last executing test programs:

56.740998149s ago: executing program 4 (id=340):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='g', 0x1, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r2, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20)
shutdown(0xffffffffffffffff, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)="df1a8a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000840)="4996ad2e61b0", 0x6}], 0x1}}], 0x2, 0x4008005)

55.985925075s ago: executing program 4 (id=341):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$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")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file2\x00'}, 0x6e)

48.605822852s ago: executing program 4 (id=361):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$evdev(&(0x7f0000000040), 0x100000001, 0x20f480)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r3, 0x0, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

47.52354641s ago: executing program 4 (id=367):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c)
vmsplice(r1, &(0x7f00000028c0)=[{&(0x7f00000000c0)="e6", 0x1}, {0x0}], 0x2, 0x3)
splice(r0, 0x0, r2, 0x0, 0x1800000, 0x0)

47.117719994s ago: executing program 4 (id=368):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5519, &(0x7f0000000740)="$eJzs3M1rI2UYAPAn/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6ZJGrKbZEqTprUnDx7Fg/+JKHjy6N/gwbM38aB4E5TMTHXrBwhNm+3294PJM++bN888b1gWnpmSAC6s+eTXn0txI65ExHREXI/IzkvFkVnPwwsRcTMiph47SsX8nxOXIuJqRNwYJc9zloq3Pr89vLX201u/fPPd5ZlrX3z9/eR2DUzaixHR3cnP97t5TFt5fFjM14btLHZXh0XM3+g+KsZpHvebW1mG/drRuloWV1r5+nRnrz+K251afRRb7e1sfqeXX7A/bB3lyT7wsLabjRvNrSy2+2kWW4d5XQeH+f9th/1BnqdR5PsoSx+DwVHM55sHzXw/O4+yWO8Nivk8b9poHozisIjF5aKedhpZHVsn+aafbG+3e3sHybC522+nvWStUn2pUr1Tru6mjeaguVqudRt3VpOFVme0rDxo1rrrrTRtdZqVetpdTBZa9Xq5Wk0W7ja32rVeUq1WVipL5bXF4ux28vr995JOI1kYxVfbvb1Bu9NPttPdJP/EYrJcWXl5MblVTd7Z2Ew2H9y7t7H57gd337//ysabrxWL/lFWsrC8tLxcri6Vl6uLF2j/nxRFj3H/cCKlSRcAcP7o/4FJOL3+f/dBxOn3/6H/H4tz1f9e9P7/FPYPJ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4sH6Y/fKN7GQ+H18r5p8ppp4rxqWImIqI3//FdFw6lnO6yDP7H+tn/1bDt6XIMoyucbk4rkbEenH89uxpfwsAAADw9Prq45uf5d16/jI/6YI4S/lNm6nrH44p31xEzM7/OKZsU6OX58eULPv3PRMHY8qW3cCaG1Oy/JbbzLiy/S/Tx8LcY6GUh6kzLQcAADgTxzuBs+1CAAAAOEufTroAJqMUR48yj54FZ395/9cDwSvHRgAAAMA5VJp0AQAAAMCpy/p/v/8HAAAAT7f89/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3buJ2dpIIwD8Nvy1Q//RWLcewWP4O7jGB7BpUvDAbwEB3CBV9ADcAbceQRDDZ0RgbDAdNpG8zxJGVroj3cILGYmGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYEjfm83yy8fXn/rm7Nt+yvQGAAAAuGbXbJbdk0U6f5qvP8+XXubzKiLqiLgct8/btp3Fo7PMWc5p/rz/8+k9zUUNXyO6hMNn3OfjSUS8zcfPF0N/CwAAAPD/2q7WD2m0nh4WUxfEmNKkTf3sXaG8KiKaxY9CafUh79X11958+9u0w+/7Lj4UqCvyxFbMC4WlKbe7Umk36f7ux1m7+UlTpaa+etuxyGJ9BwAARjQ7a8YdhQAAADCm91MXwDSq+L2UeVwKvE9NXt57fHYGAAAA/IOqqQsAAAAABteN//vu/9fetv9fa/8/AAAAmEba/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAh7ZrNcrtaP/TN2bf9lOkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Iv9OUehEAiDMNjzFpdM5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODJuL587vg2jiS/Xhv/nudIlk4zydqpsXVu7P1hvv0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjZn3MTCsEgCqP3LW6Z/P0H9mJjcsEeRDgn+phhggEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I2OM/k0vrnj19iT/DttTB2PJHNXjaWrxtqDxtaD8fQ3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzs3M9rHFUcAPA3MztbWxXXKHuIiIIHvdjttrb2Jh6U4ME/QQjptsZu/dHmYEsRc/EmOfciehQRlHjr/5BzArnEWw57iOBZmdmZ7OQHuP6a2SSfD7x53x2Wed83AyHfeS8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEqjtydxkh064zguzm3uPVzK+q1Dfebx2vZ81rI4qjPpk+HF6oeo21wiAAAAnB1JWd+HEHbS9YWsjzt5/Z+W38lq/m+fHsdlPX+47i/7svbP2i8/7z6/P1BnPE520ZvLw8Glo6m0/r9ZzrZn/vIbrfzO5+9ekvyBxO+tPjdK8/sZfb2x8U47D8/VkS0A8E9cLPsiKH8fyvp+k4kBcGa0KoV3Wf8nnWZzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjDaDU8WcZRCGG+NYkzW3sPl47rH69tz5ft2qNHa+HLyTWzS6QhhJvLw8GlWmcz2+7df3B7cTgc3K07COGlEEJTo79VTP/2B1Ol2kCGgv8siIuHPSv5nIygwR9KAACcSmnRsrp+J11fyM5FcyH88d3B+v/VShymrP93P7y2WR2rWv/3a5vh7Out3Pm0d+/+g9eX7yzeGtwafPzG5f6b/SvXr1693svflfS8MQEAAODfaRetWv/Hc0fX/y9U4jBl/f/ZN/0vqmMl6v9jTRb9ms4EAADgbHv25d9/i445H7Xb4fPFlZW7/fFx//Pl8bGBVP+2c0Wr1v/JXNNZAQAAAHUYrUYH1v9vVOIw5fr/U9+/8GP1mkkI4Xyx/n9x6ZPhjfqmM9Pq+HPipucIAABAs84Xrbr+n+b7/+P9LQ9xCOG1V8Zx8W8Ap6r/k3e/+qE6VnX//5X6pjiT4u74fuR9N4RWt+mMAAAAOM2eKFpW7P+ari989NOF99v2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7c8AAAD//3ItPy4=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
bind$bt_hci(r0, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
timer_create(0x0, 0x0, &(0x7f0000000300))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)

45.363991216s ago: executing program 4 (id=374):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000002300)={0x44, &(0x7f00000020c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

29.996288383s ago: executing program 32 (id=374):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000002300)={0x44, &(0x7f00000020c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

18.476176566s ago: executing program 0 (id=424):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20)
io_uring_setup(0x30aa, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000ec0), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000280))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0)

14.579213789s ago: executing program 1 (id=431):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000600)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
fallocate(r1, 0x0, 0x0, 0x1000f4)

11.566536823s ago: executing program 1 (id=433):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$evdev(&(0x7f0000000040), 0x100000001, 0x20f480)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r3, 0x0, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

11.400777786s ago: executing program 0 (id=434):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

9.909271871s ago: executing program 0 (id=436):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0xa, 0x300)
syz_80211_inject_frame(0x0, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r0], 0x7)

9.365398211s ago: executing program 1 (id=437):
syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)

9.196825079s ago: executing program 3 (id=438):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20)
shutdown(r0, 0x0)
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x0)

8.926065948s ago: executing program 3 (id=439):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x4, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0xa0363159, 0x0, 0x0, 0x0, 0x1}})
r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xe7e6, 0x40, 0x0, 0x255}, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000780)={[{@sysvgroups}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x561, &(0x7f0000000200)="$eJzs3d9rXFkdAPDvnWbSpk13sq4PuuC66kq7aCfNxt0NPqwVRJ8WxPW9xmQaQieZkkx2mxAw/QsEERV90hdfBP8AQQq++ChCQZ8VKohoqg+C2itz5yZNJ3em03Z2Jj8+H7i95/78nnOm9/aee0/vDeDUejUirkXEwzRNX4+ISj6/lA+x0x5a6z3Y3V54sLudRKTpe39PIsnn7e0ryccX8s3ORcQ3vhbx7eRw3PXNrZvz9XptLZ+ebq7cml7f3LqyvDK/VFuqrc7Ozrw19/bcm3NXB1LOixHxzlf+8oPv/vyr7/z68x/8+fpfL7eKHZP58oPleAqtKhrrtUK76OWsLva0Nlh7hmBH1VhWwtxE0RppmqYP08qBOXeGkjMAADq1LmA/EhGfjojXoxJnel/OAgAAAMdQ+qXJ+G/SfkJTYLzLfAAAAOAYKWV9YJNSNe8LMBmlUrXa7sP70ThfqjfWm5+70dhYXbz348mImIpy6cZyvXY17ys8FeWkNT2TpR9Nv9ExPRsRL0bE9ysT2XR1oVFfHPXNDwAAADglLnS0//9Vabf/AQAAgBNm6vCs0ijyAQAAAHx4Ctr/AAAAwAmj/Q8AAAAn2tfffbc1pHvfv158f3PjZuP9K4u19ZvVlY2F6kJj7VZ1qdFYyt7Zt3Jw2zMF+6s3Gre+EKsbt6ebtfXm9Prm1vWVxsZq8/ryY5/ABgAAAIboxU/e/WMSETtfnMiGlvFRZwoYirH9VJKPC47+P73QHt8fUqaAoSi6h9/p/tkhZAQYurFn2irt57QBHHHlUWcAGLnkCcu7dt75XT7+1GDzAwAADN6lj3d//t/7GwA7PhEAx5yDGE6vjgd5aWVUGQGGLnv+32+HXxcLcKKU++oBCJxkz/38/4nS9KkyBAAADNxkNiSlan57bzJKpWo14mL2WYBycmO5XrsaES9ExB8q5bOt6Zlsy+SJbQYAAAAAAAAAAAAAAAAAAAAAAAAAoC1Nk0h7udZzKQAAAHAMRExE8pv2u/wvVV6b7Lg9cHY8+Xf2SeDxiPjgJ+/98PZ8s7k2EzGe/GN/fvNH+fw3RnILAwAAAOiw107fa8cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCA92N1eeLC7nf5nd3thmHH/9uWImNqPnw3tJWNxLhufi3JEnP9nEmMHtksi4swA4u/ciYiPZfHHI+JA/KSVrf2QRfEnBhu/o/xZ/JjKa6Eo/oUBxIfT7G7r/HOt6PgrxavZuPj4G4t4bPpZdT//xf7570yX4/9inzFevvfL6a7x70S8PFZ8/tmLnxyKn+TjUl/xv/XNra1uy9KfRlyK4vgHo003V25Nr29uXVlemV+qLdVWZ2dn3pp7e+7NuavTN5brtfzPwhjf+8SvHvYq//ku8aceK3/pUP2/1lfpI/537/buS13+vWrFv/yZgvi//Vm+xuH6L+X7+myebi2/tJfeaacPeuUXv3+lV/kXH5W/3N/v3455uXexH/2AgzhQAICBWd/cujlfr9fWjkOi/CxbtVrpRYteymvg+TM2flTqR+IpE98Z6A7TNE27/I26GxH97CeJo1AtWWK05yUAAGDwHl30jzonAAAAAAAAAAAAAAAAAAAAcHrt/f//tPLc7wwbL3zNXsGbBXb2U4k3AwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR8b/AwAA//9879gn")
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={0x0}, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0)

7.528814843s ago: executing program 0 (id=440):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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")
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f0000000140))

7.238637278s ago: executing program 2 (id=441):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c)
vmsplice(r1, &(0x7f00000028c0)=[{&(0x7f00000000c0)="e6", 0x1}, {&(0x7f00000018c0)}], 0x2, 0x3)
splice(r0, 0x0, r2, 0x0, 0x1800000, 0x0)

6.698690791s ago: executing program 2 (id=442):
r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
ftruncate(r0, 0xffff)
syz_clone3(&(0x7f0000000080)={0x180801400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x43f8f000)

6.207124451s ago: executing program 2 (id=443):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20)
io_uring_setup(0x30aa, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000ec0), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000280))
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)

5.638056789s ago: executing program 3 (id=444):
r0 = socket$netlink(0x10, 0x3, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

5.228760302s ago: executing program 0 (id=445):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

4.881558787s ago: executing program 2 (id=446):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ptrace$peeksig(0x4209, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_dev$evdev(&(0x7f0000000040), 0x100000001, 0x20f480)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
sendmsg$NFT_BATCH(r3, 0x0, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

4.880195157s ago: executing program 3 (id=447):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket(0x23, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0xffffffff, 0x0, {0xa, 0x0, 0x46, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x34}}, 0x0)
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00')
readv(r3, &(0x7f0000000880)=[{&(0x7f00000000c0)=""/168, 0xa8}], 0x1)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000280)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a0618f3242986a61ccb4001000058000b480400945f64009400ef0038923949000000800000008004000000ff499baeb700fff5dd0000000400030006010000418e01400004fc8b", 0x58}], 0x1)
lseek(r3, 0x2, 0x1)
ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x1)
ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x1, 0x0, 0x0})
write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f)
r5 = syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRES64=r1, @ANYRESDEC=0x0, @ANYBLOB=',volume=00000000000000000006,\x00', @ANYRES32, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r2], 0x1, 0x489, &(0x7f0000000580)="$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")
fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x3)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438)

2.956447593s ago: executing program 2 (id=448):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00')
syz_open_dev$cec(0x0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e1800, 0x56)
getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00)

2.54025204s ago: executing program 1 (id=449):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r3=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

1.606674917s ago: executing program 2 (id=450):
syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196144f01020301090224000100000020090400000206d3450009050102100000000009058b"], 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)

1.562169546s ago: executing program 3 (id=451):
syz_open_procfs(0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
lseek(r0, 0x7fff, 0x4)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0xb4)
close(r3)
r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r4, 0x402, 0x8000003d)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)

530.72358ms ago: executing program 1 (id=452):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x9}, 0x1c)
vmsplice(r1, &(0x7f00000028c0)=[{&(0x7f00000000c0)="e6", 0x1}, {&(0x7f00000018c0)="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", 0x2be}], 0x2, 0x3)
splice(r0, 0x0, r2, 0x0, 0x1800000, 0x0)

388.115547ms ago: executing program 3 (id=453):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/custom0\x00', 0x4, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0xa0363159, 0x0, 0x0, 0x0, 0x1}})
r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xe7e6, 0x40, 0x0, 0x255}, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000780)={[{@sysvgroups}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x561, &(0x7f0000000200)="$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")
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={0x0}, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0)

319.812249ms ago: executing program 1 (id=454):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20)
io_uring_setup(0x30aa, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000ec0), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000280))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1})

0s ago: executing program 0 (id=455):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x9}}, 0x20)
io_uring_setup(0x30aa, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000ec0), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, &(0x7f0000000280))
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts.
[   80.346311][ T5605] cgroup: Unknown subsys name 'net'
[   80.588190][ T5605] cgroup: Unknown subsys name 'cpuset'
[   80.643011][ T5605] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   82.661030][ T5605] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.370955][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.422833][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.425895][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.428016][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.428944][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   86.430588][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.434509][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.437114][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.441464][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.444011][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.446988][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   86.451818][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.454327][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.458718][ T4934] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.466596][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.467284][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.468201][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.469867][ T4934] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.475205][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.476744][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.506707][ T4934] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.524776][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.529252][ T4934] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.575802][ T4934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.577769][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.020199][    T9] cfg80211: failed to load regulatory.db
[   88.544106][ T5622] Bluetooth: hci0: command tx timeout
[   88.623062][ T5622] Bluetooth: hci4: command tx timeout
[   88.623545][ T5625] Bluetooth: hci1: command tx timeout
[   88.624970][ T4934] Bluetooth: hci3: command tx timeout
[   88.703044][ T5622] Bluetooth: hci2: command tx timeout
[   89.469091][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.469335][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.469499][ T5619] bridge_slave_0: entered allmulticast mode
[   89.474808][ T5619] bridge_slave_0: entered promiscuous mode
[   89.519143][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.519346][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.519500][ T5620] bridge_slave_0: entered allmulticast mode
[   89.521541][ T5620] bridge_slave_0: entered promiscuous mode
[   89.555220][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.555421][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.555795][ T5619] bridge_slave_1: entered allmulticast mode
[   89.559479][ T5619] bridge_slave_1: entered promiscuous mode
[   89.603168][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.603486][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.603784][ T5620] bridge_slave_1: entered allmulticast mode
[   89.605850][ T5620] bridge_slave_1: entered promiscuous mode
[   89.648116][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.648334][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.648500][ T5621] bridge_slave_0: entered allmulticast mode
[   89.650429][ T5621] bridge_slave_0: entered promiscuous mode
[   89.655954][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.656237][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.656490][ T5617] bridge_slave_0: entered allmulticast mode
[   89.660402][ T5617] bridge_slave_0: entered promiscuous mode
[   89.708855][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.709081][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.709272][ T5618] bridge_slave_0: entered allmulticast mode
[   89.711276][ T5618] bridge_slave_0: entered promiscuous mode
[   89.741037][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.741368][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.742024][ T5621] bridge_slave_1: entered allmulticast mode
[   89.746417][ T5621] bridge_slave_1: entered promiscuous mode
[   89.748829][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.749111][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.751347][ T5617] bridge_slave_1: entered allmulticast mode
[   89.756504][ T5617] bridge_slave_1: entered promiscuous mode
[   89.790148][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.790447][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.790698][ T5618] bridge_slave_1: entered allmulticast mode
[   89.794891][ T5618] bridge_slave_1: entered promiscuous mode
[   89.808908][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.861009][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.884206][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.924634][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.968006][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.976339][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.008847][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   90.035852][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.039470][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.078495][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   90.081396][ T5619] team0: Port device team_slave_0 added
[   90.121872][ T5620] team0: Port device team_slave_0 added
[   90.154484][ T5619] team0: Port device team_slave_1 added
[   90.191876][ T5620] team0: Port device team_slave_1 added
[   90.233520][ T5621] team0: Port device team_slave_0 added
[   90.248311][ T5617] team0: Port device team_slave_0 added
[   90.277405][ T5618] team0: Port device team_slave_0 added
[   90.299732][ T5621] team0: Port device team_slave_1 added
[   90.305438][ T5617] team0: Port device team_slave_1 added
[   90.330532][ T5618] team0: Port device team_slave_1 added
[   90.332093][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.332104][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.332121][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.395876][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.395890][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.395907][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.420526][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.420543][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.420569][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.481218][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.481235][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.481260][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.532901][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.532919][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.532943][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.536642][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.536658][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.536683][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.563714][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.563731][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.563755][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.567495][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.567508][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.567532][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.570192][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.570204][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.570228][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.586320][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.586336][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.586361][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.622718][ T5622] Bluetooth: hci0: command tx timeout
[   90.702474][ T4934] Bluetooth: hci3: command tx timeout
[   90.702510][ T4934] Bluetooth: hci1: command tx timeout
[   90.702655][ T5622] Bluetooth: hci4: command tx timeout
[   90.782940][ T5622] Bluetooth: hci2: command tx timeout
[   90.784741][ T5619] hsr_slave_0: entered promiscuous mode
[   90.787247][ T5619] hsr_slave_1: entered promiscuous mode
[   90.850298][ T5620] hsr_slave_0: entered promiscuous mode
[   90.851621][ T5620] hsr_slave_1: entered promiscuous mode
[   90.854214][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   90.854314][ T5620] Cannot create hsr debugfs directory
[   91.535368][ T5621] hsr_slave_0: entered promiscuous mode
[   91.536719][ T5621] hsr_slave_1: entered promiscuous mode
[   91.537755][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[   91.537780][ T5621] Cannot create hsr debugfs directory
[   91.546904][ T5617] hsr_slave_0: entered promiscuous mode
[   91.548989][ T5617] hsr_slave_1: entered promiscuous mode
[   91.554258][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   91.554284][ T5617] Cannot create hsr debugfs directory
[   91.569470][ T5618] hsr_slave_0: entered promiscuous mode
[   91.571636][ T5618] hsr_slave_1: entered promiscuous mode
[   91.574200][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[   91.574224][ T5618] Cannot create hsr debugfs directory
[   92.517132][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   92.566092][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.570998][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   92.610682][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.622624][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   92.647881][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.676952][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   92.696504][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   92.702976][ T5622] Bluetooth: hci0: command tx timeout
[   92.783336][ T5622] Bluetooth: hci4: command tx timeout
[   92.783372][ T5622] Bluetooth: hci1: command tx timeout
[   92.783396][ T5622] Bluetooth: hci3: command tx timeout
[   92.838313][ T5620] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   92.862422][ T5625] Bluetooth: hci2: command tx timeout
[   92.868686][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   92.878718][ T5620] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   92.905990][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   92.917643][ T5620] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   92.948260][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   92.972915][ T5620] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.009491][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.150650][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   93.200046][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.219721][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   93.259069][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.269502][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.299834][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.331989][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.378216][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.536908][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.569340][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   93.598135][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.638224][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   93.645420][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.689022][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   93.727379][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.769518][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   93.832025][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.936212][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.978360][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   94.003819][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   94.038271][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   94.052109][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   94.099433][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   94.105433][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   94.137190][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   94.151710][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   94.240879][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.241310][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.328503][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.328737][ T1565] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.370079][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.510540][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   94.550582][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.580675][ T1632] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.580833][ T1632] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.640654][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.640847][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.726638][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   94.792528][ T5625] Bluetooth: hci0: command tx timeout
[   94.821306][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.838494][   T44] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.838785][   T44] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.863908][ T5625] Bluetooth: hci3: command tx timeout
[   94.863946][ T5625] Bluetooth: hci1: command tx timeout
[   94.863969][ T5625] Bluetooth: hci4: command tx timeout
[   94.952464][ T5622] Bluetooth: hci2: command tx timeout
[   94.956649][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.956924][ T1565] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.079095][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   95.114874][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.149196][ T1632] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.149317][ T1632] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.250127][ T1632] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.250311][ T1632] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.406599][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[   95.531461][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.531751][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.691705][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.696253][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.825047][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.866150][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.307740][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.385831][ T5619] veth0_vlan: entered promiscuous mode
[   97.527908][ T5619] veth1_vlan: entered promiscuous mode
[   97.662855][ T5620] veth0_vlan: entered promiscuous mode
[   97.699239][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.759440][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.776351][ T5620] veth1_vlan: entered promiscuous mode
[   97.857868][ T5621] veth0_vlan: entered promiscuous mode
[   97.893710][ T5619] veth0_macvtap: entered promiscuous mode
[   97.936556][ T5619] veth1_macvtap: entered promiscuous mode
[   97.947334][ T5621] veth1_vlan: entered promiscuous mode
[   98.065833][ T5620] veth0_macvtap: entered promiscuous mode
[   98.076863][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.106604][ T5617] veth0_vlan: entered promiscuous mode
[   98.120501][ T5620] veth1_macvtap: entered promiscuous mode
[   98.137158][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.154777][ T5618] veth0_vlan: entered promiscuous mode
[   98.201696][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.227750][ T5617] veth1_vlan: entered promiscuous mode
[   98.239708][ T1632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.257214][ T1632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.259572][ T5621] veth0_macvtap: entered promiscuous mode
[   98.278454][ T1632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.282142][ T5618] veth1_vlan: entered promiscuous mode
[   98.319284][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.321361][ T5621] veth1_macvtap: entered promiscuous mode
[   98.420152][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.556420][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.649722][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.688744][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.715434][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.719129][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.901672][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.909742][ T5617] veth0_macvtap: entered promiscuous mode
[   99.104082][ T5617] veth1_macvtap: entered promiscuous mode
[   99.112128][ T1632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.138258][ T5618] veth0_macvtap: entered promiscuous mode
[   99.155885][ T1632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.213259][ T1632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.251709][ T3419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.251731][ T3419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.271222][ T1632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.309439][ T5618] veth1_macvtap: entered promiscuous mode
[   99.469991][ T1632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.470016][ T1632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.523804][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.681502][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.690971][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.690991][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.793391][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.860102][ T1029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.874013][ T1565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.874035][ T1565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.900709][ T1029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.922018][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.939751][ T1029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.032047][ T1029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.081273][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.081295][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.160990][ T3419] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.187275][ T3419] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.193951][ T3419] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.319475][ T3419] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.654643][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.654666][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.256174][ T5816] loop0: detected capacity change from 0 to 1024
[  101.346300][ T5816] EXT4-fs: Ignoring removed nomblk_io_submit option
[  101.614655][ T1565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.614678][ T1565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.847708][ T5815] loop4: detected capacity change from 0 to 32768
[  101.870591][ T5816] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102]
[  101.870756][ T5816] System zones: 0-1, 3-12
[  101.966439][ T1565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.966461][ T1565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.011832][ T5816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.047796][ T5822] loop2: detected capacity change from 0 to 8
[  103.554208][ T5815] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.659937][   T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.659963][   T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.985614][ T5815] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop4": -EINTR
[  103.998784][ T5815] XFS (loop4): log mount failed
[  104.220259][ T5620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.313751][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.313775][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.721763][ T5752] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  105.065884][ T5752] usb 3-1: Using ep0 maxpacket: 16
[  105.209551][ T5752] usb 3-1: device descriptor read/all, error -71
[  105.288977][ T5836] loop1: detected capacity change from 0 to 1024
[  105.295569][ T5836] EXT4-fs: Ignoring removed mblk_io_submit option
[  105.660530][ T5836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.750801][ T5617] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.845964][ T5856] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET)
[  106.954189][ T5848] loop4: detected capacity change from 0 to 128
[  107.023505][ T5848] udf: Unknown parameter '0xffffffffffffffff00000000000000000000ÿÿÿÿÿÿÿÿ00000000000000000000'
[  107.052337][ T5834] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  107.250323][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  107.250362][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  107.250410][ T5834] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  107.250436][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.393492][ T5834] usb 4-1: config 0 descriptor??
[  107.638987][ T5862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'.
[  110.288388][ T5834] logitech 0003:046D:CA03.0001: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0
[  110.288426][ T5834] logitech 0003:046D:CA03.0001: no inputs found
[  110.791907][ T5834] usb 4-1: USB disconnect, device number 2
[  111.447001][ T5875] fido_id[5875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  114.521099][ T5903] warning: `syz.3.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  116.585563][ T5904] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  117.388620][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.418229][ T5907] batadv_slave_1: entered promiscuous mode
[  121.367595][ T5897] syz.0.23 (5897) used greatest stack depth: 18968 bytes left
[  121.909092][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'.
[  122.070628][ T5935] loop4: detected capacity change from 0 to 256
[  122.348983][ T5936] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  122.521996][ T5935] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  123.457983][   T38] audit: type=1800 audit(1781069809.252:2): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.34" name="bus" dev="loop4" ino=1048605 res=0 errno=0
[  123.661721][ T5949] loop0: detected capacity change from 0 to 256
[  123.852452][ T5631] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  124.056220][ T5631] usb 4-1: Using ep0 maxpacket: 32
[  124.061522][ T5631] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  124.061545][ T5631] usb 4-1: config 0 has no interface number 0
[  124.080302][ T5631] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  124.080333][ T5631] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.080352][ T5631] usb 4-1: Product: syz
[  124.080366][ T5631] usb 4-1: Manufacturer: syz
[  124.080380][ T5631] usb 4-1: SerialNumber: syz
[  124.190016][ T5631] usb 4-1: config 0 descriptor??
[  124.215210][ T5949] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  124.258099][ T5631] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  124.940515][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  124.980845][ T5631] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  125.025176][ T5631] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  125.231485][ T5631] usb 4-1: USB disconnect, device number 3
[  127.097396][ T5970] loop1: detected capacity change from 0 to 64
[  127.960601][ T5968] Zero length message leads to an empty skb
[  128.512681][ T5631] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  128.727440][ T5631] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  128.741826][ T5631] quatech2 4-1:0.51: device disconnected
[  129.281003][ T5974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  129.345255][ T5978] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  131.318440][ T6000] loop4: detected capacity change from 0 to 256
[  131.361000][ T6000] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  131.525508][ T5998] loop0: detected capacity change from 0 to 1024
[  132.712797][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'.
[  132.712824][ T6004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'.
[  132.992093][ T6004] geneve2: entered promiscuous mode
[  132.992121][ T6004] geneve2: entered allmulticast mode
[  133.040278][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  133.040455][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  133.251165][ T6010] loop4: detected capacity change from 0 to 64
[  135.017974][ T6021] loop3: detected capacity change from 0 to 256
[  135.765120][ T6025] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  136.004730][ T6021] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  136.039873][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.127559][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'.
[  139.037351][ T6053] loop0: detected capacity change from 0 to 1024
[  139.080158][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'.
[  139.080198][ T6057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.74'.
[  139.546036][ T6057] geneve2: entered promiscuous mode
[  139.546120][ T6057] geneve2: entered allmulticast mode
[  140.203462][ T6065] loop4: detected capacity change from 0 to 128
[  140.648259][ T6053] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  141.683591][ T6078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'.
[  142.272951][ T6084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  142.320843][ T6089] loop3: detected capacity change from 0 to 256
[  142.353122][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  142.358721][ T6089] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  142.512358][ T5858] usb 5-1: Using ep0 maxpacket: 16
[  142.517706][ T5858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.517766][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  142.558569][ T5858] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14
[  142.558638][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.558660][ T5858] usb 5-1: Product: syz
[  142.558676][ T5858] usb 5-1: Manufacturer: syz
[  142.558692][ T5858] usb 5-1: SerialNumber: syz
[  142.609597][ T5858] usb 5-1: config 0 descriptor??
[  142.834022][ T5858] usb 5-1: USB disconnect, device number 2
[  143.374785][ T6103] loop0: detected capacity change from 0 to 64
[  143.526114][ T5909] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  143.723735][ T5909] usb 4-1: Using ep0 maxpacket: 8
[  143.740930][ T5909] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  143.740974][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.740996][ T5909] usb 4-1: Product: syz
[  143.741012][ T5909] usb 4-1: Manufacturer: syz
[  143.741027][ T5909] usb 4-1: SerialNumber: syz
[  144.142226][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  144.162246][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  144.172226][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  144.182219][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  144.192226][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  144.202217][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  144.212219][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  144.222212][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  144.232217][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  144.242219][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  146.296200][ T5909] usb 4-1: config 0 descriptor??
[  146.439591][ T5909] usb 4-1: can't set config #0, error -71
[  146.447346][ T5909] usb 4-1: USB disconnect, device number 4
[  146.646126][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'.
[  147.138251][ T6128] loop2: detected capacity change from 0 to 256
[  147.146006][ T6128] vfat: Deprecated parameter 'posix'
[  147.146026][ T6128] FAT-fs: "posix" option is obsolete, not supported now
[  147.473647][ T6130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.088911][ T6143] loop4: detected capacity change from 0 to 256
[  151.026303][ T6166] loop1: detected capacity change from 0 to 1024
[  152.353849][ T6179] loop0: detected capacity change from 0 to 64
[  153.761318][ T6187] loop4: detected capacity change from 0 to 64
[  154.451348][ T6195] loop0: detected capacity change from 0 to 256
[  154.740949][ T6195] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  155.234967][ T6202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.124'.
[  157.882738][ T6213] loop3: detected capacity change from 0 to 40427
[  157.939500][ T6213] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  157.939534][ T6213] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  157.994702][ T6213] F2FS-fs (loop3): invalid crc value
[  158.147874][ T6213] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  158.210751][ T6213] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  158.211064][ T6213] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  159.466719][ T6230] loop2: detected capacity change from 0 to 64
[  160.546381][ T6231] loop4: detected capacity change from 0 to 128
[  160.969415][ T6233] loop1: detected capacity change from 0 to 64
[  161.269004][ T6237] loop0: detected capacity change from 0 to 256
[  161.281897][ T6237] vfat: Deprecated parameter 'posix'
[  161.281918][ T6237] FAT-fs: "posix" option is obsolete, not supported now
[  163.497194][ T6261] loop4: detected capacity change from 0 to 512
[  163.755414][ T6267] loop1: detected capacity change from 0 to 64
[  164.978595][ T6261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.048888][ T6270] netlink: 80 bytes leftover after parsing attributes in process `syz.3.135'.
[  165.328860][ T6275] loop3: detected capacity change from 0 to 64
[  165.519938][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.268298][ T6293] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  166.992108][ T6300] loop3: detected capacity change from 0 to 64
[  169.200017][ T6326] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  169.683302][ T6331] loop4: detected capacity change from 0 to 1024
[  169.701083][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'.
[  169.701120][ T6333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.172'.
[  169.821485][ T6333] geneve2: entered promiscuous mode
[  169.821511][ T6333] geneve2: entered allmulticast mode
[  170.298801][ T6340] loop3: detected capacity change from 0 to 64
[  172.758657][ T6370] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  173.158601][ T6373] loop3: detected capacity change from 0 to 1024
[  173.179198][ T6375] loop2: detected capacity change from 0 to 64
[  173.910348][ T6385] loop1: detected capacity change from 0 to 64
[  175.129365][ T6390] loop0: detected capacity change from 0 to 256
[  175.244461][ T6390] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  177.691567][ T6416] loop3: detected capacity change from 0 to 1024
[  178.135697][ T6424] loop2: detected capacity change from 0 to 64
[  179.333462][ T6310] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  179.549453][ T6434] loop4: detected capacity change from 0 to 256
[  179.572767][ T6434] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  179.580125][ T6310] usb 2-1: Using ep0 maxpacket: 32
[  179.629865][ T6310] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  179.629896][ T6310] usb 2-1: config 0 has no interface number 0
[  179.665305][ T6310] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  179.665339][ T6310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.665360][ T6310] usb 2-1: Product: syz
[  179.665376][ T6310] usb 2-1: Manufacturer: syz
[  179.665392][ T6310] usb 2-1: SerialNumber: syz
[  179.855600][ T6310] usb 2-1: config 0 descriptor??
[  179.930647][ T6310] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  181.154637][ T6310] usb 2-1: qt2_attach - failed to power on unit: -71
[  181.154922][ T6310] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  181.363803][ T6310] usb 2-1: USB disconnect, device number 2
[  182.043721][ T6449] loop2: detected capacity change from 0 to 1024
[  182.195894][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'.
[  182.195933][ T6456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.215'.
[  182.671120][ T6466] loop0: detected capacity change from 0 to 64
[  184.302106][ T6471] netlink: 80 bytes leftover after parsing attributes in process `syz.4.220'.
[  186.702763][ T6490] loop4: detected capacity change from 0 to 256
[  186.745806][ T6491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'.
[  186.779015][ T6490] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  187.022519][ T5631] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  187.172268][ T5631] usb 1-1: Using ep0 maxpacket: 32
[  187.176480][ T5631] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  187.176512][ T5631] usb 1-1: config 0 has no interface number 0
[  187.215185][ T5631] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  187.215219][ T5631] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.215241][ T5631] usb 1-1: Product: syz
[  187.215258][ T5631] usb 1-1: Manufacturer: syz
[  187.215273][ T5631] usb 1-1: SerialNumber: syz
[  187.240943][ T5631] usb 1-1: config 0 descriptor??
[  187.287211][ T6500] loop1: detected capacity change from 0 to 1024
[  187.459992][ T5631] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  187.541088][ T6503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.230'.
[  190.255569][ T6510] loop4: detected capacity change from 0 to 64
[  191.250184][ T5631] usb 1-1: qt2_attach - failed to power on unit: -71
[  191.250500][ T5631] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71
[  191.259912][ T5631] usb 1-1: USB disconnect, device number 2
[  191.542869][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'.
[  191.675651][ T6517] netlink: 80 bytes leftover after parsing attributes in process `syz.4.234'.
[  191.804868][ T6519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'.
[  192.522818][ T6516] loop0: detected capacity change from 0 to 1024
[  194.802067][ T6536] loop2: detected capacity change from 0 to 131072
[  194.831478][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  194.831595][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  194.833987][ T6536] F2FS-fs (loop2): invalid crc value
[  195.040611][ T6536] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  195.101580][ T6536] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  195.429763][ T6543] loop3: detected capacity change from 0 to 40427
[  195.433611][ T6543] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  195.433640][ T6543] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  195.449258][ T6543] F2FS-fs (loop3): invalid crc value
[  195.574887][ T6543] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  195.601119][ T6543] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  195.601157][ T6543] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  197.017999][ T6562] loop0: detected capacity change from 0 to 256
[  197.110807][ T6562] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  197.202324][ T5001] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  197.353200][ T5001] usb 5-1: Using ep0 maxpacket: 8
[  197.358800][ T5001] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  197.358833][ T5001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.358854][ T5001] usb 5-1: Product: syz
[  197.358870][ T5001] usb 5-1: Manufacturer: syz
[  197.358884][ T5001] usb 5-1: SerialNumber: syz
[  197.427157][ T5001] usb 5-1: config 0 descriptor??
[  197.511128][ T5001] gspca_main: se401-2.14.0 probing 047d:5003
[  198.319920][ T5001] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[  198.506028][ T5001] usb 5-1: USB disconnect, device number 3
[  198.887697][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'.
[  201.216165][ T6585] loop2: detected capacity change from 0 to 64
[  204.321553][ T6599] loop0: detected capacity change from 0 to 256
[  204.535161][ T6599] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  204.858295][ T6604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.322968][  T835] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  207.495503][ T6622] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'.
[  208.922870][  T835] usb 4-1: Using ep0 maxpacket: 16
[  210.771802][  T835] usb 4-1: device descriptor read/all, error -71
[  211.087736][ T6632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.272'.
[  212.026436][   T60] Bluetooth: hci2: command 0x0406 tx timeout
[  212.026495][   T60] Bluetooth: hci4: command 0x0406 tx timeout
[  212.026634][   T60] Bluetooth: hci0: command 0x0406 tx timeout
[  212.026658][   T60] Bluetooth: hci1: command 0x0406 tx timeout
[  212.026681][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[  215.030994][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.276'.
[  215.315641][ T6645] loop0: detected capacity change from 0 to 64
[  219.783354][   T37] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  220.637058][ T6671] loop2: detected capacity change from 0 to 131072
[  221.380001][ T6671] F2FS-fs (loop2): Test dummy encryption mode enabled
[  221.404971][ T6671] F2FS-fs (loop2): invalid crc value
[  221.617870][ T6671] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  221.672310][   T37] usb 1-1: device not accepting address 3, error -71
[  221.777793][ T6671] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  221.851086][ T6676] loop4: detected capacity change from 0 to 40427
[  221.853587][ T6676] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  221.853614][ T6676] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  221.859987][ T6676] F2FS-fs (loop4): invalid crc value
[  221.943580][ T6676] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  221.953739][ T6676] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  221.953770][ T6676] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  223.687737][ T6692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.291'.
[  223.833740][ T6691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.289'.
[  226.079140][ T6701] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  226.900914][ T6711] loop0: detected capacity change from 0 to 64
[  230.296354][ T5909] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  231.058590][ T5909] usb 2-1: Using ep0 maxpacket: 16
[  231.072030][ T5909] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  231.072052][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  231.115352][ T5909] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14
[  231.115398][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.115419][ T5909] usb 2-1: Product: syz
[  231.115434][ T5909] usb 2-1: Manufacturer: syz
[  231.115450][ T5909] usb 2-1: SerialNumber: syz
[  231.197037][ T5909] usb 2-1: config 0 descriptor??
[  231.198337][ T6713] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  232.068669][ T5909] usb 2-1: USB disconnect, device number 3
[  232.684721][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'.
[  232.939362][ T6728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.777716][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.0.304'.
[  233.902551][ T6737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'.
[  235.227596][ T6754] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  235.934871][ T6764] =======================================================
[  235.934871][ T6764] WARNING: The mand mount option has been deprecated and
[  235.934871][ T6764]          and is ignored by this kernel. Remove the mand
[  235.934871][ T6764]          option from the mount to silence this warning.
[  235.934871][ T6764] =======================================================
[  236.032214][ T6764] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  236.788035][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.314'.
[  236.795694][ T6768] loop3: detected capacity change from 0 to 256
[  236.923273][ T6768] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  236.993175][   T38] audit: type=1800 audit(1781069922.892:3): pid=6768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.315" name="bus" dev="loop3" ino=1048615 res=0 errno=0
[  238.440265][ T6775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.652439][ T6779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.319'.
[  240.692091][ T6797] loop0: detected capacity change from 0 to 1024
[  241.200913][ T6805] syzkaller0: entered promiscuous mode
[  241.200944][ T6805] syzkaller0: entered allmulticast mode
[  241.357963][ T6810] loop1: detected capacity change from 0 to 256
[  241.399556][ T6810] vfat: Deprecated parameter 'posix'
[  241.399580][ T6810] FAT-fs: "posix" option is obsolete, not supported now
[  243.229598][ T6820] Bluetooth: MGMT ver 1.23
[  243.229638][ T6820] Bluetooth: hci0: invalid length 0, exp 2 for type 11
[  243.569146][ T6828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'.
[  246.027645][ T6838] loop2: detected capacity change from 0 to 128
[  246.890300][ T6846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.015795][ T6846] batadv_slave_1: entered promiscuous mode
[  247.461178][ T6851] loop4: detected capacity change from 0 to 256
[  247.466722][ T6851] vfat: Deprecated parameter 'posix'
[  247.466742][ T6851] FAT-fs: "posix" option is obsolete, not supported now
[  247.567817][ T6847] loop1: detected capacity change from 0 to 1024
[  248.544322][ T6858] loop2: detected capacity change from 0 to 256
[  248.605626][ T6858] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  249.181916][ T6867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.347'.
[  251.282750][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[  251.282788][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.351'.
[  251.537935][ T6884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  251.538388][ T6884] batadv_slave_1: entered promiscuous mode
[  252.070014][ T6887] loop2: detected capacity change from 0 to 40427
[  252.074066][ T6887] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  252.074096][ T6887] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  252.137888][ T6887] F2FS-fs (loop2): invalid crc value
[  252.258272][ T6887] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  252.286082][ T6887] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  252.286139][ T6887] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  252.345971][ T6889] loop3: detected capacity change from 0 to 1024
[  254.512840][ T6889] hfsplus: failed to load root directory
[  255.476738][ T6913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.361'.
[  255.877297][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'.
[  255.877337][ T6924] netlink: 20 bytes leftover after parsing attributes in process `syz.0.366'.
[  255.913964][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  255.926956][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  256.200529][ T6924] geneve2: entered promiscuous mode
[  256.200568][ T6924] geneve2: entered allmulticast mode
[  256.826509][ T6930] loop4: detected capacity change from 0 to 40427
[  256.853255][ T6930] F2FS-fs (loop4): invalid crc value
[  256.926307][ T6936] loop2: detected capacity change from 0 to 256
[  256.930859][ T6936] vfat: Deprecated parameter 'posix'
[  256.930880][ T6936] FAT-fs: "posix" option is obsolete, not supported now
[  256.968567][ T6930] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  256.978880][ T6930] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0
[  256.978907][ T6930] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  256.978996][ T6930] F2FS-fs (loop4): Start checkpoint disabled!
[  257.031574][ T6930] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0
[  257.035010][ T6930] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  257.817938][ T6937] loop3: detected capacity change from 0 to 1024
[  259.861670][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'.
[  259.881327][ T3404] kworker/u8:21: attempt to access beyond end of device
[  259.881327][ T3404] loop4: rw=1, sector=77824, nr_sectors = 4096 limit=40427
[  259.949396][ T3404] kworker/u8:21: attempt to access beyond end of device
[  259.949396][ T3404] loop4: rw=1, sector=49152, nr_sectors = 4096 limit=40427
[  260.343384][ T3404] kworker/u8:21: attempt to access beyond end of device
[  260.343384][ T3404] loop4: rw=1, sector=57344, nr_sectors = 8192 limit=40427
[  260.635530][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.1.381'.
[  260.920818][ T3404] kworker/u8:21: attempt to access beyond end of device
[  260.920818][ T3404] loop4: rw=1, sector=69632, nr_sectors = 4096 limit=40427
[  261.261358][ T3404] kworker/u8:21: attempt to access beyond end of device
[  261.261358][ T3404] loop4: rw=1, sector=73728, nr_sectors = 8 limit=40427
[  261.277339][ T3404] kworker/u8:21: attempt to access beyond end of device
[  261.277339][ T3404] loop4: rw=1, sector=73736, nr_sectors = 8 limit=40427
[  261.277687][ T3404] kworker/u8:21: attempt to access beyond end of device
[  261.277687][ T3404] loop4: rw=1, sector=73744, nr_sectors = 8 limit=40427
[  261.277958][ T3404] kworker/u8:21: attempt to access beyond end of device
[  261.277958][ T3404] loop4: rw=1, sector=73752, nr_sectors = 8 limit=40427
[  261.279883][ T3404] kworker/u8:21: attempt to access beyond end of device
[  261.279883][ T3404] loop4: rw=1, sector=73760, nr_sectors = 8 limit=40427
[  261.280164][ T3404] kworker/u8:21: attempt to access beyond end of device
[  261.280164][ T3404] loop4: rw=1, sector=73768, nr_sectors = 8 limit=40427
[  261.572419][ T6976] loop3: detected capacity change from 0 to 64
[  263.232448][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  263.394581][    T9] usb 2-1: Using ep0 maxpacket: 32
[  263.403769][    T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  263.403799][    T9] usb 2-1: config 0 has no interface number 0
[  263.428497][    T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  263.428532][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.428554][    T9] usb 2-1: Product: syz
[  263.428570][    T9] usb 2-1: Manufacturer: syz
[  263.428585][    T9] usb 2-1: SerialNumber: syz
[  263.465459][    T9] usb 2-1: config 0 descriptor??
[  263.635588][    T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  263.955080][ T6988] loop0: detected capacity change from 0 to 1024
[  264.100172][ T3404] CPU: 1 UID: 0 PID: 3404 Comm: kworker/u8:21 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  264.100203][ T3404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  264.100215][ T3404] Workqueue: writeback wb_workfn (flush-7:4)
[  264.100253][ T3404] Call Trace:
[  264.100261][ T3404]  <TASK>
[  264.100268][ T3404]  dump_stack_lvl+0xe8/0x150
[  264.100296][ T3404]  f2fs_stop_checkpoint+0x3ef/0x5d0
[  264.100329][ T3404]  f2fs_write_end_io+0x1274/0x1740
[  264.100369][ T3404]  __submit_merged_bio+0x256/0x6a0
[  264.100404][ T3404]  f2fs_submit_page_write+0x2354/0x24f0
[  264.100455][ T3404]  ? f2fs_allocate_data_block+0x2c93/0x4130
[  264.100490][ T3404]  ? __pfx_f2fs_submit_page_write+0x10/0x10
[  264.100522][ T3404]  ? __f2fs_is_valid_blkaddr+0xd2d/0x1570
[  264.100549][ T3404]  do_write_page+0x40f/0xab0
[  264.100580][ T3404]  f2fs_outplace_write_data+0x11a/0x220
[  264.100609][ T3404]  f2fs_do_write_data_page+0x123b/0x16f0
[  264.100627][ T3404]  ? reacquire_held_locks+0x104/0x190
[  264.100658][ T3404]  ? __pfx_f2fs_do_write_data_page+0x10/0x10
[  264.100675][ T3404]  ? __lock_acquire+0x6b5/0x2d10
[  264.100703][ T3404]  ? __lock_acquire+0x6b5/0x2d10
[  264.100747][ T3404]  f2fs_write_single_data_page+0x976/0x1880
[  264.100784][ T3404]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  264.100822][ T3404]  ? folio_clear_dirty_for_io+0x1d4/0x820
[  264.100852][ T3404]  ? folio_clear_dirty_for_io+0x1d4/0x820
[  264.100877][ T3404]  ? folio_clear_dirty_for_io+0x649/0x820
[  264.100908][ T3404]  f2fs_write_data_pages+0x1a42/0x34f0
[  264.100930][ T3404]  ? unwind_next_frame+0xa6/0x2550
[  264.100996][ T3404]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  264.101069][ T3404]  ? __lock_acquire+0x6b5/0x2d10
[  264.101130][ T3404]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  264.101150][ T3404]  do_writepages+0x32e/0x550
[  264.101180][ T3404]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  264.101206][ T3404]  ? reacquire_held_locks+0x104/0x190
[  264.101224][ T3404]  ? rt_spin_lock+0x1e0/0x400
[  264.101260][ T3404]  __writeback_single_inode+0x133/0x10e0
[  264.101283][ T3404]  ? rt_spin_unlock+0x160/0x200
[  264.101311][ T3404]  writeback_sb_inodes+0x97f/0x1980
[  264.101349][ T3404]  ? lockdep_hardirqs_on+0x7a/0x110
[  264.101378][ T3404]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  264.101448][ T3404]  ? rcu_is_watching+0x15/0xb0
[  264.101476][ T3404]  wb_writeback+0x445/0xb00
[  264.101499][ T3404]  ? queue_io+0x261/0x440
[  264.101524][ T3404]  ? __pfx_wb_writeback+0x10/0x10
[  264.101561][ T3404]  wb_workfn+0x437/0x10f0
[  264.101609][ T3404]  ? __pfx_wb_workfn+0x10/0x10
[  264.101649][ T3404]  ? do_raw_spin_lock+0x12b/0x2f0
[  264.101673][ T3404]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  264.101696][ T3404]  ? process_one_work+0x8be/0x1630
[  264.101714][ T3404]  ? process_one_work+0x8be/0x1630
[  264.101742][ T3404]  ? process_one_work+0x8be/0x1630
[  264.101757][ T3404]  process_one_work+0x98b/0x1630
[  264.101796][ T3404]  ? __pfx_process_one_work+0x10/0x10
[  264.101811][ T3404]  ? do_raw_spin_lock+0x12b/0x2f0
[  264.101849][ T3404]  worker_thread+0xb49/0x1140
[  264.101894][ T3404]  kthread+0x388/0x470
[  264.101916][ T3404]  ? __pfx_worker_thread+0x10/0x10
[  264.101932][ T3404]  ? __pfx_kthread+0x10/0x10
[  264.101956][ T3404]  ret_from_fork+0x514/0xb70
[  264.101982][ T3404]  ? __pfx_ret_from_fork+0x10/0x10
[  264.102004][ T3404]  ? __switch_to+0xc79/0x1410
[  264.102026][ T3404]  ? __pfx_kthread+0x10/0x10
[  264.102050][ T3404]  ret_from_fork_asm+0x1a/0x30
[  264.102091][ T3404]  </TASK>
[  264.139187][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  264.155981][    T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  264.301943][    T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  264.312287][ T3404] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  264.419819][    T9] usb 2-1: USB disconnect, device number 4
[  264.605066][ T5733] loop4: lost filesystem error report for type 5 error -108
[  264.775316][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  264.838686][ T6994] loop3: detected capacity change from 0 to 256
[  264.855469][ T6994] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  265.081224][   T38] audit: type=1800 audit(1781069950.972:4): pid=6997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.389" name="bus" dev="loop3" ino=1048617 res=0 errno=0
[  265.725408][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  265.726456][    T9] quatech2 2-1:0.51: device disconnected
[  266.031829][ T7000] loop1: detected capacity change from 0 to 4096
[  266.399751][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.394'.
[  268.547592][ T7019] loop0: detected capacity change from 0 to 40427
[  268.552155][ T7019] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  268.552185][ T7019] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  268.558323][ T7019] F2FS-fs (loop0): invalid crc value
[  268.665608][ T7019] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  268.680845][ T7019] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  268.680877][ T7019] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  269.037903][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'.
[  269.037942][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.400'.
[  269.232273][ T7029] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.056250][ T7033] loop3: detected capacity change from 0 to 2048
[  270.365065][    T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  270.547149][    T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  270.547184][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.547205][    T9] usb 5-1: Product: syz
[  270.547221][    T9] usb 5-1: Manufacturer: syz
[  270.547237][    T9] usb 5-1: SerialNumber: syz
[  270.679985][ T7033] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  270.687733][    T9] usb 5-1: config 0 descriptor??
[  270.939100][    T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  273.062870][ T7046] loop0: detected capacity change from 0 to 1024
[  273.349164][    T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  273.376054][    T9] usb 5-1: USB disconnect, device number 4
[  274.551423][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.410'.
[  275.180719][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'.
[  275.180759][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.412'.
[  276.701424][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  276.746282][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  276.750838][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  276.779313][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  276.794347][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  277.176451][ T7073] loop1: detected capacity change from 0 to 256
[  277.198910][ T7073] vfat: Deprecated parameter 'posix'
[  277.198932][ T7073] FAT-fs: "posix" option is obsolete, not supported now
[  277.649099][ T7076] loop2: detected capacity change from 0 to 40427
[  277.693390][ T7076] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  277.693420][ T7076] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  277.706837][ T7076] F2FS-fs (loop2): invalid crc value
[  277.918733][ T7076] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  277.953398][ T7076] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  277.953433][ T7076] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  278.962554][ T5622] Bluetooth: hci5: command tx timeout
[  281.103569][ T5622] Bluetooth: hci5: command tx timeout
[  281.747058][ T7098] loop1: detected capacity change from 0 to 1024
[  282.225744][ T3404] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.653601][ T3404] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  282.697004][ T7111] netlink: 'syz.2.417': attribute type 6 has an invalid length.
[  283.048894][ T3404] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.185083][ T5622] Bluetooth: hci5: command tx timeout
[  283.368027][ T3404] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  283.534076][ T7057] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.534333][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.534499][ T7057] bridge_slave_0: entered allmulticast mode
[  283.536587][ T7057] bridge_slave_0: entered promiscuous mode
[  283.541370][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.541612][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.541785][ T7057] bridge_slave_1: entered allmulticast mode
[  283.546370][ T7057] bridge_slave_1: entered promiscuous mode
[  283.607348][ T7057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.611305][ T7057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.686749][ T7057] team0: Port device team_slave_0 added
[  283.691825][ T7057] team0: Port device team_slave_1 added
[  283.743018][ T5622] Bluetooth: hci3: command 0x0406 tx timeout
[  283.794178][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.794191][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  283.794208][ T7057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.797704][ T7057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.797715][ T7057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  283.797732][ T7057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.058354][ T7057] hsr_slave_0: entered promiscuous mode
[  284.071535][ T7057] hsr_slave_1: entered promiscuous mode
[  284.081893][ T7057] debugfs: 'hsr0' already exists in 'hsr'
[  284.081922][ T7057] Cannot create hsr debugfs directory
[  284.307504][ T3404] bridge_slave_1: left allmulticast mode
[  284.307679][ T3404] bridge_slave_1: left promiscuous mode
[  284.344152][ T3404] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.573481][ T3404] bridge_slave_0: left allmulticast mode
[  284.573508][ T3404] bridge_slave_0: left promiscuous mode
[  284.573696][ T3404] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.278477][ T5622] Bluetooth: hci5: command tx timeout
[  287.360308][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'.
[  287.360344][ T7148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.428'.
[  287.774551][ T7150] loop1: detected capacity change from 0 to 40427
[  287.778203][ T7150] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  287.778233][ T7150] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  287.784162][ T7150] F2FS-fs (loop1): invalid crc value
[  287.924201][ T7150] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  287.977239][ T7150] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  287.977275][ T7150] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  288.609386][ T7160] loop3: detected capacity change from 0 to 64
[  290.305015][ T3404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.454152][ T3404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.517547][ T3404] bond0 (unregistering): Released all slaves
[  290.551302][ T7166] loop1: detected capacity change from 0 to 256
[  290.616634][ T7166] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  291.083988][   T38] audit: type=1800 audit(1781069976.982:5): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.431" name="bus" dev="loop1" ino=1048618 res=0 errno=0
[  291.891232][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1
[  292.253642][ T7174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.433'.
[  293.952369][ T5752] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  294.175524][ T7176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  294.185471][ T5752] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  294.185504][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  294.192580][ T5752] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.14
[  294.192610][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.192630][ T5752] usb 3-1: Product: syz
[  294.192644][ T5752] usb 3-1: Manufacturer: syz
[  294.192658][ T5752] usb 3-1: SerialNumber: syz
[  294.226771][ T5752] usb 3-1: config 0 descriptor??
[  294.231753][ T7175] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  294.392363][ T5733] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  294.433603][ T5752] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22
[  294.595847][ T5752] usb 3-1: USB disconnect, device number 4
[  294.815960][ T5733] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  294.815991][ T5733] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  294.816010][ T5733] usb 2-1: config 0 has no interface number 0
[  294.816053][ T5733] usb 2-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  294.847763][ T5733] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  294.847797][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.847818][ T5733] usb 2-1: Product: syz
[  294.847833][ T5733] usb 2-1: Manufacturer: syz
[  294.847849][ T5733] usb 2-1: SerialNumber: syz
[  295.850235][ T5733] usb 2-1: config 0 descriptor??
[  296.148574][ T5733] yurex 2-1:0.50: Could not find endpoints
[  296.695934][ T7195] loop0: detected capacity change from 0 to 40427
[  296.714008][ T7195] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  296.714039][ T7195] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  296.736577][ T7195] F2FS-fs (loop0): invalid crc value
[  296.858428][ T7195] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  296.942551][ T7195] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  296.942586][ T7195] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  299.156348][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.446'.
[  300.357293][ T7230] loop3: detected capacity change from 0 to 128
[  300.358030][ T7230] udf: Unknown parameter '0xffffffffffffffff00000000000000000000ÿÿÿÿÿÿÿÿ00000000000000000000'
[  300.503027][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2
[  300.805610][ T5733] usb 2-1: USB disconnect, device number 5
[  300.999086][ T7234] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  303.383433][ T5001] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  304.862989][ T7254] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  305.293411][ T5001] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  305.293449][ T5001] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  305.309857][ T5001] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.14
[  305.309888][ T5001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.309907][ T5001] usb 3-1: Product: syz
[  305.309920][ T5001] usb 3-1: Manufacturer: syz
[  305.309934][ T5001] usb 3-1: SerialNumber: syz
[  305.337049][ T5001] usb 3-1: config 0 descriptor??
[  305.363071][ T7249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  305.418213][ T5001] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22
[  305.505978][ T7256] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI
[  305.506004][ T7256] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017]
[  305.506018][ T7256] CPU: 0 UID: 0 PID: 7256 Comm: syz.0.455 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  305.506034][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  305.506042][ T7256] RIP: 0010:__schedule+0x4030/0x5550
[  305.506061][ T7256] Code: 24 80 00 00 00 e8 c0 87 fc f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98
[  305.506072][ T7256] RSP: 0018:ffffc900070f7520 EFLAGS: 00010003
[  305.506084][ T7256] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000
[  305.506093][ T7256] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60
[  305.506101][ T7256] RBP: ffffc900070f7718 R08: ffffffff8f8d5cf7 R09: 1ffffffff1f1ab9e
[  305.506110][ T7256] R10: dffffc0000000000 R11: ffffffff81999eb0 R12: ffff8880b863c658
[  305.506118][ T7256] R13: ffff888125ebb000 R14: 1ffff110170c7922 R15: 0000000000000014
[  305.506128][ T7256] FS:  00007f23853966c0(0000) GS:ffff888125ebb000(0000) knlGS:0000000000000000
[  305.506139][ T7256] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  305.506147][ T7256] CR2: 00007f2385375d58 CR3: 000000003f24c000 CR4: 00000000003526f0
[  305.506160][ T7256] Call Trace:
[  305.506165][ T7256]  <TASK>
[  305.506177][ T7256]  ? __pfx___schedule+0x10/0x10
[  305.506197][ T7256]  schedule_rtlock+0x30/0x70
[  305.506210][ T7256]  rtlock_slowlock_locked+0x3635/0x3c80
[  305.506223][ T7256]  ? __lock_acquire+0x6b5/0x2d10
[  305.506244][ T7256]  ? rtlock_slowlock_locked+0x2a8/0x3c80
[  305.506258][ T7256]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[  305.506272][ T7256]  ? rcu_is_watching+0x15/0xb0
[  305.506286][ T7256]  rt_spin_lock+0x165/0x400
[  305.506305][ T7256]  ? __pfx_rt_spin_lock+0x10/0x10
[  305.506322][ T7256]  ? rt_spin_unlock+0x14f/0x200
[  305.506340][ T7256]  ? rt_spin_unlock+0x160/0x200
[  305.506359][ T7256]  snd_rawmidi_write+0x4d5/0xc10
[  305.506377][ T7256]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  305.506390][ T7256]  ? __pfx_default_wake_function+0x10/0x10
[  305.506415][ T7256]  ? apparmor_file_permission+0x1f4/0x300
[  305.506437][ T7256]  ? rw_verify_area+0x25b/0x4e0
[  305.506453][ T7256]  vfs_writev+0x4c6/0x9a0
[  305.506464][ T7256]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  305.506482][ T7256]  ? __pfx_vfs_writev+0x10/0x10
[  305.506497][ T7256]  ? __fget_files+0x2a/0x420
[  305.506511][ T7256]  ? __fget_files+0x3a6/0x420
[  305.506523][ T7256]  ? __fget_files+0x2a/0x420
[  305.506538][ T7256]  do_writev+0x15a/0x2e0
[  305.506549][ T7256]  ? __pfx_do_writev+0x10/0x10
[  305.506563][ T7256]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.506576][ T7256]  do_syscall_64+0x174/0x580
[  305.506590][ T7256]  ? trace_irq_disable+0x3b/0x140
[  305.506606][ T7256]  ? clear_bhb_loop+0x40/0x90
[  305.506619][ T7256]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.506631][ T7256] RIP: 0033:0x7f238713ce59
[  305.506642][ T7256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  305.506652][ T7256] RSP: 002b:00007f2385396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  305.506664][ T7256] RAX: ffffffffffffffda RBX: 00007f23873b5fa0 RCX: 00007f238713ce59
[  305.506672][ T7256] RDX: 000000000000002f RSI: 0000200000000840 RDI: 0000000000000007
[  305.506687][ T7256] RBP: 00007f23871d2d6f R08: 0000000000000000 R09: 0000000000000000
[  305.506696][ T7256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  305.506709][ T7256] R13: 00007f23873b6038 R14: 00007f23873b5fa0 R15: 00007fff1744de48
[  305.506728][ T7256]  </TASK>
[  305.506734][ T7256] Modules linked in:
[  305.506746][ T7256] ---[ end trace 0000000000000000 ]---
[  305.506755][ T7256] RIP: 0010:__schedule+0x4030/0x5550
[  305.506774][ T7256] Code: 24 80 00 00 00 e8 c0 87 fc f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98
[  305.506787][ T7256] RSP: 0018:ffffc900070f7520 EFLAGS: 00010003
[  305.506800][ T7256] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000
[  305.506812][ T7256] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60
[  305.506822][ T7256] RBP: ffffc900070f7718 R08: ffffffff8f8d5cf7 R09: 1ffffffff1f1ab9e
[  305.506834][ T7256] R10: dffffc0000000000 R11: ffffffff81999eb0 R12: ffff8880b863c658
[  305.506847][ T7256] R13: ffff888125ebb000 R14: 1ffff110170c7922 R15: 0000000000000014
[  305.506859][ T7256] FS:  00007f23853966c0(0000) GS:ffff888125ebb000(0000) knlGS:0000000000000000
[  305.506873][ T7256] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  305.506885][ T7256] CR2: 00007f2385375d58 CR3: 000000003f24c000 CR4: 00000000003526f0
[  305.506903][ T7256] Kernel panic - not syncing: Fatal exception
[  306.618989][ T7256] Shutting down cpus with NMI
[  306.619187][ T7256] Kernel Offset: disabled