRFS info (device loop4): disabling free space tree
[  500.813487][ T9387] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  500.813507][ T9387] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  500.817417][ T9387] BTRFS info (device loop4): enabling ssd optimizations
[  500.817443][ T9387] BTRFS info (device loop4): turning on async discard
[  500.817460][ T9387] BTRFS info (device loop4): force clearing of disk cache
[  500.817477][ T9387] BTRFS info (device loop4): use zstd compression, level 3
[  501.420062][ T5627] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  501.577142][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  501.577185][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  502.272836][ T9171] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  502.315396][ T9410] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.426427][ T9171] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  502.432452][ T9171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.546756][ T9171] usb 5-1: config 0 descriptor??
[  502.632474][ T9410] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.820427][ T9171] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  502.869745][ T9410] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.047035][ T9171] [drm:udl_init] *ERROR* Selecting channel failed
[  503.146620][ T9171] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  503.146641][ T9171] [drm] Initialized udl on minor 1
[  503.179227][ T9171] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  503.179508][ T9171] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  503.182856][ T5715] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  503.220250][ T5715] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  503.222534][ T5715] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  503.284435][ T9410] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.619268][ T9171] usb 5-1: USB disconnect, device number 46
[  505.185981][ T4127] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  505.213268][ T1173] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  505.213314][ T1173] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  505.233070][ T4127] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  509.661018][ T9458] netlink: 36 bytes leftover after parsing attributes in process `syz.2.951'.
[  511.875637][ T9471] md: array md2 already has disks!
[  511.934689][ T9473] loop4: detected capacity change from 0 to 512
[  511.959008][ T9473] EXT4-fs: Ignoring removed oldalloc option
[  512.010872][ T9473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002]
[  512.011076][ T9473] System zones: 1-3, 19-19, 35-38
[  512.068351][ T9473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  512.068469][ T9473] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  513.136522][ T9462] md: could not open device unknown-block(1,5).
[  513.136565][ T9462] md: error, md_import_device() returned -16
[  513.302747][ T9482] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.469189][ T9482] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.620621][ T9482] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  513.748448][ T9482] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  514.073212][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.153431][  T980] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.175653][ T2251] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  514.232866][  T980] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.290934][  T150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.332906][ T2251] usb 1-1: Using ep0 maxpacket: 8
[  514.333566][ T2251] usb 1-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  514.337360][ T2251] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  514.337384][ T2251] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  514.337401][ T2251] usb 1-1: config 0 has no interface number 0
[  514.337434][ T2251] usb 1-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  514.339601][ T2251] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  514.339616][ T2251] usb 1-1: Product: syz
[  514.420676][ T2251] usb 1-1: config 0 descriptor??
[  515.456269][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.717941][ T9500] loop1: detected capacity change from 0 to 512
[  515.719840][ T9500] EXT4-fs: Ignoring removed oldalloc option
[  515.790030][ T9500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002]
[  515.790094][ T9500] System zones: 1-3, 19-19, 35-38
[  515.831475][ T9500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.831561][ T9500] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  517.094585][ T5725] usb 1-1: USB disconnect, device number 35
[  517.472631][ T9519] loop0: detected capacity change from 0 to 32768
[  517.473369][ T9519] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  517.474213][ T9519] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.966 (9519)
[  517.495518][ T9519] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  517.495551][ T9519] BTRFS info (device loop0): using crc32c checksum algorithm
[  517.811796][ T9519] BTRFS info (device loop0): rebuilding free space tree
[  518.548209][ T9519] BTRFS info (device loop0): disabling free space tree
[  518.548276][ T9519] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  518.548289][ T9519] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  518.568132][ T9519] BTRFS info (device loop0): enabling ssd optimizations
[  518.568159][ T9519] BTRFS info (device loop0): turning on async discard
[  518.568175][ T9519] BTRFS info (device loop0): force clearing of disk cache
[  518.568193][ T9519] BTRFS info (device loop0): use zstd compression, level 3
[  518.736067][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.927014][ T9517] netlink: 'syz.3.965': attribute type 1 has an invalid length.
[  519.393575][ T5617] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  519.568379][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'.
[  519.716362][ T5742] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  520.639637][ T5742] usb 5-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00
[  520.641202][ T5742] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  520.641228][ T5742] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  520.641264][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.728505][ T5742] idmouse 5-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  522.640129][ T5742] usb 5-1: USB disconnect, device number 47
[  522.650366][ T5742] idmouse 5-1:1.0: disconnected
[  524.648834][ T9571] loop0: detected capacity change from 0 to 32768
[  524.675472][ T9571] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  524.700698][ T9571] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.978 (9571)
[  524.790888][ T9571] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  524.790914][ T9571] BTRFS info (device loop0): using crc32c checksum algorithm
[  524.982288][ T9571] BTRFS info (device loop0): rebuilding free space tree
[  525.884378][ T9571] BTRFS info (device loop0): disabling free space tree
[  525.884446][ T9571] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  525.884468][ T9571] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  525.929211][ T9603] loop4: detected capacity change from 0 to 164
[  525.984512][ T9571] BTRFS info (device loop0): enabling ssd optimizations
[  525.984541][ T9571] BTRFS info (device loop0): turning on async discard
[  525.984558][ T9571] BTRFS info (device loop0): force clearing of disk cache
[  525.984575][ T9571] BTRFS info (device loop0): use zstd compression, level 3
[  528.644814][ T5617] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  529.292820][ T5725] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  530.016649][ T5725] usb 2-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  530.032547][ T5725] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  530.032812][ T5725] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  530.098437][ T5725] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  530.098456][ T5725] usb 2-1: Manufacturer: syz
[  530.098464][ T5725] usb 2-1: SerialNumber: syz
[  530.448064][ T5725] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[  530.465972][ T5725] usb 2-1: USB disconnect, device number 34
[  532.943461][ T5758] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  533.048397][ T9640] loop5: detected capacity change from 0 to 7
[  533.070637][ T9640] Dev loop5: unable to read RDB block 7
[  533.071447][ T9640]  loop5: unable to read partition table
[  533.086440][ T9640] loop5: partition table beyond EOD, truncated
[  533.086774][ T9640] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  533.143962][ T5758] usb 2-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00
[  533.160144][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.161143][ T9640] netlink: 'syz.0.995': attribute type 1 has an invalid length.
[  533.493127][ T5758] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  534.332365][ T5348] usb 2-1: USB disconnect, device number 35
[  534.670685][ T8363] IPVS: starting estimator thread 0...
[  534.704865][  T193] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  534.882789][ T9663] IPVS: using max 52 ests per chain, 124800 per kthread
[  535.493813][  T193] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  535.498176][  T193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.560016][  T193] usb 5-1: config 0 descriptor??
[  535.808338][  T193] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  536.948246][  T193] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  536.948264][  T193] [drm] Initialized udl on minor 1
[  537.048612][  T193] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  537.049043][  T193] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  537.584148][ T2251] usb 5-1: USB disconnect, device number 48
[  537.591161][  T193] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  537.591536][  T193] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  538.033938][ T5348] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  538.186609][ T5348] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[  538.191625][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  538.191656][ T5348] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  538.191720][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.245577][ T5348] usb 1-1: config 0 descriptor??
[  538.519910][ T5348] usbhid 1-1:0.0: can't add hid device: -71
[  538.519979][ T5348] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  538.554884][ T5348] usb 1-1: USB disconnect, device number 36
[  539.623122][ T2251] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  539.793236][ T2251] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[  539.795099][ T2251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  539.795118][ T2251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.795162][ T2251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.841154][ T2251] usb 1-1: config 0 descriptor??
[  540.105109][ T2251] usbhid 1-1:0.0: can't add hid device: -71
[  540.105176][ T2251] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  540.149916][ T2251] usb 1-1: USB disconnect, device number 37
[  546.834231][ T9753] loop1: detected capacity change from 0 to 512
[  546.836622][ T9753] EXT4-fs: Ignoring removed oldalloc option
[  546.930423][ T9746] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.966223][ T9753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002]
[  546.966309][ T9753] System zones: 1-3, 19-19, 35-38
[  546.970681][ T9753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  546.980986][ T9753] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  547.946217][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.991506][ T9746] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.085148][ T9746] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.146364][ T9772] loop1: detected capacity change from 0 to 512
[  549.168952][ T9772] EXT4-fs: Ignoring removed oldalloc option
[  549.248949][ T9772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002]
[  549.249059][ T9772] System zones: 1-3, 19-19, 35-38
[  550.136932][ T9746] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  550.141334][ T9772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.141416][ T9772] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  551.415025][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.607286][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.755144][ T8363] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.855505][   T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  552.139176][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.878060][   T32] audit: type=1400 audit(1792673422.991:24): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  556.549021][ T9833] loop4: detected capacity change from 0 to 512
[  557.332415][ T9833] EXT4-fs: Ignoring removed oldalloc option
[  558.448880][ T9833] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002]
[  558.448991][ T9833] System zones: 1-3, 19-19, 35-38
[  558.603443][ T9833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  558.622447][ T9833] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  561.675449][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  563.061815][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  563.061853][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  563.367986][ T5348] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  563.525385][ T5348] usb 5-1: Using ep0 maxpacket: 16
[  563.528393][ T5348] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40
[  563.529421][ T5348] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  563.529437][ T5348] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  563.581372][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.581390][ T5348] usb 5-1: Product: syz
[  563.581398][ T5348] usb 5-1: Manufacturer: syz
[  563.581406][ T5348] usb 5-1: SerialNumber: syz
[  563.660350][ T5348] usb 5-1: 0:2 : does not exist
[  563.882770][ T5348] usb 5-1: USB disconnect, device number 49
[  564.118556][ T9738] udevd[9738]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  564.292613][ T9877] rxe_eth0 speed is unknown, defaulting to 1000
[  565.208651][ T9886] loop4: detected capacity change from 0 to 164
[  566.985126][ T2251] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  567.148225][ T2251] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[  567.152289][ T2251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.152321][ T2251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  567.152348][ T2251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.205723][ T2251] usb 1-1: config 0 descriptor??
[  567.467610][ T2251] usbhid 1-1:0.0: can't add hid device: -71
[  567.467679][ T2251] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  567.493913][ T2251] usb 1-1: USB disconnect, device number 38
[  568.022741][ T2251] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  568.913925][ T2251] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[  568.922205][ T2251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  568.922226][ T2251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  568.922248][ T2251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.028572][ T2251] usb 1-1: config 0 descriptor??
[  570.068465][ T2251] usbhid 1-1:0.0: can't add hid device: -71
[  570.068534][ T2251] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  570.162922][ T2251] usb 1-1: USB disconnect, device number 39
[  572.933248][ T9936] loop4: detected capacity change from 0 to 512
[  572.959704][ T9936] EXT4-fs: Ignoring removed oldalloc option
[  573.022036][ T9936] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842c018, mo2=0002]
[  573.022127][ T9936] System zones: 1-3, 19-19, 35-38
[  573.039542][ T9936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  573.039649][ T9936] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  575.888943][ T5627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.620341][ T9966] loop4: detected capacity change from 0 to 32768
[  576.620945][ T9966] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  576.630420][ T9966] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1082 (9966)
[  576.675646][ T9966] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  576.675670][ T9966] BTRFS info (device loop4): using crc32c checksum algorithm
[  576.849255][ T9966] BTRFS info (device loop4): rebuilding free space tree
[  576.887066][ T9966] BTRFS info (device loop4): disabling free space tree
[  576.887136][ T9966] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  576.887158][ T9966] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  576.918287][ T9966] BTRFS info (device loop4): enabling ssd optimizations
[  576.918307][ T9966] BTRFS info (device loop4): turning on async discard
[  576.918316][ T9966] BTRFS info (device loop4): force clearing of disk cache
[  576.918326][ T9966] BTRFS info (device loop4): use zstd compression, level 3
[  577.016145][ T9964] loop1: detected capacity change from 0 to 512
[  577.430709][ T9978] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  577.430730][ T9978] FAT-fs (loop1): Filesystem has been set read-only
[  578.001708][ T5627] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  580.483173][T10004] loop1: detected capacity change from 0 to 32768
[  580.483826][T10004] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  580.508057][T10004] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1091 (10004)
[  580.553071][T10004] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  580.553107][T10004] BTRFS info (device loop1): using crc32c checksum algorithm
[  580.697827][T10004] BTRFS info (device loop1): rebuilding free space tree
[  580.713618][T10004] BTRFS info (device loop1): disabling free space tree
[  580.713663][T10004] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  580.713676][T10004] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  580.745698][T10004] BTRFS info (device loop1): enabling ssd optimizations
[  580.745724][T10004] BTRFS info (device loop1): turning on async discard
[  580.745740][T10004] BTRFS info (device loop1): force clearing of disk cache
[  580.745757][T10004] BTRFS info (device loop1): use zstd compression, level 3
[  581.748269][ T5614] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  583.812893][T10039] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  584.598276][T10042] syz.4.1097 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  584.598310][T10042] CPU: 1 UID: 0 PID: 10042 Comm: syz.4.1097 Not tainted syzkaller #0 PREEMPT(full) 
[  584.598322][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  584.598335][T10042] Call Trace:
[  584.598343][T10042]  <TASK>
[  584.598348][T10042]  dump_stack_lvl+0xe8/0x150
[  584.598370][T10042]  dump_header+0xd3/0x4b0
[  584.598387][T10042]  oom_kill_process+0x3ab/0x9e0
[  584.598403][T10042]  out_of_memory+0xfb1/0x13b0
[  584.598414][T10042]  ? try_charge_memcg+0xc0d/0x15e0
[  584.598437][T10042]  ? __pfx_out_of_memory+0x10/0x10
[  584.598448][T10042]  ? do_raw_spin_unlock+0xf5/0x200
[  584.598470][T10042]  try_charge_memcg+0xcc3/0x15e0
[  584.598495][T10042]  ? __pfx_try_charge_memcg+0x10/0x10
[  584.598508][T10042]  ? lock_acquire+0x115/0x350
[  584.598570][T10042]  ? charge_memcg+0x47/0x310
[  584.598586][T10042]  charge_memcg+0x1dd/0x310
[  584.598601][T10042]  __mem_cgroup_charge+0x25/0x80
[  584.598616][T10042]  shmem_alloc_and_add_folio+0x7bb/0xf60
[  584.598629][T10042]  ? filemap_get_entry+0xcd/0x3f0
[  584.598646][T10042]  ? filemap_map_pages+0x1d1/0x2170
[  584.598660][T10042]  ? __pfx_filemap_get_entry+0x10/0x10
[  584.598672][T10042]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  584.598694][T10042]  shmem_get_folio_gfp+0x594/0x1330
[  584.598716][T10042]  shmem_fault+0x179/0x390
[  584.598734][T10042]  __do_fault+0x138/0x2a0
[  584.598745][T10042]  ? do_pte_missing+0x139f/0x3570
[  584.598756][T10042]  do_pte_missing+0x21d2/0x3570
[  584.598773][T10042]  ? handle_mm_fault+0xee/0x3540
[  584.598790][T10042]  handle_mm_fault+0x1a2a/0x3540
[  584.598809][T10042]  ? handle_mm_fault+0xee/0x3540
[  584.598830][T10042]  ? follow_page_pte+0x660/0xf10
[  584.598843][T10042]  ? __pfx_handle_mm_fault+0x10/0x10
[  584.598858][T10042]  ? follow_page_pte+0x748/0xf10
[  584.598876][T10042]  ? __pfx_follow_page_pte+0x10/0x10
[  584.598897][T10042]  __get_user_pages+0x1670/0x2750
[  584.598928][T10042]  populate_vma_page_range+0x311/0x3f0
[  584.598942][T10042]  ? __pfx_populate_vma_page_range+0x10/0x10
[  584.598957][T10042]  ? down_read+0x2b9/0x320
[  584.598974][T10042]  __mm_populate+0x25f/0x390
[  584.598988][T10042]  ? __pfx___mm_populate+0x10/0x10
[  584.599006][T10042]  vm_mmap_pgoff+0x36e/0x520
[  584.599021][T10042]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  584.599032][T10042]  ? __pfx___se_sys_futex+0x10/0x10
[  584.599048][T10042]  ? __task_pid_nr_ns+0x28/0x470
[  584.599062][T10042]  ? ksys_mmap_pgoff+0xf3/0x760
[  584.599076][T10042]  ? __x64_sys_mmap+0x7f/0x140
[  584.599092][T10042]  do_syscall_64+0x166/0x520
[  584.599105][T10042]  ? trace_irq_disable+0x3b/0x140
[  584.599118][T10042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.599128][T10042]  ? clear_bhb_loop+0x70/0xc0
[  584.599142][T10042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  584.599153][T10042] RIP: 0033:0x7f259eb9f559
[  584.599173][T10042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  584.599183][T10042] RSP: 002b:00007f259fb11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  584.599195][T10042] RAX: ffffffffffffffda RBX: 00007f259ee25fa0 RCX: 00007f259eb9f559
[  584.599203][T10042] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[  584.599210][T10042] RBP: 00007f259ec36b20 R08: ffffffffffffffff R09: 000000001b5cb000
[  584.599218][T10042] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[  584.599224][T10042] R13: 00007f259ee26038 R14: 00007f259ee25fa0 R15: 00007ffee782e208
[  584.599242][T10042]  </TASK>
[  584.599251][T10042] memory: usage 307200kB, limit 307200kB, failcnt 14716
[  584.599258][T10042] memory+swap: usage 400948kB, limit 9007199254740988kB, failcnt 0
[  584.599266][T10042] kmem: usage 4000kB, limit 9007199254740988kB, failcnt 0
[  584.599273][T10042] Memory cgroup stats for /syz4:
[  584.599473][T10042] cache 310272000
[  584.599478][T10042] rss 204800
[  584.599482][T10042] rss_huge 0
[  584.599485][T10042] shmem 310185984
[  584.599489][T10042] mapped_file 204029952
[  584.599493][T10042] dirty 0
[  584.599496][T10042] writeback 0
[  584.599500][T10042] workingset_refault_anon 0
[  584.599503][T10042] workingset_refault_file 2558
[  584.599507][T10042] swap 95997952
[  584.599511][T10042] swapcached 0
[  584.599521][T10042] pgpgin 651908
[  584.599524][T10042] pgpgout 576619
[  584.599528][T10042] pgfault 366668
[  584.599531][T10042] pgmajfault 7
[  584.599535][T10042] inactive_anon 158355456
[  584.599539][T10042] active_anon 152035328
[  584.599542][T10042] inactive_file 49152
[  584.599547][T10042] active_file 36864
[  584.599550][T10042] unevictable 0
[  584.599554][T10042] hierarchical_memory_limit 314572800
[  584.599558][T10042] hierarchical_memsw_limit 9223372036854771712
[  584.599562][T10042] total_cache 310272000
[  584.599566][T10042] total_rss 204800
[  584.599570][T10042] total_rss_huge 0
[  584.599573][T10042] total_shmem 310185984
[  584.599577][T10042] total_mapped_file 204029952
[  584.599581][T10042] total_dirty 0
[  584.599585][T10042] total_writeback 0
[  584.599588][T10042] total_workingset_refault_anon 0
[  584.599592][T10042] total_workingset_refault_file 2558
[  584.599596][T10042] total_swap 95997952
[  584.599600][T10042] total_swapcached 0
[  584.599603][T10042] total_pgpgin 651908
[  584.599608][T10042] total_pgpgout 576619
[  584.599611][T10042] total_pgfault 366668
[  584.599615][T10042] total_pgmajfault 7
[  584.599618][T10042] total_inactive_anon 158355456
[  584.599622][T10042] total_active_anon 152035328
[  584.599626][T10042] total_inactive_file 49152
[  584.599630][T10042] total_active_file 36864
[  584.599633][T10042] total_unevictable 0
[  584.599637][T10042] anon_cost 0
[  584.599640][T10042] file_cost 0
[  584.599644][T10042] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.941,pid=9426,uid=0
[  584.599822][T10042] Memory cgroup out of memory: Killed process 9426 (syz.4.941) total-vm:202636kB, anon-rss:1268kB, file-rss:20548kB, shmem-rss:113192kB, UID:0 pgtables:360kB oom_score_adj:1000
[  585.560119][T10040] syz.1.1094 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  585.560148][T10040] CPU: 0 UID: 0 PID: 10040 Comm: syz.1.1094 Not tainted syzkaller #0 PREEMPT(full) 
[  585.560160][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  585.560167][T10040] Call Trace:
[  585.560172][T10040]  <TASK>
[  585.560177][T10040]  dump_stack_lvl+0xe8/0x150
[  585.560198][T10040]  dump_header+0xd3/0x4b0
[  585.560215][T10040]  oom_kill_process+0x3ab/0x9e0
[  585.560231][T10040]  out_of_memory+0xfb1/0x13b0
[  585.560242][T10040]  ? try_charge_memcg+0xc0d/0x15e0
[  585.560264][T10040]  ? __pfx_out_of_memory+0x10/0x10
[  585.560274][T10040]  ? do_raw_spin_unlock+0xf5/0x200
[  585.560296][T10040]  try_charge_memcg+0xcc3/0x15e0
[  585.560320][T10040]  ? __pfx_try_charge_memcg+0x10/0x10
[  585.560333][T10040]  ? lock_acquire+0x115/0x350
[  585.560355][T10040]  ? charge_memcg+0x47/0x310
[  585.560370][T10040]  charge_memcg+0x1dd/0x310
[  585.560385][T10040]  __mem_cgroup_charge+0x25/0x80
[  585.560412][T10040]  shmem_alloc_and_add_folio+0x7bb/0xf60
[  585.560426][T10040]  ? filemap_get_entry+0xcd/0x3f0
[  585.560445][T10040]  ? __pfx_filemap_get_entry+0x10/0x10
[  585.560457][T10040]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[  585.560478][T10040]  shmem_get_folio_gfp+0x594/0x1330
[  585.560500][T10040]  shmem_write_begin+0x16c/0x330
[  585.560516][T10040]  generic_perform_write+0x2d5/0x8e0
[  585.560537][T10040]  ? __pfx_generic_perform_write+0x10/0x10
[  585.560550][T10040]  ? __mark_inode_dirty+0x4e7/0x13b0
[  585.560566][T10040]  ? mnt_put_write_access_file+0xc3/0x100
[  585.560582][T10040]  ? file_update_time_flags+0x3ab/0x440
[  585.560608][T10040]  shmem_file_write_iter+0xf8/0x120
[  585.560622][T10040]  __kernel_write_iter+0x44a/0x8f0
[  585.560638][T10040]  ? __pfx___kernel_write_iter+0x10/0x10
[  585.560649][T10040]  ? get_dump_page+0x1e6/0x410
[  585.560665][T10040]  ? __asan_memset+0x22/0x50
[  585.560677][T10040]  ? iov_iter_bvec+0xb8/0x180
[  585.560693][T10040]  dump_user_range+0x715/0xca0
[  585.560713][T10040]  ? __pfx_dump_user_range+0x10/0x10
[  585.560731][T10040]  ? __pfx_writenote+0x10/0x10
[  585.560743][T10040]  ? elf_core_dump+0x28d0/0x3a70
[  585.560758][T10040]  elf_core_dump+0x346a/0x3a70
[  585.560780][T10040]  ? __pfx_elf_core_dump+0x10/0x10
[  585.560789][T10040]  ? kasan_save_track+0x4f/0x80
[  585.560801][T10040]  ? do_coredump+0x4ef0/0x6a60
[  585.560810][T10040]  ? vfs_coredump+0xac3/0x10c0
[  585.560818][T10040]  ? get_signal+0x108f/0x12c0
[  585.560829][T10040]  ? arch_do_signal_or_restart+0xbb/0x860
[  585.560843][T10040]  ? irqentry_exit+0x348/0x9b0
[  585.560856][T10040]  ? asm_exc_page_fault+0x26/0x30
[  585.560894][T10040]  ? lock_acquire+0x115/0x350
[  585.560905][T10040]  ? 0xffffffffff600000
[  585.560924][T10040]  do_coredump+0x5ed1/0x6a60
[  585.560951][T10040]  ? __pfx_do_coredump+0x10/0x10
[  585.560961][T10040]  ? lock_acquire+0x115/0x350
[  585.560976][T10040]  ? __lock_acquire+0x747/0x2de0
[  585.560996][T10040]  ? __lock_acquire+0x747/0x2de0
[  585.561016][T10040]  ? lock_acquire+0x115/0x350
[  585.561031][T10040]  ? lock_acquire+0x115/0x350
[  585.561048][T10040]  ? is_bpf_text_address+0x26/0x2b0
[  585.561066][T10040]  ? is_bpf_text_address+0x292/0x2b0
[  585.561085][T10040]  ? is_bpf_text_address+0x26/0x2b0
[  585.561102][T10040]  ? kernel_text_address+0xa5/0xe0
[  585.561114][T10040]  ? __kernel_text_address+0xd/0x30
[  585.561125][T10040]  ? unwind_get_return_address+0x4d/0x90
[  585.561138][T10040]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  585.561151][T10040]  ? arch_stack_walk+0xfb/0x150
[  585.561171][T10040]  ? stack_trace_save+0xa9/0x100
[  585.561182][T10040]  ? __pfx_stack_trace_save+0x10/0x10
[  585.561193][T10040]  ? __lock_acquire+0x747/0x2de0
[  585.561205][T10040]  ? stack_depot_save_flags+0x33/0x7f0
[  585.561225][T10040]  ? kasan_save_track+0x4f/0x80
[  585.561235][T10040]  ? kasan_save_track+0x3e/0x80
[  585.561245][T10040]  ? __kasan_kmalloc+0x93/0xb0
[  585.561256][T10040]  ? __kmalloc_noprof+0x366/0x710
[  585.561266][T10040]  ? security_prepare_creds+0x52/0x360
[  585.561277][T10040]  ? prepare_creds+0x57d/0x820
[  585.561288][T10040]  ? vfs_coredump+0x28a/0x10c0
[  585.561296][T10040]  ? get_signal+0x108f/0x12c0
[  585.561308][T10040]  ? arch_do_signal_or_restart+0xbb/0x860
[  585.561321][T10040]  ? irqentry_exit+0x348/0x9b0
[  585.561332][T10040]  ? asm_exc_page_fault+0x26/0x30
[  585.561358][T10040]  ? __lock_acquire+0x747/0x2de0
[  585.561386][T10040]  ? do_raw_spin_lock+0x12b/0x2f0
[  585.561406][T10040]  ? _raw_spin_unlock_irq+0x23/0x50
[  585.561420][T10040]  vfs_coredump+0xac3/0x10c0
[  585.561438][T10040]  ? __pfx_vfs_coredump+0x10/0x10
[  585.561465][T10040]  ? _raw_spin_unlock_irq+0x23/0x50
[  585.561478][T10040]  get_signal+0x108f/0x12c0
[  585.561503][T10040]  arch_do_signal_or_restart+0xbb/0x860
[  585.561520][T10040]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  585.561547][T10040]  irqentry_exit+0x348/0x9b0
[  585.561558][T10040]  ? trace_irq_disable+0x3b/0x140
[  585.561575][T10040]  asm_exc_page_fault+0x26/0x30
[  585.561585][T10040] RIP: 0033:0x7fed2d79f561
[  585.561596][T10040] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  585.561605][T10040] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[  585.561616][T10040] RAX: 0000000000000000 RBX: 00007fed2da26090 RCX: 00007fed2d79f559
[  585.561623][T10040] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  585.561630][T10040] RBP: 00007fed2d836b20 R08: 0000000000000000 R09: 0000000000000000
[  585.561636][T10040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  585.561642][T10040] R13: 00007fed2da26128 R14: 00007fed2da26090 R15: 00007ffdd7fdbab8
[  585.561660][T10040]  </TASK>
[  585.561664][T10040] memory: usage 307200kB, limit 307200kB, failcnt 58664
[  585.561671][T10040] memory+swap: usage 335420kB, limit 9007199254740988kB, failcnt 0
[  585.561678][T10040] kmem: usage 2816kB, limit 9007199254740988kB, failcnt 0
[  585.561684][T10040] Memory cgroup stats for /syz1:
[  585.561769][T10040] cache 311455744
[  585.561774][T10040] rss 217088
[  585.561777][T10040] rss_huge 0
[  585.561781][T10040] shmem 311451648
[  585.561784][T10040] mapped_file 138559488
[  585.561788][T10040] dirty 0
[  585.561791][T10040] writeback 0
[  585.561795][T10040] workingset_refault_anon 5
[  585.561798][T10040] workingset_refault_file 4940
[  585.561802][T10040] swap 28897280
[  585.561806][T10040] swapcached 0
[  585.561809][T10040] pgpgin 806116
[  585.561812][T10040] pgpgout 730024
[  585.561816][T10040] pgfault 432255
[  585.561819][T10040] pgmajfault 11
[  585.561822][T10040] inactive_anon 132587520
[  585.561826][T10040] active_anon 179081216
[  585.561830][T10040] inactive_file 0
[  585.561833][T10040] active_file 0
[  585.561837][T10040] unevictable 0
[  585.561840][T10040] hierarchical_memory_limit 314572800
[  585.561844][T10040] hierarchical_memsw_limit 9223372036854771712
[  585.561849][T10040] total_cache 311455744
[  585.561852][T10040] total_rss 217088
[  585.561856][T10040] total_rss_huge 0
[  585.561859][T10040] total_shmem 311451648
[  585.561862][T10040] total_mapped_file 138559488
[  585.561866][T10040] total_dirty 0
[  585.561870][T10040] total_writeback 0
[  585.561873][T10040] total_workingset_refault_anon 5
[  585.561877][T10040] total_workingset_refault_file 4940
[  585.561881][T10040] total_swap 28897280
[  585.561885][T10040] total_swapcached 0
[  585.561888][T10040] total_pgpgin 806116
[  585.561891][T10040] total_pgpgout 730024
[  585.561895][T10040] total_pgfault 432255
[  585.561898][T10040] total_pgmajfault 11
[  585.561902][T10040] total_inactive_anon 132587520
[  585.561906][T10040] total_active_anon 179081216
[  585.561909][T10040] total_inactive_file 0
[  585.561913][T10040] total_active_file 0
[  585.561916][T10040] total_unevictable 0
[  585.561920][T10040] anon_cost 0
[  585.561923][T10040] file_cost 0
[  585.561926][T10040] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.942,pid=9468,uid=0
[  585.562069][T10040] Memory cgroup out of memory: Killed process 9468 (syz.1.942) total-vm:202636kB, anon-rss:1276kB, file-rss:20548kB, shmem-rss:126032kB, UID:0 pgtables:360kB oom_score_adj:1000
[  689.592563][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  690.957223][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P10030/1:b..l.. P9869/1:b..l.. P10043/2:b..l..
[  690.969183][    C1] rcu: 	(detected by 1, t=10637 jiffies, g=61457, q=644 ncpus=2)
[  690.976886][    C1] task:syz-executor    state:R  running task     stack:28168 pid:10043 tgid:10043 ppid:5616   task_flags:0x400040 flags:0x00080000
[  690.990353][    C1] Call Trace:
[  690.993633][    C1]  <TASK>
[  690.996559][    C1]  __schedule+0x17dd/0x5820
[  691.001090][    C1]  ? __pfx___schedule+0x10/0x10
[  691.005960][    C1]  preempt_schedule_irq+0x4b/0x90
[  691.010973][    C1]  irqentry_exit+0x14f/0x9b0
[  691.015547][    C1]  ? trace_irq_disable+0x3b/0x140
[  691.020598][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  691.026583][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0xb0
[  691.033345][    C1] Code: 08 05 00 00 00 4a 89 7c 01 10 4a 89 74 01 18 4a 89 44 01 20 c3 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 8b 04 24 65 48 8b 0d b8 4d d2 12 65 48 8b 15 b8 4d
[  691.052979][    C1] RSP: 0018:ffffc900032778e0 EFLAGS: 00000246
[  691.059041][    C1] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000000000
[  691.066994][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  691.075041][    C1] RBP: ffffc90003277990 R08: ffffffff917b67bf R09: 1ffffffff22f6cf7
[  691.083012][    C1] R10: dffffc0000000000 R11: fffffbfff22f6cf8 R12: 0000000000000007
[  691.090970][    C1] R13: ffff88807b49cfeb R14: 0000000000000000 R15: ffffc90003277988
[  691.098957][    C1]  prepend+0x13c/0x1f0
[  691.103038][    C1]  prepend_path+0x33a/0x840
[  691.107527][    C1]  ? prepend_path+0x4d/0x840
[  691.112107][    C1]  d_absolute_path+0xa1/0x140
[  691.116789][    C1]  tomoyo_realpath_from_path+0x30d/0x640
[  691.122442][    C1]  tomoyo_path_perm+0x283/0x560
[  691.127284][    C1]  ? tomoyo_path_perm+0x251/0x560
[  691.132290][    C1]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  691.137654][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  691.142673][    C1]  ? __d_add+0x26d/0x330
[  691.146898][    C1]  ? __pfx_current_check_access_path+0x10/0x10
[  691.153035][    C1]  ? d_splice_alias+0x12/0x30
[  691.157700][    C1]  ? lookup_one_qstr_excl+0x1d4/0x360
[  691.163062][    C1]  tomoyo_path_symlink+0xab/0xf0
[  691.168006][    C1]  ? __pfx_tomoyo_path_symlink+0x10/0x10
[  691.173623][    C1]  ? __pfx_filename_create+0x10/0x10
[  691.178906][    C1]  security_path_symlink+0x16f/0x360
[  691.184200][    C1]  filename_symlinkat+0x134/0x410
[  691.189238][    C1]  ? __might_fault+0xaf/0x130
[  691.193935][    C1]  ? __pfx_filename_symlinkat+0x10/0x10
[  691.199484][    C1]  ? do_getname+0x151/0x250
[  691.203974][    C1]  __se_sys_symlinkat+0x4e/0x2b0
[  691.208919][    C1]  do_syscall_64+0x166/0x520
[  691.213497][    C1]  ? trace_irq_disable+0x3b/0x140
[  691.218502][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.224555][    C1]  ? clear_bhb_loop+0x70/0xc0
[  691.229221][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.235096][    C1] RIP: 0033:0x7fc786f9e617
[  691.239490][    C1] RSP: 002b:00007ffe7260a5d8 EFLAGS: 00000206 ORIG_RAX: 000000000000010a
[  691.247934][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc786f9e617
[  691.255892][    C1] RDX: 00007fc787037b03 RSI: 00000000ffffff9c RDI: 00007ffe7260a670
[  691.263851][    C1] RBP: 00007ffe7260a61c R08: 0000000000000001 R09: 00000000ffffffff
[  691.271803][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000000fa
[  691.279757][    C1] R13: 00000000000927c0 R14: 000000000008e529 R15: 00007ffe7260a670
[  691.287727][    C1]  </TASK>
[  691.290729][    C1] task:syz.3.1058      state:R  running task     stack:21080 pid:9869  tgid:9869  ppid:5615   task_flags:0x40064c flags:0x00080001
[  691.304183][    C1] Call Trace:
[  691.307461][    C1]  <TASK>
[  691.310393][    C1]  __schedule+0x17dd/0x5820
[  691.314901][    C1]  ? __lock_acquire+0x747/0x2de0
[  691.319860][    C1]  ? __pfx___schedule+0x10/0x10
[  691.324707][    C1]  preempt_schedule_irq+0x4b/0x90
[  691.329724][    C1]  irqentry_exit+0x14f/0x9b0
[  691.334315][    C1]  asm_sysvec_reschedule_ipi+0x1a/0x20
[  691.339778][    C1] RIP: 0010:find_lock_entries+0x27d/0xad0
[  691.345485][    C1] Code: 34 48 89 df be 04 00 00 00 e8 8f cc 2f 00 48 89 d8 48 c1 e8 03 48 89 44 24 78 42 0f b6 04 28 84 c0 0f 85 9b 04 00 00 44 8b 33 <31> ff 44 89 f6 e8 d9 04 b9 ff 45 85 f6 0f 84 2d 06 00 00 41 8d 4e
[  691.365076][    C1] RSP: 0018:ffffc900053971a0 EFLAGS: 00000246
[  691.371133][    C1] RAX: 0000000000000000 RBX: ffffea0002146ab4 RCX: ffffffff82100c81
[  691.379099][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea0002146ab4
[  691.387064][    C1] RBP: ffffc900053972f0 R08: ffffea0002146ab7 R09: 1ffffd4000428d56
[  691.395033][    C1] R10: dffffc0000000000 R11: fffff94000428d57 R12: fffffffffffffffe
[  691.402988][    C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffea0002146a80
[  691.410955][    C1]  ? find_lock_entries+0x261/0xad0
[  691.416065][    C1]  ? find_lock_entries+0x12a/0xad0
[  691.421173][    C1]  ? __pfx_find_lock_entries+0x10/0x10
[  691.426618][    C1]  ? folio_batch_remove_exceptionals+0x183/0x1f0
[  691.432970][    C1]  shmem_undo_range+0x311/0x15d0
[  691.437934][    C1]  ? __pfx_shmem_undo_range+0x10/0x10
[  691.443307][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  691.448521][    C1]  ? __lock_acquire+0x747/0x2de0
[  691.453455][    C1]  shmem_evict_inode+0x240/0xb00
[  691.458386][    C1]  ? inode_wait_for_writeback+0x16d/0x3b0
[  691.464109][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[  691.469553][    C1]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  691.475604][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  691.480623][    C1]  ? do_raw_spin_unlock+0xf5/0x200
[  691.485721][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[  691.491180][    C1]  evict+0x624/0xb50
[  691.495069][    C1]  ? __pfx_evict+0x10/0x10
[  691.499472][    C1]  ? do_raw_spin_unlock+0xf5/0x200
[  691.504569][    C1]  ? _raw_spin_unlock+0x28/0x50
[  691.509405][    C1]  ? iput+0xb7f/0xf00
[  691.513387][    C1]  dentry_kill+0x1b9/0x910
[  691.517796][    C1]  finish_dput+0x1a/0x260
[  691.522107][    C1]  __fput+0x65b/0xa40
[  691.526074][    C1]  task_work_run+0x1d9/0x260
[  691.530658][    C1]  ? __pfx_task_work_run+0x10/0x10
[  691.535779][    C1]  ? do_raw_spin_unlock+0xf5/0x200
[  691.540888][    C1]  do_exit+0x705/0x2360
[  691.545036][    C1]  ? __pfx_do_exit+0x10/0x10
[  691.549613][    C1]  do_group_exit+0x22d/0x2f0
[  691.554185][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  691.559369][    C1]  get_signal+0x1216/0x12c0
[  691.563877][    C1]  arch_do_signal_or_restart+0xbb/0x860
[  691.569429][    C1]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  691.575578][    C1]  irqentry_exit+0x348/0x9b0
[  691.580151][    C1]  ? trace_irq_disable+0x3b/0x140
[  691.585161][    C1]  asm_exc_page_fault+0x26/0x30
[  691.589997][    C1] RIP: 0033:0x7f98cc59f561
[  691.594407][    C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[  691.600455][    C1] RAX: 0000000000000000 RBX: 00007f98cc826090 RCX: 00007f98cc59f559
[  691.608416][    C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[  691.616382][    C1] RBP: 00007f98cc636b20 R08: 0000000000000000 R09: 0000000000000000
[  691.624347][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  691.632389][    C1] R13: 00007f98cc826128 R14: 00007f98cc826090 R15: 00007ffd0025e4b8
[  691.640374][    C1]  </TASK>
[  691.643406][    C1] task:udevadm         state:R  running task     stack:24040 pid:10030 tgid:10030 ppid:9848   task_flags:0x400000 flags:0x00080000
[  691.656859][    C1] Call Trace:
[  691.660216][    C1]  <TASK>
[  691.663135][    C1]  __schedule+0x17dd/0x5820
[  691.667642][    C1]  ? __pfx___schedule+0x10/0x10
[  691.672490][    C1]  ? __lock_acquire+0x747/0x2de0
[  691.677420][    C1]  preempt_schedule_irq+0x4b/0x90
[  691.682430][    C1]  irqentry_exit+0x14f/0x9b0
[  691.687003][    C1]  ? trace_irq_disable+0x3b/0x140
[  691.692017][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  691.697980][    C1] RIP: 0010:lock_acquire+0x232/0x350
[  691.703250][    C1] Code: ff ff ff e8 00 22 56 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 12 4c f7 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 77 8d da
[  691.722839][    C1] RSP: 0018:ffffc90004eef8a8 EFLAGS: 00000282
[  691.728898][    C1] RAX: 636735561d137200 RBX: 0000000000000000 RCX: 0000000000000046
[  691.736886][    C1] RDX: 00000000105209fd RSI: ffffffff8e705939 RDI: ffffffff8c6e8f80
[  691.744848][    C1] RBP: ffff88807802be80 R08: ffffffff825b1646 R09: 0000000000000000
[  691.752810][    C1] R10: 000000000000002f R11: 0000000000000000 R12: ffffffff8fd5a4a0
[  691.760760][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  691.768720][    C1]  ? __d_lookup+0x66/0x790
[  691.773134][    C1]  ? __d_lookup+0x66/0x790
[  691.777553][    C1]  __d_lookup+0x83/0x790
[  691.781797][    C1]  ? __d_lookup+0x66/0x790
[  691.786203][    C1]  lookup_fast+0x82/0x5d0
[  691.790513][    C1]  ? inode_permission+0x2b8/0x600
[  691.795518][    C1]  ? bpf_lsm_inode_permission+0x9/0x20
[  691.800965][    C1]  link_path_walk+0x712/0x1910
[  691.805723][    C1]  path_openat+0x1b7/0x20f0
[  691.810217][    C1]  do_file_open+0x23e/0x4a0
[  691.814707][    C1]  ? __pfx_do_file_open+0x10/0x10
[  691.819748][    C1]  ? _raw_spin_unlock+0x28/0x50
[  691.824582][    C1]  ? alloc_fd+0x6af/0x760
[  691.828901][    C1]  do_sys_openat2+0x115/0x200
[  691.833585][    C1]  ? __pfx_do_sys_openat2+0x10/0x10
[  691.838773][    C1]  ? __pfx_do_readlinkat+0x10/0x10
[  691.843880][    C1]  ? do_raw_spin_unlock+0xf5/0x200
[  691.848981][    C1]  __x64_sys_openat+0x138/0x170
[  691.853821][    C1]  do_syscall_64+0x166/0x520
[  691.858404][    C1]  ? trace_irq_disable+0x3b/0x140
[  691.863408][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.869454][    C1]  ? clear_bhb_loop+0x70/0xc0
[  691.874132][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.880004][    C1] RIP: 0033:0x7f7a7bca7407
[  691.884420][    C1] RSP: 002b:00007fff96673c60 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  691.892811][    C1] RAX: ffffffffffffffda RBX: 00007f7a7c3a9880 RCX: 00007f7a7bca7407
[  691.900764][    C1] RDX: 0000000000080000 RSI: 00007fff96673de0 RDI: ffffffffffffff9c
[  691.908718][    C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000
[  691.916672][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00005607e8857ee0
[  691.924622][    C1] R13: 00005607e8857ee0 R14: 0000000000000001 R15: 00005607eb340e60
[  691.932602][    C1]  </TASK>
[  691.935624][    C1] rcu: rcu_preempt kthread starved for 10732 jiffies! g61457 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0
[  691.946629][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  691.956594][    C1] rcu: RCU grace-period kthread stack dump:
[  691.962471][    C1] task:rcu_preempt     state:R  running task     stack:27496 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  691.975949][    C1] Call Trace:
[  691.979222][    C1]  <TASK>
[  691.982139][    C1]  __schedule+0x17dd/0x5820
[  691.986651][    C1]  ? __pfx___schedule+0x10/0x10
[  691.991489][    C1]  ? lock_acquire+0x115/0x350
[  691.996171][    C1]  ? schedule+0x90/0x2b0
[  692.000410][    C1]  schedule+0x164/0x2b0
[  692.004617][    C1]  schedule_timeout+0x152/0x2c0
[  692.009461][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  692.014841][    C1]  ? __pfx_process_timeout+0x10/0x10
[  692.020112][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  692.025904][    C1]  ? prepare_to_swait_event+0x220/0x3e0
[  692.031436][    C1]  ? prepare_to_swait_event+0x35e/0x3e0
[  692.036978][    C1]  rcu_gp_fqs_loop+0x30c/0x1230
[  692.041865][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  692.047178][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  692.052376][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  692.058178][    C1]  rcu_gp_kthread+0x9c/0x340
[  692.062768][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  692.067954][    C1]  ? __kthread_parkme+0x71/0x1f0
[  692.072887][    C1]  ? __kthread_parkme+0x199/0x1f0
[  692.077937][    C1]  kthread+0x38b/0x480
[  692.082000][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  692.087184][    C1]  ? __pfx_kthread+0x10/0x10
[  692.091765][    C1]  ret_from_fork+0x514/0xb70
[  692.096347][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  692.101450][    C1]  ? __switch_to+0xc78/0x1410
[  692.106113][    C1]  ? __pfx_kthread+0x10/0x10
[  692.110690][    C1]  ret_from_fork_asm+0x1a/0x30
[  692.115440][    C1]  </TASK>
[  692.118442][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  692.124741][    C1] Sending NMI from CPU 1 to CPUs 0:
[  692.129955][    C0] NMI backtrace for cpu 0
[  692.129973][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  692.129993][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  692.130004][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  692.130029][    C0] Code: bb 7a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 5b 0f 00 fb f4 <e9> 4c 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  692.130045][    C0] RSP: 0018:ffffffff8fa07ca0 EFLAGS: 00000246
[  692.130061][    C0] RAX: 000000000180e395 RBX: ffffffff819c945c RCX: 8000000000000001
[  692.130074][    C0] RDX: 0000000000000001 RSI: ffffffff8e47e32e RDI: ffffffff8c6e8f80
[  692.130087][    C0] RBP: ffffffff8fa07d78 R08: ffff8880b8433d9b R09: 1ffff110170867b3
[  692.130100][    C0] R10: dffffc0000000000 R11: ffffed10170867b4 R12: 0000000000000000
[  692.130112][    C0] R13: 1ffffffff1f51df8 R14: 1ffffffff1f40f9c R15: dffffc0000000000
[  692.130126][    C0] FS:  0000000000000000(0000) GS:ffff888123a6a000(0000) knlGS:0000000000000000
[  692.130141][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  692.130153][    C0] CR2: 00007fc787061a0c CR3: 00000000242c4000 CR4: 00000000003526f0
[  692.130169][    C0] Call Trace:
[  692.130177][    C0]  <TASK>
[  692.130183][    C0]  default_idle+0x9/0x20
[  692.130206][    C0]  default_idle_call+0x72/0xb0
[  692.130229][    C0]  do_idle+0x1cc/0x540
[  692.130249][    C0]  ? __pfx_do_idle+0x10/0x10
[  692.130272][    C0]  cpu_startup_entry+0x43/0x60
[  692.130290][    C0]  rest_init+0x378/0x3a0
[  692.130323][    C0]  ? __pfx_rest_init+0x10/0x10
[  692.130351][    C0]  ? __pfx_kernel_init+0x10/0x10
[  692.130375][    C0]  ? __pfx_acpi_hw_get_mode+0x10/0x10
[  692.130398][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[  692.130415][    C0]  ? acpi_ut_status_exit+0x120/0x1f0
[  692.130434][    C0]  ? acpi_enable_subsystem+0x286/0x3c0
[  692.130456][    C0]  start_kernel+0x392/0x3e0
[  692.130474][    C0]  x86_64_start_reservations+0x24/0x30
[  692.130497][    C0]  x86_64_start_kernel+0x137/0x1b0
[  692.130518][    C0]  common_startup_64+0x13e/0x157
[  692.130550][    C0]  </TASK>
[  692.335673][    C1] sched: DL replenish lagged too much