last executing test programs:

2m7.325642562s ago: executing program 0 (id=60):
get_mempolicy(&(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x0)

2m7.016394982s ago: executing program 0 (id=63):
mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

2m0.681975002s ago: executing program 0 (id=68):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xb, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x13}, 0x94)

2m0.613214903s ago: executing program 0 (id=78):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f00000000c0), 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x311a028, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2810000, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

2m0.458277045s ago: executing program 0 (id=81):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504002f3a6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52)

1m58.863999023s ago: executing program 0 (id=107):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

1m58.721582099s ago: executing program 32 (id=107):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

1m33.798797663s ago: executing program 2 (id=472):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x33524742, 0x0, @discrete={0x1ff}})

1m33.713687503s ago: executing program 2 (id=473):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x8100, 0x67, 0x0, &(0x7f00000002c0)="c810e19e00399da26f000000ff60", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m33.622980899s ago: executing program 2 (id=474):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4)

1m33.523358327s ago: executing program 2 (id=475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a0001000000000000e1ffff80808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}}, 0x0)

1m33.429740311s ago: executing program 2 (id=476):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1m33.293375581s ago: executing program 2 (id=478):
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0x2}})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x1, 0x5004)
ptrace$getregset(0x4204, r2, 0x204, 0x0)

1m32.209596816s ago: executing program 1 (id=487):
setresgid(0x0, 0xee00, 0x0)
setfsgid(0x0)

1m32.123214424s ago: executing program 1 (id=488):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4", 0xe}], 0x1)
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000040), 0x0)

1m32.032473349s ago: executing program 1 (id=489):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x28108c0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6284, &(0x7f000000dc00)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDTe54lnN7tdp7Z31p7PR3JmfvPMep/Jd189L08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPH97/1grRURN36eFqxEfCY6Ee2IpbJejYil1ZW8fjcinou95ng2InoLEeXt9/55OuLViPjobMTO7uZ6ufjyAfvx3T/+/Xc/PPPW3/7Qu/jfP93rvDZpvfv3f/WfPz843DYDAABA0xRFUbTS1/xz6ft9u+5OAQAzkd//iyQvP/X1r//51l/mqT/qRtcRl/YWzkt/1Gr16a2rivEeVIuI2KrepvzMYHc8AJwwW/Fx3V2gRvJvtG5EnKm7E8Bca9XdAY7Fzu7meivl26q+H6wO2vOxIEP5b7Uend8xaTrN6DEms3p8bUcnnpnQn6UZ9WGe5Pzbo/nfGLT303rHnf+sTMq/Pzj1qXFy/p3R/Eccaf4LdebfHpt/U+X8u0+Uf+cEP//lDwAAAADA6Zf//r9S8/7fhcNvyoF80v7f1Rn1AQAAAAAAAACO2mHH/3vE+H8AAAAwt8rv6qXfnN1fNulabOXy662Ip0bWBxomnSyzXHc/AAAAAAAAAAAAAKBJuoNjeK+3InoR8dTyclEU5U/VaP2kDnv7k67p2w9NVveLPAAADHx0duRc/lbEYkRcT9f66y0vLxfF4tJysVwsLeTPs/2FxWKp8r02T8tlC/0DfCDu9ovyly1Wblc17fvytPbR31feV7/oHKBjR6SX/jcnNNcUNgAkg3ejHe9Ip0xRPD3pwwcM8fw/hVZipe7HFfOv7ocpAAAAcPyKoiha6XLe59I+/3bdnQIAZiK//4/uFzhU3Z7QHnE0v1+tVqvVavWnqquK8R5Ui4jYqt6m/MxgOH4AOGG24uO6u0CN5N9o3Yh4ru5OAHOtVXcHOBY7u5vrrZRvq/p+kMZ3z8eCDOW/1dq7Xb79uOk0o8eYzOrxtR2deGZCf56dUR/mSc6/PZr/jUF7P6133PnPyqT8+3unzDVPzr8zmv+I05N/e2z+TZXz7z5R/h35AwAAAADAHMt//1+x/zdvMgAAAAAAAACcODu7m+v5vNe8//9zY9Zz/ufplPNvPWn+S2le/idazr89kv+XR9brVOYfvrn//P/37ub67+/967N5etD8F/JMKz2yWukR0Ur31Oqm6WG27nHbvU6/vKdeq93ppmN+it47cStux0ZcGlq3nf4/9tvXhtrLnvaG2i8PtXcfa78y1N5L1x0olnL7hViPn8TteHuvvWxbmLL9i1PaiyntOf+O1/9Gyvl3Kz9l/supvTUyLT38sP3Y8746HXc/b9z6/C8vHf/mTDHpyseD7Ts/6+5EDF5xzvTjZ3c37ly4f/PevTtrkSZDSy9HmhyxnH9v72dh//X/hUF7ft2vPl8ffth/4vznxXZ0Hz22q8r8X6jMl9v70oz7Voecfz/95PzfTu3jn/8nOf/OxPxfrqE/AAAAAAAAAAAAAAAA8EmKotg7RfSNiLiazv+p69xMAGC28vt/keTlarVarVarT19dVYz3erWIiL9Wb1N+ZvjFuF8GAMyz/0XEP+ruBLWRf4Pl6/2V0xfr7gwwU3ff/+BHN2/f3rhzt+6eAAAAAAAAAACfVh7/c7Uy/vOLEbEyst7Q+K9vxuphx//s5plHA4we8UDfE2y3+512Zbjx52NvfO4Lk8b/Ph+Pj/+dx8TtVLdjgt6U9v6U9oUp7Ytjl+6nNfZEj4qc//OV8c7L/M+NDL/ehPFfR8e8b4Kc//nK47nM/0sj61XzL347d/lvHXTF7WgP5X/x3ns/vXj3/Q9eufXezXc33t348ZW1tUtXrl69du3axXdu3d64NPj3eHo9B3L+eexrx4E2S84/Zy7/Zsn5fyHV8m+WnP8XUy3/Zsn558978m+WnH/+7iP/Zsn5v5Rq+TdLzv8rqZZ/s+zsbi6U+b+cavk3S37+fzXV8m+WnP8rqZZ/s+T8L6Ra/s2S87+Y6gPk7/Lwp0jOP+/h8vxvlpz/Wqrl3yw5/8upln+z5PyvpFr+zZLzfzXV8m+WnP/XUi3/Zsn5X021/Jsl5//1VMu/WXL+11It/2bJ+X8j1fJvlpz/N1Mt/2bJ+b+Wavk3S87/W6mWf7Pk/L+davk3S87/O6mWf7Pk/F9PtfybZf/6/2bMmDGTZ+p+ZQIAAAAAAAAAAAAARs3icOK6txEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHevMXKd5R3Az+zF3nUIMRCCkxrYJCaEZMmu7cQX2jQmXBugFEgo9ILjetdmwTe8dgkUyaaBEgmjooqq6YdSQKiNVFVYFR9oRWk+VL18Kq1U+qWiqoTUqAoooCK1Fc1WM+d9352ZnZ2Z9Y7Xs+f9/aTk2Z05Z847Z95zdp5d/+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECzW98w/5laURT1/xr/214UL6h/PTm1vXHb6671CAEAAID1+r/G/5+7Id1wqI+Vmpb521f8w9eXlpaWiveN/u74F5aW0h1TRTG+tSga90WX//39teZlgseLidpI0/cjPTY/2uP+sR73j/e4f0uP+7f2uH+ix/0rdsAKk+XvYxoPtqvx5fZylxY3FuON+3Z1WOvx2taRkfi7nIZaY52l8WPFQnGimC9mW5Yvl601lv/mrfVtvbWI2xpp2tbO+gz54SeOxjHUwj7e1bKt5ceMvv/6YupHP/zE0T869+zNnWrP3dDyeOU477ytPs5PhVvKsdaKrWmfxHGONI1zZ4fXZLRlnLXGevWv28f5XJ/jHF0e5oZqf80nipHG199u7Kex5l/rpf20M9z237cXRXFxedjty6zYVjFSbGu5ZWT59ZkoZ2T9MepT6cXF2Jrm6a19zNN6ndvVOk/bj4n4+t8a1htbZQzNL9P3P7llxeu+1nka1Z/1asdK+xwc9LEyLHMwzotvN570Ex3n4K7w/D9xx+pzsOPc6TAH0/NumoO39ZqDI1tGG2NOL0Ktsc7yHNzdsvxoY0u1Rn3mju5zcObcyTMzix/7+GsXTh45Pn98/tTe3btn9+7bd+DAgZljCyfmZ8v/X+HeHn7bipF0DNwW9l08Bl7dtmzzVF368uCOw4kux+H2tmUHfRyOtT+52sYckCvndHlsPFzf6ROXRopVjrHG63PX+o/D9LybjsOxpuOw48+UDsfhWB/HYX2ZM3f1955lrOm/TmO4Wj8LtjfNwfb3I+1zcNDvR4ZlDk6EefGvd63+s2BnGO8T02t9PzK6Yg6mpxvOPfVb0vv9iQON0mle3lK/47otxfnF+bP3PHbk3Lmzu4tQNsRLmuZK+3zd1vScihXzdWTN8/XQwiueuKXD7dvDvpp4bf1/E6u+VvVl7r2n+2vV+OnWeX+23LqnCGXANnp/dvppXt+fqZfssj/ry3xqZv3vxVNf2nT+HV/l/Bv7/ufL7aWHenx0fKw8fkfT3hlvOR+3vlRjjXNXrbHt52b6Ox+Ph/82+nx8Y5fz8Y62ZQd9Ph5vf3LxfFzr9duO9Wl/PSfCPDkx2/18XF9mx561zsmxrufj20Othf3/mtAppL6oae6sNm/TtsbGxsPzGotbaJ2ne1uWHw+9WX1bT+25snl65+3lY42mZ7dso+bpVNuyg56n6Xy12jyt9frt25Vpfz0nwry4cW/3eVpf5ul713/unIxfNp07t/Sag+OjW+pjHk+TsDzfL03GOXhPcbQ4XZwo5hr3bmnMp1pjW9P3TfQ1B7eE/zb6XLmjyxy8s23ZQc/B9HNstblXG1s+kQxQ++s5EebFk/d1n4P1Zd64f7DvXe8Mt6Rlmt67tv9+bbXfed0ytvx4xVX+nVd9nH+9v/vvZuvLnDiw1j6z+366O9xyXYf91H78rnZMzRUbs592hHE+e2D1/VQfT32ZLxzscz4dKoriwkcebPy+N/x95c/Of+frLX936fQ3nQsfefAH1x/7m7WMH4DN7/mybCt/1jX9Zaqfv/8DAAAAm0Ls+0dCTfT/AAAAUBmx74//KjzR/wMAAEBlxL5/LNQkk/5/xxufXXj+QpGS+UtBvD/thofK5WLGdTZ8P7W0rH77g1+d//FfXOhv2yNFUfzkod/ouPyOh+K4SlNhnJff1Hr7yhUv9LX9Rx9ZXq45v/6l8Pjx+fQ7DTpFcGeLovjmDZ9rbGfq/Zca9emHHm3Ud1984vH6Ms8dLL+P6z/zknL5Pwjh30PHjrSs/0zYD98LdfZtnfdHXO9rl16zc/97l7cX16vd9sLG037yA+Xjxs/J+fzj5fJxP682/r/87FNfqy//2Ks6j//CSOfxPxUe96uh/s/Ly+WbX4P693G9T4fxx+3F9e75yrc6jv/yZ8rlz7y5XO7RUOP27wzf73rzswvN++ux2pGW51W8pVwubn/2O7/duD8+Xnz89vFPHL7Usj/a58fT/1Q+zkzb8vH2uJ3oz9u2X3+c5vkZt//Ubz3asp97bf/yu595ef1x27d/d9tyo23rt39i0xc//bnl7X1x+fY4nkN/eqbl+Rx6VziOw/af/ECYj+H+/738uZbtRo++q/X8E5f/0vYLLc8neuuPyu1ffuB4o/7H1I9//7oXXP/Ci6+s77ui+PZ7ysfrtf3jf3i6ZfxfvumuxusR748Z/fbtryZu/+xHp0+dXjy/MNe0VxufnfP2cjxbJya31cd7Qzi3tn9/+PS5D86fnZqdmi2Kqep+hN4V+0qoPyjLxbWuf9cj4fW85fe+ue2Of/xsvP1fHi5vv/S28ufWq8Nynw+3by9fv6XaOrf/5K03NY7v2tPl9y059gHYues/D/S1YHj+7e8L4nw/89IPNvZD/b7Gz414XK9z/N+dKx/nG2G/LoVPZr7tpuXtNS8fPxvh0nvK433d+y+c5uLr+sfh9X7H98rHj+OKz/e74X3Mt3a0nu/i/PjGhZH2x298isfFcD4pLpb3x6Xi/r703E0dhxc/h6S4eHPj+99Jj3Pzmp7mahY/tjhzYuHU+cdmzs0vnptZ/NjHD588ff7UucONz/I8/KFe6y+fn7Y1zk9z8/vuLWYni6I4XcxuwAnr6oy//lV/4z/zyNG5/bN3zM0fO3L+2LlHzsyfPX50cfHo/NziHUeOHZv/aK/1F+bu373n4N79e6aPL8zdf+Dgwb0HpxdOna4PoxxUD/tmPzx96uzhxiqL9997cPd99907O33y9Nz8/ftnZ6fP91q/8bNpur72r0+fnT9x5NzCyfnpxYWPz9+/++C+fXt6fhrgyTPHFqdmzp4/NXN+cf7sTPlcps41bq7/7Ou1PtW0+G/l+9l2tfKD+Ip33r0vfT5r3Vc/uepDlYu0fYDos+GzaP7+RWcO9PN97PvHQ00y6f8BAAAgB7Hv3xJqov8HAACAyoh9/9ZQE/0/AAAAVEbs+ydCTTLp/+X/5f/7y/+X98v/55X/P/ORMlfaV/6/ybDl/2N+Xv4/D9c4/7/u7cv/y/9XL//ff35+s49f/l/+n5WGLf8f+/7Josiy/wcAAIAcxL5/W6iJ/h8AAAAqI/b914Wa6P8BAACgMmLf/4JQk0z6f/n/vvL/e3oFrqqf/3f9f/n/YnPm/+OLI/+fjTXn79/7cMu38v+B/L/8v/y//L/8P+s2vuo91yr/H/v+60NNMun/AQAAIAex739hqIn+HwAAACoj9v03hJro/wEAAKAyYt+/PdQkk/5f/r8pex5D5K7/L/8v/1+d/P96r//fNBj5/83B9f+7k//v4Yrz/xPy/5sx/z8+2PEPd/6/5/Dl/7kqhu36/7Hvf1GoSSb9PwAAAOQg9v0vDjXR/wMAAEBlxL7/JaEm+n8AAACojNj33xhqkkn/L//f1/X/e5L/bx2//H/n+SH/vwnz/12v/19+Jf8/XOT/u5P/78H1//PK/w94/MOd/x/09f/H37T8dfnzUP6fToYt/x/7/peGmmTS/wMAAEAOYt9/U6iJ/h8AAAAqI/b9Lws10f8DAABAZcS+f0eoSSb9v/y//L/8v/y//H/n7ffO/5fk/4eL/H938v89yP/L/8v/95f/7/DmV/6fToYt/x/7/ptDTTLp/wEAACAHse+/JdRE/w8AAACVEfv+nwo10f8DAABAZcS+f2eoSSb9v/y//L/8f175/7u39M7/ly7K/8v/b0ry/93J//cg/y//L//f5/X/V1pL/n9rrwejMoYt/x/7/peHmmTS/wMAAEAOYt//ilAT/T8AAABURuz7Xxlqov8HAACAyoh9/1SoSSb9v/x/tfL/f/JXT76ykP+X/++x/UFc/78Wbh2i/H+cBkOf/39A/v+qkv/vTv6/B/l/+X/5/w3J/5OPYcv/x77/1lCTTPp/AAAAyEHs+28LNdH/AwAAQGXEvv/2UBP9PwAAAFRG7Pt3hZpk0v/L/1cr/x/J/8v/d9v+IPL/RR/X/x8Lr2eal67/7/r/G0D+v4Omg1T+vwf5f/n/7PP/8d2v/D+DMWz5/9j3vyrUJJP+HwAAAHIQ+/47irY/4ur/AQAAoDIafX8xUbw61ET/DwAAAJUR+/47Q00y6f/l/688/z/e9LX8f+v45f9b5Zr/3+Dr/yfy/3mT/+9urfn/LfL/8v/y/5nl/9d3/f/J8LX8P9Gw5f9j3/+aUJNM+n8AAADIQez77wo10f8DAABAZcR/v1n+u1f9PwAAAFRR7PunQ00y6f/l/13/P6f8f03+f0D5//iM5f8L+f+hI//fnev/9yD/L/8v/7+u/L/r/9Nu2PL/se9/bahJJv0/AAAA5CD2/feEmuj/AQAAoDJi3z8TaqL/BwAAgMqIff9sqEkm/b/8v/x/Tvl/1/93/X/5/+qT/+9O/r8H+X/5/6rl/4tC/p9ratjy/7Hv3x1qkkn/DwAAADmIff+eUBP9PwAAAFRG7Pv3hpro/wEAAKAyYt9/b6hJJv2//L/8v/y//L/8f+fty/9vTvL/3cn/9yD/L/9ftfy/6/9zjQ1b/j/2/feFmmTS/wMAAEAOYt+/L9RE/w8AAACVEfv+/aEmof/v9O+6AQAAgM0l9v0HQk0y+fu//H9F8v+/+Xct25b/l//vtv3B5P8n5f9Dlf8fLhXN/7cfFldM/r8H+X/5f/l/+X8Gatjy/7HvPxhqkkn/DwAAADmIff/rQk30/wAAAFAZse//6VAT/T8AAABURuz7fybUJJP+f7D5/0n5/yZZXf9/snX88v+d50e18v+u/y//P5wqmv8fmErl/0fk/+X/h2v88v/y/6x09fP/8av+8v+x778/1CST/h8AAAByEPv+nw010f8DAABAZcS+/4FQE/0/AAAAVEbs+w+FmmTS/7v+v/y/6//L/1+d/P8DRbthzP/XJ4/8f7XI/3dXqfy/6//L/w/Z+OX/5f9Zadiu/x/7/teHmmTS/wMAAEAOYt//YKiJ/h8AAAAqI/b9bwg10f8DAABAZcS+/42hJpn0//L/8v/y//L/rv/fefvy/5uT/H938v89yP/L/8v/y/8zUMOW/499/5tCTTLp/wEAACAHse9/c6iJ/h8AAAAqI/b9bwk10f8DAABAZcS+/62hJpn0//L/8v/y//L/8v+dty//vznJ/3cn/9+D/L/8v/y//D8DNWz5/9j3/1yoSSb9PwAAAOQg9v0PhZro/wEAAKAyYt//tlAT/T8AAABURuz73x5qkkn/L/+/ifP/Y/L/8v/y//L/vbebG/n/7uT/e5D/l/+X/5f/Z6CGLf8f+/53hJpk0v8DAABADmLf//OhJvp/AAAAqIzY978z1ET/DwAAAJUR+/5fCDXJpP+X/9/E+f9KXv9/6ULzehXL/9cXk/+/Vvn/+kry/1mQ/+9O/r+HDvn/rfL/eeX/l8JZXv5f/p+BGLb8f+z73xVqkkn/DwAAADmIff+7Q030/wAAAFAZse9/T6iJ/h8AAAAqI/b9D4eaZNL/y/9nmf9PT3n48v+rXf9/snHfJs//u/6/6//L/2+A6ub/1/xQHcn/9+D6//L/rv8v/89ADVv+P/b9j4SaZNL/AwAAQA5i3//eUBP9PwAAAFRG7Pt/MdRE/w8AAACVEfv+94WaZNL/y/9nmf8f4uv/r5b/36zX/x8risnl7eSU/59oej3TvJT/l//fANXN/w+G/H8P8v/y/8Oc/w+zeXKV9Ycn/x/fL8j/M3z5/9j3vz/UJJP+HwAAAHIQ+/5fCjXR/wMAAEBlxL7/l0NN9P8AAABQGbHv/5VQk0z6f/l/+X/5f9f/d/3/ztuX/9+c5P+7k//vQf5f/n+Y8/89DE/+3/X/WTZs+f/Y9/9qqMmqjd8P/quPpwkAAAAMkdj3fyDUJJO//wMAAEAOYt9/ONRE/w8AAACVEfv+R0NNMun/5f/b8//xiqry//L/8v/y//L/m9Hg8v8vu74o5P8rk/+f6HMA8v/y//L/8v8M1LDl/2PffyTUJJP+HwAAAHIQ+/5fCzXR/wMAAEBlxL7/aKiJ/h8AAAAqI/b9c6EmmfT/1zD/Pz6c+X/X/7/S/P9P5P/l/4NNmv//5+Ia5f8L+f+Bcv3/7rLN//dL/l/+X/5f/p+BGrb8f+z750NNMun/AQAAoMLSr4Nj338s1ET/DwAAAJUR+/7joSb6fwAAAKiM2Pd/MNQkk/7f9f/l/13//1rk/8dalpf/L7n+v/z/IMj/dyf/34P8v/y//L/8PwM1bPn/2PcvhJpk0v8DAABADmLf/6FQE/0/AAAAVEbs+z8caqL/BwAAgMqIff+JUJNM+n/5f/n/3PP/tf9n7z6a4zqvPA43NSRITtXUzEfQelazHK/kj2BvXOWdqryWo5wDRedsyzkHOUvOOVvOOecs5xzlJNlVdAk85xBAN+4liQb63vd9ns0xIcLdkCDJf6N+dReL6zz/X/+/6vX1//Ok/x+m/x+h/9f/6//1/6zV1Pr/3P3XxC2d7H8AAADoQe7+e8Yt9j8AAAA0I3f/veIW+x8AAACakbv/3nFLJ/tf/6//773/X2zk+f+7f7/+/zz9v/5/HZb6++Orf99+Ufi+/f///f+1V+v/9f/6/0H6f/2//p+9ptb/5+6/T9zSyf4HAACAHuTuv2/cYv8DAABAM3L33y9usf8BAACgGbn7r41bOtn/+n/9v/5f/7+r/79Z/6//nzfP/x+m/x+h/9f/6//1/6zV1Pr/3P33j1s62f8AAADQg9z9D4hb7H8AAABoRu7+B8Yt9j8AAAA0I3f/g+KWTva//l//r/+fS/+/5fn/e74e/b/+fxX9/zD9/wj9v/5f/6//Z62m1v/n7n9w3NLJ/gcAAIAe5O5/SNxi/wMAAEAzcvc/NG6x/wEAAKAZufsfFrd0sv/1//p//f9c+v8jev6//l//P3M3LC78M0H/v0z/P2Kk/18s9P9DLrqfX/3lzef970P/r/9n2dT6/9z9D49b7rxYbF3uFwkAAABMSu7+R8Qtnfz8HwAAAHqQu/9M3GL/AwAAQDNy918Xt3Sy//X/+n/9v/5f/7/69fX/8+T5/8MO3v//7/9cc49++/9mnv9/btX/ctl8P39Qm37/6+//7/jO0P8zb1Pr/3P3n41bOtn/AAAA0IPc/Y+MW+x/AAAAaEbu/kfFLfY/AAAANCN3/6Pjlk72v/6/tf7/P3Z93o7+f7t20f/r//X/+v/W6f+Hef7/iO1/zJ2uXzbb/+9j0/383N+/5//r/1k2tf4/d/9j4pZO9j8AAAD0IHf/Y+MW+x8AAACakbv/cXGL/Q8AAADNyN3/+Lilk/2v/2+t/9/9eZ7/r/9f9foz7/9P5Mf1//r/VfT/w/T/I1p5/v9lftdsup8/qE2/f/2//p9lU+v/c/c/IW7pZP8DAABAD3L3PzFusf8BAACgGbn7nxS32P8AAADQjNz9T45bOtn/+n/9/zz6/3wF/b/+//Cf/5/0//Pzn/r/Ufr/Ea30/5dp0/383N//evr/O/7tov+nHVPr/3P3PyVu6WT/AwAAQA9y9z81brH/AQAAoBm5+58Wt9j/AAAA0Izc/U+PWzrZ//p//f88+n/P/9f/H13/7/n/86b/H6b/H6H/1/9vvP/3/H/aMrX+P3f/9XFLJ/sfAAAAepC7/xlxi/0PAAAAzcjd/8y4xf4HAACAZuTuf1bc0sn+1//r//X/+n/9/+rX1//Pk/5/mP5/hP5f/6//1/+zVhPq/3d81qnFs8/fu9aHOtn/AAAA0IPY/YvnxC32PwAAADQjd/9z4xb7HwAAAJqRu/95cUsn+1//P5n+fzvna6v/P71YLPT/i077/9M7/nrW96X+X/9/BPT/w/T/I/T/+n/9v/6ftZpQ/7/969z9z49bOtn/AAAA0IPc/S+IW+x/AAAAaEbu/hfGLfY/AAAANCN3/4vilk72v/5/Mv3/trb6f8//3/v90VP/7/n/y/T/R0P/P0z/P0L/r//X/+v/Waup9f+5+18cN22duOwvEQAAAJiY3P0viVs6+fk/AAAA9CB3/0vjFvsfAAAAZur6pY/k7n9Z3NLJ/tf/r7f/39rxMf2//n/v94f+X/+v/z98+v9h+v8R+n/9v/5f/89aTa3/z93/8rilk/0PAAAAPcjdf0PcYv8DAABAM3L3vyJusf8BAACgGbn7Xxm3dLL/9f+e/6//1//r/1e/vv5/nvT/w/T/I/T/+v/N9v8nL/xH/T9tuIT+/9y5c2cOvf/P3f+quKWT/Q8AAABN2vOz0tz9r45b7H8AAABoRu7+18Qt9j8AAAA0I3f/a+OWTva//r/T/j+/1efV/1+3WOj/9f/6f/3/MP3/MP3/CP2//t/z//X/rNXUnv+fu/91cUsn+x8AAAB6kLv/xrjF/gcAAIBm5O6/KW6x/wEAAKAZuftfH7d0sv/1/532/57/r//X/x91/3/7Qv9/JGbR/5/e//Wn3v+f1f/r/wd01//f5U67fqn/1/+zbGr9f+7+N8Qtnex/AAAA6EHu/jfGLfY/AAAANCN3/5viFvsfAAAAmpG7/81x0/FO9r/+X/+v/9f/6/9Xv/4RP/9/a7FY6P/XYBb9/4Cp9//ref7/3r/LL9D/6//n/P71//p/lk2t/8/d/5a4pZP9DwAAAD3I3f/WuMX+BwAAgHnZ2v8P5e5/W9xi/wMAAEAzcve/PW7pZP/r//X/+n/9/6T6/2OH0P+fnUX/7/n/a6L/HzaN/n9/+n/9/5zfv/5f/8/F21T/n7v/HXFLJ/sfAAAAepC7/51xi/0PAAAAzcjd/664xf4HAACAZuTuf3fc0sn+1//r/y+l/8/32Vv/fzp+X6v9/8kp9f/b/5w5teu/r5Pn/+v/10T/P0z/P0L/r//X/1+v/2edpvb8/9z974lbOtn/AAAA0IPc/e+NW//Xrf0PAAAAzcjd/764xf4HAACAZuTuf3/c0sn+1//r/z3/3/P/J/X8/zOH8Px//X9X9P/D9P8j9P/6f/2/5/+zVlPr/3P3fyBu6WT/AwAAQA9y938wbrH/AQAAoBm5+z8Ut9j/AAAA0Izc/TfHLZ3sf/2//l//r//X/5//a6j/b4P+f9jR9P+n9f/6/+rnj8XfBfp//f/Y59OmqfX/ufs/HLd0sv8BAACgB7n7PxK32P8AAADQjNz9H41b7H8AAACYpeMrPpa7/2NxSyf7X/+v/z+0/n8rPthT/3/FQv8/0/5/1evr/+dpI/1/flPo/z3/P/TT/1+561ebfv7/8Ut8/3v//bWJ/n/H+tD/06Sp9f+5+z8et3Sy/wEAAKAFV4/88dz9n4hb7H8AAABoRu7+T8Yt9j8AAAA0I3f/p+KWHvb/f+n/F/r/g/T/Zz3/3/P/9f+b6P+PLY4t9P/78fz/Yfr/Ef30/zet+uCmn59/UJt+/57/r/9n2dT6/9z9n45betj/AAAA0Inc/Z+JW+x/AAAAaEbu/s/GLfY/AAAANGN792dc1uH+1//r/w/t+f/6/6XvD/2//t/z/w+f/n+Y/n9EP/3/Spvu5+f+/vX/+v+O3e34Pn9gav3/57Y/69Ti83FLJ/sfAAAAepC7/wtxi/0PAAAAzcjd/8W4xf4HAACAZuTu/1Lc0sn+1//r/+fR/587d+6M/l//v/vrudD/36L/p+j/h+n/R+j/9f/6f/0/azW1/j93/5fjlk72PwAAAPQgd/9X4hb7HwAAAJqRu/+rcYv9DwAAAM3I3f+1uKWT/a//n0D/f0r/7/n/+v+F5//r/9dE/z9M/z+ixf7/1MV/+Zvu5w9q0+9f/6//Z9nU+v/c/V+PWzrZ/wAAANCD3P3fiFvsfwAAAGhG7v5vxi32PwAAADQjd/+34pZO9r/+/+j6/zv+3B3i8/9v25k4brr/P71Y/f71//p//b/+/7Dp/4fp/0e02P9fgk3383N///p//T/Lptb/5+7/dtyye/iduLSvEgAAAJiS3P3fiVs6+fk/AAAA9CB3/3fjFvsfAAAAmpG7/3txSyf7X/8/gef/r6f/32XT/b/n/6/+/tD/T6b/34rfuvP1r9D/t0H/P0z/P0L/r//X/6+p/8/vZv1/76bW/+fu/37c0sn+BwAAgB7k7v9B3GL/AwAAQDNy9/8wbrH/AQAAoBm5+2+JW3bs/1Vtdyv0//p//b/+v8P+3/P/G6b/H3ax/f/JxcH6/6T/1//r/3vt/z3/n/Om1v/n7v9R3OLn/wAAADA7J/b5eO7+H8ct9j8AAAA0I3f/T+IW+x8AAACakbv/p3HLrVds6i0dKf2//l//r//X/69+ff3/POn/h3n+/wj9/zr6+av0/0fR/x9f+vx19/+Lhf6fg5ta/5+7/2dxi5//AwAAQDNy9/88brH/AQAAoBm5+38Rt9j/AAAA0Izc/b+MWzrZ//p//f8B+//tNFP/f57+/zz9/2r6/6Oh/x+m/x+h//f8/9n0/8s8/58pmlr/n7v/V3FLJ/sfAAAAepC7/9dxi/0PAAAAzcjd/5u4xf4HAACAZuTu/23c0sn+X2v/f2NU2BfT/8efav3/7Pt/z//X/+v/9f+Tov8fpv8fof/X/+v/9f+s1dT6/9z9v4tbOtn/AAAA0IPc/b+PW+x/AAAAaEbu/j/ELfY/AAAANCN3/x/jlk72v+f/6//1//p//f/q19f/z5P+f5j+f7X6C6X/1//r//X/rNXU+v/c/X+KWzrZ/wAAANCD3P1/jlvsfwAAAGhG7v5b4xb7HwAAAJqRu/8vcUsn+1//r//X/+v/9f+rX1//P0+T6v+P6/93fu7d/3v8ZT3/f+P9f74F/b/+X//PWkyt/8/d/9e4pZP9DwAAAD3I3f+3uMX+BwAAgGbk7v973GL/AwAAQDNy9/8jbulk/4/0/yfrN+r/B+n/d79//f/q7w/9v/5f/3/4JtX/e/7/bJ7/X/T/nv+v/9f/s1ZT6/9z998Wt3Sy/wEAAKAHuftvj1vsfwAAAGhG7v5/xi32PwAAADQjd/+/4pZO9r/n/8+p/79K/6//1//r//X/I/T/w/T/I/T/+v9LeP9X7vm1/l//z7Kp9f+5+/8dAAD//y/fNhQ=")
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

1m31.713268659s ago: executing program 1 (id=492):
r0 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x6128, 0x4)
recvmmsg$unix(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

1m31.609211095s ago: executing program 1 (id=493):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000240)=0x2a1b)

1m31.608948638s ago: executing program 1 (id=494):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='macvlan1\x00', 0x10)
sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c)

1m31.368656673s ago: executing program 3 (id=498):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
close(r0)
mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff)
set_mempolicy(0x8006, &(0x7f00000004c0)=0xfff, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f0000", @ANYBLOB], 0x50)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6   \x00'}, 0x20)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000500), 0x5, r2}, 0x38)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r3, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000)
shutdown(r3, 0x1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0)
close(0x3)
socket$kcm(0x10, 0x2, 0x0)
mkdir(&(0x7f0000000180)='./config\x00', 0x1ff)
mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f00000003c0)='file0', 0x5)
close(0xffffffffffffffff)
symlink(&(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00')

1m31.358592531s ago: executing program 3 (id=499):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000)

1m31.282095299s ago: executing program 3 (id=500):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0)

1m31.28188673s ago: executing program 3 (id=501):
socket$packet(0x11, 0x3, 0x300)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6)
creat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140)
syz_80211_inject_frame(0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r0], 0x7)

1m30.681606784s ago: executing program 3 (id=502):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058)
getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000000))

1m18.65001799s ago: executing program 3 (id=503):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x800, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @loopback}}}})

57.791617749s ago: executing program 33 (id=494):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='macvlan1\x00', 0x10)
sendto$inet6(r1, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c)

36.246536468s ago: executing program 34 (id=478):
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x7, 0x0, 0x2}})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r2, 0x1, 0x5004)
ptrace$getregset(0x4204, r2, 0x204, 0x0)

0s ago: executing program 35 (id=503):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x3f00, 0x40, 0x800, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @loopback}}}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31489' (ED25519) to the list of known hosts.
syzkaller login: [   50.045488][ T5579] cgroup: Unknown subsys name 'net'
[   50.144982][ T5579] cgroup: Unknown subsys name 'cpuset'
[   50.148759][ T5579] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.548168][ T5579] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   58.832307][ T5669] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   61.886749][ T5687] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.892216][ T5687] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.898574][ T5687] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.904477][ T5687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.908066][ T5687] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.994436][ T5687] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.998641][ T5687] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.002495][ T5687] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.009033][ T5687] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.012348][ T5687] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.121823][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.125562][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.129283][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.135892][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.139700][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.721375][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.724275][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.726618][ T5691] bridge_slave_0: entered allmulticast mode
[   62.730892][ T5691] bridge_slave_0: entered promiscuous mode
[   62.756531][ T5691] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.756653][ T5691] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.756738][ T5691] bridge_slave_1: entered allmulticast mode
[   62.758116][ T5691] bridge_slave_1: entered promiscuous mode
[   62.791088][ T5691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.797528][ T5691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.815551][ T5691] team0: Port device team_slave_0 added
[   62.816928][ T5691] team0: Port device team_slave_1 added
[   62.832272][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.832322][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.832365][ T5691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.835183][ T5691] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.835191][ T5691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.835200][ T5691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.905469][ T5691] hsr_slave_0: entered promiscuous mode
[   62.906472][ T5691] hsr_slave_1: entered promiscuous mode
[   63.001217][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.004186][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.007479][ T5686] bridge_slave_0: entered allmulticast mode
[   63.012842][ T5686] bridge_slave_0: entered promiscuous mode
[   63.038608][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.038743][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.039022][ T5686] bridge_slave_1: entered allmulticast mode
[   63.047436][ T5686] bridge_slave_1: entered promiscuous mode
[   63.059833][ T5696] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.059969][ T5696] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.060227][ T5696] bridge_slave_0: entered allmulticast mode
[   63.061792][ T5696] bridge_slave_0: entered promiscuous mode
[   63.065153][ T5696] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.065194][ T5696] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.065379][ T5696] bridge_slave_1: entered allmulticast mode
[   63.066259][ T5696] bridge_slave_1: entered promiscuous mode
[   63.100322][ T5686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.117187][ T5686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.130315][ T5696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.150933][ T5696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.178585][ T5686] team0: Port device team_slave_0 added
[   63.186103][ T5686] team0: Port device team_slave_1 added
[   63.213675][ T5696] team0: Port device team_slave_0 added
[   63.219628][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.219670][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.220037][ T5686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.223687][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.223697][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.223711][ T5686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.225095][ T5696] team0: Port device team_slave_1 added
[   63.275710][ T5696] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.275754][ T5696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.276316][ T5696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.277309][ T5696] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.277315][ T5696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.277324][ T5696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.318052][ T5686] hsr_slave_0: entered promiscuous mode
[   63.320520][ T5686] hsr_slave_1: entered promiscuous mode
[   63.324273][ T5686] debugfs: 'hsr0' already exists in 'hsr'
[   63.324389][ T5686] Cannot create hsr debugfs directory
[   63.361994][ T5691] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.371045][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.383466][ T5696] hsr_slave_0: entered promiscuous mode
[   63.384909][ T5696] hsr_slave_1: entered promiscuous mode
[   63.385441][ T5696] debugfs: 'hsr0' already exists in 'hsr'
[   63.385452][ T5696] Cannot create hsr debugfs directory
[   63.398076][ T5691] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.404281][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.404818][ T5691] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.414082][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.447566][ T5691] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.454315][ T5691] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.563400][ T5691] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.563536][ T5691] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.564228][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.564305][ T5691] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.586500][   T99] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.592219][   T99] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.668012][ T5696] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.676271][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.680961][ T5691] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.686142][ T5696] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.695485][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.696243][ T5696] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.700574][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.703628][ T5696] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.710057][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.761796][ T5691] 8021q: adding VLAN 0 to HW filter on device team0
[   63.780435][ T5686] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.788058][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   63.795456][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.795612][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.805009][ T5686] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.811005][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   63.819720][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.819812][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.826229][ T5686] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.831395][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   63.836284][ T5686] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.844816][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   63.963306][ T5687] Bluetooth: hci0: command tx timeout
[   63.973833][ T5696] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.990786][ T5696] 8021q: adding VLAN 0 to HW filter on device team0
[   64.001033][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.001446][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.016493][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.016610][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.025815][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.043026][ T5687] Bluetooth: hci1: command tx timeout
[   64.055769][ T5686] 8021q: adding VLAN 0 to HW filter on device team0
[   64.072521][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.073254][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.097512][   T99] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.097615][   T99] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.203378][ T5687] Bluetooth: hci2: command tx timeout
[   64.297798][ T5691] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.344689][ T5691] veth0_vlan: entered promiscuous mode
[   64.350176][ T5691] veth1_vlan: entered promiscuous mode
[   64.376779][ T5691] veth0_macvtap: entered promiscuous mode
[   64.379796][ T5691] veth1_macvtap: entered promiscuous mode
[   64.394652][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.408633][ T5691] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.460577][ T5696] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.481456][ T5686] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.531313][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.531361][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.585413][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.585471][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.594211][ T5686] veth0_vlan: entered promiscuous mode
[   64.600107][ T5696] veth0_vlan: entered promiscuous mode
[   64.618344][ T5686] veth1_vlan: entered promiscuous mode
[   64.634686][ T5696] veth1_vlan: entered promiscuous mode
[   64.698257][ T5696] veth0_macvtap: entered promiscuous mode
[   64.701791][ T5696] veth1_macvtap: entered promiscuous mode
[   64.710530][ T5686] veth0_macvtap: entered promiscuous mode
[   64.722139][ T5686] veth1_macvtap: entered promiscuous mode
[   64.733157][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.734648][ T5696] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.746453][ T5696] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.760181][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.778112][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.814302][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.835052][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.835244][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.835405][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.835549][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.836359][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.836400][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.836433][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.836465][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.836498][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.836530][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.966370][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.966439][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.978388][ T5802] loop2: detected capacity change from 0 to 16
[   64.984256][ T5802] =======================================================
[   64.984256][ T5802] WARNING: The mand mount option has been deprecated and
[   64.984256][ T5802]          and is ignored by this kernel. Remove the mand
[   64.984256][ T5802]          option from the mount to silence this warning.
[   64.984256][ T5802] =======================================================
[   65.005731][ T5802] erofs (device loop2): mounted with root inode @ nid 36.
[   65.030089][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.030150][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.068010][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.068070][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.153644][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.153765][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.268344][ T5814] loop0: detected capacity change from 0 to 512
[   65.309391][ T5814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.314714][ T5814] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.456743][ T5686] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[   65.467333][ T5686] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[   65.493464][ T5755] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   65.667269][ T5755] usb 3-1: New USB device found, idVendor=110a, idProduct=1410, bcdDevice= 0.00
[   65.672434][ T5755] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.672505][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.106229][ T5755] mxuport 3-1:1.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71)
[   66.110668][ T5755] mxuport 3-1:1.0: probe with driver mxuport failed with error -5
[   66.124858][ T5687] Bluetooth: hci1: command tx timeout
[   66.132157][ T5755] usb 3-1: USB disconnect, device number 2
[   66.138051][ T5848] tmpfs: Bad value for 'mpol'
[   66.256958][ T5852] netlink: 'syz.1.96': attribute type 2 has an invalid length.
[   66.261936][ T5852] netlink: 'syz.1.96': attribute type 2 has an invalid length.
[   66.267667][ T5852] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.96'.
[   66.282916][ T5687] Bluetooth: hci2: command tx timeout
[   66.786252][ T5871] loop2: detected capacity change from 0 to 8
[   66.817675][ T5871] SQUASHFS error: zlib decompression failed, data probably corrupt
[   66.821299][ T5871] SQUASHFS error: Failed to read block 0x4de: -5
[   66.824115][ T5871] SQUASHFS error: zlib decompression failed, data probably corrupt
[   66.827075][ T5871] SQUASHFS error: Failed to read block 0x4df: -5
[   66.829813][ T5871] SQUASHFS error: zlib decompression failed, data probably corrupt
[   66.836604][ T5871] SQUASHFS error: Failed to read block 0x4e0: -5
[   66.841603][ T5871] SQUASHFS error: zlib decompression failed, data probably corrupt
[   66.841679][ T5871] SQUASHFS error: Failed to read block 0x4de: -5
[   66.850585][   T34] audit: type=1800 audit(1788502504.366:2): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.105" name="file1" dev="loop2" ino=5 res=0 errno=0
[   66.866709][ T5686] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.947793][ T5468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.321545][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.328586][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.333013][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.341179][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.344736][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.572449][ T5894] loop2: detected capacity change from 0 to 2048
[   67.626522][ T5894]  loop2: p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 
[   67.626809][ T5894] loop2: p2 start 53543428 is beyond EOD, truncated
[   67.672120][ T5894] loop2: p5 start 53543428 is beyond EOD, truncated
[   67.675466][ T5894] loop2: p6 start 53543428 is beyond EOD, truncated
[   67.678346][ T5894] loop2: p7 start 53543428 is beyond EOD, truncated
[   67.681236][ T5894] loop2: p8 start 53543428 is beyond EOD, truncated
[   67.687473][ T5894] loop2: p9 start 53543428 is beyond EOD, truncated
[   67.690704][ T5894] loop2: p10 start 53543428 is beyond EOD, truncated
[   67.693787][ T5894] loop2: p11 start 53543428 is beyond EOD, truncated
[   67.696640][ T5894] loop2: p12 start 53543428 is beyond EOD, truncated
[   67.699403][ T5894] loop2: p13 start 53543428 is beyond EOD, truncated
[   67.702183][ T5894] loop2: p14 start 53543428 is beyond EOD, truncated
[   67.705103][ T5894] loop2: p15 start 53543428 is beyond EOD, truncated
[   67.707929][ T5894] loop2: p16 start 53543428 is beyond EOD, truncated
[   67.710822][ T5894] loop2: p17 start 53543428 is beyond EOD, truncated
[   67.714844][ T5894] loop2: p18 start 53543428 is beyond EOD, truncated
[   67.718066][ T5894] loop2: p19 start 53543428 is beyond EOD, truncated
[   67.718083][ T5894] loop2: p20 start 53543428 is beyond EOD, truncated
[   67.718093][ T5894] loop2: p21 start 53543428 is beyond EOD, truncated
[   67.718104][ T5894] loop2: p22 start 53543428 is beyond EOD, truncated
[   67.718114][ T5894] loop2: p23 start 53543428 is beyond EOD, truncated
[   67.718124][ T5894] loop2: p24 start 53543428 is beyond EOD, truncated
[   67.718134][ T5894] loop2: p25 start 53543428 is beyond EOD, truncated
[   67.718143][ T5894] loop2: p26 start 53543428 is beyond EOD, truncated
[   67.718153][ T5894] loop2: p27 start 53543428 is beyond EOD, truncated
[   67.718163][ T5894] loop2: p28 start 53543428 is beyond EOD, truncated
[   67.718173][ T5894] loop2: p29 start 53543428 is beyond EOD, truncated
[   67.718184][ T5894] loop2: p30 start 53543428 is beyond EOD, truncated
[   67.718195][ T5894] loop2: p31 start 53543428 is beyond EOD, truncated
[   67.718204][ T5894] loop2: p32 start 53543428 is beyond EOD, truncated
[   67.718215][ T5894] loop2: p33 start 53543428 is beyond EOD, truncated
[   67.718223][ T5894] loop2: p34 start 53543428 is beyond EOD, truncated
[   67.718232][ T5894] loop2: p35 start 53543428 is beyond EOD, truncated
[   67.718241][ T5894] loop2: p36 start 53543428 is beyond EOD, truncated
[   67.718249][ T5894] loop2: p37 start 53543428 is beyond EOD, truncated
[   67.718260][ T5894] loop2: p38 start 53543428 is beyond EOD, truncated
[   67.718269][ T5894] loop2: p39 start 53543428 is beyond EOD, truncated
[   67.718279][ T5894] loop2: p40 start 53543428 is beyond EOD, truncated
[   67.718288][ T5894] loop2: p41 start 53543428 is beyond EOD, truncated
[   67.718298][ T5894] loop2: p42 start 53543428 is beyond EOD, truncated
[   67.718308][ T5894] loop2: p43 start 53543428 is beyond EOD, truncated
[   67.718318][ T5894] loop2: p44 start 53543428 is beyond EOD, truncated
[   67.718328][ T5894] loop2: p45 start 53543428 is beyond EOD, truncated
[   67.730078][ T5894] loop2: p46 start 53543428 is beyond EOD, truncated
[   67.730094][ T5894] loop2: p47 start 53543428 is beyond EOD, truncated
[   67.730104][ T5894] loop2: p48 start 53543428 is beyond EOD, truncated
[   67.730113][ T5894] loop2: p49 start 53543428 is beyond EOD, truncated
[   67.730123][ T5894] loop2: p50 start 53543428 is beyond EOD, truncated
[   67.730133][ T5894] loop2: p51 start 53543428 is beyond EOD, truncated
[   67.730143][ T5894] loop2: p52 start 53543428 is beyond EOD, truncated
[   67.730152][ T5894] loop2: p53 start 53543428 is beyond EOD, truncated
[   67.730162][ T5894] loop2: p54 start 53543428 is beyond EOD, truncated
[   67.730171][ T5894] loop2: p55 start 53543428 is beyond EOD, truncated
[   67.730180][ T5894] loop2: p56 start 53543428 is beyond EOD, truncated
[   67.730190][ T5894] loop2: p57 start 53543428 is beyond EOD, truncated
[   67.730199][ T5894] loop2: p58 start 53543428 is beyond EOD, truncated
[   67.730208][ T5894] loop2: p59 start 53543428 is beyond EOD, truncated
[   67.730217][ T5894] loop2: p60 start 53543428 is beyond EOD, truncated
[   67.730226][ T5894] loop2: p61 start 53543428 is beyond EOD, truncated
[   67.730235][ T5894] loop2: p62 start 53543428 is beyond EOD, truncated
[   67.730244][ T5894] loop2: p63 start 53543428 is beyond EOD, truncated
[   67.730252][ T5894] loop2: p64 start 53543428 is beyond EOD, truncated
[   67.730261][ T5894] loop2: p65 start 53543428 is beyond EOD, truncated
[   67.730270][ T5894] loop2: p66 start 53543428 is beyond EOD, truncated
[   67.730280][ T5894] loop2: p67 start 53543428 is beyond EOD, truncated
[   67.730289][ T5894] loop2: p68 start 53543428 is beyond EOD, truncated
[   67.730297][ T5894] loop2: p69 start 53543428 is beyond EOD, truncated
[   67.730306][ T5894] loop2: p70 start 53543428 is beyond EOD, truncated
[   67.730316][ T5894] loop2: p71 start 53543428 is beyond EOD, truncated
[   67.730325][ T5894] loop2: p72 start 53543428 is beyond EOD, truncated
[   67.730335][ T5894] loop2: p73 start 53543428 is beyond EOD, truncated
[   67.730344][ T5894] loop2: p74 start 53543428 is beyond EOD, truncated
[   67.730354][ T5894] loop2: p75 start 53543428 is beyond EOD, truncated
[   67.730363][ T5894] loop2: p76 start 53543428 is beyond EOD, truncated
[   67.730372][ T5894] loop2: p77 start 53543428 is beyond EOD, truncated
[   67.730382][ T5894] loop2: p78 start 53543428 is beyond EOD, truncated
[   67.730391][ T5894] loop2: p79 start 53543428 is beyond EOD, truncated
[   67.730400][ T5894] loop2: p80 start 53543428 is beyond EOD, truncated
[   67.730410][ T5894] loop2: p81 start 53543428 is beyond EOD, truncated
[   67.730419][ T5894] loop2: p82 start 53543428 is beyond EOD, truncated
[   67.730429][ T5894] loop2: p83 start 53543428 is beyond EOD, truncated
[   67.730438][ T5894] loop2: p84 start 53543428 is beyond EOD, truncated
[   67.730447][ T5894] loop2: p85 start 53543428 is beyond EOD, truncated
[   67.730456][ T5894] loop2: p86 start 53543428 is beyond EOD, truncated
[   67.730465][ T5894] loop2: p87 start 53543428 is beyond EOD, truncated
[   67.730528][ T5894] loop2: p88 start 53543428 is beyond EOD, truncated
[   67.730539][ T5894] loop2: p89 start 53543428 is beyond EOD, truncated
[   67.730550][ T5894] loop2: p90 start 53543428 is beyond EOD, truncated
[   67.730560][ T5894] loop2: p91 start 53543428 is beyond EOD, truncated
[   67.730569][ T5894] loop2: p92 start 53543428 is beyond EOD, truncated
[   67.730579][ T5894] loop2: p93 start 53543428 is beyond EOD, truncated
[   67.730589][ T5894] loop2: p94 start 53543428 is beyond EOD, truncated
[   67.730599][ T5894] loop2: p95 start 53543428 is beyond EOD, truncated
[   67.730609][ T5894] loop2: p96 start 53543428 is beyond EOD, truncated
[   67.730618][ T5894] loop2: p97 start 53543428 is beyond EOD, truncated
[   67.730628][ T5894] loop2: p98 start 53543428 is beyond EOD, truncated
[   67.730638][ T5894] loop2: p99 start 53543428 is beyond EOD, truncated
[   67.730646][ T5894] loop2: p100 start 53543428 is beyond EOD, truncated
[   67.730656][ T5894] loop2: p101 start 53543428 is beyond EOD, truncated
[   67.730665][ T5894] loop2: p102 start 53543428 is beyond EOD, truncated
[   67.730674][ T5894] loop2: p103 start 53543428 is beyond EOD, truncated
[   67.730683][ T5894] loop2: p104 start 53543428 is beyond EOD, truncated
[   67.730692][ T5894] loop2: p105 start 53543428 is beyond EOD, truncated
[   67.730702][ T5894] loop2: p106 start 53543428 is beyond EOD, truncated
[   67.730711][ T5894] loop2: p107 start 53543428 is beyond EOD, truncated
[   67.730720][ T5894] loop2: p108 start 53543428 is beyond EOD, truncated
[   67.730730][ T5894] loop2: p109 start 53543428 is beyond EOD, truncated
[   67.730739][ T5894] loop2: p110 start 53543428 is beyond EOD, truncated
[   67.730749][ T5894] loop2: p111 start 53543428 is beyond EOD, truncated
[   67.730758][ T5894] loop2: p112 start 53543428 is beyond EOD, truncated
[   67.730767][ T5894] loop2: p113 start 53543428 is beyond EOD, truncated
[   67.730777][ T5894] loop2: p114 start 53543428 is beyond EOD, truncated
[   67.730786][ T5894] loop2: p115 start 53543428 is beyond EOD, truncated
[   67.730795][ T5894] loop2: p116 start 53543428 is beyond EOD, truncated
[   67.730804][ T5894] loop2: p117 start 53543428 is beyond EOD, truncated
[   67.730814][ T5894] loop2: p118 start 53543428 is beyond EOD, truncated
[   67.730823][ T5894] loop2: p119 start 53543428 is beyond EOD, truncated
[   67.730832][ T5894] loop2: p120 start 53543428 is beyond EOD, truncated
[   67.730841][ T5894] loop2: p121 start 53543428 is beyond EOD, truncated
[   67.730851][ T5894] loop2: p122 start 53543428 is beyond EOD, truncated
[   67.730860][ T5894] loop2: p123 start 53543428 is beyond EOD, truncated
[   67.730904][ T5894] loop2: p124 start 53543428 is beyond EOD, truncated
[   67.730914][ T5894] loop2: p125 start 53543428 is beyond EOD, truncated
[   67.730924][ T5894] loop2: p126 start 53543428 is beyond EOD, truncated
[   67.730934][ T5894] loop2: p127 start 53543428 is beyond EOD, truncated
[   67.730944][ T5894] loop2: p128 start 53543428 is beyond EOD, truncated
[   67.730954][ T5894] loop2: p129 start 53543428 is beyond EOD, truncated
[   67.730971][ T5894] loop2: p130 start 53543428 is beyond EOD, truncated
[   67.730981][ T5894] loop2: p131 start 53543428 is beyond EOD, truncated
[   67.730990][ T5894] loop2: p132 start 53543428 is beyond EOD, truncated
[   67.731000][ T5894] loop2: p133 start 53543428 is beyond EOD, truncated
[   67.731010][ T5894] loop2: p134 start 53543428 is beyond EOD, truncated
[   67.731019][ T5894] loop2: p135 start 53543428 is beyond EOD, truncated
[   67.731030][ T5894] loop2: p136 start 53543428 is beyond EOD, truncated
[   67.731040][ T5894] loop2: p137 start 53543428 is beyond EOD, truncated
[   67.731050][ T5894] loop2: p138 start 53543428 is beyond EOD, truncated
[   67.731060][ T5894] loop2: p139 start 53543428 is beyond EOD, truncated
[   67.731067][ T5894] loop2: p140 start 53543428 is beyond EOD, truncated
[   67.731076][ T5894] loop2: p141 start 53543428 is beyond EOD, truncated
[   67.731084][ T5894] loop2: p142 start 53543428 is beyond EOD, truncated
[   67.731093][ T5894] loop2: p143 start 53543428 is beyond EOD, truncated
[   67.731100][ T5894] loop2: p144 start 53543428 is beyond EOD, truncated
[   67.731108][ T5894] loop2: p145 start 53543428 is beyond EOD, truncated
[   67.731116][ T5894] loop2: p146 start 53543428 is beyond EOD, truncated
[   67.731124][ T5894] loop2: p147 start 53543428 is beyond EOD, truncated
[   67.731132][ T5894] loop2: p148 start 53543428 is beyond EOD, truncated
[   67.731140][ T5894] loop2: p149 start 53543428 is beyond EOD, truncated
[   67.731147][ T5894] loop2: p150 start 53543428 is beyond EOD, truncated
[   67.731155][ T5894] loop2: p151 start 53543428 is beyond EOD, truncated
[   67.731163][ T5894] loop2: p152 start 53543428 is beyond EOD, truncated
[   67.731171][ T5894] loop2: p153 start 53543428 is beyond EOD, truncated
[   67.731179][ T5894] loop2: p154 start 53543428 is beyond EOD, truncated
[   67.731186][ T5894] loop2: p155 start 53543428 is beyond EOD, truncated
[   67.731195][ T5894] loop2: p156 start 53543428 is beyond EOD, truncated
[   67.731204][ T5894] loop2: p157 start 53543428 is beyond EOD, truncated
[   67.731213][ T5894] loop2: p158 start 53543428 is beyond EOD, truncated
[   67.731220][ T5894] loop2: p159 start 53543428 is beyond EOD, truncated
[   67.731229][ T5894] loop2: p160 start 53543428 is beyond EOD, truncated
[   67.731239][ T5894] loop2: p161 start 53543428 is beyond EOD, truncated
[   67.731248][ T5894] loop2: p162 start 53543428 is beyond EOD, truncated
[   67.731257][ T5894] loop2: p163 start 53543428 is beyond EOD, truncated
[   67.731266][ T5894] loop2: p164 start 53543428 is beyond EOD, truncated
[   67.731274][ T5894] loop2: p165 start 53543428 is beyond EOD, truncated
[   67.731282][ T5894] loop2: p166 start 53543428 is beyond EOD, truncated
[   67.731291][ T5894] loop2: p167 start 53543428 is beyond EOD, truncated
[   67.731300][ T5894] loop2: p168 start 53543428 is beyond EOD, truncated
[   67.731307][ T5894] loop2: p169 start 53543428 is beyond EOD, truncated
[   67.731315][ T5894] loop2: p170 start 53543428 is beyond EOD, truncated
[   67.731323][ T5894] loop2: p171 start 53543428 is beyond EOD, truncated
[   67.731333][ T5894] loop2: p172 start 53543428 is beyond EOD, truncated
[   67.731341][ T5894] loop2: p173 start 53543428 is beyond EOD, truncated
[   67.731349][ T5894] loop2: p174 start 53543428 is beyond EOD, truncated
[   67.731358][ T5894] loop2: p175 start 53543428 is beyond EOD, truncated
[   67.731367][ T5894] loop2: p176 start 53543428 is beyond EOD, truncated
[   67.731377][ T5894] loop2: p177 start 53543428 is beyond EOD, truncated
[   67.731386][ T5894] loop2: p178 start 53543428 is beyond EOD, truncated
[   67.731394][ T5894] loop2: p179 start 53543428 is beyond EOD, truncated
[   67.731404][ T5894] loop2: p180 start 53543428 is beyond EOD, truncated
[   67.731413][ T5894] loop2: p181 start 53543428 is beyond EOD, truncated
[   67.731422][ T5894] loop2: p182 start 53543428 is beyond EOD, truncated
[   67.731432][ T5894] loop2: p183 start 53543428 is beyond EOD, truncated
[   67.731441][ T5894] loop2: p184 start 53543428 is beyond EOD, truncated
[   67.731451][ T5894] loop2: p185 start 53543428 is beyond EOD, truncated
[   67.731460][ T5894] loop2: p186 start 53543428 is beyond EOD, truncated
[   67.731468][ T5894] loop2: p187 start 53543428 is beyond EOD, truncated
[   67.731476][ T5894] loop2: p188 start 53543428 is beyond EOD, truncated
[   67.731486][ T5894] loop2: p189 start 53543428 is beyond EOD, truncated
[   67.731494][ T5894] loop2: p190 start 53543428 is beyond EOD, truncated
[   67.731502][ T5894] loop2: p191 start 53543428 is beyond EOD, truncated
[   67.731511][ T5894] loop2: p192 start 53543428 is beyond EOD, truncated
[   67.731520][ T5894] loop2: p193 start 53543428 is beyond EOD, truncated
[   67.731529][ T5894] loop2: p194 start 53543428 is beyond EOD, truncated
[   67.731538][ T5894] loop2: p195 start 53543428 is beyond EOD, truncated
[   67.731547][ T5894] loop2: p196 start 53543428 is beyond EOD, truncated
[   67.731556][ T5894] loop2: p197 start 53543428 is beyond EOD, truncated
[   67.731565][ T5894] loop2: p198 start 53543428 is beyond EOD, truncated
[   67.731573][ T5894] loop2: p199 start 53543428 is beyond EOD, truncated
[   67.731581][ T5894] loop2: p200 start 53543428 is beyond EOD, truncated
[   67.731590][ T5894] loop2: p201 start 53543428 is beyond EOD, truncated
[   67.731599][ T5894] loop2: p202 start 53543428 is beyond EOD, truncated
[   67.739961][ T5894] loop2: p203 start 53543428 is beyond EOD, truncated
[   67.739989][ T5894] loop2: p204 start 53543428 is beyond EOD, truncated
[   67.739999][ T5894] loop2: p205 start 53543428 is beyond EOD, truncated
[   67.740009][ T5894] loop2: p206 start 53543428 is beyond EOD, truncated
[   67.740019][ T5894] loop2: p207 start 53543428 is beyond EOD, truncated
[   67.740029][ T5894] loop2: p208 start 53543428 is beyond EOD, truncated
[   67.740040][ T5894] loop2: p209 start 53543428 is beyond EOD, truncated
[   67.740050][ T5894] loop2: p210 start 53543428 is beyond EOD, truncated
[   67.740060][ T5894] loop2: p211 start 53543428 is beyond EOD, truncated
[   67.740070][ T5894] loop2: p212 start 53543428 is beyond EOD, truncated
[   67.740080][ T5894] loop2: p213 start 53543428 is beyond EOD, truncated
[   67.740091][ T5894] loop2: p214 start 53543428 is beyond EOD, truncated
[   67.740101][ T5894] loop2: p215 start 53543428 is beyond EOD, truncated
[   67.740111][ T5894] loop2: p216 start 53543428 is beyond EOD, truncated
[   67.740121][ T5894] loop2: p217 start 53543428 is beyond EOD, truncated
[   67.740132][ T5894] loop2: p218 start 53543428 is beyond EOD, truncated
[   67.740142][ T5894] loop2: p219 start 53543428 is beyond EOD, truncated
[   67.740152][ T5894] loop2: p220 start 53543428 is beyond EOD, truncated
[   67.740162][ T5894] loop2: p221 start 53543428 is beyond EOD, truncated
[   67.740173][ T5894] loop2: p222 start 53543428 is beyond EOD, truncated
[   67.740183][ T5894] loop2: p223 start 53543428 is beyond EOD, truncated
[   67.740193][ T5894] loop2: p224 start 53543428 is beyond EOD, truncated
[   67.740203][ T5894] loop2: p225 start 53543428 is beyond EOD, truncated
[   67.740213][ T5894] loop2: p226 start 53543428 is beyond EOD, truncated
[   67.740223][ T5894] loop2: p227 start 53543428 is beyond EOD, truncated
[   67.740234][ T5894] loop2: p228 start 53543428 is beyond EOD, truncated
[   67.740244][ T5894] loop2: p229 start 53543428 is beyond EOD, truncated
[   67.740254][ T5894] loop2: p230 start 53543428 is beyond EOD, truncated
[   67.740264][ T5894] loop2: p231 start 53543428 is beyond EOD, truncated
[   67.740274][ T5894] loop2: p232 start 53543428 is beyond EOD, truncated
[   67.740284][ T5894] loop2: p233 start 53543428 is beyond EOD, truncated
[   67.740293][ T5894] loop2: p234 start 53543428 is beyond EOD, truncated
[   67.740304][ T5894] loop2: p235 start 53543428 is beyond EOD, truncated
[   67.740313][ T5894] loop2: p236 start 53543428 is beyond EOD, truncated
[   67.740323][ T5894] loop2: p237 start 53543428 is beyond EOD, truncated
[   67.740333][ T5894] loop2: p238 start 53543428 is beyond EOD, truncated
[   67.740342][ T5894] loop2: p239 start 53543428 is beyond EOD, truncated
[   67.740352][ T5894] loop2: p240 start 53543428 is beyond EOD, truncated
[   67.740361][ T5894] loop2: p241 start 53543428 is beyond EOD, truncated
[   67.740371][ T5894] loop2: p242 start 53543428 is beyond EOD, truncated
[   67.740381][ T5894] loop2: p243 start 53543428 is beyond EOD, truncated
[   67.740391][ T5894] loop2: p244 start 53543428 is beyond EOD, truncated
[   67.740399][ T5894] loop2: p245 start 53543428 is beyond EOD, truncated
[   67.740408][ T5894] loop2: p246 start 53543428 is beyond EOD, truncated
[   67.740417][ T5894] loop2: p247 start 53543428 is beyond EOD, truncated
[   67.740427][ T5894] loop2: p248 start 53543428 is beyond EOD, truncated
[   67.740435][ T5894] loop2: p249 start 53543428 is beyond EOD, truncated
[   67.740444][ T5894] loop2: p250 start 53543428 is beyond EOD, truncated
[   67.740454][ T5894] loop2: p251 start 53543428 is beyond EOD, truncated
[   67.740463][ T5894] loop2: p252 start 53543428 is beyond EOD, truncated
[   67.740472][ T5894] loop2: p253 start 53543428 is beyond EOD, truncated
[   67.740481][ T5894] loop2: p254 start 53543428 is beyond EOD, truncated
[   67.740491][ T5894] loop2: p255 start 53543428 is beyond EOD, truncated
[   67.970271][ T5594] udevd[5594]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   68.088595][ T5468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.093666][ T5908] loop1: detected capacity change from 0 to 512
[   68.101773][ T5908] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   68.101782][ T5908] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   68.110373][ T5908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[   68.110441][ T5908] System zones: 1-12
[   68.110624][ T5908] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.119: bad orphan inode 131072
[   68.110705][ T5908] loop1: lost filesystem error report for type 5 error -117
[   68.112603][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   68.112615][    C1] EXT4-fs (loop1): initial error at time 1788502505: ext4_orphan_get:1429
[   68.112624][    C1] EXT4-fs (loop1): last error at time 1788502505: ext4_orphan_get:1429
[   68.119286][ T5908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.200530][ T5468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.204433][ T5687] Bluetooth: hci1: command tx timeout
[   68.231223][ T5696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.365412][ T5687] Bluetooth: hci2: command tx timeout
[   68.386651][ T5468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.450033][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.452712][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.455257][ T5879] bridge_slave_0: entered allmulticast mode
[   68.458152][ T5879] bridge_slave_0: entered promiscuous mode
[   68.461688][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.464140][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.466487][ T5879] bridge_slave_1: entered allmulticast mode
[   68.469363][ T5879] bridge_slave_1: entered promiscuous mode
[   68.486539][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.493351][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.575992][ T5879] team0: Port device team_slave_0 added
[   68.581923][ T5879] team0: Port device team_slave_1 added
[   68.639808][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.639895][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.640162][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.643239][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.643257][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   68.643271][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.691337][ T5468] bridge_slave_1: left allmulticast mode
[   68.691397][ T5468] bridge_slave_1: left promiscuous mode
[   68.691961][ T5468] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.716582][ T5468] bridge_slave_0: left allmulticast mode
[   68.716629][ T5468] bridge_slave_0: left promiscuous mode
[   68.716810][ T5468] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.792338][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.849472][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   68.858271][ T5468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.868892][ T5468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.873618][ T5468] bond0 (unregistering): Released all slaves
[   68.888144][ T5879] hsr_slave_0: entered promiscuous mode
[   68.888650][ T5879] hsr_slave_1: entered promiscuous mode
[   68.889001][ T5879] debugfs: 'hsr0' already exists in 'hsr'
[   68.889701][ T5879] Cannot create hsr debugfs directory
[   69.014084][   T33] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   69.109628][ T5339] 8021q: adding VLAN 0 to HW filter on device eth1
[   69.157496][ T5468] hsr_slave_0: left promiscuous mode
[   69.159940][ T5468] hsr_slave_1: left promiscuous mode
[   69.160906][ T5468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   69.160928][ T5468] batman_adv: batadv0: Removing interface: batadv_slave_0
[   69.164676][   T33] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[   69.165899][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   69.165916][   T33] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[   69.165931][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   69.165944][   T33] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[   69.165968][   T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.167457][ T5468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   69.167470][ T5468] batman_adv: batadv0: Removing interface: batadv_slave_1
[   69.172129][   T33] usb 3-1: config 0 descriptor??
[   69.184099][ T5468] veth1_macvtap: left promiscuous mode
[   69.184525][ T5468] veth0_macvtap: left promiscuous mode
[   69.184663][ T5468] veth1_vlan: left promiscuous mode
[   69.184784][ T5468] veth0_vlan: left promiscuous mode
[   69.382214][   T33] hdpvr 3-1:0.0: firmware version 0x1e dated q|RC@22[7BD^jvi0
[   69.382214][   T33] pY
[   69.403108][ T5687] Bluetooth: hci0: command tx timeout
[   69.523551][ T5468] team0 (unregistering): Port device team_slave_1 removed
[   69.545983][ T5468] team0 (unregistering): Port device team_slave_0 removed
[   69.591490][   T33] hdpvr 3-1:0.0: device init failed
[   69.591599][   T33] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[   69.598618][   T33] usb 3-1: USB disconnect, device number 3
[   69.849158][ T5879] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   69.858260][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   69.864429][ T5879] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   69.870495][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   69.875649][ T5879] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.890283][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   69.896042][ T5879] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.907779][ T5879] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   70.047106][ T5339] 8021q: adding VLAN 0 to HW filter on device eth2
[   70.101974][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.119763][ T5879] 8021q: adding VLAN 0 to HW filter on device team0
[   70.149116][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.149233][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.168134][ T1107] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.168258][ T1107] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.457085][ T5687] Bluetooth: hci2: command tx timeout
[   70.775429][ T5339] 8021q: adding VLAN 0 to HW filter on device eth3
[   71.147938][ T6016] 9p: Unknown uid 00000000004294967295
[   71.279764][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0
[   71.287059][ T5339] 8021q: adding VLAN 0 to HW filter on device eth4
[   71.368183][ T5879] veth0_vlan: entered promiscuous mode
[   71.374530][ T5879] veth1_vlan: entered promiscuous mode
[   71.492720][ T5687] Bluetooth: hci0: command tx timeout
[   71.589755][ T6033] netlink: 'syz.2.149': attribute type 8 has an invalid length.
[   71.646652][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[   71.646755][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   71.680054][ T5879] veth0_macvtap: entered promiscuous mode
[   71.693890][ T5879] veth1_macvtap: entered promiscuous mode
[   71.717635][ T6036] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.151'.
[   71.721435][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.739473][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.794576][ T5468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.794627][ T5468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.810094][ T6040] loop1: detected capacity change from 0 to 512
[   71.817046][ T6040] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   71.817105][ T6040] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   71.834622][ T6040] EXT4-fs (loop1): orphan cleanup on readonly fs
[   71.841537][ T6040] Quota error (device loop1): v2_read_file_info: Block with free entry 5 out of range (1, 5).
[   71.841742][ T6040] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   71.844729][ T6040] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   71.846930][ T6040] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   71.848527][ T6040] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.152: corrupted inode contents
[   71.848651][ T6040] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.852626][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   71.852640][    C1] EXT4-fs (loop1): initial error at time 1788502509: mb_free_blocks:2049: inode 12: block 14
[   71.852665][    C1] EXT4-fs (loop1): last error at time 1788502509: mb_free_blocks:2049: inode 12: block 14
[   71.860985][ T6040] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #12: comm syz.1.152: mark_inode_dirty error
[   71.861009][ T6040] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.861220][ T6040] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.152: corrupted inode contents
[   71.861233][ T6040] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.861350][ T6040] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.152: mark_inode_dirty error
[   71.861363][ T6040] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.861523][ T6040] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.152: corrupted inode contents
[   71.861539][ T6040] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.863415][ T6040] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem
[   71.863431][ T6040] loop1: lost filesystem error report for type 5 error -117
[   71.863582][ T6040] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #12: comm syz.1.152: corrupted inode contents
[   71.863596][ T6040] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.863732][ T6040] EXT4-fs error (device loop1): ext4_truncate:4721: inode #12: comm syz.1.152: mark_inode_dirty error
[   71.863747][ T6040] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[   71.863936][ T6040] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem
[   71.863949][ T6040] loop1: lost filesystem error report for type 5 error -117
[   71.864732][ T6040] EXT4-fs (loop1): 1 truncate cleaned up
[   71.866345][ T6040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.872211][ T6040] EXT4-fs (loop1): shut down requested (2)
[   71.931862][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.931873][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.935266][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.935286][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.936074][ T5696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.961756][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.961767][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.279838][ T6055] loop2: detected capacity change from 0 to 4096
[   72.285597][ T6055] EXT4-fs: Ignoring removed mblk_io_submit option
[   72.291576][ T6055] EXT4-fs (loop2): Test dummy encryption mode enabled
[   72.301057][ T6055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.342465][ T5691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.487566][ T6070] FAULT_INJECTION: forcing a failure.
[   72.487566][ T6070] name failslab, interval 1, probability 0, space 0, times 1
[   72.487618][ T6070] CPU: 1 UID: 0 PID: 6070 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT(full) 
[   72.487657][ T6070] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.487663][ T6070] Call Trace:
[   72.487667][ T6070]  <TASK>
[   72.487671][ T6070]  dump_stack_lvl+0xe8/0x150
[   72.487687][ T6070]  should_fail_ex+0x410/0x560
[   72.487699][ T6070]  should_failslab+0xa8/0x100
[   72.487709][ T6070]  __kmalloc_noprof+0xfe/0x720
[   72.487721][ T6070]  ? security_sk_alloc+0x52/0x360
[   72.487730][ T6070]  ? security_sk_alloc+0x52/0x360
[   72.487740][ T6070]  security_sk_alloc+0x52/0x360
[   72.487748][ T6070]  sk_prot_alloc+0x101/0x210
[   72.487759][ T6070]  ? sk_alloc+0x27/0x390
[   72.487769][ T6070]  sk_alloc+0x3a/0x390
[   72.487780][ T6070]  bpf_prog_test_run_skb+0x3a6/0x2230
[   72.487813][ T6070]  ? lock_acquire+0x115/0x350
[   72.487828][ T6070]  ? __fget_files+0x3a2/0x420
[   72.487836][ T6070]  ? __fget_files+0x2a/0x420
[   72.487846][ T6070]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[   72.487858][ T6070]  bpf_prog_test_run+0x2c5/0x340
[   72.487868][ T6070]  __sys_bpf+0xa22/0xd90
[   72.487880][ T6070]  ? __pfx___sys_bpf+0x10/0x10
[   72.487890][ T6070]  ? do_futex+0x3e7/0x4e0
[   72.487910][ T6070]  ? ksys_write+0x242/0x270
[   72.487920][ T6070]  ? rcu_is_watching+0x16/0xb0
[   72.487933][ T6070]  __x64_sys_bpf+0xba/0xd0
[   72.487942][ T6070]  do_syscall_64+0x166/0x520
[   72.487951][ T6070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.487960][ T6070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.487968][ T6070] RIP: 0033:0x7fdcbad9e159
[   72.487976][ T6070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.487982][ T6070] RSP: 002b:00007fdcbbd48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   72.487991][ T6070] RAX: ffffffffffffffda RBX: 00007fdcbb025fa0 RCX: 00007fdcbad9e159
[   72.487996][ T6070] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[   72.488001][ T6070] RBP: 00007fdcbae35024 R08: 0000000000000000 R09: 0000000000000000
[   72.488005][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   72.488009][ T6070] R13: 00007fdcbb026038 R14: 00007fdcbb025fa0 R15: 00007ffcd8607138
[   72.488021][ T6070]  </TASK>
[   72.646584][ T6075] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[   73.185908][ T6094] netlink: 'syz.3.170': attribute type 10 has an invalid length.
[   73.195692][ T6094] team0: Device vxcan1 is of different type
[   73.261424][ T6096] loop1: detected capacity change from 0 to 2048
[   73.329503][ T6098] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[   73.349347][ T6096]  loop1: p3 < > p4 < >
[   73.349400][ T6096] loop1: partition table partially beyond EOD, truncated
[   73.349590][ T6096] loop1: p3 start 4284289 is beyond EOD, truncated
[   73.574699][ T5687] Bluetooth: hci0: command tx timeout
[   73.647747][ T6105] loop1: detected capacity change from 0 to 8
[   73.684220][ T5594] udevd[5594]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[   73.871690][ T6113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.178'.
[   73.882076][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.883319][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.905112][ T6113] netlink: 44 bytes leftover after parsing attributes in process `syz.2.178'.
[   73.919677][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'.
[   73.960561][ T6115] bond1: entered promiscuous mode
[   74.103926][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   74.126119][ T6126] syz.3.185 uses obsolete (PF_INET,SOCK_PACKET)
[   74.203053][ T5839] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   74.228979][ T6130] openvswitch: netlink: Multiple metadata blocks provided
[   74.253423][    T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   74.254560][    T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[   74.254576][    T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   74.254587][    T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   74.254599][    T9] usb 2-1: config 220 has no interface number 2
[   74.254641][    T9] usb 2-1: config 220 interface 1 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   74.254656][    T9] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[   74.254672][    T9] usb 2-1: config 220 interface 0 has no altsetting 0
[   74.254683][    T9] usb 2-1: config 220 interface 76 has no altsetting 0
[   74.254694][    T9] usb 2-1: config 220 interface 1 has no altsetting 0
[   74.257574][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.257589][    T9] usb 2-1: Product: syz
[   74.257598][    T9] usb 2-1: Manufacturer: syz
[   74.257607][    T9] usb 2-1: SerialNumber: syz
[   74.379098][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short
[   74.380392][ T5839] usb 3-1: not running at top speed; connect to a high speed hub
[   74.380416][ T5839] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   74.381853][ T5839] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[   74.381871][ T5839] usb 3-1: config 0 has no interface number 0
[   74.381897][ T5839] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[   74.381914][ T5839] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   74.381928][ T5839] usb 3-1: config 0 interface 88 has no altsetting 0
[   74.389344][ T5839] usb 3-1: string descriptor 0 read error: -22
[   74.389520][ T5839] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   74.404617][ T5839] usb 3-1: config 0 descriptor??
[   74.439417][ T5839] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input4
[   74.501356][    T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[   74.501428][    T9] uvcvideo 2-1:220.0: No valid video chain found.
[   74.503201][    T9] usb 2-1: selecting invalid altsetting 0
[   74.532066][    T9] usb 2-1: selecting invalid altsetting 0
[   74.532115][    T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[   74.538986][    T9] usb 2-1: USB disconnect, device number 2
[   74.572286][ T5622] udevd[5622]: Error opening device "/dev/input/event3": Input/output error
[   74.577114][ T5622] udevd[5622]: Unable to EVIOCGABS device "/dev/input/event3"
[   74.577254][ T5622] udevd[5622]: Unable to EVIOCGABS device "/dev/input/event3"
[   74.620457][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.621483][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.136780][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'.
[   75.189401][ T5004] usb 3-1: USB disconnect, device number 4
[   75.325065][ T6174] loop2: detected capacity change from 0 to 256
[   75.328376][ T6174] exfat: Deprecated parameter 'namecase'
[   75.337959][ T6174] exFAT-fs (loop2): error, invalid access to FAT bad cluster (entry 0x00000005)
[   75.338335][ T6174] exFAT-fs (loop2): failed to count the number of clusters in root
[   75.338341][ T6174] exFAT-fs (loop2): failed to recognize exfat type
[   75.459292][ T6182] netlink: 'syz.1.210': attribute type 4 has an invalid length.
[   75.566085][ T6190] warning: `syz.2.213' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.643064][ T5687] Bluetooth: hci0: command tx timeout
[   75.649362][ T6193] loop1: detected capacity change from 0 to 256
[   75.667931][ T6193] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[   76.345391][ T6233] loop1: detected capacity change from 0 to 512
[   76.348752][ T6233] EXT4-fs: Ignoring removed nobh option
[   76.357235][ T6233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   76.396128][ T6233] EXT4-fs (loop1): 1 truncate cleaned up
[   76.415483][ T6233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.519288][ T5696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.593890][ T6246] FAULT_INJECTION: forcing a failure.
[   76.593890][ T6246] name failslab, interval 1, probability 0, space 0, times 0
[   76.598308][ T6246] CPU: 1 UID: 0 PID: 6246 Comm: syz.1.236 Not tainted syzkaller #0 PREEMPT(full) 
[   76.598348][ T6246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.598355][ T6246] Call Trace:
[   76.598359][ T6246]  <TASK>
[   76.598363][ T6246]  dump_stack_lvl+0xe8/0x150
[   76.598379][ T6246]  should_fail_ex+0x410/0x560
[   76.598392][ T6246]  should_failslab+0xa8/0x100
[   76.598404][ T6246]  __kmalloc_noprof+0xfe/0x720
[   76.598416][ T6246]  ? lock_acquire+0x115/0x350
[   76.598423][ T6246]  ? tomoyo_encode+0x2ad/0x570
[   76.598434][ T6246]  ? tomoyo_encode+0x2ad/0x570
[   76.598447][ T6246]  tomoyo_encode+0x2ad/0x570
[   76.598460][ T6246]  tomoyo_mount_permission+0x3a4/0x9e0
[   76.598471][ T6246]  ? tomoyo_mount_permission+0x2b5/0x9e0
[   76.598482][ T6246]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[   76.598491][ T6246]  ? kasan_save_track+0x4f/0x80
[   76.598526][ T6246]  ? kasan_quarantine_put+0xbb/0x1f0
[   76.598539][ T6246]  security_sb_mount+0xe4/0x320
[   76.598558][ T6246]  path_mount+0xbc/0x1050
[   76.598571][ T6246]  ? user_path_at+0xd4/0x160
[   76.598585][ T6246]  __se_sys_mount+0x31d/0x420
[   76.598603][ T6246]  ? __pfx___se_sys_mount+0x10/0x10
[   76.598619][ T6246]  ? __x64_sys_mount+0x20/0xc0
[   76.598634][ T6246]  do_syscall_64+0x166/0x520
[   76.598648][ T6246]  ? trace_irq_disable+0x3b/0x140
[   76.598661][ T6246]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.598677][ T6246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.598689][ T6246] RIP: 0033:0x7ff2c6d9e159
[   76.598702][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   76.598713][ T6246] RSP: 002b:00007ff2c7c57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   76.598755][ T6246] RAX: ffffffffffffffda RBX: 00007ff2c7025fa0 RCX: 00007ff2c6d9e159
[   76.598764][ T6246] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000
[   76.598772][ T6246] RBP: 00007ff2c6e35024 R08: 0000000000000000 R09: 0000000000000000
[   76.598780][ T6246] R10: 0000000000004800 R11: 0000000000000246 R12: 0000000000000000
[   76.598788][ T6246] R13: 00007ff2c7026038 R14: 00007ff2c7025fa0 R15: 00007fffbe871708
[   76.598804][ T6246]  </TASK>
[   76.770039][  T806] cfg80211: failed to load regulatory.db
[   76.971164][ T6260] loop1: detected capacity change from 0 to 4096
[   77.008310][ T6260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.043227][ T6260] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   77.102378][ T5696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.197218][ T6270] loop1: detected capacity change from 0 to 8
[   77.197858][ T6268] overlayfs: failed to clone lowerpath
[   77.213585][ T6270] SQUASHFS error: Failed to read block 0x6de: -5
[   77.216486][ T6270] SQUASHFS error: Unable to read metadata cache entry [6dc]
[   77.219011][ T6270] SQUASHFS error: Unable to read inode 0x11f
[   77.391854][ T6278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   78.160802][ T6302] loop1: detected capacity change from 0 to 512
[   78.166527][ T6302] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.173208][ T6302] EXT4-fs (loop1): 1 truncate cleaned up
[   78.181829][ T6302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.196882][ T6302] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   78.231412][ T5696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.291657][ T6309] loop1: detected capacity change from 0 to 128
[   78.304605][ T6309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   78.313272][ T6309] System zones: 1-3, 19-19, 35-36
[   78.314237][ T6309] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   78.314896][ T6309] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   78.347452][ T6312] fuse: Bad value for 'fd'
[   78.392384][ T5696] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   78.677181][   T34] audit: type=1326 audit(1788502516.206:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbad9e159 code=0x7ffc0000
[   78.688439][   T34] audit: type=1326 audit(1788502516.216:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbad9e159 code=0x7ffc0000
[   78.700021][   T34] audit: type=1326 audit(1788502516.226:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbad9e159 code=0x7ffc0000
[   78.709574][ T6331] syz.2.274 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   78.713917][   T34] audit: type=1326 audit(1788502516.236:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.274" exe="/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fdcbad9e159 code=0x7ffc0000
[   78.722784][   T34] audit: type=1326 audit(1788502516.246:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbad9e159 code=0x7ffc0000
[   78.731960][   T34] audit: type=1326 audit(1788502516.256:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbad9e159 code=0x7ffc0000
[   78.741733][   T34] audit: type=1326 audit(1788502516.266:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcbad9e159 code=0x7ffc0000
[   78.750385][   T34] audit: type=1326 audit(1788502516.276:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.274" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdcbad9e159 code=0x7ffc0000
[   78.761856][   T34] audit: type=1326 audit(1788502516.286:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.274" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdcbad9e159 code=0x7ffc0000
[   79.067259][ T6346] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   79.143475][ T6350] block2mtd: illegal erase size
[   79.338268][ T6357] loop1: detected capacity change from 0 to 2048
[   79.370984][ T6357]  loop1: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 
[   79.371225][ T6357] loop1: p1 size 16779263 extends beyond EOD, truncated
[   79.379237][ T6357] loop1: p3 start 3036741376 is beyond EOD, truncated
[   79.379259][ T6357] loop1: p5 size 16779263 extends beyond EOD, truncated
[   79.382214][ T6357] loop1: p6 size 16779263 extends beyond EOD, truncated
[   79.385815][ T6357] loop1: p7 size 16779263 extends beyond EOD, truncated
[   79.388864][ T6357] loop1: p8 size 16779263 extends beyond EOD, truncated
[   79.398526][ T6357] loop1: p9 size 16779263 extends beyond EOD, truncated
[   79.404542][ T6357] loop1: p10 size 16779263 extends beyond EOD, truncated
[   79.413767][ T6357] loop1: p11 size 16779263 extends beyond EOD, truncated
[   79.416826][ T6357] loop1: p12 size 16779263 extends beyond EOD, truncated
[   79.419401][ T6357] loop1: p13 size 16779263 extends beyond EOD, truncated
[   79.423057][ T6357] loop1: p14 size 16779263 extends beyond EOD, truncated
[   79.425510][ T6357] loop1: p15 size 16779263 extends beyond EOD, truncated
[   79.428627][ T6357] loop1: p16 size 16779263 extends beyond EOD, truncated
[   79.429894][ T6357] loop1: p17 size 16779263 extends beyond EOD, truncated
[   79.431434][ T6357] loop1: p18 size 16779263 extends beyond EOD, truncated
[   79.433951][ T6357] loop1: p19 size 16779263 extends beyond EOD, truncated
[   79.435921][ T6357] loop1: p20 size 16779263 extends beyond EOD, truncated
[   79.437299][ T6357] loop1: p21 size 16779263 extends beyond EOD, truncated
[   79.440349][ T6357] loop1: p22 size 16779263 extends beyond EOD, truncated
[   79.441866][ T6357] loop1: p23 size 16779263 extends beyond EOD, truncated
[   79.447895][ T6357] loop1: p24 size 16779263 extends beyond EOD, truncated
[   79.452517][ T6357] loop1: p25 size 16779263 extends beyond EOD, truncated
[   79.456025][ T6357] loop1: p26 size 16779263 extends beyond EOD, truncated
[   79.461222][ T6357] loop1: p27 size 16779263 extends beyond EOD, truncated
[   79.465997][ T6357] loop1: p28 size 16779263 extends beyond EOD, truncated
[   79.476101][ T6357] loop1: p29 size 16779263 extends beyond EOD, truncated
[   79.477840][ T6359] bridge0: entered allmulticast mode
[   79.479007][ T6357] loop1: p30 size 16779263 extends beyond EOD, truncated
[   79.485437][ T6357] loop1: p31 size 16779263 extends beyond EOD, truncated
[   79.491980][ T6357] loop1: p32 size 16779263 extends beyond EOD, truncated
[   79.495479][ T6357] loop1: p33 size 16779263 extends beyond EOD, truncated
[   79.497348][ T6357] loop1: p34 size 16779263 extends beyond EOD, truncated
[   79.500081][ T6357] loop1: p35 size 16779263 extends beyond EOD, truncated
[   79.503702][ T6357] loop1: p36 size 16779263 extends beyond EOD, truncated
[   79.507462][ T6357] loop1: p37 size 16779263 extends beyond EOD, truncated
[   79.510220][ T6357] loop1: p38 size 16779263 extends beyond EOD, truncated
[   79.513419][ T6357] loop1: p39 size 16779263 extends beyond EOD, truncated
[   79.516899][ T6357] loop1: p40 size 16779263 extends beyond EOD, truncated
[   79.520179][ T6357] loop1: p41 size 16779263 extends beyond EOD, truncated
[   79.521488][ T6357] loop1: p42 size 16779263 extends beyond EOD, truncated
[   79.526020][ T6357] loop1: p43 size 16779263 extends beyond EOD, truncated
[   79.529489][ T6357] loop1: p44 size 16779263 extends beyond EOD, truncated
[   79.535929][ T6357] loop1: p45 size 16779263 extends beyond EOD, truncated
[   79.536980][ T6357] loop1: p46 size 16779263 extends beyond EOD, truncated
[   79.540160][ T6357] loop1: p47 size 16779263 extends beyond EOD, truncated
[   79.541177][ T6357] loop1: p48 size 16779263 extends beyond EOD, truncated
[   79.543417][ T6357] loop1: p49 size 16779263 extends beyond EOD, truncated
[   79.544568][ T6357] loop1: p50 size 16779263 extends beyond EOD, truncated
[   79.547061][ T6357] loop1: p51 size 16779263 extends beyond EOD, truncated
[   79.547664][ T6357] loop1: p52 size 16779263 extends beyond EOD, truncated
[   79.548289][ T6357] loop1: p53 size 16779263 extends beyond EOD, truncated
[   79.551145][ T6357] loop1: p54 size 16779263 extends beyond EOD, truncated
[   79.552012][ T6357] loop1: p55 size 16779263 extends beyond EOD, truncated
[   79.553101][ T6357] loop1: p56 size 16779263 extends beyond EOD, truncated
[   79.555782][ T6357] loop1: p57 size 16779263 extends beyond EOD, truncated
[   79.558967][ T6357] loop1: p58 size 16779263 extends beyond EOD, truncated
[   79.559854][ T6357] loop1: p59 size 16779263 extends beyond EOD, truncated
[   79.560760][ T6357] loop1: p60 size 16779263 extends beyond EOD, truncated
[   79.562033][ T6357] loop1: p61 size 16779263 extends beyond EOD, truncated
[   79.565942][ T6357] loop1: p62 size 16779263 extends beyond EOD, truncated
[   79.569422][ T6357] loop1: p63 size 16779263 extends beyond EOD, truncated
[   79.571954][ T6357] loop1: p64 size 16779263 extends beyond EOD, truncated
[   79.576132][ T6357] loop1: p65 size 16779263 extends beyond EOD, truncated
[   79.587962][ T6357] loop1: p66 size 16779263 extends beyond EOD, truncated
[   79.589351][ T6357] loop1: p67 size 16779263 extends beyond EOD, truncated
[   79.592230][ T6357] loop1: p68 size 16779263 extends beyond EOD, truncated
[   79.595443][ T6357] loop1: p69 size 16779263 extends beyond EOD, truncated
[   79.597458][ T6357] loop1: p70 size 16779263 extends beyond EOD, truncated
[   79.602321][ T6357] loop1: p71 size 16779263 extends beyond EOD, truncated
[   79.604053][ T6357] loop1: p72 size 16779263 extends beyond EOD, truncated
[   79.608827][ T6357] loop1: p73 size 16779263 extends beyond EOD, truncated
[   79.611389][ T6357] loop1: p74 size 16779263 extends beyond EOD, truncated
[   79.612471][ T6357] loop1: p75 size 16779263 extends beyond EOD, truncated
[   79.619362][ T6357] loop1: p76 size 16779263 extends beyond EOD, truncated
[   79.620795][ T6357] loop1: p77 size 16779263 extends beyond EOD, truncated
[   79.622108][ T6357] loop1: p78 size 16779263 extends beyond EOD, truncated
[   79.627517][ T6357] loop1: p79 size 16779263 extends beyond EOD, truncated
[   79.630989][ T6357] loop1: p80 size 16779263 extends beyond EOD, truncated
[   79.631837][ T6357] loop1: p81 size 16779263 extends beyond EOD, truncated
[   79.634644][ T6357] loop1: p82 size 16779263 extends beyond EOD, truncated
[   79.638119][ T6357] loop1: p83 size 16779263 extends beyond EOD, truncated
[   79.640089][ T6357] loop1: p84 size 16779263 extends beyond EOD, truncated
[   79.641295][ T6357] loop1: p85 size 16779263 extends beyond EOD, truncated
[   79.644864][ T6357] loop1: p86 size 16779263 extends beyond EOD, truncated
[   79.648002][ T6357] loop1: p87 size 16779263 extends beyond EOD, truncated
[   79.652269][ T6357] loop1: p88 size 16779263 extends beyond EOD, truncated
[   79.658894][ T6357] loop1: p89 size 16779263 extends beyond EOD, truncated
[   79.661131][ T6357] loop1: p90 size 16779263 extends beyond EOD, truncated
[   79.662213][ T6357] loop1: p91 size 16779263 extends beyond EOD, truncated
[   79.664420][ T6357] loop1: p92 size 16779263 extends beyond EOD, truncated
[   79.666645][ T6357] loop1: p93 size 16779263 extends beyond EOD, truncated
[   79.670439][ T6357] loop1: p94 size 16779263 extends beyond EOD, truncated
[   79.672773][ T6357] loop1: p95 size 16779263 extends beyond EOD, truncated
[   79.677382][ T6357] loop1: p96 size 16779263 extends beyond EOD, truncated
[   79.683862][ T6357] loop1: p97 size 16779263 extends beyond EOD, truncated
[   79.687238][ T6357] loop1: p98 size 16779263 extends beyond EOD, truncated
[   79.693440][ T6357] loop1: p99 size 16779263 extends beyond EOD, truncated
[   79.699867][ T6357] loop1: p100 size 16779263 extends beyond EOD, truncated
[   79.708167][ T6357] loop1: p101 size 16779263 extends beyond EOD, truncated
[   79.712496][ T6357] loop1: p102 size 16779263 extends beyond EOD, truncated
[   79.728695][ T6357] loop1: p103 size 16779263 extends beyond EOD, truncated
[   79.729482][ T6357] loop1: p104 size 16779263 extends beyond EOD, truncated
[   79.735601][ T6357] loop1: p105 size 16779263 extends beyond EOD, truncated
[   79.749933][ T6357] loop1: p106 size 16779263 extends beyond EOD, truncated
[   79.753149][ T6357] loop1: p107 size 16779263 extends beyond EOD, truncated
[   79.757179][ T6357] loop1: p108 size 16779263 extends beyond EOD, truncated
[   79.758773][ T6357] loop1: p109 size 16779263 extends beyond EOD, truncated
[   79.761255][ T6357] loop1: p110 size 16779263 extends beyond EOD, truncated
[   79.763721][ T6357] loop1: p111 size 16779263 extends beyond EOD, truncated
[   79.766570][ T6357] loop1: p112 size 16779263 extends beyond EOD, truncated
[   79.768161][ T6357] loop1: p113 size 16779263 extends beyond EOD, truncated
[   79.770793][ T6357] loop1: p114 size 16779263 extends beyond EOD, truncated
[   79.775381][ T6357] loop1: p115 size 16779263 extends beyond EOD, truncated
[   79.776607][ T6357] loop1: p116 size 16779263 extends beyond EOD, truncated
[   79.778275][ T6357] loop1: p117 size 16779263 extends beyond EOD, truncated
[   79.780421][ T6357] loop1: p118 size 16779263 extends beyond EOD, truncated
[   79.783263][ T6357] loop1: p119 size 16779263 extends beyond EOD, truncated
[   79.786577][ T6357] loop1: p120 size 16779263 extends beyond EOD, truncated
[   79.789231][ T6357] loop1: p121 size 16779263 extends beyond EOD, truncated
[   79.793200][ T6357] loop1: p122 size 16779263 extends beyond EOD, truncated
[   79.805148][ T6357] loop1: p123 size 16779263 extends beyond EOD, truncated
[   79.808040][ T6357] loop1: p124 size 16779263 extends beyond EOD, truncated
[   79.812757][ T6357] loop1: p125 size 16779263 extends beyond EOD, truncated
[   79.814463][ T6357] loop1: p126 size 16779263 extends beyond EOD, truncated
[   79.818285][ T6357] loop1: p127 size 16779263 extends beyond EOD, truncated
[   79.819665][ T6357] loop1: p128 size 16779263 extends beyond EOD, truncated
[   79.827204][ T6357] loop1: p129 size 16779263 extends beyond EOD, truncated
[   79.830523][ T6357] loop1: p130 size 16779263 extends beyond EOD, truncated
[   79.840183][ T6357] loop1: p131 size 16779263 extends beyond EOD, truncated
[   79.845436][ T6357] loop1: p132 size 16779263 extends beyond EOD, truncated
[   79.852995][ T6357] loop1: p133 size 16779263 extends beyond EOD, truncated
[   79.861601][ T6357] loop1: p134 size 16779263 extends beyond EOD, truncated
[   79.864445][ T6357] loop1: p135 size 16779263 extends beyond EOD, truncated
[   79.878497][ T6357] loop1: p136 size 16779263 extends beyond EOD, truncated
[   79.881850][ T6357] loop1: p137 size 16779263 extends beyond EOD, truncated
[   79.888984][ T6357] loop1: p138 size 16779263 extends beyond EOD, truncated
[   79.900518][ T6357] loop1: p139 size 16779263 extends beyond EOD, truncated
[   79.904176][ T6357] loop1: p140 size 16779263 extends beyond EOD, truncated
[   79.913757][ T6357] loop1: p141 size 16779263 extends beyond EOD, truncated
[   79.921928][ T6357] loop1: p142 size 16779263 extends beyond EOD, truncated
[   79.927049][ T6357] loop1: p143 size 16779263 extends beyond EOD, truncated
[   79.932909][ T6357] loop1: p144 size 16779263 extends beyond EOD, truncated
[   79.941241][ T6357] loop1: p145 size 16779263 extends beyond EOD, truncated
[   79.946322][ T6357] loop1: p146 size 16779263 extends beyond EOD, truncated
[   79.952799][ T6357] loop1: p147 size 16779263 extends beyond EOD, truncated
[   79.962375][ T6357] loop1: p148 size 16779263 extends beyond EOD, truncated
[   79.971128][ T6357] loop1: p149 size 16779263 extends beyond EOD, truncated
[   79.974577][ T6357] loop1: p150 size 16779263 extends beyond EOD, truncated
[   79.976479][ T6357] loop1: p151 size 16779263 extends beyond EOD, truncated
[   79.980620][ T6357] loop1: p152 size 16779263 extends beyond EOD, truncated
[   79.983798][ T6357] loop1: p153 size 16779263 extends beyond EOD, truncated
[   79.989043][ T6357] loop1: p154 size 16779263 extends beyond EOD, truncated
[   79.993788][ T6357] loop1: p155 size 16779263 extends beyond EOD, truncated
[   79.996243][ T6357] loop1: p156 size 16779263 extends beyond EOD, truncated
[   79.998483][ T6357] loop1: p157 size 16779263 extends beyond EOD, truncated
[   80.006971][ T6357] loop1: p158 size 16779263 extends beyond EOD, truncated
[   80.019061][ T6357] loop1: p159 size 16779263 extends beyond EOD, truncated
[   80.137305][ T6357] loop1: p160 size 16779263 extends beyond EOD, truncated
[   80.142042][ T6357] loop1: p161 size 16779263 extends beyond EOD, truncated
[   80.144968][ T6357] loop1: p162 size 16779263 extends beyond EOD, truncated
[   80.146213][ T6357] loop1: p163 size 16779263 extends beyond EOD, truncated
[   80.147989][ T6357] loop1: p164 size 16779263 extends beyond EOD, truncated
[   80.149928][ T6357] loop1: p165 size 16779263 extends beyond EOD, truncated
[   80.153408][ T6357] loop1: p166 size 16779263 extends beyond EOD, truncated
[   80.155259][ T6357] loop1: p167 size 16779263 extends beyond EOD, truncated
[   80.156688][ T6357] loop1: p168 size 16779263 extends beyond EOD, truncated
[   80.157820][ T6357] loop1: p169 size 16779263 extends beyond EOD, truncated
[   80.159477][ T6357] loop1: p170 size 16779263 extends beyond EOD, truncated
[   80.160548][ T6357] loop1: p171 size 16779263 extends beyond EOD, truncated
[   80.162256][ T6357] loop1: p172 size 16779263 extends beyond EOD, truncated
[   80.169733][ T6357] loop1: p173 size 16779263 extends beyond EOD, truncated
[   80.173070][ T6357] loop1: p174 size 16779263 extends beyond EOD, truncated
[   80.173703][ T6357] loop1: p175 size 16779263 extends beyond EOD, truncated
[   80.176852][ T6357] loop1: p176 size 16779263 extends beyond EOD, truncated
[   80.178397][ T6357] loop1: p177 size 16779263 extends beyond EOD, truncated
[   80.184505][ T6357] loop1: p178 size 16779263 extends beyond EOD, truncated
[   80.186095][ T6357] loop1: p179 size 16779263 extends beyond EOD, truncated
[   80.189126][ T6357] loop1: p180 size 16779263 extends beyond EOD, truncated
[   80.198793][ T6357] loop1: p181 size 16779263 extends beyond EOD, truncated
[   80.401847][ T6357] loop1: p182 size 16779263 extends beyond EOD, truncated
[   80.407978][ T6357] loop1: p183 size 16779263 extends beyond EOD, truncated
[   80.413055][ T6357] loop1: p184 size 16779263 extends beyond EOD, truncated
[   80.414065][ T6357] loop1: p185 size 16779263 extends beyond EOD, truncated
[   80.416981][ T6357] loop1: p186 size 16779263 extends beyond EOD, truncated
[   80.420336][ T6357] loop1: p187 size 16779263 extends beyond EOD, truncated
[   80.421288][ T6357] loop1: p188 size 16779263 extends beyond EOD, truncated
[   80.427361][ T6357] loop1: p189 size 16779263 extends beyond EOD, truncated
[   80.429103][ T6357] loop1: p190 size 16779263 extends beyond EOD, truncated
[   80.431968][ T6357] loop1: p191 size 16779263 extends beyond EOD, truncated
[   80.433652][ T6357] loop1: p192 size 16779263 extends beyond EOD, truncated
[   80.436506][ T6357] loop1: p193 size 16779263 extends beyond EOD, truncated
[   80.439844][ T6357] loop1: p194 size 16779263 extends beyond EOD, truncated
[   80.440774][ T6357] loop1: p195 size 16779263 extends beyond EOD, truncated
[   80.443521][ T6357] loop1: p196 size 16779263 extends beyond EOD, truncated
[   80.446305][ T6357] loop1: p197 size 16779263 extends beyond EOD, truncated
[   80.448156][ T6357] loop1: p198 size 16779263 extends beyond EOD, truncated
[   80.451702][ T6357] loop1: p199 size 16779263 extends beyond EOD, truncated
[   80.452331][ T6357] loop1: p200 size 16779263 extends beyond EOD, truncated
[   80.455308][ T6357] loop1: p201 size 16779263 extends beyond EOD, truncated
[   80.456725][ T6357] loop1: p202 size 16779263 extends beyond EOD, truncated
[   80.458289][ T6357] loop1: p203 size 16779263 extends beyond EOD, truncated
[   80.458904][ T6357] loop1: p204 size 16779263 extends beyond EOD, truncated
[   80.459992][ T6357] loop1: p205 size 16779263 extends beyond EOD, truncated
[   80.460649][ T6357] loop1: p206 size 16779263 extends beyond EOD, truncated
[   80.461655][ T6357] loop1: p207 size 16779263 extends beyond EOD, truncated
[   80.465442][ T6357] loop1: p208 size 16779263 extends beyond EOD, truncated
[   80.466383][ T6357] loop1: p209 size 16779263 extends beyond EOD, truncated
[   80.470892][ T6357] loop1: p210 size 16779263 extends beyond EOD, truncated
[   80.472201][ T6357] loop1: p211 size 16779263 extends beyond EOD, truncated
[   80.475891][ T6357] loop1: p212 size 16779263 extends beyond EOD, truncated
[   80.479098][ T6357] loop1: p213 size 16779263 extends beyond EOD, truncated
[   80.481833][ T6357] loop1: p214 size 16779263 extends beyond EOD, truncated
[   80.483422][ T6357] loop1: p215 size 16779263 extends beyond EOD, truncated
[   80.485253][ T6357] loop1: p216 size 16779263 extends beyond EOD, truncated
[   80.487643][ T6357] loop1: p217 size 16779263 extends beyond EOD, truncated
[   80.490517][ T6357] loop1: p218 size 16779263 extends beyond EOD, truncated
[   80.491112][ T6357] loop1: p219 size 16779263 extends beyond EOD, truncated
[   80.496973][ T6357] loop1: p220 size 16779263 extends beyond EOD, truncated
[   80.499973][ T6357] loop1: p221 size 16779263 extends beyond EOD, truncated
[   80.503008][ T6357] loop1: p222 size 16779263 extends beyond EOD, truncated
[   80.505396][ T6357] loop1: p223 size 16779263 extends beyond EOD, truncated
[   80.508776][ T6357] loop1: p224 size 16779263 extends beyond EOD, truncated
[   80.509899][ T6357] loop1: p225 size 16779263 extends beyond EOD, truncated
[   80.512121][ T6357] loop1: p226 size 16779263 extends beyond EOD, truncated
[   80.516342][ T6357] loop1: p227 size 16779263 extends beyond EOD, truncated
[   80.519352][ T6357] loop1: p228 size 16779263 extends beyond EOD, truncated
[   80.521921][ T6357] loop1: p229 size 16779263 extends beyond EOD, truncated
[   80.525356][ T6357] loop1: p230 size 16779263 extends beyond EOD, truncated
[   80.527130][ T6357] loop1: p231 size 16779263 extends beyond EOD, truncated
[   80.529199][ T6357] loop1: p232 size 16779263 extends beyond EOD, truncated
[   80.529851][ T6357] loop1: p233 size 16779263 extends beyond EOD, truncated
[   80.533144][ T6357] loop1: p234 size 16779263 extends beyond EOD, truncated
[   80.535756][ T6357] loop1: p235 size 16779263 extends beyond EOD, truncated
[   80.542389][ T6357] loop1: p236 size 16779263 extends beyond EOD, truncated
[   80.544516][ T6357] loop1: p237 size 16779263 extends beyond EOD, truncated
[   80.546942][ T6357] loop1: p238 size 16779263 extends beyond EOD, truncated
[   80.547861][ T6357] loop1: p239 size 16779263 extends beyond EOD, truncated
[   80.549955][ T6357] loop1: p240 size 16779263 extends beyond EOD, truncated
[   80.553350][ T6357] loop1: p241 size 16779263 extends beyond EOD, truncated
[   80.557358][ T6357] loop1: p242 size 16779263 extends beyond EOD, truncated
[   80.561031][ T6357] loop1: p243 size 16779263 extends beyond EOD, truncated
[   80.561620][ T6357] loop1: p244 size 16779263 extends beyond EOD, truncated
[   80.563099][ T6357] loop1: p245 size 16779263 extends beyond EOD, truncated
[   80.564051][ T6357] loop1: p246 size 16779263 extends beyond EOD, truncated
[   80.566353][ T6357] loop1: p247 size 16779263 extends beyond EOD, truncated
[   80.567791][ T6357] loop1: p248 size 16779263 extends beyond EOD, truncated
[   80.569838][ T6357] loop1: p249 size 16779263 extends beyond EOD, truncated
[   80.571318][ T6357] loop1: p250 size 16779263 extends beyond EOD, truncated
[   80.573925][ T6357] loop1: p251 size 16779263 extends beyond EOD, truncated
[   80.574516][ T6357] loop1: p252 size 16779263 extends beyond EOD, truncated
[   80.577213][ T6357] loop1: p253 size 16779263 extends beyond EOD, truncated
[   80.578260][ T6357] loop1: p254 size 16779263 extends beyond EOD, truncated
[   80.581348][ T6357] loop1: p255 size 16779263 extends beyond EOD, truncated
[   80.636071][ T6379] tmpfs: Bad value for 'size'
[   80.777172][ T6383] capability: warning: `syz.3.298' uses 32-bit capabilities (legacy support in use)
[   81.091763][ T6395] overlayfs: failed to clone upperpath
[   81.267154][ T6405] use of bytesused == 0 is deprecated and will be removed in the future,
[   81.267212][ T6405] use the actual size instead.
[   81.376925][ T6405] loop2: detected capacity change from 0 to 4096
[   82.316481][ T6143] udevd[6143]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[   82.318289][ T5673] udevd[5673]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[   82.328664][ T5594] udevd[5594]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   82.333682][ T5626] udevd[5626]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[   82.342708][ T5622] udevd[5622]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[   82.412756][ T6437] udevd[6437]: inotify_add_watch(7, /dev/loop1p10, 10) failed: No such file or directory
[   82.434385][ T6432] udevd[6432]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory
[   82.482200][ T6435] udevd[6435]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory
[   82.526357][ T6446] udevd[6446]: inotify_add_watch(7, /dev/loop1p13, 10) failed: No such file or directory
[   82.534599][ T6440] udevd[6440]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory
[   83.096457][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'.
[   83.164978][  T806] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   83.332028][  T806] usb 3-1: unable to get BOS descriptor or descriptor too short
[   83.332084][  T806] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8
[   83.344201][  T806] usb 3-1: config 13 has an invalid interface number: 50 but max is 3
[   83.344241][  T806] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[   83.344284][  T806] usb 3-1: config 13 has 1 interface, different from the descriptor's value: 4
[   83.344310][  T806] usb 3-1: config 13 has no interface number 0
[   83.344347][  T806] usb 3-1: config 13 interface 50 altsetting 4 endpoint 0x4 has an invalid bInterval 0, changing to 7
[   83.344374][  T806] usb 3-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[   83.344402][  T806] usb 3-1: config 13 interface 50 has no altsetting 0
[   83.376245][  T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.376298][  T806] usb 3-1: Product: syz
[   83.376379][  T806] usb 3-1: Manufacturer: syz
[   83.376402][  T806] usb 3-1: SerialNumber: syz
[   83.658947][  T806] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   83.671029][   T12] usb 3-1: Failed to submit usb control message: -71
[   83.671104][   T12] usb 3-1: unable to send the bmi data to the device: -71
[   83.672206][   T12] usb 3-1: unable to get target info from device
[   83.672219][   T12] usb 3-1: could not get target info (-71)
[   83.672368][   T12] usb 3-1: could not probe fw (-71)
[   83.704309][  T806] usb 3-1: USB disconnect, device number 5
[   83.855306][ T6487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.158209][ T6509] netlink: 'syz.3.339': attribute type 28 has an invalid length.
[   84.161285][ T6509] netlink: 'syz.3.339': attribute type 3 has an invalid length.
[   84.163067][ T6509] netlink: 132 bytes leftover after parsing attributes in process `syz.3.339'.
[   84.411530][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'.
[   85.241232][ T6548] loop1: detected capacity change from 0 to 512
[   85.257228][ T6548] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   85.265008][ T6548] EXT4-fs (loop1): 1 truncate cleaned up
[   85.272264][ T6548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.307362][ T5696] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.399141][ T6554] loop1: detected capacity change from 0 to 4096
[   85.444329][   T34] audit: type=1800 audit(1788502778.969:12): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="file1" dev="loop1" ino=33 res=0 errno=0
[   85.742682][  T806] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   85.759422][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'.
[   85.834433][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'.
[   85.855834][ T6588] capability: warning: `syz.3.376' uses deprecated v2 capabilities in a way that may be insecure
[   85.886446][ T6590] netlink: 56 bytes leftover after parsing attributes in process `syz.3.377'.
[   85.898547][  T806] usb 2-1: unable to get BOS descriptor or descriptor too short
[   85.898626][  T806] usb 2-1: New USB device found, idVendor=0590, idProduct=004c, bcdDevice= 0.40
[   85.907753][  T806] usb 2-1: config 1 has an invalid descriptor of length 101, skipping remainder of the config
[   85.913060][  T806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   85.922767][  T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.922815][  T806] usb 2-1: Product: syz
[   85.922847][  T806] usb 2-1: Manufacturer: syz
[   85.922879][  T806] usb 2-1: SerialNumber: syz
[   86.151493][  T806] usb 2-1: unit 115 not found!
[   86.153325][  T806] usb 2-1: unit 255 not found!
[   86.178722][  T806] usb 2-1: USB disconnect, device number 3
[   86.277282][ T6607] Zero length message leads to an empty skb
[   86.435220][ T6613] fuse: Bad value for 'fd'
[   86.613003][ T6625] x_tables: duplicate underflow at hook 4
[   86.959971][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'.
[   86.968712][ T6641] ipvlan2: entered allmulticast mode
[   86.968775][ T6641] syz_tun: entered allmulticast mode
[   87.242706][ T1296] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   87.415745][ T1296] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[   87.416692][ T1296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.647562][ T1296] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[   87.787754][ T6673] process 'syz.3.416' launched './file1' with NULL argv: empty string added
[   88.926203][ T6696] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[   88.939157][ T6696] batman_adv: batadv0: Adding interface: netdevsim0
[   88.939202][ T6696] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   88.939246][ T6696] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   89.027928][ T6697] ubi0: attaching mtd0
[   89.041557][ T6697] ubi0: scanning is finished
[   89.041739][ T6697] ubi0: empty MTD device detected
[   89.253357][ T6697] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[   89.253420][ T6697] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   89.253475][ T6697] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[   89.253507][ T6697] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[   89.253564][ T6697] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   89.253596][ T6697] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[   89.254147][ T6697] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2074551294
[   89.254165][ T6697] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   89.260895][ T6703] ubi0: background thread "ubi_bgt0d" started, PID 6703
[   89.369019][ T6709] netlink: 32 bytes leftover after parsing attributes in process `syz.3.431'.
[   89.866860][ T6736] netlink: 'syz.2.444': attribute type 6 has an invalid length.
[   89.995376][ T6743] netlink: 'syz.2.446': attribute type 31 has an invalid length.
[   90.422653][   T33] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   90.456326][ T6768] gfs2: gfs2 mount does not exist
[   90.573071][   T33] usb 3-1: Using ep0 maxpacket: 32
[   90.575483][   T33] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   90.580698][   T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.588627][   T33] usb 3-1: config 0 descriptor??
[   90.812736][   T33] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   91.225010][   T33] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   91.250139][   T33] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   91.274832][   T33] usb 3-1: media controller created
[   91.309280][   T33] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   91.527775][   T33] az6027: usb out operation failed. (-71)
[   91.549612][   T33] az6027: usb out operation failed. (-71)
[   91.554137][   T33] stb0899_attach: Driver disabled by Kconfig
[   91.559101][   T33] az6027: no front-end attached
[   91.559101][   T33] 
[   91.632394][   T33] az6027: usb out operation failed. (-71)
[   91.639623][   T33] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   91.656878][   T33] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[   91.715942][   T33] dvb-usb: schedule remote query interval to 400 msecs.
[   91.720390][   T33] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   91.798065][   T33] usb 3-1: USB disconnect, device number 6
[   92.155899][ T6798] mmap: syz.3.471 (6798) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   92.368124][ T6813] netlink: 'syz.2.475': attribute type 1 has an invalid length.
[   92.543066][   T33] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   93.023897][   T34] audit: type=1326 audit(1788502786.549:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.484" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce1d9e159 code=0x7ffc0000
[   93.031718][   T34] audit: type=1326 audit(1788502786.549:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.484" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce1d9e159 code=0x7ffc0000
[   93.041425][   T34] audit: type=1326 audit(1788502786.559:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.484" exe="/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f1ce1d9e159 code=0x7ffc0000
[   93.041503][   T34] audit: type=1326 audit(1788502786.559:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.484" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce1d9e159 code=0x7ffc0000
[   93.041541][   T34] audit: type=1326 audit(1788502786.559:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6832 comm="syz.3.484" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ce1d9e159 code=0x7ffc0000
[   93.188276][    T9] usb 2-1: USB disconnect, device number 4
[   93.531258][ T6838] loop1: detected capacity change from 0 to 128
[   94.049589][ T6845] loop1: detected capacity change from 0 to 32768
[   94.097176][ T6845] ERROR: (device loop1): xtTruncate_pmap: xt_getpage: xtree page corrupt
[   94.097176][ T6845] 
[   94.102028][ T6845] ERROR: (device loop1): remounting filesystem as read-only
[   94.105542][ T6845] ERROR: (device loop1): jfs_unlink: 
[   94.105542][ T6845] 
[   94.118681][ T5696] ERROR: (device loop1): xtTruncate: xt_getpage: xtree page corrupt
[   94.118681][ T5696] 
[   94.576861][ T6870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  106.371342][    C1] sched: DL replenish lagged too much
[  133.238430][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  133.246541][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  187.099362][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  191.744462][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  194.561398][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[  194.564350][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[  254.736837][   T35] INFO: task kworker/1:1:33 blocked for more than 143 seconds.
[  254.748821][   T35]       Not tainted syzkaller #0
[  254.754322][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  254.754332][   T35] task:kworker/1:1     state:D stack:21664 pid:33    tgid:33    ppid:2      task_flags:0x4208060 flags:0x00080000
[  254.754365][   T35] Workqueue: events reg_todo
[  254.754383][   T35] Call Trace:
[  254.754387][   T35]  <TASK>
[  254.754395][   T35]  __schedule+0x17db/0x58f0
[  254.754410][   T35]  ? update_protect_slice+0x128/0x210
[  254.754434][   T35]  ? do_raw_spin_unlock+0x4d/0x200
[  254.754451][   T35]  ? __pfx___schedule+0x10/0x10
[  254.754467][   T35]  ? schedule+0x90/0x2b0
[  254.754479][   T35]  schedule+0x164/0x2b0
[  254.754492][   T35]  schedule_preempt_disabled+0x13/0x30
[  254.754505][   T35]  __mutex_lock+0x7c1/0x1550
[  254.754523][   T35]  ? __mutex_lock+0x5d4/0x1550
[  254.754539][   T35]  ? reg_process_self_managed_hints+0x8d/0x160
[  254.754554][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  254.754568][   T35]  ? reg_process_self_managed_hint+0x1ab/0x4d0
[  254.754581][   T35]  ? __pfx_reg_process_self_managed_hint+0x10/0x10
[  254.754597][   T35]  ? preempt_schedule_common+0x7f/0xd0
[  254.754611][   T35]  ? reg_todo+0x8da/0xa40
[  254.754624][   T35]  ? preempt_schedule_thunk+0x16/0x40
[  254.754640][   T35]  reg_process_self_managed_hints+0x8d/0x160
[  254.754657][   T35]  reg_todo+0x8df/0xa40
[  254.754673][   T35]  ? process_scheduled_works+0x97a/0x1630
[  254.754691][   T35]  process_scheduled_works+0xc3d/0x1630
[  254.754734][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  254.754755][   T35]  ? assign_work+0x3cf/0x5d0
[  254.754775][   T35]  worker_thread+0xa47/0xfb0
[  254.754834][   T35]  kthread+0x38b/0x480
[  254.754850][   T35]  ? __pfx_worker_thread+0x10/0x10
[  254.754864][   T35]  ? __pfx_kthread+0x10/0x10
[  254.754878][   T35]  ret_from_fork+0x514/0xb70
[  254.754892][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  254.754904][   T35]  ? __switch_to+0xc89/0x1420
[  254.754921][   T35]  ? __pfx_kthread+0x10/0x10
[  254.754933][   T35]  ret_from_fork_asm+0x1a/0x30
[  254.754955][   T35]  </TASK>
[  254.755045][   T35] INFO: task kworker/1:4:5740 blocked for more than 143 seconds.
[  254.755056][   T35]       Not tainted syzkaller #0
[  254.755062][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  254.755067][   T35] task:kworker/1:4     state:D stack:23416 pid:5740  tgid:5740  ppid:2      task_flags:0x4208060 flags:0x00080000
[  254.755102][   T35] Workqueue: events_power_efficient crda_timeout_work
[  254.755118][   T35] Call Trace:
[  254.755122][   T35]  <TASK>
[  254.755128][   T35]  __schedule+0x17db/0x58f0
[  254.755149][   T35]  ? __pfx___schedule+0x10/0x10
[  254.755164][   T35]  ? __pfx___schedule+0x10/0x10
[  254.755181][   T35]  ? schedule+0x90/0x2b0
[  254.755195][   T35]  schedule+0x164/0x2b0
[  254.755207][   T35]  schedule_preempt_disabled+0x13/0x30
[  254.755218][   T35]  __mutex_lock+0x7c1/0x1550
[  254.755234][   T35]  ? __mutex_lock+0x5d4/0x1550
[  254.755248][   T35]  ? crda_timeout_work+0x16/0x80
[  254.755262][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  254.755285][   T35]  ? rcu_is_watching+0x16/0xb0
[  254.755300][   T35]  ? process_scheduled_works+0x97a/0x1630
[  254.755316][   T35]  crda_timeout_work+0x16/0x80
[  254.755328][   T35]  process_scheduled_works+0xc3d/0x1630
[  254.755360][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  254.755378][   T35]  ? assign_work+0x3cf/0x5d0
[  254.755397][   T35]  worker_thread+0xa47/0xfb0
[  254.755421][   T35]  ? __kthread_parkme+0x71/0x1f0
[  254.755445][   T35]  kthread+0x38b/0x480
[  254.755458][   T35]  ? __pfx_worker_thread+0x10/0x10
[  254.755471][   T35]  ? __pfx_kthread+0x10/0x10
[  254.755484][   T35]  ret_from_fork+0x514/0xb70
[  254.755497][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  254.755508][   T35]  ? __switch_to+0xc89/0x1420
[  254.755524][   T35]  ? __pfx_kthread+0x10/0x10
[  254.755536][   T35]  ret_from_fork_asm+0x1a/0x30
[  254.755558][   T35]  </TASK>
[  254.755586][   T35] 
[  254.755586][   T35] Showing all locks held in the system:
[  254.755593][   T35] locks held by kworker/u8:0/12: 2, last CPU#0:
[  254.755603][   T35]  #0: ffff8881129b1140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.755639][   T35]  #1: ffffc90000117c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.755674][   T35] locks held by kworker/u8:1/13: 3, on CPU#0:
[  254.755682][   T35]  #0: ffff888112653140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.755708][   T35]  #1: ffffc90000127c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.755744][   T35]  #2: ffffffff902556c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  254.755772][   T35] locks held by pr/ttyS0/16: 2, last CPU#0:
[  254.755780][   T35]  #0: ffffffff8ec367b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  254.755835][   T35]  #1: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0
[  254.755866][   T35] locks held by kworker/u10:0/28: 3, last CPU#1:
[  254.755875][   T35]  #0: ffff88816d619940 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.755905][   T35]  #1: ffffc90000a37c40 ((work_completion)(&ei->i_rsv_conversion_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.755936][   T35]  #2: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  254.755964][   T35] locks held by kworker/u9:1/29: 3, last CPU#1:
[  254.755973][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756003][   T35]  #1: ffffc90000a47c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756034][   T35]  #2: ffff888115de1258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  254.756066][   T35] locks held by kworker/1:1/33: 4, on CPU#1:
[  254.756074][   T35]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756104][   T35]  #1: ffffc90000a87c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756133][   T35]  #2: ffffffff902556c0 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0xa40
[  254.756164][   T35]  #3: ffff8881bbc607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x8d/0x160
[  254.756193][   T35] locks held by khungtaskd/35: 1, last CPU#1:
[  254.756201][   T35]  #0: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  254.756228][   T35] locks held by kworker/u10:1/37: 3, last CPU#1:
[  254.756236][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756266][   T35]  #1: ffffc90000ad7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756297][   T35]  #2: ffff8881bbc607a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  254.756328][   T35] locks held by kworker/u10:3/66: 3, last CPU#1:
[  254.756336][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756367][   T35]  #1: ffffc90001787c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756396][   T35]  #2: ffff8881b94807a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  254.756422][   T35] locks held by kworker/u9:3/85: 3, last CPU#1:
[  254.756429][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756460][   T35]  #1: ffffc9000232fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756490][   T35]  #2: ffff8881bb8e0258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  254.756525][   T35] locks held by kworker/u10:6/1108: 8, last CPU#0:
[  254.756533][   T35]  #0: ffff888161a99940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756563][   T35]  #1: ffffc9000766fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756592][   T35]  #2: ffff88816d0f80e8 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0
[  254.756623][   T35]  #3: ffff88816d116c98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  254.756653][   T35]  #4: ffff88816d114938 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1fbf/0x2200
[  254.756681][   T35]  #5: ffff88811233eed8 (&ei->i_data_sem#2){++++}-{4:4}, at: ext4_map_blocks+0x77d/0x12c0
[  254.756714][   T35]  #6: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  254.756750][   T35]  #7: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  254.756781][   T35] locks held by kworker/0:2/1296: 5, last CPU#0:
[  254.756818][   T35]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756848][   T35]  #1: ffffc9000812fc40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.756878][   T35]  #2: ffffc9000812f770 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_atomic_helper_dirtyfb+0x106/0xfd0
[  254.756909][   T35]  #3: ffffc9000812f798 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_atomic_helper_dirtyfb+0x106/0xfd0
[  254.756937][   T35]  #4: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  254.756975][   T35] locks held by kworker/1:3/5004: 1, last CPU#1:
[  254.756983][   T35]  #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  254.757009][   T35] locks held by jbd2/sda1-8/5005: 1, last CPU#1:
[  254.757017][   T35]  #0: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: blk_mq_run_hw_queue+0x23b/0x4f0
[  254.757046][   T35] locks held by udevd/5043: 2, last CPU#1:
[  254.757054][   T35]  #0: ffffffff8f4f3f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470
[  254.757084][   T35]  #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  254.757113][   T35] locks held by dhcpcd/5338: 2, last CPU#1:
[  254.757120][   T35]  #0: ffffffff8f4f3f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0
[  254.757149][   T35]  #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  254.757176][   T35] locks held by dhcpcd/5339: 4, last CPU#0:
[  254.757184][   T35]  #0: ffffffff8ee36150 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480
[  254.757211][   T35]  #1: ffff88810c479078 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  254.757240][   T35]  #2: ffff8881139ae9b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  254.757271][   T35]  #3: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  254.757300][   T35] locks held by getty/5421: 2, on CPU#0:
[  254.757310][   T35]  #0: ffff888171a920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  254.757338][   T35]  #1: ffffc9000346e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  254.757370][   T35] locks held by syz-executor/5696: 1, on CPU#0:
[  254.757377][   T35]  #0: ffffffff902556c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  254.757404][   T35] locks held by kworker/1:4/5740: 3, on CPU#1:
[  254.757412][   T35]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.757443][   T35]  #1: ffffc9000556fc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.757472][   T35]  #2: ffffffff902556c0 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80
[  254.757505][   T35] locks held by kworker/1:5/5747: 4, last CPU#1:
[  254.757515][   T35]  #0: ffff88810b999940 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.757550][   T35]  #1: ffffc9000562fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.757590][   T35]  #2: ffff8881ab205440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0
[  254.757621][   T35]  #3: ffff88801c588330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0
[  254.757653][   T35] locks held by kworker/0:3/5754: 2, last CPU#0:
[  254.757662][   T35]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.757695][   T35]  #1: ffffc900056dfc40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.757732][   T35] locks held by syz-executor/5879: 2, on CPU#1:
[  254.757739][   T35]  #0: ffff888171504ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  254.757770][   T35]  #1: ffffffff8ed62fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  254.757836][   T35] locks held by kworker/1:7/6874: 3, on CPU#1:
[  254.757845][   T35]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.757879][   T35]  #1: ffffc90007ed7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  254.757912][   T35]  #2: ffffffff902556c0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110
[  254.757945][   T35] locks held by syz-executor/6879: 1, last CPU#1:
[  254.757954][   T35]  #0: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  254.757983][   T35] locks held by syz-executor/6881: 3, last CPU#1:
[  254.757991][   T35]  #0: ffff8881139adcf8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0
[  254.758021][   T35]  #1: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  254.758050][   T35]  #2: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  254.758083][   T35] locks held by udevd/6882: 4, last CPU#1:
[  254.758091][   T35]  #0: ffff8881151a8460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  254.758126][   T35]  #1: ffffffff8f4f3f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470
[  254.758160][   T35]  #2: ffffffff8eeac3f0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  254.758189][   T35]  #3: ffffffff8ed5cbe0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  254.758222][   T35] 
[  254.758224][   T35] =============================================
[  254.758224][   T35] 
[  254.758230][   T35] NMI backtrace for cpu 1
[  254.758239][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  254.758251][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.758258][   T35] Call Trace:
[  254.758265][   T35]  <TASK>
[  254.758270][   T35]  dump_stack_lvl+0xe8/0x150
[  254.758289][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  254.758308][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  254.758329][   T35]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  254.758350][   T35]  sys_info+0x135/0x170
[  254.758366][   T35]  watchdog+0xfd7/0x1030
[  254.758384][   T35]  ? watchdog+0x1c7/0x1030
[  254.758400][   T35]  kthread+0x38b/0x480
[  254.758413][   T35]  ? __pfx_watchdog+0x10/0x10
[  254.758423][   T35]  ? __pfx_kthread+0x10/0x10
[  254.758436][   T35]  ret_from_fork+0x514/0xb70
[  254.758451][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  254.758463][   T35]  ? __switch_to+0xc89/0x1420
[  254.758480][   T35]  ? __pfx_kthread+0x10/0x10
[  254.758491][   T35]  ret_from_fork_asm+0x1a/0x30
[  254.758513][   T35]  </TASK>
[  254.758518][   T35] Sending NMI from CPU 1 to CPUs 0:
[  254.758557][    C0] NMI backtrace for cpu 0
[  254.758566][    C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  254.758575][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.758578][    C0] RIP: 0010:__lock_acquire+0x3e2/0x2e50
[  254.758589][    C0] Code: c7 c6 52 28 5a 8e 67 48 0f b9 3a 90 31 c0 48 8b 3c 24 0f b6 98 c4 00 00 00 49 8b 46 20 25 ff 1f 00 00 48 0f a3 05 4e d5 f7 12 <73> 17 48 69 c0 c8 00 00 00 48 8d 88 d0 f4 3b 94 84 db 75 4e e9 24
[  254.758594][    C0] RSP: 0018:ffffc90000006c78 EFLAGS: 00000003
[  254.758601][    C0] RAX: 0000000000000007 RBX: 0000000000000003 RCX: 0000000000000007
[  254.758605][    C0] RDX: 0000000000022000 RSI: 0000000000002000 RDI: ffff888102ed8000
[  254.758610][    C0] RBP: 0000000000000000 R08: 8c00000000000000 R09: 0000000000000000
[  254.758614][    C0] R10: 0000000000000000 R11: ffffffff8ed5cbe0 R12: 0000000000000007
[  254.758618][    C0] R13: ffff888102ed8bb0 R14: ffff888102ed8c50 R15: 0000000000000004
[  254.758622][    C0] FS:  0000000000000000(0000) GS:ffff88818d6cc000(0000) knlGS:0000000000000000
[  254.758627][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  254.758632][    C0] CR2: 00007f90c2c5f000 CR3: 000000016a00e000 CR4: 00000000000006f0
[  254.758660][    C0] Call Trace:
[  254.758664][    C0]  <IRQ>
[  254.758669][    C0]  ? trace_netif_rx_exit+0x7b/0x1f0
[  254.758678][    C0]  ? lock_acquire+0x115/0x350
[  254.758685][    C0]  lock_acquire+0x115/0x350
[  254.758693][    C0]  ? unwind_next_frame+0x8f/0x2550
[  254.758701][    C0]  ? unwind_next_frame+0x8f/0x2550
[  254.758708][    C0]  ? process_backlog+0x795/0x18b0
[  254.758715][    C0]  ? unwind_next_frame+0x8f/0x2550
[  254.758722][    C0]  unwind_next_frame+0xac/0x2550
[  254.758728][    C0]  ? unwind_next_frame+0x8f/0x2550
[  254.758736][    C0]  ? NF_HOOK+0x336/0x3c0
[  254.758744][    C0]  ? unwind_next_frame+0x8f/0x2550
[  254.758751][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  254.758762][    C0]  arch_stack_walk+0x11b/0x150
[  254.758770][    C0]  ? process_backlog+0x795/0x18b0
[  254.758778][    C0]  stack_trace_save+0xa9/0x100
[  254.758817][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  254.758829][    C0]  ? __lock_acquire+0x6df/0x2e50
[  254.758836][    C0]  kasan_save_track+0x3e/0x80
[  254.758843][    C0]  ? kasan_save_track+0x3e/0x80
[  254.758848][    C0]  ? kasan_save_free_info+0x40/0x50
[  254.758856][    C0]  ? __kasan_slab_free+0x5c/0x80
[  254.758862][    C0]  ? kfree+0x1c5/0x650
[  254.758870][    C0]  ? skb_release_data+0x85e/0xab0
[  254.758879][    C0]  ? __kfree_skb+0x5d/0x210
[  254.758886][    C0]  ? nft_synproxy_eval_v6+0x36a/0x4e0
[  254.758895][    C0]  ? nft_synproxy_do_eval+0x3d1/0x550
[  254.758902][    C0]  ? nft_do_chain+0x48d/0x1b10
[  254.758910][    C0]  ? nft_do_chain_inet+0x360/0x4b0
[  254.758918][    C0]  ? nf_hook_slow+0xc5/0x220
[  254.758925][    C0]  ? NF_HOOK+0x21f/0x3c0
[  254.758932][    C0]  ? ip6_input+0x16a/0x270
[  254.758939][    C0]  ? NF_HOOK+0x336/0x3c0
[  254.758946][    C0]  ? process_backlog+0x795/0x18b0
[  254.758958][    C0]  kasan_save_free_info+0x40/0x50
[  254.758966][    C0]  __kasan_slab_free+0x5c/0x80
[  254.758973][    C0]  kfree+0x1c5/0x650
[  254.758980][    C0]  ? skb_release_data+0x85e/0xab0
[  254.758989][    C0]  skb_release_data+0x85e/0xab0
[  254.758998][    C0]  __kfree_skb+0x5d/0x210
[  254.759006][    C0]  nft_synproxy_eval_v6+0x36a/0x4e0
[  254.759014][    C0]  ? __pfx_nft_synproxy_eval_v6+0x10/0x10
[  254.759022][    C0]  ? nf_ip_checksum+0x13c/0x510
[  254.759031][    C0]  nft_synproxy_do_eval+0x3d1/0x550
[  254.759039][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  254.759046][    C0]  ? nft_synproxy_do_eval+0x3d1/0x550
[  254.759054][    C0]  ? __lock_acquire+0x6df/0x2e50
[  254.759061][    C0]  nft_do_chain+0x48d/0x1b10
[  254.759070][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  254.759083][    C0]  nft_do_chain_inet+0x360/0x4b0
[  254.759091][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  254.759098][    C0]  ? nf_nat_ipv6_local_in+0x157/0x660
[  254.759105][    C0]  ? __pfx_nf_nat_ipv6_local_in+0x10/0x10
[  254.759111][    C0]  ? lock_acquire+0x115/0x350
[  254.759117][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  254.759125][    C0]  nf_hook_slow+0xc5/0x220
[  254.759132][    C0]  NF_HOOK+0x21f/0x3c0
[  254.759140][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  254.759148][    C0]  ? NF_HOOK+0x9e/0x3c0
[  254.759155][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  254.759163][    C0]  ? __pfx_ip6_input_finish+0x10/0x10
[  254.759173][    C0]  ip6_input+0x16a/0x270
[  254.759180][    C0]  ? ip6_input+0x23/0x270
[  254.759192][    C0]  NF_HOOK+0x336/0x3c0
[  254.759200][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  254.759208][    C0]  ? NF_HOOK+0x9e/0x3c0
[  254.759215][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  254.759223][    C0]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  254.759232][    C0]  process_backlog+0x795/0x18b0
[  254.759240][    C0]  ? process_backlog+0x3de/0x18b0
[  254.759249][    C0]  __napi_poll+0xaa/0x330
[  254.759256][    C0]  net_rx_action+0x61d/0xf50
[  254.759264][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  254.759272][    C0]  ? __pfx_rcu_core+0x10/0x10
[  254.759281][    C0]  handle_softirqs+0x226/0x860
[  254.759289][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  254.759297][    C0]  __irq_exit_rcu+0xcb/0x220
[  254.759305][    C0]  irq_exit_rcu+0x9/0x30
[  254.759312][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  254.759320][    C0]  </IRQ>
[  254.759322][    C0]  <TASK>
[  254.759324][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  254.759331][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  254.759338][    C0] Code: f7 e8 ad b3 bb f5 f7 c3 00 02 00 00 74 05 e8 b0 f0 e7 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 44 cd ac f5 65 48 8b 05 3c 31 ad 07 48 85 c0 74 18 5b 41 5e e9
[  254.759344][    C0] RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206
[  254.759349][    C0] RAX: 0000000000000006 RBX: 0000000000000206 RCX: 8000000000000001
[  254.759354][    C0] RDX: 0000000000000000 RSI: ffffffff8e47a1a9 RDI: 0000000000000001
[  254.759357][    C0] RBP: ffffc90000157e18 R08: ffffffff907a5c7f R09: 1ffffffff20f4b8f
[  254.759362][    C0] R10: dffffc0000000000 R11: fffffbfff20f4b90 R12: 0000000000000002
[  254.759366][    C0] R13: ffff888102ed8000 R14: ffffffff9ad3f080 R15: dffffc0000000000
[  254.759373][    C0]  nbcon_kthread_func+0x6c4/0x880
[  254.759380][    C0]  ? nbcon_kthread_func+0x163/0x880
[  254.759386][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  254.759394][    C0]  ? __kthread_parkme+0x71/0x1f0
[  254.759402][    C0]  ? __kthread_parkme+0x199/0x1f0
[  254.759411][    C0]  kthread+0x38b/0x480
[  254.759417][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  254.759422][    C0]  ? __pfx_kthread+0x10/0x10
[  254.759428][    C0]  ret_from_fork+0x514/0xb70
[  254.759434][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  254.759440][    C0]  ? __switch_to+0xc89/0x1420
[  254.759448][    C0]  ? __pfx_kthread+0x10/0x10
[  254.759454][    C0]  ret_from_fork_asm+0x1a/0x30
[  254.759462][    C0]  </TASK>
[  254.759553][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  255.560043][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  255.563556][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.566628][   T35] Call Trace:
[  255.567709][   T35]  <TASK>
[  255.568654][   T35]  vpanic+0x56d/0xa60
[  255.569948][   T35]  ? __pfx_vpanic+0x10/0x10
[  255.571357][   T35]  ? console_srcu_read_unlock+0x3a/0x60
[  255.573072][   T35]  panic+0xc5/0xd0
[  255.574320][   T35]  ? __pfx_panic+0x10/0x10
[  255.575882][   T35]  ? wq_watchdog_touch+0xf9/0x160
[  255.577493][   T35]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  255.579418][   T35]  watchdog+0x1030/0x1030
[  255.580946][   T35]  ? watchdog+0x1c7/0x1030
[  255.582315][   T35]  kthread+0x38b/0x480
[  255.583744][   T35]  ? __pfx_watchdog+0x10/0x10
[  255.585304][   T35]  ? __pfx_kthread+0x10/0x10
[  255.586794][   T35]  ret_from_fork+0x514/0xb70
[  255.588331][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  255.589968][   T35]  ? __switch_to+0xc89/0x1420
[  255.591858][   T35]  ? __pfx_kthread+0x10/0x10
[  255.593676][   T35]  ret_from_fork_asm+0x1a/0x30
[  255.595535][   T35]  </TASK>
[  255.597257][   T35] Kernel Offset: disabled
[  255.598642][   T35] Rebooting in 86400 seconds..
